Privacy Policy

1. Introduction

1.1 boss777 is committed to protecting the privacy and personal data of every player who uses our platform. We understand that Filipino players trust us with sensitive information — from their full name and contact details to their payment data — and we take that responsibility seriously.

1.2 This Policy applies to all personal data collected through the boss777 website at boss777.asia, our mobile platform, customer support channels, and any other touchpoints through which you interact with boss777.

1.3 By registering an account or using the boss777 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform.

1.4 This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

2.1 boss777 collects the following categories of personal data:

Category	Examples	Purpose
Identity Data	Full name, date of birth, government ID number, nationality	Account registration, KYC verification, age verification
Contact Data	Email address, mobile number, residential address	Account communication, support, transaction notifications
Financial Data	GCash number, PayMaya/Maya account, bank account details, transaction history	Processing deposits and withdrawals in PHP
Technical Data	IP address, device type, browser type, operating system, session logs	Security monitoring, fraud prevention, platform optimization
Usage Data	Games played, bet history, login timestamps, pages visited	Responsible gaming monitoring, personalization, analytics
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support, dispute resolution, service improvement

2.2 boss777 does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive data is collected (such as government-issued ID documents), it is handled with the highest level of security and access controls.

3. How We Collect Your Data

3.1 boss777 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from payment processors; publicly available information from government databases where permitted by law.

3.2 boss777 does not purchase personal data lists from third-party data brokers or marketing companies.

4. How We Use Your Personal Data

4.1 boss777 uses your personal data for the following purposes:

• To create and manage your boss777 account and verify your identity in accordance with KYC and AML requirements;
• To process deposits and withdrawals in Philippine Peso (PHP) via GCash, PayMaya/Maya, and Philippine bank transfers;
• To provide customer support and respond to your inquiries, complaints, and dispute submissions;
• To monitor your gaming activity for responsible gaming purposes, including detecting signs of problem gambling and enforcing self-exclusion requests;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To send you transactional notifications, account alerts, and — where you have opted in — promotional communications about boss777 offers;
• To comply with our legal and regulatory obligations under Philippine law, including reporting requirements to PAGCOR and other authorities;
• To improve the Platform's performance, user experience, and game offerings through aggregated analytics.

4.2 boss777 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

5. Legal Basis for Processing

5.1 Under the Data Privacy Act of 2012, boss777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management and payment processing;
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax reporting obligations;
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent that you may withdraw at any time.

6. Data Sharing and Disclosure

6.1 boss777 may share your personal data with the following categories of recipients:

• Payment processors: GCash, PayMaya/Maya, and Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing your financial transactions;
• KYC and identity verification providers: Third-party services engaged to verify your identity and government-issued documents;
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies where disclosure is required by law;
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance vendors who process data on our behalf under strict data processing agreements;
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

7. Data Retention

7.1 boss777 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law. Specifically:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation purposes.

7.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

8. Cookies and Tracking Technologies

8.1 boss777 uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the Platform. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login status to provide a more personalized experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and content.
• Marketing cookies: Used only where you have provided explicit consent, to deliver relevant promotional content about boss777 offers.

8.2 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform.

9. Data Security

9.1 boss777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption for sensitive data stored in our databases;
• Multi-factor authentication (MFA) for account access and administrative systems;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• 24/7 security monitoring and intrusion detection systems.

9.2 In the event of a personal data breach that is likely to result in harm to affected individuals, boss777 will notify the National Privacy Commission and affected players within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

10. Your Rights as a Data Subject

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by boss777:

• Right to be informed: The right to know what personal data we collect and how it is used — which this Policy fulfills;
• Right of access: The right to request a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

10.2 To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days.

11. Children's Privacy

11.1 The boss777 Platform is strictly intended for individuals who are twenty-one (21) years of age or older. boss777 does not knowingly collect personal data from persons under the age of 21.

11.2 If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data, and report the incident to the relevant regulatory authority. If you believe a minor has registered on the Platform, please contact us immediately.

12. Cross-Border Data Transfers

12.1 Some of boss777's technology and service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection, boss777 will implement appropriate safeguards, including contractual clauses approved by the National Privacy Commission, to ensure your data remains protected.

12.2 boss777 will not transfer your personal data to jurisdictions that are subject to international sanctions or that are identified as high-risk by the AMLC or PAGCOR.

13. Changes to This Privacy Policy

13.1 boss777 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. The date of the most recent revision is displayed at the top of this page.

13.2 Where changes are material, boss777 will notify registered players via the email address or mobile number associated with their account at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the revised Policy.

14. Contact Us & Data Protection Officer

14.1 boss777 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. You may contact our DPO for any privacy-related inquiries, data subject requests, or complaints:

14.2 If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC can be reached through their official government channels.