ff7775 Privacy Policy – How We Keep Your Data Safe

1. Who We Are

ff7775 is an online gaming platform operating under a valid gaming licence, serving registered players in the Philippines. For the purposes of the Data Privacy Act of 2012 (RA 10173), ff7775 is the personal information controller responsible for the data collected through the website at ff7775.com and all associated platform services.

Our Data Protection Officer (DPO) is the designated point of contact for all privacy-related queries and data rights requests. Contact details for the DPO are provided in Section 13 of this policy.

This Privacy Policy applies to all registered ff7775 players, prospective players who browse the website without creating an account, and any person who communicates with ff7775 through official support channels.

2. Personal Data We Collect

The table below summarises the categories of personal data ff7775 collects and the context in which each category arises:

ff7775 does not collect sensitive personal information such as biometric data, health records, religious beliefs, or political affiliations unless explicitly required by law or specifically requested by you.

3. How We Collect Your Data

ff7775 collects your personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically through the platform — when you browse or use ff7775, our servers log technical data including your IP address, device identifiers, and session activity. This happens whether or not you are logged in.
• From payment providers — when you fund or withdraw from your account, payment processors such as GCash or Maya may pass transaction confirmation data to ff7775 to reconcile your balance.
• From identity verification services — during KYC, ff7775 may use a third-party verification service to validate your government-issued ID. These services do not retain your data beyond the verification process.
• From cookies and similar technologies — see Section 8 for a full explanation of how ff7775 uses cookies.

4. Why We Process Your Data

ff7775 processes your personal data only for specific, legitimate purposes. The table below maps each processing activity to its legal basis under RA 10173:

• Account creation and management — necessary to fulfil our contract with you as a player. Without identity and contact data, we cannot maintain your account.
• Processing deposits and withdrawals — contractual necessity and compliance with AML obligations under AMLC regulations.
• KYC and age verification — legal obligation under our gaming licence and RA 9287 (Illegal Numbers Games Law) requirements.
• Fraud prevention and platform security — legitimate interest in protecting the platform and other players from fraudulent activity.
• Customer support — contractual necessity and legitimate interest in resolving disputes and improving service.
• Responsible gaming monitoring — legal and ethical obligation to identify and support players showing signs of problem gambling.
• Sending promotional communications — based on your explicit opt-in consent only. You can withdraw this consent at any time.
• Improving the platform — legitimate interest in using aggregated, anonymised usage data to improve game performance and user experience.

5. Who We Share Your Data With

ff7775 does not sell your personal data. We share it only with the following categories of recipients, and only to the extent necessary for each purpose:

• Payment processors (GCash, Maya, BDO, BPI, UnionBank, Visa, Mastercard) — to process deposits and withdrawals on your behalf.
• Identity verification providers — to validate your government-issued ID during KYC. These providers are bound by confidentiality agreements and NPC-compliant data processing agreements.
• Game content providers — live dealer game studios and slot providers may receive anonymised session data for technical performance monitoring. They do not receive your name or contact details.
• Cloud infrastructure providers — ff7775's platform is hosted on enterprise-grade cloud infrastructure. These providers process data on our instructions and cannot use it for their own purposes.
• Regulatory and law enforcement authorities — ff7775 will disclose data to PAGCOR, AMLC, the NPC, or law enforcement agencies when legally compelled to do so or when we reasonably believe disclosure is necessary to prevent crime.
• Legal advisers — on a strictly confidential basis when we need legal advice relating to your account or a dispute.

All third parties who process data on behalf of ff7775 are required to enter into a data sharing or data processing agreement that obliges them to handle your information securely and in accordance with RA 10173.

6. How Long We Keep Your Data

ff7775 retains your personal data for as long as your account is active plus a fixed period after closure, as required by our gaming licence and applicable Philippine law:

• Account and identity data — retained for 5 years from account closure, in line with AML record-keeping obligations.
• Transaction records — retained for 5 years from the date of each transaction.
• Gaming history — retained for 3 years from account closure for audit and dispute resolution purposes.
• Support communications — retained for 2 years from the date of each communication.
• Marketing preferences and opt-in logs — retained for the duration of your account plus 1 year, to demonstrate consent compliance.
• Technical / server logs — retained for 90 days for security monitoring, then deleted or anonymised.

After the applicable retention period, ff7775 will securely delete or anonymise your personal data so it can no longer be linked to you as an individual.

7. Security Measures

ff7775 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, or disclosure:

• Transport security: All data in transit is encrypted using TLS 1.3. Connections that do not meet this standard are rejected.
• Data at rest: All stored personal and financial data is encrypted using AES-256.
• Access controls: ff7775 staff access to personal data is governed by role-based access controls. Only personnel with a legitimate need to process specific data categories are granted access.
• Two-factor authentication: ff7775 offers 2FA for player accounts and enforces it for all internal administrative accounts.
• Penetration testing: ff7775's systems undergo regular third-party security assessments and penetration testing.
• Incident response: We maintain a documented data breach response plan. In the event of a breach affecting your data, ff7775 will notify you and the NPC within 72 hours as required by law.

While no system is completely impenetrable, ff7775 takes every reasonable measure to keep your data secure. If you notice any suspicious activity on your account, contact our support team immediately.

8. Cookies and Tracking Technologies

ff7775 uses cookies and similar technologies on its website and platform. Here's what each type does:

• Essential cookies — required for the platform to function. These include session authentication cookies that keep you logged in during a game session. You cannot opt out of these without opting out of using the platform.
• Functional cookies — remember your preferences, such as your language setting and game lobby layout. These improve your experience but are not strictly necessary.
• Analytics cookies — ff7775 uses anonymised analytics data to understand how the platform is used and where performance can be improved. This data cannot be used to identify individual players.
• Security cookies — help us detect and prevent fraudulent login attempts and bot activity.

ff7775 does not use third-party advertising or tracking cookies. You can manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies will prevent you from logging in or using platform features that require authentication.

9. Minors

ff7775 is a real-money gaming platform strictly for adults aged 21 and above. We do not knowingly collect or process personal data from anyone under the age of 21. Age verification is a mandatory step in the account registration process, and all accounts are subject to KYC checks that include proof of age.

If ff7775 discovers that an account has been created by or on behalf of a minor, that account will be immediately closed, all balances will be forfeited, and any personal data associated with the account will be securely deleted without delay. If you believe a minor has created an account on our platform, please report it to support@ff7775.com immediately.

10. Your Data Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012, you have the following enforceable rights over your personal information held by ff7775:

11. Cross-Border Data Transfers

ff7775 is a Philippine platform primarily operating within the Philippines. However, some of our technology partners — including cloud infrastructure providers and game content studios — may process data on servers located outside the Philippines.

When this occurs, ff7775 ensures that:

• The receiving country has an adequate level of data protection as recognised by the NPC, or
• We have implemented appropriate safeguards — such as standard contractual clauses or binding corporate rules — that provide equivalent protections to those required under RA 10173.

ff7775 does not transfer your personal data to jurisdictions with demonstrably inadequate data protection frameworks without implementing compensating controls. If you would like details of the specific safeguards in place for any cross-border transfer, contact our DPO.

12. Changes to This Privacy Policy

ff7775 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When we make material changes, we will:

• Update the effective date at the top of this page.
• Send an email notification to all registered ff7775 players at their registered email address.
• Display a prominent notice on the platform for at least 14 days after the update goes live.

Your continued use of ff7775 following a policy update constitutes acceptance of the revised terms. If you do not agree with the updated policy, you should stop using the platform and may request account closure by contacting support.

We encourage you to review this policy periodically. The current version will always be accessible at ff7775.com/privacy-policy.

13. Contact and Data Protection Officer

ff7775 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. You can reach the DPO through any of the following channels:

• Email: support@ff7775.com — use the subject line "Data Protection Enquiry"
• Live Chat: Available 24/7 through the ff7775 platform once you are logged in.
• FAQ: Visit our FAQ page for answers to common questions about account data and privacy.

If your concern is not resolved by ff7775 to your satisfaction, you have the right to escalate to the National Privacy Commission (NPC) of the Philippines. The NPC accepts complaints from data subjects at privacy.gov.ph. ff7775 fully cooperates with NPC investigations.

For general account support, visit our FAQ page or contact the support team directly. For questions about responsible gaming tools and self-exclusion options, visit the Responsible Gaming page.