nx777 Privacy Policy

1.1  nx777 is committed to protecting the privacy of all individuals who interact with the Platform, including registered players, visitors who browse without registering, and individuals who contact us for support. This Policy applies to all personal information processed through the Platform, regardless of the device or method of access used.

1.2  This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission ("NPC"). nx777's data processing activities are also governed by applicable PAGCOR regulatory requirements, including those related to Know Your Customer ("KYC") and Anti-Money Laundering ("AML") compliance.

1.3  This Policy should be read together with the nx777 Terms & Conditions and any supplementary privacy notices provided at specific points of data collection on the Platform.

2.1  For the purposes of the Data Privacy Act of 2012, nx777 acts as the personal information controller in respect of personal data processed through the Platform. We determine the purposes and means of processing your personal information.

2.2  Where nx777 engages third-party service providers to process personal data on our behalf (for example, payment processors, identity verification providers, or platform analytics tools), those providers act as personal information processors and are bound by contractual data processing agreements that require them to handle your data only in accordance with our documented instructions and applicable Philippine law.

2.3  Our designated Data Protection Officer ("DPO") can be reached via the contact details provided in Section 14 of this Policy. The DPO is responsible for overseeing nx777's compliance with the DPA and serves as the primary point of contact for data subjects and the NPC.

3.1  nx777 collects personal information that is necessary, relevant, and proportionate to the purposes for which it is processed. The categories of personal data we collect and process are set out below:

4.1  Directly from you — when you register an account on the Platform, complete identity verification, make a deposit or withdrawal, contact customer support, respond to surveys, or update your account settings.

4.2  Automatically during Platform use — when you browse the Platform, log in, play games, or interact with features, technical data is collected automatically through server logs, session management systems, and first-party analytics tools. This includes your IP address, device identifiers, browser fingerprint, and interaction patterns within the Platform.

4.3  From third-party verification providers — when you submit identity documents for KYC, we may engage authorized identity verification service providers to cross-reference the information you submit against official Philippine government records or databases, as permitted by applicable law and PAGCOR requirements.

4.4  From payment processors — when you make a transaction, payment processors such as GCash, PayMaya, or banking partners may share transaction confirmation data, reference numbers, and basic account-holder identification with nx777 for fraud prevention and settlement purposes.

5.1  nx777 processes your personal data for the following purposes, each grounded in a lawful basis under the Data Privacy Act of 2012:

• Account registration and management — necessary for the performance of the contract between you and nx777 governing your use of the Platform.
• Identity and age verification (KYC) — required by PAGCOR regulations and the Anti-Money Laundering Act of 2001 (as amended); constitutes a legal obligation to which nx777 is subject.
• Payment processing — necessary for the performance of your contract with nx777 and to comply with BSP and AMLC financial regulations.
• Game provision and dispute resolution — necessary for the performance of the contract; nx777 retains gaming logs to resolve disputes and maintain the integrity of games.
• Responsible gaming monitoring — legitimate interest in protecting player wellbeing and complying with PAGCOR's responsible gaming requirements.
• Fraud detection and platform security — legitimate interest in protecting the Platform, other players, and the integrity of the gaming environment from fraudulent activity.
• Customer support — necessary for the performance of the contract; processing support communications to resolve your queries.
• Marketing communications — based on your explicit consent where required. You may withdraw consent at any time through your account settings or by contacting support.
• Legal compliance and regulatory reporting — necessary to comply with legal obligations owed to PAGCOR, the AMLC, the NPC, and other competent Philippine authorities.

6.1  nx777 does not sell, rent, or otherwise trade your personal data to any third party for commercial purposes. Personal data is shared only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa/Mastercard network partners) — for the purpose of executing deposit and withdrawal transactions;
• KYC and identity verification providers — engaged to perform regulated identity checks in accordance with PAGCOR and AML requirements;
• Game content providers — game software providers may receive anonymized session data necessary for game delivery, technical support, and RNG certification maintenance;
• IT infrastructure and security providers — cloud hosting, cybersecurity, and fraud detection service providers bound by data processing agreements;
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government bodies where required by law or regulatory obligation;
• Professional advisors — legal, audit, and compliance advisors under appropriate confidentiality obligations.

7.1  nx777 uses first-party cookies and similar session management technologies to operate the Platform, maintain login sessions, remember user preferences, and detect suspicious access patterns. These operational cookies are strictly necessary for the Platform to function and do not require separate consent.

