Privacy Policy —
747-9 Casino Philippines

This Privacy Policy applies to all personal data collected, processed, and stored by 747-9 ("we," "us," or "our") in connection with your use of the 747-9.vip online gaming platform, including all associated games, sports betting, promotions, customer support interactions, and payment services (collectively, the "Platform").

747-9 acts as the Personal Information Controller (as defined under Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and its Implementing Rules and Regulations) with respect to the personal data of players and visitors who interact with the Platform.

This Policy should be read together with our Terms & Conditions, which govern your overall use of the 747-9 Platform. By registering an account or otherwise using 747-9, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

747-9 collects personal data in the following categories, limited to what is necessary for the purposes described in Section 5 of this Policy:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (collected to verify that you meet the 21-year minimum age requirement imposed by PAGCOR regulations).
• Nationality and residential address in the Philippines (e.g., Metro Manila, Cebu City, Davao, or elsewhere in the archipelago).
• Email address registered to your account.
• Philippine mobile number registered to your account.
• Username and encrypted password credentials.

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification documents (e.g., Philippine Passport, Driver's License, National ID, SSS, GSIS, PRC, or Voter's ID).
• Selfie photographs taken for the purpose of matching the document photograph to the account holder.
• Proof of registered payment method, where required (e.g., GCash or Maya account name matching).

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records including amounts, dates, payment method identifiers, and transaction status.
• GCash, Maya, or bank account reference numbers used for transactions (partial identifiers only; full account credentials are never stored on 747-9 servers).
• Account balance history and gaming transaction records as required for regulatory reporting purposes.

2.4 Gaming Activity Data

• Game session logs including game type, bet amounts, results, timestamps, and session duration.
• Sports bets placed, including market selections and outcomes.
• Responsible gaming settings applied to your account (deposit limits, session limits, self-exclusion status).

2.5 Technical and Device Data

• IP address at the time of login and account activity.
• Device type, operating system, and browser type and version.
• Cookie identifiers and session tokens. See Section 7 for full cookie information.
• General geolocation data derived from IP address (country and city level; not precise GPS location).

2.6 Communications Data

• Content and metadata of live chat support sessions, email correspondence, and any other communications you initiate with 747-9 customer support or compliance teams.

747-9 collects your personal data through the following primary channels:

• Directly from you: During account registration, KYC document submission, deposit and withdrawal requests, contact with customer support, and completion of responsible gaming preference settings.
• Automatically through your use of the Platform: Session data, IP addresses, device identifiers, and cookie-based data are collected automatically as you navigate and use the 747-9 Platform. See Section 7 for details on cookies.
• From payment service providers: When you transact via GCash, Maya, BPI, BDO, Metrobank, or other payment channels, we receive confirmation data from those providers confirming transaction status, reference numbers, and the registered name associated with the payment method.
• From identity verification service providers: Where 747-9 uses third-party KYC verification tools to verify document authenticity or cross-reference identity data, those providers may return match scores, verification status, and flagged information relevant to the verification outcome.
• From regulatory and law enforcement authorities: In limited circumstances, we may receive data from PAGCOR, the Anti-Money Laundering Council (AMLC), or law enforcement bodies pursuant to lawful requests or statutory reporting obligations.

747-9 processes personal data only where a lawful basis for processing exists under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations. The applicable legal bases for 747-9's data processing activities are:

• Contractual necessity: Processing required to enter into or perform the contract between you and 747-9 — including account registration, game facilitation, payment processing, and customer support.
• Legal obligation: Processing required to comply with PAGCOR licensing obligations, the Anti-Money Laundering Act (RA 9160, as amended), the Philippine Data Privacy Act, and other applicable Philippine statutes and regulations.
• Legitimate interests: Processing carried out for purposes of fraud prevention, platform security, abuse detection, and improving the quality and safety of the 747-9 Platform, where those interests are not overridden by your data protection rights.
• Consent: Processing of personal data for optional purposes — such as sending you marketing communications about 747-9 promotions, new games, or events — is based on your consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

