ufo777 Privacy Policy

1 Introduction

ufo777 ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of all individuals who use the ufo777 online gaming platform ("the Platform"). This Privacy Policy ("Policy") describes how ufo777 collects, uses, stores, shares, and protects personal data in connection with the operation of the Platform.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC"). By registering an account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

If you do not agree with any part of this Policy, you should not use the ufo777 Platform. If you have questions about how your data is handled, please contact our Data Protection Officer using the details provided in Section 13.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal data is ufo777, operating the Platform at ufo777.asia. As data controller, ufo777 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data privacy laws.

ufo777 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data privacy regulations. Contact details for the DPO are provided in Section 13 of this Policy.

3 Personal Data We Collect

ufo777 collects personal data from you in the following categories, depending on how you interact with the Platform:

3.1 Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Username and encrypted password

3.2 KYC & Verification Data

• Government-issued photo ID (e.g., Philippine passport, driver's licence, PhilSys national ID, SSS/GSIS ID, PRC ID, voter's ID)
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate)
• Selfie photographs submitted for identity verification
• Payment method verification documents (e.g., GCash or PayMaya account screenshots)

3.3 Financial Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., GCash mobile number, bank account name — not full account numbers)
• Account balance history

3.4 Gaming Activity Data

• Game session logs, including games played, wagers placed, and outcomes
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status, etc.)

3.5 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and Platform navigation data
• Cookie identifiers and similar tracking data (see Section 7)

3.6 Communications Data

• Records of your communications with ufo777 customer support (live chat transcripts, email correspondence)
• Feedback and survey responses submitted voluntarily

4 How We Use Your Personal Data

ufo777 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your ufo777 account, including processing your registration, verifying your identity, and managing your account settings.
• Age Verification: To verify that you meet the 21+ age requirement mandated by Philippine law and PAGCOR regulations before permitting access to gaming services.
• KYC & Compliance: To conduct Know Your Customer verification, anti-money-laundering (AML) checks, and other regulatory compliance obligations as required by applicable Philippine law.
• Payment Processing: To process deposits and withdrawals, verify payment method ownership, and maintain accurate financial records.
• Gaming Services: To provide access to games, calculate and credit winnings, apply bonuses, and maintain game session records.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce responsible gaming tools (deposit limits, self-exclusion), and comply with responsible gaming obligations.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security incidents.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates, where you have opted in to receive such communications.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality and user experience of the Platform.
• Legal Obligations: To comply with applicable laws, regulations, court orders, and requests from competent regulatory authorities including PAGCOR and the NPC.

5 Legal Basis for Processing

ufo777 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary for the performance of the contract between you and ufo777 (i.e., the Terms & Conditions), including account registration, payment processing, and provision of gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, age verification requirements, and regulatory reporting to PAGCOR and other competent authorities.
• Legitimate Interests: Processing necessary for ufo777's legitimate interests, including fraud prevention, security monitoring, Platform improvement, and responsible gaming enforcement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

ufo777 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya/Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive transaction data necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services that assist ufo777 in conducting KYC checks and document authentication.
• Game Software Providers: Licensed game providers whose software is integrated into the Platform may receive session data necessary to operate their games and calculate outcomes.
• IT & Cloud Service Providers: Hosting, database, and security service providers that process data on ufo777's behalf under data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other lawful process.
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers who process personal data on ufo777's behalf are required to enter into data processing agreements that obligate them to process data only on ufo777's instructions and to implement appropriate technical and organisational security measures.

7 Cookies & Similar Technologies

ufo777 uses cookies and similar tracking technologies (collectively, "cookies") on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and allow us to understand how you use it.

ufo777 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these may affect your experience.
• Analytics Cookies: Help ufo777 understand how players navigate the Platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised where possible.
• Marketing Cookies: Used to deliver relevant promotional content within the Platform based on your gaming activity and preferences. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

8 Data Retention

ufo777 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account & Registration Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AML obligations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the last transaction, in accordance with the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction.
• Gaming Activity Logs: Retained for a minimum of two (2) years for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for two (2) years following the resolution of the relevant support interaction.
• Marketing Consent Records: Retained for the duration of your account and for one (1) year following withdrawal of consent, as evidence of consent management.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ufo777's data disposal procedures, unless retention is required by a specific legal obligation or ongoing legal proceedings.

9 Data Security

ufo777 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis.
• Regular security vulnerability assessments and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems holding personal data.
• Staff training on data privacy obligations and secure data handling practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ufo777 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03.

While ufo777 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ufo777 login credentials and for notifying us immediately if you suspect unauthorised access to your account.

10 Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by ufo777:

• Right to be Informed: The right to be informed of how your personal data is collected, used, and processed — which this Policy fulfils.
• Right of Access: The right to request a copy of the personal data ufo777 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ufo777's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ufo777 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 13. ufo777 will respond to all verified data subject requests within thirty (30) days of receipt. We may need to verify your identity before processing your request.

11 Children's Privacy & Age Restriction

The ufo777 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations. ufo777 does not knowingly collect personal data from individuals under the age of 21.

As part of the registration process, ufo777 requires all applicants to confirm that they are at least 21 years of age. Where ufo777 has reason to believe that a registered user is under 21, the account will be suspended immediately pending age verification. If verification confirms that the user is under 21, the account will be permanently closed, any balance will be returned (less any bonus funds), and all personal data associated with the account will be deleted in accordance with applicable law.

If you are a parent or guardian and believe that a minor has registered an account on the ufo777 Platform, please contact our support team immediately so that we can take appropriate action.

12 Changes to This Privacy Policy

ufo777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, ufo777 will notify registered players by posting a prominent notice on the Platform and, where practicable, by sending an in-platform notification to your registered account. Your continued use of the Platform following the posting of any amendment constitutes your acknowledgement of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how ufo777 protects your personal data. If you have concerns about any changes, please contact our Data Protection Officer before continuing to use the Platform.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ufo777, please contact our Data Protection Officer: