hand777 Privacy Policy

Who We Are / Data Controller Identity

hand777 operates the online gaming platform accessible at https://hand777.club ("the Platform"). For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, hand777 is the Personal Information Controller in respect of the personal data collected from Players and visitors in connection with the Platform.

hand777 operates primarily in the Philippines and the Platform is designed to serve Filipino players. Our gaming operations are conducted in compliance with applicable PAGCOR licensing requirements. References in this Policy to "hand777," "we," "us," or "our" refer to the Platform operator in that capacity.

For all data privacy-related inquiries, concerns, or requests, Players may contact hand777 through the channels described in Section 14 of this Policy. hand777 has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act and its implementing rules.

Personal Data We Collect

hand777 collects the following categories of personal data in connection with the operation of the Platform:

How We Collect Personal Data

hand777 collects personal data through the following means:

• Directly from you — when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or participate in any promotion;
• Automatically — through the Platform's technical infrastructure as you browse and interact with hand777.club, including through cookies, session tracking, and server logs, as further described in Section 7;
• From payment service providers — confirmation data from GCash, Maya, BPI, BDO, and other payment processors confirming the completion or failure of a financial transaction, sufficient to reconcile your hand777 wallet balance;
• From gaming software providers — game round outcome data, session identifiers, and RNG verification data transmitted by licensed game providers as part of the technical operation of each game;
• From identity verification service providers — where hand777 engages a third-party KYC or identity verification service to assist in validating government-issued identification documents submitted by Players.

Purposes of Processing

hand777 processes your personal data for the following specific and legitimate purposes:

• Account creation and management — to establish, maintain, and administer your hand777 account, including the processing of your registered mobile number and password credentials;
• Identity verification and KYC compliance — to verify your identity, confirm your age eligibility (21+ as required by PAGCOR regulations), and fulfil anti-money laundering due diligence obligations under Philippine law;
• Payment processing — to process deposits and withdrawals to and from your hand777 wallet through your registered payment methods, and to maintain accurate transaction records;
• Gaming service delivery — to facilitate your participation in all gaming products available on the Platform, including the proper recording and settlement of game outcomes and the administration of bonuses;
• Customer support — to respond to your inquiries, resolve complaints, and provide assistance through in-app live chat and written communication channels;
• Security and fraud prevention — to detect, investigate, and prevent fraudulent activity, account compromise, money laundering, and other prohibited conduct;
• Regulatory compliance — to fulfil obligations imposed by PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other Philippine regulatory or law enforcement authority with jurisdiction over hand777's operations;
• Platform improvement — to analyse aggregated and anonymised usage data for the purpose of improving Platform performance, user experience, and game selection;
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, subject to your communication preferences and applicable consent requirements.

Legal Basis for Processing

hand777 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing that is necessary for the performance of your account agreement with hand777, including identity verification, payment processing, and gaming service delivery;
• Legal obligation — processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act itself;
• Legitimate interests — processing for fraud prevention, platform security, and aggregated analytics, where hand777's legitimate interests in maintaining a secure and compliant platform are not overridden by your privacy rights;
• Consent — where the Data Privacy Act requires fresh consent for a specific processing activity — such as the use of sensitive personal information beyond what is strictly necessary for KYC or marketing communications — hand777 will obtain your express consent and will respect any withdrawal of that consent.

Sharing Personal Data with Third Parties

hand777 does not sell, rent, or trade your personal data to third parties for their own independent marketing purposes. Your data may be shared in the following circumstances and with the following categories of recipients:

• Payment service providers — GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, Coins.ph, and other payment processors, strictly to the extent necessary to process transactions initiated by you;
• Gaming software providers — JILI, Pragmatic Play, PG Soft, Evolution Gaming, Spadegaming, and other licensed game providers, for the technical operation of games accessed through the Platform;
• Identity verification providers — third-party KYC service providers engaged to assist in verifying the authenticity of government-issued identification documents submitted by Players;
• Regulatory and law enforcement authorities — PAGCOR, the AMLC, the National Privacy Commission, the Philippine National Police, or any other competent authority, where disclosure is required by applicable law, court order, or regulatory directive;
• Professional advisors — lawyers, auditors, and compliance consultants engaged by hand777, subject to professional confidentiality obligations;
• Business successors — in the event of a merger, acquisition, or transfer of substantially all of the Platform's assets, your personal data may be transferred as part of that transaction, subject to this Privacy Policy continuing to apply.

All third parties to whom hand777 discloses personal data are required to maintain the confidentiality and security of that data and to use it only for the purposes for which it was disclosed, consistent with this Policy and applicable Philippine data protection law.

Cookies and Tracking Technologies

hand777 uses cookies and similar tracking technologies on the Platform for the following purposes:

You may manage your cookie preferences through your browser's settings. Restricting or deleting cookies may affect the functionality of certain Platform features. hand777 does not use third-party advertising tracking cookies or cross-site behavioural advertising technology.