7.2  Types of cookies used on nx777:

• Session cookies — temporary cookies that expire when you close your browser. Used to maintain your logged-in state and game session continuity.
• Security cookies — used to detect and prevent fraudulent login attempts, CSRF attacks, and unauthorized account access.
• Preference cookies — store your language preference, display settings, and responsible gaming tool configurations.
• Analytics cookies — first-party analytics data collected to understand Platform usage patterns and improve user experience. This data is aggregated and not used to identify individual players for marketing purposes.

7.3  nx777 does not deploy third-party advertising tracking pixels, cross-site tracking cookies, or behavioral advertising technologies on the Platform. You can manage cookie preferences through your browser settings, though disabling operational cookies may impair Platform functionality.

8.1  nx777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and the Platform;
• AES-256 encryption for personal data stored in nx777 databases;
• Role-based access controls limiting Platform staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication requirements for all administrative Platform access;
• Automated suspicious activity monitoring and account lockout mechanisms;
• Regular third-party security audits and penetration testing of Platform infrastructure;
• Physical and logical segregation of player funds from operational accounts.

8.2  In the event of a personal data breach that poses a risk to data subjects' rights and freedoms, nx777 will comply with its notification obligations under the Data Privacy Act of 2012, including notifying the NPC within the prescribed timeframe and informing affected data subjects where required.

9.1  nx777 retains personal data for only as long as is necessary to fulfill the purpose for which it was collected or as required by applicable law. The following general retention periods apply:

• Account and KYC records — retained for a minimum of five (5) years following account closure, as required by PAGCOR and AMLC regulations;
• Transaction and financial records — retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act and BSP regulations;
• Gaming session logs — retained for a minimum of two (2) years for dispute resolution purposes, thereafter deleted or anonymized;
• Customer support records — retained for two (2) years from the date of last interaction, unless relevant to an ongoing dispute or regulatory matter;
• Marketing consent records — retained for the duration of the marketing relationship and for two (2) years following withdrawal of consent, to evidence compliance.

9.2  Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or pseudonymized in accordance with nx777's data disposal procedures. You may request early deletion of certain categories of your personal data — see Section 10 for your rights in this regard.

10.1  Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by nx777. You may exercise any of these rights by contacting our Data Protection Officer at the details in Section 14:

10.2  nx777 will respond to all verified data subject rights requests within the timeframes prescribed by the Data Privacy Act and NPC issuances — generally within fifteen (15) working days of receiving a valid request. We may require identity verification before processing requests to protect against unauthorized access to other players' data.

11.1  The nx777 Platform is strictly for persons aged 21 years and above, consistent with PAGCOR's minimum age requirement for online gambling in the Philippines. nx777 does not knowingly collect or process personal data of individuals under the age of 21.

11.2  If nx777 becomes aware that personal data of a person under 21 years of age has been collected — whether through a false age declaration or any other means — the Account will be immediately suspended, any funds will be handled in accordance with nx777's Terms and applicable law, and all personal data of the minor will be securely deleted to the extent legally permissible.

11.3  If you believe that a person under 21 has registered on the Platform, please notify our Data Protection Officer immediately using the contact details in Section 14.

12.1  In operating the Platform, certain personal data may be processed by third-party service providers whose infrastructure is located outside the Philippines — for example, cloud hosting providers or game content delivery networks. Where such cross-border transfers occur, nx777 ensures that:

• The receiving jurisdiction provides an adequate level of data protection, or
• Appropriate safeguards are implemented, including contractual clauses consistent with NPC requirements, binding corporate rules, or other approved transfer mechanisms under the DPA, and
• The transfer is necessary for the performance of a contract with you or is subject to your explicit consent.

12.2  nx777 maintains a register of cross-border data transfers and can provide information about specific transfer mechanisms upon request to the DPO. All cross-border transfers are conducted in accordance with NPC Circular 16-03 and subsequent NPC issuances on cross-border data flows.

13.1  nx777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform features. The date of the most recent revision is displayed at the top of this page.

13.2  Material changes to this Policy — particularly those that affect how we use your personal data or your rights as a data subject — will be communicated to registered Players via email or an in-Platform notification at least fourteen (14) days before the changes take effect, unless a shorter notice period is required by law.

13.3  Your continued use of the Platform after the effective date of any policy update constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any updated provisions, you should cease using the Platform and may request account closure through our support team.

14.1  To exercise your data subject rights, ask questions about this Privacy Policy, or raise a data-related concern, you may contact the nx777 Data Protection Officer using the following details:

14.2  If you are not satisfied with nx777's response to your privacy concern, or if you believe your rights under the Data Privacy Act of 2012 have been violated, you may escalate your complaint to: