bup777 Privacy Policy — Your Data, Your Rights, Our Responsibilities

01 Who We Are

bup777 is an online gaming and sports betting platform operating in the Philippines under a valid gaming licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of the Data Privacy Act of 2012, bup777 acts as the Personal Information Controller (PIC) in respect of personal data collected from Philippine players through the platform.

As a PAGCOR-licensed operator, bup777 is subject to both gaming regulatory requirements and data privacy obligations. These two frameworks shape how bup777 handles player data — some data must be collected and retained for regulatory compliance purposes; other data is collected purely to deliver a better experience to Filipino players and is subject to your consent and control.

02 Data We Collect

bup777 collects personal data at different points in your journey as a player — some at registration, some during ongoing platform use, and some through automated technical processes. Here is a clear breakdown of what bup777 collects and from where:

Registration Data

When you create a bup777 account, we collect the following information:

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification purposes)
• Registered mobile number (used as primary account identifier and for OTP verification)
• Email address (for account communications and transactional notifications)
• Home address in the Philippines (required for regulatory compliance)
• Username and encrypted password

Identity Verification Data

When processing withdrawals above regulatory thresholds or when required by our Know Your Customer (KYC) process, bup777 may collect:

• Copy of a valid Philippine government-issued ID (PhilSys National ID, driver's licence, passport, SSS/GSIS card, or PRC ID)
• Selfie photograph taken at the time of verification
• Proof of address (utility bill or bank statement in your name, dated within the last 3 months)
• Source of funds documentation for high-volume accounts

Financial Transaction Data

• Deposit and withdrawal amounts, dates, and timestamps
• Payment method identifiers (GCash number, Maya account number, bank account details — partial, not full account numbers)
• Transaction reference numbers from payment processors

Gaming Activity Data

• Game history across all bup777 games and betting markets
• Bet amounts, game outcomes, and win/loss records
• Session durations and gaming frequency patterns
• Responsible gaming tool usage (deposit limits set, self-exclusion history)

Technical and Device Data

• IP address at time of login and during sessions
• Device type, operating system, and browser version
• Mobile network information (carrier, connection type)
• Platform session cookies and authentication tokens
• Platform interaction logs (pages visited, buttons clicked, features used)

Communications Data

• Records of support conversations via Live Chat, Viber, Telegram, and email
• Feedback and survey responses you choose to submit
• Complaint and dispute records

03 Why We Collect It

bup777 collects personal data only for specific, legitimate purposes. We do not collect data speculatively or without a clear reason. The table below maps each category of data to the primary reason it is collected:

04 Legal Basis for Processing

Under the Data Privacy Act of 2012, bup777 relies on the following legal bases for processing your personal data:

• Contract performance: Processing necessary to register your account, process deposits and withdrawals, and deliver the games and services you use at bup777.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) requirements, and other Philippine laws applicable to online gaming operators.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where bup777's interest in protecting the platform and its players is balanced against your privacy rights.
• Consent: Processing for marketing communications and certain optional analytics. You may withdraw this consent at any time without affecting your ability to use bup777.

05 How We Use Your Data

bup777 uses your personal data for the following specific purposes. We use only the minimum data necessary for each purpose:

Account Management and Platform Delivery

Your registration data is used to create and maintain your bup777 account, verify your identity during login, process your deposits and withdrawals, and communicate with you about your account activity — including transaction confirmations, security alerts, and account notices.

Regulatory Compliance

bup777 is required by its PAGCOR licence and by Philippine law to maintain records of player identity, transactions, and gaming activity. This data is used to generate regulatory reports, conduct Know Your Customer (KYC) verification, and comply with Anti-Money Laundering Act (AMLA) requirements. This processing is mandatory — it cannot be opted out of as a condition of holding a bup777 account.

Responsible Gaming Monitoring

bup777 uses gaming activity data to monitor for indicators of problem gambling — such as sudden increases in deposit frequency, extended playing sessions, or rapid escalation in bet sizes. When these patterns are identified, our responsible gaming team may reach out proactively to offer support tools. This monitoring exists to protect players, not to profile them for commercial purposes.

Fraud Prevention and Platform Security

Technical and device data, combined with gaming activity patterns, is used by bup777's security systems to detect and prevent fraudulent activity — including multiple account creation, payment fraud, bonus abuse, and use of automated tools. This processing is a legitimate interest of bup777 that directly protects the fairness of the platform for all players.

Customer Support

Support conversation records are used to resolve your enquiries and complaints, train our support team, and maintain quality assurance records. bup777 retains support conversation records for a period consistent with our data retention policy.

Marketing Communications (Consent-Based)

Where you have opted in to marketing communications, bup777 will use your contact information to send you information about relevant promotions, new games, and special offers. We will not send marketing messages if you have not opted in, and you can unsubscribe from marketing at any time through account notification settings or by replying STOP to any SMS.

06 Data Sharing

bup777 does not sell your personal data to any third party for commercial purposes — full stop. We share personal data only in the circumstances described below, and only to the extent necessary for each purpose:

Regulatory Authorities

bup777 is legally required to share certain player data with PAGCOR as part of ongoing regulatory compliance. This may include identity information, transaction records, and gaming activity summaries. We may also be required to share data with the Anti-Money Laundering Council (AMLC) in connection with suspicious transaction reports. These disclosures are mandatory and are not subject to player consent.

Payment Processors

When you make a deposit or withdrawal, bup777 shares the minimum necessary transaction data with your chosen payment provider — GCash, Maya, GrabPay, or your bank — to process the transaction. These providers have their own privacy policies and data handling obligations.

