At xz777, your personal information is handled with the same care and rigour that we apply to financial security. This Privacy Policy explains precisely what data xz777 collects when you use our platform, why we collect it, how it is stored and protected, who it is shared with, and what rights you have over your own information under Philippine law and PAGCOR's operational requirements.
Our Privacy Principles
Before the full legal text, here is a plain-language summary of the six core principles that shape every data practice at xz777.
xz777 does not collect personal information beyond what is necessary to operate a compliant gaming platform under PAGCOR's licensing requirements. We do not request your full financial history, social media profiles, or any data that has no direct bearing on your account, your transactions, or our legal obligations.
All personal data held by xz777 is stored on secured servers using encryption at rest. Data in transit between your device and xz777 servers is protected by 256-bit SSL, the same encryption standard used by major Philippine banks including BPI and BDO. Access to personal data is restricted to authorised personnel only.
xz777 does not sell, rent, or commercially trade your personal information to third parties. The only entities that receive your data are those directly involved in delivering xz777 services to you — payment processors, game providers, and regulatory authorities — and only the minimum information necessary is shared in each case.
Under the Philippine Data Privacy Act of 2012, xz777 players have the right to access, correct, object to, and request deletion of their personal data. These rights can be exercised at any time by contacting xz777's designated Data Protection Officer. Requests are acknowledged within five business days and resolved within thirty days.
xz777's data practices comply with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and all applicable National Privacy Commission circulars and guidelines. Data processing activities are also aligned with PAGCOR's operational requirements for licensed online gaming platforms.
xz777 does not process your personal data for hidden purposes. Every category of data we collect is documented in this Privacy Policy, along with its specific processing purpose and legal basis. If xz777 intends to use your data for a new purpose not covered by this Policy, we will notify you and obtain fresh consent before proceeding.
This Privacy Policy applies to all personal information collected, processed, stored, or disclosed by xz777 (referred to herein as "xz777," "we," "us," or "the Platform") in connection with the operation of the online gaming and sports betting platform accessible at xz777.co, including all related applications, services, customer support interactions, and promotional communications.
xz777 acts as the personal information controller in respect of data collected from registered players, prospective players who interact with the xz777 website, and individuals who contact xz777 for support purposes. xz777 has designated a Data Protection Officer (DPO) in accordance with Section 21 of Republic Act No. 10173 and its Implementing Rules and Regulations. Contact details for the xz777 DPO are provided in Section 15 of this Policy.
This Policy does not apply to personal information collected by third-party game providers, payment processors, or other external services that you may access through or in connection with xz777, where those third parties operate as independent personal information controllers under their own privacy policies.
xz777 collects personal information in the following categories, depending on the nature of your interaction with the platform:
2.1 Registration Data. When you create an xz777 account, we collect your chosen username, mobile number or email address, date of birth, and the password you set (stored in hashed, non-reversible form). This information is required to create and maintain your account and to enforce the 21+ age eligibility requirement under Philippine gaming law.
2.2 Identity Verification (KYC) Data. Before your first withdrawal, xz777 requires you to complete identity verification by submitting a clear photograph or scan of a valid Philippine government-issued identity document. Acceptable documents include the PhilSys National ID, UMID card, SSS ID, driver's licence, and Philippine passport. We also collect a selfie photograph for liveness verification purposes. This data is collected to fulfil xz777's legal obligation under PAGCOR's know-your-customer requirements and to comply with anti-money-laundering regulations.
2.3 Financial Transaction Data. xz777 records all deposit and withdrawal transactions associated with your account, including transaction amounts, timestamps, payment methods used, transaction reference numbers, and the status of each transaction. This information is retained for accounting, regulatory reporting, and dispute resolution purposes.
2.4 Gaming Activity Data. xz777 maintains a record of your gaming activity, including game sessions played, wagers placed, outcomes, bonuses used, and win/loss history. This data is used for platform analytics, responsible gaming monitoring, bonus administration, and regulatory compliance.
2.5 Device and Technical Data. When you access xz777, our systems automatically collect technical information about your device and connection, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and session duration. This data is collected for security monitoring, fraud prevention, performance optimisation, and compliance with PAGCOR's access logging requirements.