747-9 uses the personal data we collect for the following purposes:

• Account management: Creating, operating, and maintaining your 747-9 player account, including authenticating your identity at login and enabling account recovery.
• Identity and age verification: Verifying that you meet the 21-year minimum age requirement under PAGCOR regulations and confirming your identity as required for KYC compliance.
• Payment processing: Facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, and other supported payment channels; reconciling transactions; and detecting and investigating payment anomalies.
• Regulatory compliance: Fulfilling PAGCOR reporting obligations, complying with AML monitoring and reporting requirements under RA 9160 (as amended), and responding to lawful requests from the National Privacy Commission, AMLC, or other competent Philippine authorities.
• Responsible gaming: Applying your self-imposed account restrictions (deposit limits, session limits, self-exclusion), monitoring gaming patterns for signs of problematic behavior, and proactively contacting players where our responsible gaming system identifies potential concerns.
• Customer support: Responding to your inquiries, resolving account disputes, processing complaints, and escalating issues as appropriate.
• Fraud prevention and security: Detecting and preventing unauthorized account access, bonus abuse, collusion, money laundering, and other prohibited activities.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve game selection, platform performance, and user experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and news about new features on 747-9 — where you have provided or not opted out of consent for such communications.

747-9 does not sell your personal data. We share personal data only in the following circumstances, and only to the extent necessary for the specified purpose:

• Payment service providers: GCash (G-Xchange, Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment channel operators receive transaction-level data necessary to process deposits and withdrawals. These providers are bound by their own data protection obligations under Philippine law.
• Identity verification providers: Third-party KYC verification services that assist in processing and authenticating identity documents submitted during account verification. Such providers are engaged under data processing agreements that restrict their use of your data to the specified verification purpose.
• Game and platform providers: 747-9's game content is sourced from certified third-party game studios and live dealer providers. These providers may receive session-level gaming data (not your personally identifiable information) for the purpose of game delivery and result certification.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, and courts, where disclosure is required by law, court order, or regulatory directive.
• Professional advisers: Legal, accounting, and audit professionals engaged by 747-9, under strict confidentiality obligations.
• Business succession: In the event of a merger, acquisition, or transfer of the 747-9 business, player data may be transferred as part of that transaction, subject to the same privacy protections described in this Policy. Affected players will be notified in advance of any such transfer.

747-9 uses cookies and similar tracking technologies to operate the Platform, maintain session security, and improve the user experience. Cookies are small text files stored on your device by your browser. The following categories of cookies are used on 747-9:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. The Platform cannot operate without these cookies and they cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language, last-visited game category, responsible gaming settings) to provide a more personalized experience on subsequent visits.
• Analytics cookies: Collect aggregated, anonymized data about how players use the 747-9 Platform — which pages are visited most frequently, where players exit, and which features are most used. This data is used internally to improve the Platform.
• Security cookies: Used to detect and prevent bot access, unauthorized login attempts, and other security threats. These cookies are strictly necessary and cannot be disabled.

You may manage non-essential cookies through your browser settings. Please note that disabling functional or analytics cookies will not prevent your use of the Platform but may affect certain personalization features. Disabling strictly necessary cookies will prevent the Platform from functioning correctly.

747-9 retains personal data for as long as is necessary to fulfill the purpose for which it was collected, subject to the following specific retention periods and obligations:

• Active account data: Retained for the duration of your active 747-9 account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or account closure (whichever is later), as required by applicable Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years in compliance with AML record-keeping obligations under RA 9160 (as amended) and PAGCOR requirements.
• Customer support communications: Retained for a period of three (3) years from the date of the last interaction, to support dispute resolution and compliance reviews.
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications, and for three (3) years after you withdraw consent, to evidence consent compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction or re-identification.