Identity Verification Services

For KYC verification, bup777 may use third-party identity verification services that process your ID documents and selfie photographs. These providers are bound by data processing agreements that require them to handle your data in compliance with applicable law and to use it only for the verification purpose.

Technology Service Providers

bup777 works with third-party providers for hosting infrastructure, game software, analytics, and security monitoring. These providers access personal data only as data processors acting under bup777's instructions and are contractually obligated to maintain data security standards equivalent to those of bup777.

Law Enforcement

bup777 may disclose personal data to Philippine law enforcement agencies when required by a valid court order, subpoena, or other lawful legal process. bup777 will notify affected players of such requests where legally permitted to do so.

07 Cookies & Tracking Technologies

bup777 uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device when you access the bup777 website or mobile platform. bup777 uses the following types of cookies:

Essential Cookies

These cookies are required for the bup777 platform to function. They manage your login session, maintain your game state, and enable security features such as CSRF protection. You cannot opt out of essential cookies while using the bup777 platform, as they are necessary for the service to work.

Functional Cookies

These cookies remember your preferences — such as your preferred language, notification settings, and lobby display options — so that bup777 can personalise your experience across sessions. They persist between logins and can be cleared through your browser settings.

Analytics Cookies

bup777 uses analytics cookies to understand how players navigate the platform — which features are used most, where players encounter difficulties, and how game performance affects engagement. This data is aggregated and anonymised where possible. You may opt out of analytics cookies through the cookie preference centre accessible from the platform footer.

Security and Fraud Detection Cookies

These cookies help bup777 identify unusual device behaviour — such as multiple accounts being accessed from the same device — and are part of our fraud detection infrastructure. They are treated as essential for platform integrity purposes.

You can manage cookie preferences through your browser settings. Blocking essential cookies may prevent the bup777 platform from functioning correctly. For full details on the specific cookies bup777 uses, contact our support team.

08 Data Retention

bup777 retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable Philippine law. The general retention periods applied by bup777 are:

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual player. If you request deletion of your account, bup777 will proceed with deletion except for data that must be retained for the regulatory periods specified above.

09 Data Security

bup777 applies technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. The key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bup777 platform.
• Encryption at rest for sensitive personal data stored in bup777's databases, including payment information and identity documents.
• Role-based access controls — staff can access player data only to the extent required by their specific job function.
• Multi-factor authentication required for all staff access to systems containing personal data.
• Regular security audits and penetration testing conducted by independent third-party security firms.
• Real-time intrusion detection systems that alert our security team to suspicious access patterns.
• Secure data centres with physical access controls, CCTV monitoring, and environmental safeguards.

In the event of a personal data breach that is likely to result in harm to Philippine players, bup777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and affected players as soon as reasonably possible. The notification will include a description of the nature of the breach, the data involved, and the steps bup777 is taking to address it.

10 Children's Privacy

bup777 is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. Age verification is a mandatory part of the bup777 registration process, and additional age checks may be conducted when processing withdrawals or when account activity indicates a potential age concern.

If bup777 discovers that personal data has been collected from a player who was under 18 at the time of registration, we will immediately suspend the account, delete or anonymise all associated personal data to the extent not required for regulatory reporting purposes, and — where required — report the matter to PAGCOR.

If you are a parent or guardian and believe your child may have created a bup777 account, please contact our support team immediately at support@bup777.com. We will investigate and take appropriate action as a priority.

11 Exercising Your Rights

To exercise any of your rights under the Data Privacy Act of 2012 — access, correction, erasure, objection, or portability — please contact bup777's Data Protection Officer through the following channels:

• Email: privacy@bup777.com — include your registered mobile number, the right you wish to exercise, and a brief description of your request.
• Live Chat: Available 24/7 directly from the bup777 platform. Your support agent will create a formal data rights request on your behalf.

bup777 will acknowledge your request within 3 business days and aim to complete it within 10 business days. Complex requests — such as a full data export — may take up to 20 business days. We will notify you of any extension and explain the reason.

To protect your privacy, bup777 will verify your identity before processing any data rights request. This typically involves confirming your registered mobile number through an OTP and may involve additional verification for sensitive requests.

12 Policy Updates

bup777 may update this Privacy Policy from time to time — to reflect changes in Philippine privacy law, updates to PAGCOR regulatory requirements, new platform features that affect data processing, or improvements to our data handling practices.

When bup777 makes material changes to this Policy — meaning changes that meaningfully affect how we handle your personal data or your rights as a data subject — we will:

• Update the "Last updated" date at the top of this Policy.
• Send a notification to your registered email address summarising the key changes.
• Display an in-platform notification for 30 days after the update goes live.

Minor updates — such as correcting typographical errors or clarifying existing language without changing the substance of the Policy — may be made without individual notification, and the updated date will reflect the change.

Your continued use of bup777 after the effective date of a Policy update constitutes your acceptance of the revised Policy. If you do not agree with any material change, you have the right to close your account and request deletion of your personal data to the extent permitted by applicable law.

13 Contact & Data Protection Officer

bup777 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO is your primary point of contact for all privacy-related concerns at bup777.

You can reach the bup777 DPO and privacy team through the following channels:

• Privacy email: privacy@bup777.com
• General support email: support@bup777.com
• Live Chat: Available 24/7 through the bup777 platform — ask to be connected to the privacy team for formal data rights matters.

If you are not satisfied with bup777's response to a privacy concern, you have the right to file a complaint directly with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC): 3/F Core G, DICT Building, BGC, Taguig City, Metro Manila
• NPC Website: privacy.gov.ph