vl777 Privacy Policy

1. Data Controller

vl777 is the data controller responsible for the personal information collected through the Platform. As data controller, vl777 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

vl777 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation. You may contact the DPO at any time with questions, concerns, or requests relating to your personal data. Contact details are provided in Section 12 of this Policy.

2. Personal Data We Collect

vl777 collects personal data in the following categories, depending on how you interact with the Platform:

vl777 collects only the minimum personal data necessary for the purposes described in this Policy. We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by applicable law or regulation (for example, problem gambling self-exclusion records).

3. How We Use Your Personal Data

vl777 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your vl777 player account, including verifying your identity and age (21+) at registration and during ongoing account reviews.
• Service Delivery: To provide access to the games, features, and services available on the Platform, process deposits and withdrawals, and manage your account balance.
• Legal and Regulatory Compliance: To comply with our obligations under Philippine gaming regulations, anti-money laundering (AML) laws, and the Data Privacy Act of 2012, including Know Your Customer (KYC) verification and suspicious transaction reporting.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gameplay patterns for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about vl777 — but only where you have given your consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time via your account settings.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, vl777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and vl777 — specifically, to operate your player account and deliver the Platform services you have requested.
• Legal Obligation: Processing is necessary to comply with vl777's legal obligations under Philippine gaming regulations, AML legislation, and tax laws.
• Legitimate Interests: Processing is necessary for vl777's legitimate interests, including fraud prevention, platform security, and improving our services, provided that such interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — for example, for marketing communications or the use of non-essential cookies — you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing and Disclosure

vl777 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process deposits and withdrawals. These processors receive only the data necessary to complete the transaction.
• Identity Verification Providers: Third-party KYC and AML service providers who assist vl777 in verifying player identities and screening for sanctions and politically exposed persons (PEPs).
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulation.
• Technology Service Providers: Cloud hosting providers, analytics platforms, and customer support software vendors who process data on vl777's behalf under strict data processing agreements.
• Game Content Providers: Third-party game studios whose games are available on the Platform may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your identity or financial data.
• Law Enforcement: Where required by a valid court order, subpoena, or other legal process, or where vl777 reasonably believes disclosure is necessary to prevent imminent harm or criminal activity.

All third-party service providers who process personal data on vl777's behalf are required to enter into data processing agreements that obligate them to process your data only on vl777's instructions and to implement appropriate security measures.

6. Data Retention

vl777 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC / Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.
• Technical and Usage Data: Retained for up to twenty-four (24) months, after which it is anonymised or deleted.

When personal data is no longer required, vl777 will securely delete or anonymise it in accordance with our data disposal procedures. Where anonymisation is not possible, the data will be securely archived and isolated from further active processing.

7. Data Security

vl777 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the vl777 Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role;
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security specialists;
• Multi-factor authentication (MFA) for administrative access to systems containing personal data;
• Comprehensive incident response procedures, including notification protocols in the event of a data breach.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, vl777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights.

8. Your Data Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by vl777:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Policy fulfils that obligation.
• Right of Access: You have the right to request a copy of the personal data vl777 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to vl777's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to vl777's overriding legitimate grounds.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that vl777 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact the vl777 Data Protection Officer using the contact details in Section 12. vl777 will respond to all verified data subject requests within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it.

9. Cookies and Similar Technologies

vl777 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF) attacks.
• Functional Cookies: These cookies remember your preferences, such as your preferred language and display settings, to provide a more personalised experience.
• Analytics Cookies: These cookies collect anonymised information about how users interact with the Platform, such as which pages are visited most frequently and where users encounter errors. This data helps vl777 improve the Platform.
• Marketing Cookies: These cookies are used to deliver promotional content that is relevant to your interests. They are only placed with your consent.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.

10. Minors and Age Restriction

The vl777 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. vl777 does not knowingly collect, use, or store personal data from individuals under the age of 21.

During registration, all users are required to confirm that they are 21 years of age or older and to provide a valid government-issued ID for age verification. Where vl777 discovers or has reasonable grounds to believe that a user is under 21 years of age, we will:

• Immediately suspend and permanently close the account;
• Void any bets placed and return any real-money deposits to the payment source;
• Delete all personal data associated with the account as soon as practicable, subject to any legal retention obligations.

If you are a parent or guardian and believe that your child has registered an account on the vl777 Platform, please contact us immediately using the details in Section 12 so that we can take prompt action.

11. Changes to This Privacy Policy

vl777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services available on the Platform. When material changes are made, vl777 will notify registered users by email and/or by posting a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how vl777 protects your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you do not agree with any changes to this Policy, you should cease using the Platform and may request closure of your account by contacting customer support.

12. Contact Us / Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by vl777, please contact our Data Protection Officer using the details below. All communications should be directed to the DPO in writing to ensure a proper record is maintained.

vl777 aims to respond to all data-related enquiries within 30 days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph (plain text — not a clickable link).

This Privacy Policy was last reviewed and approved by the vl777 Data Protection Officer on May 15, 2026. It is effective as of that date and supersedes all previous versions.