plus778 Privacy Policy

1 About This Privacy Policy

This Privacy Policy applies to all personal data collected and processed by plus778 in connection with the operation of the plus778 online gaming and sports betting platform at plus778.com, including any associated mobile interface, progressive web application (PWA), and customer support channels.

plus778 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the requirements of Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). plus778 is also subject to the Anti-Money Laundering Act of 2001 (AMLA), as amended, and related BSP and AMLC guidelines — all of which impose data handling obligations that inform this Policy.

By registering a plus778 account or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal data as described herein, you should not create an account or use the Platform. For questions about this Policy, see Section 15.

2 Data Controller & Data Protection Officer

For the purposes of the Data Privacy Act of 2012, plus778 acts as the Personal Information Controller (PIC) in respect of personal data collected through the Platform. As PIC, plus778 determines the purposes for which, and the means by which, your personal data is processed.

plus778 has designated a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy, ensuring compliance with applicable privacy law, and serving as the primary point of contact for data subject rights requests and NPC communications.

To contact the plus778 DPO regarding this Privacy Policy, a data subject rights request, or any privacy concern, please address correspondence to: [email protected] with the subject line "DPO Request". All DPO correspondence will be acknowledged within five (5) business days.

3 Categories of Personal Data We Collect

plus778 collects the following categories of personal data, depending on how you interact with the Platform:

plus778 does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health records, religious beliefs, or political opinions) unless specifically required by PAGCOR's responsible gaming or AML frameworks — for instance, in connection with a verified problem gambling intervention or a suspicious transaction report.

4 How We Collect Your Personal Data

plus778 collects personal data through the following means:

• Direct collection: Information you provide when completing the registration form, submitting KYC documents, initiating a deposit or withdrawal, contacting support, or updating your account profile.
• Automated collection: Technical and usage data collected automatically through cookies, browser storage, server logs, and platform analytics tools when you visit or interact with the Platform. See Section 8 for our cookies policy.
• Third-party payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT network validators when you make a deposit or request a withdrawal.
• KYC and identity verification providers: Results of automated identity document verification checks performed by plus778's licensed KYC service provider on your submitted identification documents.
• Game providers: Game session data, bet and outcome records passed to plus778 by third-party game software providers under contractual data processing agreements.
• PAGCOR and regulatory sources: Information about self-exclusion status or regulatory flags received from PAGCOR or the AMLC as required by our license obligations.

5 Purposes of Processing

plus778 processes your personal data for the following purposes:

• Account creation and management: To create, maintain, secure, and administer your plus778 player account, including password reset and session management.
• Identity verification (KYC): To verify your identity and age as required by PAGCOR and the AMLA. KYC is mandatory before real-money withdrawals and for accounts that reach certain activity thresholds.
• Payment processing: To process deposits from and withdrawals to your GCash, Maya, bank, or other registered payment method. plus778 does not store full payment credentials on its own servers beyond what is technically necessary for transaction processing.
• Platform operation and game delivery: To provide access to casino games, sports betting markets, fishing arcade games, bingo, and all other Platform features tied to your account and balance.
• Responsible gaming compliance: To administer deposit limits, session reminders, self-exclusion orders, and cooling-off periods. To proactively identify patterns of at-risk gambling behaviour as required under PAGCOR responsible gaming obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multi-accounting, money laundering, chargebacks, and unauthorised account access.
• Legal and regulatory compliance: To meet obligations under the AMLA, PAGCOR licensing conditions, NPC registration requirements, and any lawful order from Philippine courts or regulatory bodies including the AMLC.
• Customer support: To investigate complaints, resolve disputes, respond to enquiries, and maintain records of support interactions as required by regulatory obligations.
• Marketing (where consented): To send you promotional offers, bonus notifications, and platform updates where you have provided specific consent. You may withdraw marketing consent at any time via account settings or by contacting support.
• Platform improvement: Aggregated and anonymised technical and usage data is used to identify bugs, improve game loading performance, and enhance the overall player experience.

6 Legal Bases for Processing

plus778 processes your personal data on one or more of the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing necessary to fulfil our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act itself, and lawful orders from competent government authorities.
• Legitimate interests: Processing necessary for plus778's legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and business continuity — where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. Where consent is the basis, you have the right to withdraw it at any time without detriment to your use of the Platform.

7 Data Sharing & Disclosure

plus778 does not sell, lease, or otherwise commercialise your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT network infrastructure — strictly for the purpose of processing your transaction.
• KYC and identity verification providers: Licensed service providers who assist with document authentication and age verification under contractual data processing agreements.
• Game software providers: Third-party game studios receive the minimum account and session data necessary to deliver game content and process bet outcomes. Providers operate under data processing agreements that restrict further use.
• PAGCOR: Player activity data, KYC records, and regulatory reports are submitted to PAGCOR as a condition of our operating license.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports filed as required under the AMLA.
• National Privacy Commission: Mandatory data breach notifications and responses to NPC investigations as required by the Data Privacy Act.
• Law enforcement and courts: In response to a valid, lawful order from a Philippine court, government authority, or law enforcement agency.
• Professional advisers: Legal, audit, and compliance professionals bound by professional secrecy obligations, where disclosure is necessary for plus778's legal or compliance activities.

