Hero777 Privacy Policy

1 About This Policy

This Privacy Policy ("Policy") describes how Hero777 ("Hero777," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "Player," or "User") who access or use the Hero777 website, mobile application, and all associated services (collectively, the "Platform").

This Policy applies to all personal data processed by Hero777 in connection with your use of the Platform, regardless of whether you are a registered player, a visitor browsing the site, or a prospective player who has not yet completed registration.

By accessing the Hero777 Platform, you acknowledge that you have read and understood this Policy. This Policy should be read together with our Terms & Conditions, which govern your use of the Platform as a whole.

Hero777 acts as the Personal Information Controller in respect of the personal data it collects and processes, as defined under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.

2 Personal Data We Collect

Hero777 collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Identity & Registration Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Nationality and country of residence;
• Username and encrypted password;
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence).

2.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (barangay, city/municipality, province, ZIP code).

2.3 Financial Data

• GCash or PayMaya account reference (masked);
• BPI, BDO, or Metrobank account details (masked, for withdrawal processing);
• Transaction history including deposits, withdrawals, and wager amounts in Philippine Peso (₱);
• Source of funds declarations where required by AML regulations.

2.4 Gaming & Behavioural Data

• Game session logs, bet history, win/loss records;
• Responsible gaming tool usage (deposit limits, session timers, self-exclusion requests);
• Platform feature usage and navigation patterns.

2.5 Technical Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Session timestamps and login history;
• Cookie identifiers and similar tracking data (see Section 7).

2.6 Communications Data

• Records of your communications with Hero777 customer support;
• Feedback, complaints, and survey responses submitted through the Platform.

3 How We Collect Your Data

Hero777 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey;
• Automatically — through cookies, web beacons, and server logs when you browse or use the Platform (see Section 7);
• From third parties — including identity verification service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, and regulatory bodies where required by law;
• From publicly available sources — where permitted by applicable law, for the purpose of verifying identity or detecting fraud.

4 How We Use Your Personal Data

Hero777 uses your personal data for the following purposes:

Hero777 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5 Legal Basis for Processing

Hero777 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity — processing is required to perform our obligations under the Terms & Conditions you have agreed to, including account management, payment processing, and game provision;
• Legal obligation — processing is necessary to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax reporting obligations;
• Legitimate interests — processing is necessary for Hero777's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your rights;
• Consent — where we rely on your consent (e.g., for marketing communications), you may withdraw that consent at any time by updating your account preferences or contacting our support team.

6 Sharing Your Personal Data

Hero777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

6.1 Service Providers

Hero777 engages trusted third-party service providers to assist in operating the Platform, including identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, fraud detection services, and customer support platforms. These providers are contractually bound to process your data only on Hero777's instructions and in accordance with applicable data protection law.

6.2 Regulatory and Law Enforcement Authorities

Hero777 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive. Hero777 will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Hero777's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

6.4 With Your Consent

Hero777 may share your personal data with other third parties where you have given your explicit prior consent to such sharing.

7 Cookies & Tracking Technologies

Hero777 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following types of cookies are used:

• Strictly necessary cookies — essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and login state to provide a more personalised experience.
• Analytics cookies — collect aggregated, anonymised data about how players use the Platform, helping Hero777 identify areas for improvement. No personally identifiable information is included in analytics reports.
• Security cookies — used to detect and prevent fraudulent activity, bot access, and unauthorised login attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Hero777 does not use third-party advertising cookies or cross-site tracking technologies.

8 Data Retention

Hero777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and PAGCOR record-keeping requirements;
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Gaming session logs — retained for a minimum of two (2) years;
• Customer support communications — retained for two (2) years from the date of the last interaction;
• Marketing consent records — retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, Hero777 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9 Data Security

Hero777 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Hero777 Platform;
• Encryption of sensitive data at rest, including financial account references and identity document data;
• Role-based access controls ensuring that only authorised Hero777 personnel can access personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing of the Platform;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

10 Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by Hero777:

• Right to be informed — you have the right to know what personal data Hero777 holds about you and how it is being used, as described in this Policy;
• Right of access — you may request a copy of the personal data Hero777 holds about you;
• Right to rectification — you may request correction of inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to Hero777's legal retention obligations;
• Right to object — you may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability — you may request that Hero777 provide your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact Hero777's Data Protection Officer using the contact details in Section 15. Hero777 will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

11 Children & Minors

The Hero777 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing online gambling. Hero777 does not knowingly collect personal data from individuals under the age of 21.

If Hero777 discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, it will immediately suspend the relevant account, delete the associated personal data, and report the matter to the appropriate regulatory authority where required.

If you are a parent or guardian and believe that your child has registered on the Hero777 Platform, please contact us immediately using the details in Section 15 so that we can take prompt action.

12 Cross-Border Data Transfers

Hero777 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where Hero777 uses internationally hosted cloud infrastructure or third-party software platforms.

Where such cross-border transfers occur, Hero777 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual data processing agreements, standard contractual clauses, or transfers to jurisdictions recognised as providing adequate data protection.

13 Third-Party Links

The Hero777 Platform may contain links to third-party websites or services for informational purposes. Hero777 is not responsible for the privacy practices or content of any third-party websites. This Policy applies solely to data collected and processed by Hero777 through the Platform. We encourage you to review the privacy policies of any third-party sites you visit.

14 Updates to This Policy

Hero777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, Hero777 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with the revised Policy, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

15 Contact & Data Protection Officer

Hero777 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO:

• Role: Data Protection Officer, Hero777
• Email: [email protected]
• General Support: [email protected]

All data privacy requests and complaints will be acknowledged within five (5) business days and resolved within thirty (30) days, or such longer period as permitted by applicable law. If you are not satisfied with Hero777's response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.