xm777 Casino Privacy Policy

1. Introduction

xm777 ("we," "us," or "our") operates the online gaming platform accessible at xm777.app (the "Platform"). We are committed to protecting the privacy and personal data of all registered players and visitors, particularly those based in the Philippines. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, sharing, and protection of your personal information when you access or use the xm777 Platform.

This Policy applies to all personal data collected through the xm777 website, mobile-optimized interface, customer support channels, and any other services we provide. It should be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

By registering an account on xm777, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

2. Data We Collect

xm777 collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party verification and payment providers. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile number
• Username and encrypted password
• Residential address (city, province, postal code)
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo ID (PhilSys ID, passport, driver's license, SSS/GSIS ID, or PRC ID)
• Proof of address documents (utility bills, bank statements dated within 90 days)
• Selfie or liveness check images for identity confirmation
• Source of funds documentation where required by anti-money laundering regulations

2.3 Financial & Transaction Data

• GCash mobile number or PayMaya account details
• Bank account details for BPI, BDO, Metrobank, or InstaPay transfers
• Deposit and withdrawal history, amounts, and timestamps
• Betting history, game activity, and wagering records
• Bonus and promotional redemption records

2.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used
• Login timestamps and access logs
• Cookie identifiers and similar tracking technologies

2.5 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with the xm777 support team
• Survey responses and feedback submissions

3. How We Use Your Data

xm777 uses the personal data we collect for the following purposes:

xm777 does not use your personal data for automated decision-making that produces significant legal effects without human review. Where profiling is used for responsible gaming purposes — such as identifying patterns of problem gambling — it is done to protect players, not to disadvantage them.

4. Legal Basis for Processing

xm777 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, gaming regulations, and tax reporting requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where these interests are not overridden by your rights.
• Consent: Where we rely on your consent — such as for optional marketing communications — you may withdraw that consent at any time by contacting [email protected].

5. Data Sharing & Disclosure

xm777 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers receive identity documents and biometric data solely for the purpose of verifying your identity and age.
• Regulatory authorities: We may disclose personal data to the relevant Philippine gaming regulatory bodies, the Anti-Money Laundering Council (AMLC), or law enforcement agencies when required by law or court order.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Responsible gaming organizations: In cases of self-exclusion or problem gambling referrals, limited data may be shared with recognized support organizations to facilitate assistance.

All third-party service providers engaged by xm777 are contractually required to maintain the confidentiality and security of your personal data and to use it only for the specific purpose for which it was shared.

6. Cookies & Tracking Technologies

xm777 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyze usage patterns. The types of cookies we use include:

• Essential cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your language preferences, display settings, and last-used payment method to improve your experience on xm777.
• Analytics cookies: Collect anonymized data about how players navigate the Platform, which games are most popular, and where technical issues occur. This data is used solely to improve xm777's services.
• Security cookies: Help detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the xm777 Platform.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in or using core Platform features. xm777 does not use third-party advertising cookies or behavioral tracking cookies for external ad targeting.

7. Data Retention

xm777 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended).
• KYC documents: Retained for five (5) years following account closure or the last transaction, whichever is later.
• Communications and support records: Retained for three (3) years from the date of the last interaction.
• Technical and usage logs: Retained for twelve (12) months, after which they are anonymized or deleted.
• Responsible gaming records: Self-exclusion records are retained for the duration of the exclusion period plus five (5) years to prevent re-registration during an active exclusion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual. Where data must be retained beyond these periods due to an ongoing legal dispute or regulatory investigation, it will be held until the matter is resolved.

8. Data Security

xm777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• SSL/TLS encryption: All data transmitted between your device and the xm777 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password hashing: Account passwords are never stored in plain text. We use strong cryptographic hashing algorithms to store password credentials securely.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their xm777 accounts for an additional layer of login security.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with access to player data undergo regular privacy and security training.
• Regular security audits: The xm777 Platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Data breach response: In the event of a personal data breach that poses a risk to your rights, xm777 will notify affected players and the relevant regulatory authority within the timeframes required by applicable law.

9. Your Rights

As a player on the xm777 Platform, you have the following rights with respect to your personal data, consistent with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173):

• Right to be informed: You have the right to know what personal data xm777 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data xm777 holds about you at any time by contacting our support team.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly from your account dashboard.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations described in Section 7.
• Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact the xm777 Data Privacy team at [email protected] with the subject line "Data Privacy Request." We will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request to protect against unauthorized access to your data.

10. Children's Privacy

The xm777 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. xm777 does not knowingly collect personal data from individuals under the age of 21. If we become aware that a person under 21 has registered an account or provided personal data, we will immediately suspend the account, void any associated transactions, and delete the personal data in question.

If you are a parent or guardian and believe that a minor in your care has accessed or registered on the xm777 Platform, please contact us immediately at [email protected] so we can take prompt action.

11. Third-Party Services

The xm777 Platform integrates with third-party services to deliver a complete gaming experience, including payment gateways, game content providers, and identity verification platforms. While xm777 carefully selects and vets all third-party partners, we are not responsible for the privacy practices of external services once data is transmitted to them under the terms of our data processing agreements.

Game content on the xm777 Platform may be provided by licensed third-party game studios. These providers may collect anonymized gameplay data for the purpose of game performance monitoring and improvement. They do not receive personally identifiable information about xm777 players beyond what is strictly necessary for game delivery.

The xm777 Platform does not contain links to external third-party websites for advertising or affiliate purposes. Any links present on the Platform lead exclusively to internal xm777 pages.

12. Changes to This Policy

xm777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email and display a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how xm777 protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by xm777, please reach out to our Data Privacy team through the following channels:

• Live Chat: Available 24/7 directly on the xm777 Platform — the fastest way to get a response.
• Email: [email protected] — please use the subject line "Data Privacy Request" for all privacy-related inquiries. We respond within 1 hour during business hours.

For responsible gaming concerns, self-exclusion requests, or problem gambling support, please visit our dedicated Responsible Gaming page.

For general platform questions, account issues, or payment inquiries, visit our FAQ page or contact our 24/7 live support team directly on the Platform.