tf777 Privacy Policy

tf777 is an online casino and sports betting platform operating within the Philippines under the PAGCOR regulatory framework. In the course of providing gaming services to Filipino players, tf777 necessarily collects and processes personal data. This Policy explains that processing with full transparency, in compliance with Republic Act No. 10173 (the Data Privacy Act of 2012, "DPA") and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission of the Philippines ("NPC").

This Policy applies to:

• All registered tf777 players, regardless of whether their account is active or dormant;
• Visitors to the tf777 website who have not registered an account;
• Individuals who communicate with tf777 through any support channel;
• Any person whose personal data is processed by tf777 in connection with the services described herein.

This Policy does not apply to third-party websites, platforms, or services that may be linked to or from tf777. Those third parties operate under their own privacy policies, for which tf777 accepts no responsibility.

tf777 acts as the personal information controller ("PIC") in respect of all personal data collected and processed through the tf777 platform. As PIC, tf777 determines the purposes and means of processing personal data and bears primary responsibility for compliance with the DPA.

tf777 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing the Company's data protection practices and serving as the primary point of contact for data privacy enquiries, subject access requests, and NPC-related communications. Contact details for the DPO are provided in Section 14 of this Policy.

tf777 collects personal data through several channels, including account registration, identity verification, gameplay activity, financial transactions, and communications. The categories of data collected are detailed below.

tf777 processes personal data for the following specific purposes. We process only the minimum data necessary for each stated purpose.

• Account Registration & Management: Creating and maintaining your tf777 account, verifying your identity, authenticating your login sessions, and communicating account-related notices;
• KYC & Age Verification: Verifying that you are at least 21 years of age and fulfilling PAGCOR and anti-money laundering (AML) obligations under Republic Act No. 9160;
• Transaction Processing: Processing deposits via GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay; processing withdrawal requests to verified payment methods; maintaining transaction records;
• Game Provision: Delivering online casino games, sports betting markets, bingo, slots, esports, and all other platform services;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, account compromise, and other prohibited conduct;
• Customer Support: Responding to enquiries, resolving disputes, processing complaints, and communicating platform updates;
• Responsible Gaming: Administering self-exclusion, deposit limits, loss limits, session controls, and age verification tools; identifying players who may require responsible gaming interventions;
• Legal & Regulatory Compliance: Fulfilling obligations under the DPA, PAGCOR regulations, AML laws, tax regulations, and court orders;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience;
• Marketing (Opt-In Only): Sending promotional emails, SMS, or in-platform notifications about tf777 offers — only where you have provided explicit consent. You may withdraw this consent at any time.

tf777 processes personal data on the following legal bases as recognised under Section 12 and Section 13 of the DPA:

• Contractual Necessity: Processing required to perform the contract between tf777 and the Player — i.e., operating your account, processing transactions, and delivering gaming services;
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself;
• Legitimate Interest: Processing conducted for tf777's legitimate business interests, including fraud detection, platform security, and aggregate analytics — balanced against your privacy interests and rights;
• Consent: Processing for optional purposes such as marketing communications — only where you have provided a freely given, specific, informed, and unambiguous indication of agreement.

6.1 Service Providers. tf777 engages third-party service providers who process personal data on our behalf as personal information processors ("PIPs"). These include payment processors (GCash, PayMaya, banking partners), game content providers, KYC verification service providers, cloud hosting providers, and customer support platform operators. All PIPs operate under written data processing agreements that prohibit them from using player data for any purpose other than providing services to tf777.

6.2 Regulatory Authorities. tf777 may disclose personal data to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, the Bureau of Internal Revenue ("BIR"), and other Philippine government bodies where disclosure is required by law, court order, or regulatory directive.

6.3 Law Enforcement. tf777 may disclose personal data to Philippine law enforcement authorities where required by valid legal process or where we have a good-faith belief that disclosure is necessary to prevent or investigate criminal activity affecting the platform or its players.

6.4 No Commercial Sale. tf777 does not sell, rent, trade, or otherwise commercially exploit personal data to any third party. Data is not shared for third-party advertising or marketing purposes without your explicit opt-in consent.