8 Cookies & Tracking Technologies

plus778 uses cookies and similar tracking technologies (including browser local storage and session tokens) on the Platform. These technologies serve the following purposes:

• Strictly necessary cookies: Required for the Platform to function correctly — including maintaining your login session, storing your balance display preferences, and enabling security features. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Remember your language preferences, responsible gaming settings, and last-visited game category to improve your experience across sessions.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform — which game categories are most visited, where players encounter friction, and how long sessions typically last. This data is used solely to improve Platform performance.
• Security cookies: Used to detect fraud, bot activity, and suspicious access patterns. Essential to protecting your account and other players on the platform.

plus778 does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the Platform. Your in-platform behaviour is not shared with advertisers.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair Platform functionality, including the ability to remain logged in. Detailed cookie settings are available through your account preferences panel once logged in.

9 Data Retention

plus778 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, or reporting requirements. The following retention guidelines apply:

Following the expiration of applicable retention periods, plus778 will securely delete or anonymise personal data so that it can no longer be associated with any individual. Where anonymised data is used for aggregate analytics, it is no longer subject to data privacy obligations.

10 Data Security Measures

plus778 has implemented appropriate technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and plus778 servers;
• Encryption at rest for sensitive data fields including identity document data, financial account references, and passwords (stored as salted cryptographic hashes — never in plain text);
• Role-based access controls (RBAC) limiting employee access to personal data to those with a documented operational need;
• Multi-factor authentication required for all plus778 staff with access to production systems containing personal data;
• Regular penetration testing by qualified independent security professionals;
• 24/7 automated monitoring for anomalous access patterns, suspicious transaction volumes, and potential intrusion indicators;
• Segregated player fund accounts ensuring that your deposited funds are not commingled with plus778 operational accounts.

Notwithstanding these measures, no data transmission or storage system can be guaranteed to be 100% secure. In the event of a personal data breach that is likely to affect your rights and freedoms, plus778 will comply with NPC mandatory breach notification requirements and will notify affected players without undue delay.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by plus778. These rights are enforceable and plus778 is committed to honouring them without unnecessary delay:

To exercise any of the above rights, submit a written request to the plus778 Data Protection Officer via [email protected] with subject line "Data Subject Rights Request." Include your full name, registered plus778 account email or mobile number, and a clear description of the right you wish to exercise. plus778 will respond within fifteen (15) business days. Identity verification may be required before processing sensitive requests.

If you believe your rights have not been adequately addressed, you have the right to file a complaint with the National Privacy Commission of the Philippines through its official channels.

12 Minors & Age Verification

plus778 strictly prohibits access to and use of the Platform by persons under 21 years of age, in compliance with PAGCOR regulations governing casino-style online gambling in the Philippines. The Platform is not directed at, designed for, or intended to be accessed by minors.

plus778 employs mandatory age verification as part of the KYC process. Government-issued identification documents establishing date of birth are required for all accounts before real-money withdrawal eligibility is established. Accounts where age cannot be verified will be restricted.

If you are a parent or guardian and believe your child has registered or used plus778 without authorisation, please contact us immediately via Live Chat or at [email protected]. plus778 will promptly investigate, suspend the account, and delete any personal data collected from the minor to the extent permitted by applicable law — retaining only what is strictly required for compliance records.

13 Third-Party Links & Services

The plus778 Platform may contain links to third-party websites or services — for example, links to game provider demo pages, or references to PAGCOR's official website. This Privacy Policy applies solely to personal data collected and processed by plus778 through the Platform.

plus778 is not responsible for the privacy practices, data handling policies, or security measures of any third-party websites or services accessible via links from the Platform. We encourage you to review the privacy policies of any third-party services you access. plus778 has no control over, and accepts no liability for, the data practices of external sites.

Third-party game providers integrated into the plus778 Platform access player session data under contractual data processing agreements that bind them to confidentiality obligations and restrict use of player data to game delivery purposes only.

14 Amendments to This Privacy Policy

plus778 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in Philippine data privacy law, or changes in PAGCOR regulatory requirements.

Where amendments are material — for instance, where we introduce a new purpose of processing, a new category of data sharing, or a change to your rights — plus778 will notify registered players by:

• Posting a clear notice on the plus778 homepage and login page;
• Sending a notification to your registered email address at least fourteen (14) days before the amendment takes effect;
• Displaying an in-platform notification upon your first login after the notice is issued.

Your continued use of the Platform following the effective date of any material amendment constitutes acceptance of the updated Privacy Policy. If you do not accept the amended Policy, you may request account closure before the effective date. Non-material amendments — such as typographical corrections or reorganisation that does not affect substantive rights — take effect upon publication without advance notice.

The date at the top of this Policy reflects when it was last updated. Previous versions of the Privacy Policy are available upon request from the plus778 DPO.

15 Contact & DPO Requests

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data by plus778, please use the following contact channels:

• 24/7 Live Chat: Available directly on the plus778 Platform for real-time assistance with general privacy enquiries, account data questions, and urgent concerns.
• Email – General Privacy Enquiries: [email protected]
• Email – Data Protection Officer (Formal Requests): [email protected] — subject line: "DPO Request" — for data subject rights requests, consent withdrawals, data breach reports, and NPC-related matters.

All formal DPO requests will receive an acknowledgement within five (5) business days. Substantive responses to data subject rights requests will be issued within fifteen (15) business days of identity verification, extendable by a further ten (10) business days where the complexity of the request requires it, with notice to you.