2.6 Communications Data. xz777 retains records of all communications between you and our customer support team, including live chat transcripts, email correspondence, and support ticket history. These records are maintained for quality assurance, dispute resolution, and training purposes.
2.7 Responsible Gaming Data. If you use xz777's responsible gaming tools — including deposit limits, session reminders, self-exclusion requests, or loss limits — xz777 records your preferences and the dates on which they were set or modified. This data is handled with heightened sensitivity and is accessed only by authorised personnel involved in responsible gaming administration.
xz777 processes personal information only where a lawful basis under the Data Privacy Act of 2012 and its Implementing Rules and Regulations exists. The lawful bases applicable to xz777's processing activities are as follows:
xz777 uses the personal information it collects for the following purposes:
xz777 does not sell, rent, or commercially trade your personal information. xz777 may share personal information with the following categories of third parties, in each case only to the extent necessary to fulfil the stated purpose:
5.1 Payment Processors. To process your deposits and withdrawals, xz777 shares necessary transaction data with licensed Philippine payment service providers including GCash (Mynt), Maya (PayMaya Philippines), and the relevant banking institutions. These providers process payment data under their own privacy policies and PCI-DSS security certifications.
5.2 Game Technology Providers. xz777's live casino, slot, and specialty game content is delivered by third-party game providers. These providers receive player session identifiers and transaction data necessary to deliver game outcomes and calculate payouts. Game providers are contractually bound to process this data only for the purpose of service delivery and are prohibited from using it for independent commercial purposes.
5.3 Regulatory Authorities. xz777 is legally required to provide personal information to PAGCOR, the AMLC, the Bureau of Internal Revenue, and other competent Philippine government authorities upon their lawful request or as mandated by applicable reporting obligations. xz777 does not have discretion to withhold data from these authorities where a valid legal demand exists.
5.4 Identity Verification Services. KYC identity documents and selfie photographs submitted by players may be processed by licensed third-party identity verification service providers engaged by xz777. These providers perform liveness detection, document authenticity checks, and age verification services under data processing agreements that restrict them to processing your data only for verification purposes.
5.5 Fraud Prevention Networks. Where xz777 detects indicators of fraud, xz777 may share relevant account and activity data with industry fraud prevention networks and other licensed gaming operators to prevent cross-platform fraud. Participation in fraud prevention data sharing is governed by lawful interest and complies with NPC guidelines on data sharing.
5.6 Professional Advisers. xz777 may share personal information with its legal advisers, auditors, and accountants to the extent necessary for the provision of professional services to xz777. All such advisers are bound by professional confidentiality obligations.
xz777 uses cookies and similar tracking technologies on the xz777.co website. Cookies are small text files stored on your device by your browser when you visit xz777. xz777 uses the following categories of cookies:
You may configure your browser to reject non-essential cookies. However, disabling strictly necessary cookies will impair your ability to log in to and use the xz777 platform. xz777 does not use third-party advertising cookies or cross-site behavioural tracking cookies.
xz777 retains personal information for as long as is necessary to fulfil the purposes described in this Privacy Policy and to comply with xz777's legal obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal information is securely deleted or anonymised in a manner that prevents reconstruction. Anonymised data may be retained indefinitely for statistical and analytical purposes.
xz777 implements appropriate technical and organisational security measures to protect your personal information against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:
xz777's primary data processing infrastructure is located within the Philippines or in jurisdictions that xz777 has determined provide an adequate level of personal data protection consistent with the requirements of the Philippine Data Privacy Act of 2012.
Where xz777 engages game technology providers or other service providers whose servers are located outside the Philippines, xz777 ensures that appropriate safeguards are in place for the transfer of personal data, including:
By using the xz777 platform, you acknowledge that your personal information may be transferred to and processed in countries outside the Philippines in the circumstances described above, subject to the safeguards described in this section.