6.5 Business Transfers. In the event of a merger, acquisition, or sale of business assets involving tf777, personal data held by the platform may be transferred as part of that transaction. Players will be notified of any such transfer and any material change in data controller identity in advance.

tf777 retains personal data only for as long as is necessary for the purposes for which it was collected, and for as long as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with tf777's data disposal procedures.

tf777 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: 256-bit SSL/TLS encryption for all data in transit between your device and tf777's servers; AES-256 encryption for personal data at rest in the platform's databases;
• Access Control: Role-based access control (RBAC) limiting employee access to personal data on a strict need-to-know basis; privileged access management for system administrators;
• Authentication: Multi-factor authentication required for all tf777 employee access to systems containing personal data;
• Monitoring: Continuous security monitoring of platform infrastructure; intrusion detection systems; automated alerting for anomalous access patterns;
• Vulnerability Management: Regular security assessments, penetration testing, and patch management across the tf777 technical environment;
• Staff Training: Mandatory data privacy and security training for all tf777 personnel who handle personal data;
• Incident Response: A documented personal data breach response plan aligned with NPC notification requirements.

While tf777 employs industry-standard security measures, no system is completely immune from security risks. Players should also take responsibility for protecting their own account credentials — using a strong, unique password for tf777 and enabling two-factor authentication where available.

tf777 uses cookies and similar tracking technologies (including local storage and session tokens) to operate the platform, maintain your login session, protect against fraud, and understand how the platform is used in aggregate.

9.1 Types of Cookies Used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking the platform.
• Functional Cookies: Remember your preferences such as language, display settings, and game lobby layout. Disabling these may reduce platform functionality.
• Analytics Cookies: Collect anonymised, aggregated data about how players navigate the tf777 platform. This helps us improve the user experience. No individual player is identifiable from analytics data.
• Security Cookies: Detect and prevent fraudulent sessions, bot activity, and account takeover attempts.

9.2 What We Do Not Use. tf777 does not use third-party behavioural advertising cookies that track you across websites other than tf777.biz. We do not participate in cross-site tracking or audience data sharing with advertising networks.

9.3 Cookie Management. Most web browsers allow you to control cookies through browser settings. However, disabling strictly necessary cookies will impair your ability to use the tf777 platform, including logging in to your account.

As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by tf777. You may exercise these rights by contacting the tf777 Data Protection Officer (see Section 14).

tf777 will respond to all verified data subject requests within fifteen (15) calendar days of receipt. Where additional time is required due to the complexity of the request, tf777 will notify you of the extended timeframe before the initial 15-day period expires.

The tf777 platform is strictly for individuals who are at least 21 years of age, as required by PAGCOR regulations governing Philippine online gaming. tf777 does not knowingly collect personal data from anyone under the age of 21.

If tf777 discovers or receives credible information that a person under 21 has registered an account or provided personal data, the following steps will be taken immediately:

1. The account will be suspended pending investigation;
2. All personal data associated with the minor's account will be securely deleted;
3. Any funds in the account balance will be returned to the originating payment method;
4. The incident will be reported to PAGCOR as required under licensing conditions.

If you are a parent or guardian who believes that a person under 21 has accessed tf777 using information or a device associated with your household, please contact tf777 support immediately. tf777 is committed to cooperating fully in the prompt resolution of any such situation.

Some of the third-party service providers engaged by tf777 — including game content providers, cloud infrastructure providers, and fraud detection services — may process personal data on servers located outside the Philippines. Where such cross-border transfers occur, tf777 ensures that adequate safeguards are in place to protect personal data, consistent with Section 21 of the DPA and NPC Circular No. 16-01.

Safeguards for cross-border transfers include:

• Contractual clauses in processing agreements requiring recipient entities to maintain data protection standards at least equivalent to those required under Philippine law;
• Transfer only to jurisdictions or entities that the NPC has determined provide adequate levels of data protection;
• Binding corporate rules where transfers occur within a corporate group.

Players who wish to obtain further information about specific cross-border transfers or the safeguards in place may contact the tf777 Data Protection Officer.

tf777 may update this Privacy Policy from time to time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or our data processing practices. The date of the most recent revision is displayed at the top of this document.

Where updates are material — such as changes that significantly affect how we process personal data or your rights as a data subject — tf777 will notify registered players via email to the address associated with their account at least fourteen (14) days before the changes take effect.

Your continued use of the tf777 platform after the effective date of any policy update constitutes your acknowledgement of the updated Policy. If you do not agree to any update, you may contact support to request account closure.

For all data privacy enquiries, subject access requests, consent withdrawal requests, or complaints relating to this Privacy Policy or tf777's data processing practices, please contact the tf777 Data Protection Officer.

tf777's Data Protection Officer can be reached via the platform's customer support channel. Support is available 24 hours a day, 7 days a week via the live chat function on the tf777 platform. For formal written requests and legal notices, please send correspondence via email, referencing "Data Privacy Request" or "DPO" in your subject line.

DPO contact email (not clickable):

[email protected]

tf777 is registered with the National Privacy Commission of the Philippines as a personal information controller. Players who have exhausted tf777's internal complaint resolution process and remain dissatisfied may file a complaint with the NPC through the NPC's official complaint channels.