io777 Casino
Privacy Policy

1 Introduction & Scope

io777 is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy applies to all personal data collected through the io777 website at https://io777.vip, our mobile-optimized platform, and any related services, communications, or interactions between you and io777.

This Policy covers personal data collected from:

• Registered players and account holders on the io777 platform.
• Visitors to the io777 website who have not yet registered.
• Individuals who contact io777 customer support or submit inquiries.
• Individuals who participate in io777 promotions, surveys, or marketing activities.

This Policy does not apply to third-party websites, services, or platforms that may be linked to or from the io777 platform. io777 is not responsible for the privacy practices of any third-party services, and we encourage you to review the privacy policies of any third-party platforms you access.

2 Data Controller Information

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, io777 Casino acts as the Personal Information Controller (PIC) with respect to the personal data of its users. As the PIC, io777 determines the purposes and means of processing your personal data.

io777 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO can be contacted through the channels described in Section 15 of this Policy.

3 Personal Data We Collect

io777 collects the following categories of personal data from users of the platform:

4 How We Collect Your Data

io777 collects personal data through the following means:

• Direct Collection: Information you provide when registering for an io777 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the io777 platform, through cookies, web beacons, log files, and similar tracking technologies (see Section 8).
• Third-Party Sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; age verification data from third-party verification services.
• Payment Providers: Transaction confirmation data from GCash, PayMaya, and Philippine banking partners when you make deposits or request withdrawals.

io777 only collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy. We do not collect personal data that is excessive or irrelevant to our operations.

5 Purposes of Data Processing

io777 processes your personal data for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, and managing your io777 player account, including authentication and access control.
• Identity Verification (KYC): Verifying your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering requirements.
• Transaction Processing: Processing deposits and withdrawals in Philippine Peso through approved payment channels (GCash, PayMaya, bank transfer).
• Legal & Regulatory Compliance: Fulfilling obligations under the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), PAGCOR regulations, and other applicable Philippine laws.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited activities on the platform.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Responsible Gaming: Monitoring gaming behavior to identify potential problem gambling patterns and administering self-exclusion and deposit limit tools.
• Platform Improvement: Analyzing usage patterns to improve the io777 platform, fix bugs, and develop new features.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by law.

6 Legal Basis for Processing

io777 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 (RA 10173):

• Consent (Section 12(a), RA 10173): Where you have given your free, specific, informed, and unambiguous consent to the processing of your personal data — for example, for marketing communications or optional platform features.
• Contractual Necessity (Section 12(b), RA 10173): Where processing is necessary for the performance of the contract between you and io777 — specifically, the Terms and Conditions governing your use of the platform, including account management, transaction processing, and game provision.
• Legal Obligation (Section 12(c), RA 10173): Where processing is required to comply with a legal obligation applicable to io777 — including KYC verification, AML reporting, and PAGCOR regulatory requirements.
• Legitimate Interests (Section 12(f), RA 10173): Where processing is necessary for the legitimate interests of io777 or a third party, provided those interests are not overridden by your rights and freedoms — including fraud prevention, platform security, and responsible gaming monitoring.

7 Data Sharing & Disclosure

io777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, and Philippine banking partners, for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to verify your identity and age in compliance with regulatory requirements.
• Fraud Prevention Services: Third-party fraud detection and prevention service providers who assist io777 in identifying and preventing fraudulent activity.
• Game Software Providers: Game developers and providers whose games are available on the io777 platform, to the extent necessary for game operation and dispute resolution.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who support the operation of the io777 platform.
• Legal & Regulatory Authorities: The Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), law enforcement agencies, and courts, where disclosure is required by law or a valid legal order.
• Professional Advisors: Lawyers, auditors, and accountants, where necessary for the conduct of io777's business operations.

All third-party service providers who process personal data on behalf of io777 are required to enter into data processing agreements that obligate them to process personal data only in accordance with io777's instructions and in compliance with the Data Privacy Act of 2012.

8 Cookies & Tracking Technologies

io777 uses cookies and similar tracking technologies to enhance your experience on the platform, remember your preferences, and analyze how the platform is used. The following types of cookies may be used:

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect the functionality of the io777 platform and prevent you from accessing certain features. Disabling other cookie types will not affect your ability to use the core platform features.

9 Data Retention

io777 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR and AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act (RA 9160).
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer Support Communications: Retained for up to three (3) years from the date of the communication, or longer if relevant to an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of your consent, plus a reasonable period thereafter to demonstrate compliance.
• Technical & Usage Data: Retained for up to two (2) years from collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, io777 will securely delete or anonymize your personal data in accordance with our data disposal procedures. Anonymized data that can no longer be linked to you may be retained indefinitely for statistical and analytical purposes.

10 Data Security

io777 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the io777 platform is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal data stored in io777's systems is encrypted using strong encryption algorithms.
• Access Controls: Access to personal data is restricted to authorized io777 personnel on a strict need-to-know basis, with role-based access controls and multi-factor authentication for system access.
• Regular Security Audits: io777 conducts regular security assessments, penetration testing, and vulnerability scans to identify and address potential security weaknesses.
• Incident Response: io777 maintains a data breach response plan and will notify affected users and the National Privacy Commission within the timeframes required by RA 10173 in the event of a personal data breach.
• Staff Training: All io777 personnel who handle personal data receive regular training on data privacy and security obligations.

11 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by io777:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed — which this Privacy Policy fulfills.
• Right of Access: The right to request a copy of the personal data io777 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data io777 holds about you.
• Right to Erasure or Blocking: The right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing is unlawful — subject to io777's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Damages: The right to claim compensation for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact io777's Data Protection Officer using the contact details provided in Section 15. io777 will respond to all data subject requests within fifteen (15) business days of receipt, as required by the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

12 Children's Privacy

The io777 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. io777 does not knowingly collect, process, or store personal data from individuals under the age of 21.

If io777 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data, and take appropriate action in accordance with our Terms and Conditions and applicable Philippine law.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to io777, please contact our Data Protection Officer immediately using the contact details in Section 15 so that we can take prompt action.

13 International Data Transfers

In the course of operating the io777 platform, your personal data may be transferred to, stored in, or processed in countries other than the Philippines — for example, where our cloud infrastructure providers or game software partners are located.

Where such international transfers occur, io777 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and the standards set by the National Privacy Commission. These safeguards may include:

• Data processing agreements with receiving parties that impose data protection obligations equivalent to those under Philippine law.
• Transfers to countries that have been assessed as providing an adequate level of data protection.
• Implementation of standard contractual clauses or other approved transfer mechanisms recognized by the NPC.

By using the io777 platform, you acknowledge and consent to the transfer of your personal data to other countries as described in this section, subject to the safeguards described above.

14 Changes to This Policy

io777 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. Any changes to this Policy will be effective immediately upon posting the revised Policy on the io777 platform, unless a later effective date is specified.

io777 will make reasonable efforts to notify registered players of material changes to this Privacy Policy via email or a prominent notice on the platform. However, it is your responsibility to review this Policy periodically to stay informed of any updates.

Your continued use of the io777 platform following the posting of a revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the platform and may request the closure of your account by contacting our support team.

15 Contact & DPO Information

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by io777, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the io777 platform
• Response Time: io777 aims to acknowledge all privacy inquiries within 3 business days and provide a full response within 15 business days, as required by RA 10173.

If you are not satisfied with io777's response to your privacy inquiry or data subject request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.