Under the Philippine Data Privacy Act of 2012, xz777 players have the following rights in respect of their personal information. These rights may be exercised by submitting a written request to the xz777 Data Protection Officer at [email protected].
| Your Right | What It Means | Response Time |
|---|---|---|
| ACCESS Right to Access |
You may request a copy of the personal information xz777 holds about you, along with details of how it is processed and the purposes for which it is used. | 30 days from receipt of verified request |
| CORRECT Right to Rectification |
You may request correction of any personal information that is inaccurate or incomplete. Some corrections (e.g., legal name) may require documentary evidence. | 15 business days from receipt of request |
| OBJECT Right to Object |
You may object to the processing of your personal information where xz777 relies on legitimate interest as its legal basis, and where your interest in restricting processing overrides xz777's interest. | 30 days from receipt of verified request |
| DELETE Right to Erasure |
You may request deletion of your personal information where it is no longer necessary for the purpose it was collected and where no overriding legal obligation requires its retention. Note that regulatory record-keeping requirements may prevent full deletion. | 30 days from receipt of verified request |
| PORTABILITY Right to Portability |
You may request that xz777 provide your personal information in a structured, commonly used, machine-readable format to facilitate transfer to another controller. | 30 days from receipt of verified request |
| WITHDRAW Withdraw Consent |
Where processing is based on your consent (including marketing communications), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. | Effective immediately upon acknowledgement |
| COMPLAIN Right to Complain |
If you believe xz777 has not complied with its obligations under the Data Privacy Act, you may file a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph. | NPC-governed timelines |
xz777 will acknowledge receipt of all rights requests within five (5) business days and will verify your identity before processing any request. xz777 reserves the right to refuse requests that are manifestly unfounded, repetitive, or where compliance would conflict with xz777's legal obligations under Philippine law.
The xz777 platform is strictly prohibited to persons under the age of twenty-one (21) years. xz777 does not knowingly collect personal information from individuals under the age of 21. The 21+ age restriction is a legal requirement under PAGCOR's licensing framework and Philippine gaming law.
Age verification is conducted during the KYC process using government-issued identity documents. Where xz777 discovers or is notified that personal information has been collected from a person under the age of 21, xz777 will immediately suspend the relevant account, delete or restrict access to the personal information collected, and report the matter to PAGCOR as required by Philippine gaming regulation.
The xz777 platform incorporates third-party game content and payment services. When you access game content delivered by a third-party game provider through the xz777 lobby, that provider may collect technical data necessary to deliver the game, such as your session identifier, wager amounts, and game outcomes. xz777 does not control the privacy practices of third-party game providers and recommends that you review their privacy policies where relevant.
xz777 does not include links to external websites in its platform content. If you navigate away from xz777.co to a third-party website, xz777 has no responsibility for the privacy practices of that external site and this Privacy Policy does not apply to data collected by external websites.
xz777 treats responsible gaming-related personal data — including self-exclusion requests, deposit limit settings, loss limit preferences, and gaming pattern data reviewed for responsible gaming purposes — with heightened sensitivity, consistent with the classification of this data as sensitive personal information under xz777's internal data classification policy.
Access to responsible gaming data is restricted to xz777 personnel directly involved in responsible gaming administration and compliance. This data is not used for marketing purposes, is not shared with game providers for commercial analytics, and is not disclosed to any third party except where required by PAGCOR's responsible gaming compliance requirements or where necessary to comply with a lawful regulatory request.
Where a player has requested a self-exclusion period, xz777 processes data related to that request to enforce the exclusion across all xz777 product categories and to prevent re-registration during the exclusion period. Responsible gaming self-exclusion data is retained for the full statutory retention period applicable to account data.
xz777 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, xz777's data processing practices, or the structure of xz777's operations. Amendments will be published on this page with an updated effective date. For material changes that significantly affect the way xz777 processes your personal information, xz777 will provide advance notice via email to your registered email address or via an in-platform notification, at least fourteen (14) days before the change takes effect.
Your continued use of the xz777 platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. Where an amendment requires fresh consent under the Data Privacy Act of 2012, xz777 will request that consent separately before the new processing activity begins.
For all privacy-related enquiries, data rights requests, consent withdrawals, or complaints relating to xz777's processing of your personal information, please contact xz777's designated Data Protection Officer through the following channels:
If you are not satisfied with xz777's response to your privacy complaint or request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, which can be reached at privacy.gov.ph. xz777 cooperates fully with NPC investigations and will provide the Commission with all information reasonably requested in connection with any complaint or inquiry.
Play with Confidence
Your personal data is secured, never sold, and handled in compliance with Philippine law. Join xz777 — the PAGCOR-regulated online casino built for Filipino players. Start with as little as ₱50 via GCash or Maya.