Privacy Policy

Introduction

zs777 ("zs777," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses the zs777 online gaming platform. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you access or use the zs777 website at zs777.xyz and all associated services (collectively, the "Platform").

This policy is written in compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 of the Philippines and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC). As a platform serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and the rest of the Philippines, zs777 takes its obligations under Philippine data protection law seriously.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this policy and those documents on matters of data privacy, this Privacy Policy shall prevail.

Data We Collect

zs777 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data unless specifically required for responsible gaming purposes (for example, if you voluntarily disclose a gambling-related health concern when requesting self-exclusion).

How We Collect Your Data

zs777 collects your personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 7).
• Third-party sources: Identity and fraud-check data received from KYC verification service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention partners, where you have authorised those third parties to share your data with us.
• Publicly available sources: In limited circumstances, we may verify information against publicly available records to confirm your identity or detect fraudulent activity.

You are not obligated to provide all requested personal data, but failure to provide data that is required for identity verification or regulatory compliance may result in restrictions on your account, including the inability to process withdrawals.

How We Use Your Data

zs777 uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your zs777 player account, including processing your registration, verifying your identity and age, and managing your account settings.
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods, and to maintain accurate transaction records in Philippine Peso (₱).
• Legal and regulatory compliance: To comply with our obligations under Philippine gaming regulations, anti-money laundering (AML) laws, and the Data Privacy Act of 2012, including conducting Know Your Customer (KYC) checks and filing required reports.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other illegal or prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming patterns, enforce deposit and loss limits, identify players who may be at risk of problem gambling, and administer self-exclusion requests.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyse usage patterns, conduct research, and improve the features, performance, and content of the zs777 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and updates about new games or features — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.

Legal Basis for Processing

Under the Data Privacy Act of 2012 and its IRR, zs777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — that is, to operate your player account, process transactions, and provide the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, gaming licensing requirements, and tax reporting obligations.
• Legitimate interests: Processing necessary for zs777's legitimate business interests, including fraud prevention, platform security, and improving our services, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and for the processing of any sensitive personal information. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

zs777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party service providers who assist us in verifying your identity, age, and the authenticity of your documents.
• Fraud prevention and AML partners: Service providers who help us detect and prevent fraudulent activity and comply with anti-money laundering obligations.
• Game providers: Third-party game developers and providers whose games are available on the zs777 Platform, to the extent necessary to operate those games and resolve disputes.
• IT and platform service providers: Cloud hosting, data storage, and technology service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Government agencies, regulators, and law enforcement bodies in the Philippines where we are legally required or permitted to disclose your data.
• Professional advisers: Lawyers, auditors, and other professional advisers who are bound by confidentiality obligations.

All third-party service providers who process personal data on behalf of zs777 are required to do so under written data processing agreements that impose obligations consistent with the Data Privacy Act of 2012 and this Privacy Policy.

Cookies & Tracking Technologies

The zs777 Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyse how the Platform is used. A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Performance and analytics cookies: Used to collect anonymised information about how players use the Platform — such as which pages are visited most frequently and whether error messages are received — to help us improve the Platform's performance.
• Functionality cookies: Used to remember your preferences, such as your preferred language or display settings, so you don't have to re-enter them on each visit.
• Responsible gaming cookies: Used to track session duration and enforce session time limits you have set under your responsible gaming preferences.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the zs777 Platform. zs777 does not use cookies to serve third-party advertising or to build advertising profiles.

Data Retention

zs777 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements under Philippine law.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC and verification documents: Retained for a minimum of five (5) years after the end of the business relationship, or longer if required by a specific regulatory obligation.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to an ongoing dispute or legal matter.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it may be anonymised and retained for analytical purposes.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

Data Security

zs777 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the zs777 Platform.
• Encryption at rest for all stored personal and financial data.
• Access controls limiting access to personal data to authorised personnel only, on a strict need-to-know basis.
• Multi-factor authentication for internal systems that process personal data.
• Regular security audits and penetration testing of the Platform and its infrastructure.
• Incident response procedures to detect, contain, and report personal data breaches in accordance with the notification requirements of the Data Privacy Act of 2012.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, zs777 will notify the National Privacy Commission (NPC) and affected players in accordance with the timelines and requirements set out in the Data Privacy Act of 2012 and its IRR.

Your Rights as a Data Subject

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by zs777:

• Right to be informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data, subject to our legal obligations to retain certain records.
• Right to object: The right to object to the processing of your personal data where that processing is based on our legitimate interests or for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all valid requests within the timeframe required under applicable Philippine law. We may need to verify your identity before processing your request.

Children & Minors

The zs777 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations applicable to online casino-style gaming. zs777 does not knowingly collect personal data from individuals under the age of 21.

All new accounts are subject to age verification checks. If zs777 discovers or has reason to believe that a player is under 21 years of age, the account will be immediately suspended, all funds will be returned to the originating payment method, and all personal data associated with the account will be deleted in accordance with our data retention procedures.

If you are a parent or guardian and believe that your child has registered an account on the zs777 Platform, please contact our support team immediately at [email protected] (plain text — not a clickable link) so that we can take prompt action.

International Data Transfers

zs777 primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud hosting providers, KYC verification services, and game providers — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, zs777 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:

• Transferring data only to countries that the National Privacy Commission has determined provide an adequate level of data protection.
• Entering into data transfer agreements with recipient organisations that incorporate standard contractual clauses approved by the NPC.
• Ensuring that recipient organisations are bound by binding corporate rules or equivalent data protection frameworks.

You may request further information about the specific safeguards in place for any international data transfer by contacting our Data Protection Officer at the details in Section 14.

Updates to This Privacy Policy

zs777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the services we offer. When material changes are made, we will notify registered players by email to the address associated with their account and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision to this Privacy Policy is displayed at the top of this page. We encourage you to review this policy periodically to stay informed of how zs777 is protecting your personal data.

Your continued use of the zs777 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the updated policy, you must stop using the Platform and may request account closure in accordance with our Terms & Conditions.

Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by zs777, please contact our Data Protection Officer (DPO):

zs777 Data Protection Officer
Email: [email protected]
(Email displayed as plain text only — not a clickable link. Please copy the address manually into your email client.)

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that your data protection rights have been violated. The NPC can be reached through its official government website and offices in Pasay City, Metro Manila.

We are committed to resolving all data privacy concerns promptly and fairly. We will acknowledge receipt of your request within three (3) business days and aim to provide a full response within the timeframe required under the Data Privacy Act of 2012 and its IRR.