Data Security Measures

hand777 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between your browser and the hand777 Platform;
• Encryption of sensitive data at rest, including government-issued identity documents submitted for KYC;
• Role-based access controls limiting access to personal data to authorised personnel with a legitimate operational need;
• Regular internal security reviews and vulnerability assessments of Platform infrastructure;
• Two-factor authentication availability for all Player accounts and mandatory for internal administrative access;
• Incident response procedures to detect, contain, and respond to data security incidents, including notification to the National Privacy Commission within the timeframes required by the Data Privacy Act where a breach meets the notification threshold.

Notwithstanding hand777's security measures, no internet-based system is completely immune from security risks. You are responsible for maintaining the security of your account credentials and for promptly notifying hand777 of any suspected unauthorised access to your account.

Data Retention

hand777 retains your personal data for as long as it is necessary to fulfil the purposes described in this Policy, subject to the following retention principles:

• Active account data — personal data associated with an active hand777 account is retained for the duration of the account relationship;
• Closed account data — upon voluntary account closure, personal data is retained for a minimum of five (5) years from the date of closure, as required by PAGCOR regulatory guidelines and Philippine anti-money laundering obligations (which require KYC and transaction records to be maintained for a minimum period);
• Transaction and gaming activity records — financial transaction records and game session logs are retained for a minimum of five (5) years from the date of the transaction, as required by applicable regulatory obligations;
• Suspended or terminated accounts — where an account is suspended or terminated for breach of the hand777 Terms and Conditions, personal data may be retained for an extended period as necessary for the purposes of any ongoing investigation, legal proceedings, or regulatory reporting obligation;
• Marketing data — where your personal data is processed solely for marketing communications and you have withdrawn consent or opted out, that data will be removed from marketing lists within 30 days of receipt of your request.

Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hand777:

To exercise any of the above rights, please submit a written request to hand777 through the in-app live chat or via the support email address specified in Section 14. hand777 will respond to all data subject rights requests within fifteen (15) calendar days of receipt, or within the timeframe required by applicable law where that is shorter.

Children's Privacy and Minor Protection

hand777 is a real-money gambling platform and is strictly restricted to individuals aged 21 years and older, in accordance with PAGCOR regulatory requirements and applicable Philippine gaming laws. hand777 does not knowingly collect personal data from individuals under the age of 21.

Age is verified through the KYC document verification process, which requires the submission of a valid government-issued Philippine identification document confirming the Player's date of birth. Accounts where age cannot be verified as meeting the 21+ requirement will have real-money gaming access restricted pending verification.

If hand777 becomes aware that personal data has been collected from an individual under the age of 21 — whether through a false representation during registration or otherwise — that data will be deleted and the associated account will be immediately closed. If you have reason to believe that a minor has registered on hand777 using false credentials, please notify us immediately through the channels in Section 14.

International Data Transfers

hand777's primary operations are based in the Philippines. However, certain service providers engaged by hand777 — including gaming software providers and cloud infrastructure providers — may process your data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, hand777 takes steps to ensure that appropriate safeguards are in place to protect that data in accordance with the Data Privacy Act of 2012. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, or reliance on an adequacy determination where applicable.

By using the hand777 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside the Philippines in connection with the legitimate operation of the Platform, subject to the safeguards described above.

Changes to This Privacy Policy

hand777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or the Platform's data processing activities. The effective date of the current version of this Policy is displayed at the top of this page.

Material changes to this Policy — particularly any changes that introduce new categories of personal data collected, new purposes of processing, or new categories of third-party recipients — will be notified to registered Players by in-app notification and/or email prior to the effective date of the change.

Where a material change requires fresh consent under the Data Privacy Act, hand777 will obtain that consent before commencing the new processing activity. Continued use of the Platform following the effective date of an updated Privacy Policy constitutes acceptance of the revised terms for processing activities that do not require fresh consent.

Contact Information & Data Protection Officer

For all data privacy inquiries, data subject rights requests, or concerns relating to the processing of your personal data by hand777, please contact us through the following channels:

• In-App Live Chat: Available 24/7 through your hand777 account dashboard — the fastest channel for all support and data privacy inquiries.
• Email: [email protected] — for written data subject rights requests, complaints, and formal privacy inquiries. Please include "Data Privacy Request" in the subject line. Do not send copies of government-issued identification documents by email — use the secure in-app verification system.
• Data Protection Officer: hand777 has designated a Data Protection Officer in accordance with the requirements of the Data Privacy Act and its implementing rules. The DPO may be reached through the same contact channels listed above. The DPO is registered with the National Privacy Commission as required by applicable regulations.

hand777 will acknowledge all written privacy inquiries within two (2) business days and will endeavour to resolve all data subject rights requests within fifteen (15) calendar days of receipt. For complex requests, the resolution period may be extended by up to an additional thirty (30) days, in which case you will be notified of the extension and the reason for it.

If you are not satisfied with hand777's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.