747-9 employs a layered data security framework designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 747-9's servers.
• Encryption of sensitive data at rest, including all identity documents and financial record stores.
• Password hashing using modern cryptographic hash functions. Plain-text passwords are never stored.
• Multi-factor authentication (2FA) options available to all players and mandatory for all 747-9 administrative personnel.
• Role-based access controls ensuring that 747-9 staff access personal data only to the extent required by their job function.
• Regular internal and external security assessments, including penetration testing and vulnerability scanning.
• A dedicated information security team responsible for monitoring, incident response, and continuous security improvement.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you hold the following rights with respect to your personal data processed by 747-9. To exercise any of these rights, contact our Data Protection Officer (see Section 15):

• Right to Access: You may request confirmation of whether 747-9 holds personal data about you, and receive a copy of that data in a readable format. 747-9 will respond to access requests within fifteen (15) business days of receipt.
• Right to Correction: You may request correction of inaccurate, incomplete, or outdated personal data held about you. Basic account information (email, mobile number, address) can be updated directly through your account settings. For corrections to identity or KYC data, contact our Data Protection Officer.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, you have withdrawn consent, or you have successfully objected to processing. Note that this right does not apply where retention is required by law — including our obligations to retain AML and PAGCOR records for five years after account closure.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to other processing activities on grounds relating to your particular situation. 747-9 will honor your objection unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Data Portability: Where processing is based on your consent or on a contract, you may request that 747-9 provide your personal data in a structured, commonly used, machine-readable format, or transmit it directly to another data controller where technically feasible.
• Right to Restriction: You may request restriction of processing of your personal data in certain circumstances, including where you contest the accuracy of the data or have objected to processing pending 747-9's response.

The 747-9 Platform is strictly for adults. Under PAGCOR regulations, no person under the age of twenty-one (21) may access, register for, or use the 747-9 platform in any capacity. 747-9 does not knowingly collect personal data from individuals under the age of 21.

747-9 employs mandatory age verification at registration and during the KYC process. If 747-9 becomes aware that an account is being operated by, or on behalf of, a person under 21 years of age, the account will be immediately suspended, access will be denied, all personal data associated with the account will be securely deleted to the extent permitted by law, and the matter will be reported to PAGCOR as required.

If you are a parent or guardian and believe your child may have accessed or registered on 747-9, please contact our Data Protection Officer immediately so we can investigate and take appropriate action.

The 747-9 Platform may reference or connect to services operated by third parties — including payment providers such as GCash and Maya, game providers, and live dealer technology companies. This Privacy Policy governs only 747-9's own data processing activities.

Third-party service providers maintain their own privacy policies, which govern how they collect and use your personal information in the context of your direct interactions with their platforms. 747-9 is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third-party platform before providing personal data to them.

747-9's primary data infrastructure is located within the Philippines. Where personal data is transferred to, or processed by, service providers operating outside the Philippines — such as international game providers or technology infrastructure providers — 747-9 ensures that appropriate safeguards are in place to protect your personal data at the equivalent level required by the Philippine Data Privacy Act.

Such safeguards may include contractual data processing agreements that include standard data protection clauses, privacy shield certifications, or adequacy decisions by the National Privacy Commission. If you require further information about specific international transfer safeguards applicable to your data, please contact our Data Protection Officer.

747-9 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, PAGCOR regulatory updates, or improvements to the Platform. Material changes to this Policy will be communicated to registered players via account notification or email at least thirty (30) days before the amended Policy takes effect.

The date of the most recent revision is displayed at the top of this document. Your continued use of the 747-9 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We recommend that you review this Policy periodically to stay informed about how 747-9 protects your personal data.

747-9 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act and its Implementing Rules and Regulations. You may contact the 747-9 Data Protection Officer for any privacy-related inquiry, data subject rights request, or complaint using the following channels:

• Live Chat: 24/7 live chat support is available directly on the 747-9 Platform and is the fastest channel for account-related privacy inquiries.
• Email: [email protected] — Please mark your message "Data Privacy Request" in the subject line. Do not include sensitive documents or passwords in email communications.

747-9 aims to acknowledge all data rights requests within five (5) business days of receipt and to fulfill substantive requests within the fifteen (15) business day period prescribed by the Data Privacy Act. Complex requests requiring additional verification may require additional time, in which case we will notify you and provide a revised timeline.