Privacy Policy – xz77 Casino

1. Data Controller

xz77, operating the Platform at xz77.asia, is the data controller responsible for the personal information you provide when using our services. As data controller, xz77 determines the purposes for which and the means by which personal data is processed. xz77 has designated a Data Privacy Officer ("DPO") responsible for overseeing compliance with this Privacy Policy and applicable data protection law. You may contact the DPO via the customer support live chat available on the Platform.

2. Personal Data We Collect

When you register and use xz77, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, government-issued identification number (e.g., SSS, UMID, PhilHealth, passport number), and a copy of your identification document where required for KYC verification.
• Contact Data: Email address, mobile number, and residential address in the Philippines (e.g., Manila, Cebu, Davao, or other cities and provinces).
• Financial Data: GCash account number, PayMaya account number, BPI, BDO, Metrobank, or Unionbank account details used for deposits and withdrawals. We do not store full payment card numbers.
• Account Data: Username, encrypted password, account preferences, session history, and deposit and withdrawal transaction records.
• Technical Data: IP address, browser type and version, device type and operating system, session duration, pages visited, and game activity logs.
• Communications Data: Records of communications you have with xz77 customer support, including live chat transcripts and email correspondence.

xz77 does not knowingly collect personal data from individuals under 21 years of age. If we determine that an account holder is under 21, the account will be immediately suspended and any deposited funds returned to the originating payment method.

3. How We Collect Your Data

xz77 collects personal data through the following means:

• Directly from you during account registration, KYC verification, deposit or withdrawal requests, and customer support interactions.
• Automatically through the use of cookies, web beacons, and server logs when you access and interact with the xz77 Platform.
• From third-party identity verification and payment processing providers engaged by xz77 to support KYC and transaction processing obligations.

4. Purposes and Legal Basis for Processing

xz77 processes your personal data for the following purposes, each supported by an appropriate legal basis under the Data Privacy Act of 2012:

• Account registration and management: Processing is necessary for the performance of the contract between you and xz77.
• Identity verification (KYC): Processing is necessary to comply with legal obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements applicable to online gaming operators.
• Transaction processing: Processing is necessary for the performance of the contract and to facilitate deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers.
• Responsible gaming: Processing is necessary to comply with legal obligations and in the legitimate interests of player protection, including monitoring for indicators of problem gambling.
• Customer support: Processing is necessary for the performance of the contract and in xz77's legitimate interest in resolving player queries efficiently.
• Platform security and fraud prevention: Processing is in xz77's legitimate interest in protecting the Platform and its players from fraud, abuse, and unauthorized access.
• Marketing communications: Processing is based on your consent, which you may withdraw at any time. Withdrawal of consent does not affect the lawfulness of prior processing.
• Legal compliance: Processing is necessary to comply with applicable Philippine laws, regulatory requirements, and lawful orders from competent authorities.

5. Sharing of Personal Data

xz77 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties, strictly for the purposes described in this Policy:

• Identity verification providers: Third-party KYC service providers engaged to verify the identity and age of xz77 players.
• Payment processors: GCash, PayMaya, and Philippine bank partners required to process deposit and withdrawal transactions.
• Game software providers: xz77's game library providers receive anonymized session data necessary to deliver game services. They do not receive identifiable player data beyond what is required for game operation.
• Regulatory and law enforcement authorities: xz77 will disclose personal data to Philippine regulatory bodies, law enforcement agencies, or courts when required to do so by law, court order, or regulatory directive.
• Professional advisors: Lawyers, auditors, and accountants engaged by xz77 under professional confidentiality obligations.

All third-party processors engaged by xz77 are required by contract to process personal data only on xz77's instructions and in accordance with applicable data protection law.

6. Data Retention

xz77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. In particular:

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in compliance with AML and gaming regulatory obligations.
• KYC documentation is retained for a minimum of five (5) years following the end of the player relationship.
• Customer support records are retained for three (3) years.
• Technical and log data is retained for twelve (12) months.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymized.

7. Cookies and Tracking Technologies

xz77 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies used on xz77 include:

• Strictly necessary cookies: Required for the Platform to function, including session authentication cookies. These cannot be disabled.
• Functional cookies: Used to remember your preferences such as language and display settings.
• Analytics cookies: Used to understand how players interact with the Platform, helping us improve game navigation and overall user experience.

You may disable non-essential cookies through your browser settings. Note that disabling cookies may affect your ability to use certain features of the xz77 Platform, including maintaining a logged-in session.

8. Your Data Subject Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by xz77:

• Right to be informed: You have the right to be informed about how your personal data is being collected and processed, which this Policy provides.
• Right of access: You may request a copy of the personal data xz77 holds about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to legal and regulatory retention obligations that may override this right.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You may request that xz77 provide your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: If you believe xz77 has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact xz77 customer support via live chat or email at [email protected]. xz77 will respond to all data subject requests within thirty (30) calendar days.

9. Security Measures

xz77 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for all data transmitted between your device and xz77 servers, encrypted storage of sensitive data fields, role-based access controls limiting employee access to personal data on a need-to-know basis, regular security assessments, and incident response procedures. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xz77 will notify affected players and the National Privacy Commission within the timeframes required by applicable law.

10. Changes to This Privacy Policy

xz77 may update this Privacy Policy from time to time to reflect changes in our data practices or applicable law. Material changes will be communicated by notice on the Platform. The "Last Updated" date at the top of this Policy will be revised whenever changes are made. Continued use of the xz77 Platform following publication of a revised Privacy Policy constitutes your acceptance of the revised terms.

11. Contact and Data Privacy Officer

For questions, requests, or complaints regarding this Privacy Policy or xz77's data practices, please contact:

• Customer Support: 24/7 Live Chat available on the xz77 Platform.
• Email: [email protected] (plain text — not a clickable link).

Complaints that cannot be resolved through xz77's internal process may be referred to the National Privacy Commission of the Philippines.