Privacy Policy — m.fb777

This Privacy Policy describes how m.fb777 ("the Platform," "we," "us," or "our") collects, uses, stores, discloses, and otherwise processes personal information about you ("Player," "User," or "you") in connection with your use of the m.fb777 online gaming platform and all related services accessible at mfb777.vip.

m.fb777 is committed to protecting your personal information and respecting your privacy rights. This Policy is drafted in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations issued by the National Privacy Commission of the Philippines ("NPC"). As a PAGCOR-licensed operator, m.fb777 is also subject to data handling requirements under PAGCOR's regulatory framework.

By registering an account on m.fb777, accessing the Service, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein. If you do not agree with any part of this Policy, you should not use the Service.

For the purposes of the Data Privacy Act of 2012, m.fb777 acts as the Personal Information Controller in respect of the personal data collected through the m.fb777 platform. This means m.fb777 determines the purposes and means by which your personal data is processed.

m.fb777 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with data privacy obligations under Philippine law. Contact details for the DPO are provided in Section 15 of this Policy. Players may contact the DPO for all inquiries, requests, and complaints related to the handling of their personal data.

m.fb777 collects personal information through multiple channels: directly from you at registration and during platform use, automatically through your device and browser during access, and from third-party service providers where permitted. The categories of personal data we collect are set out below.

Certain data collected by m.fb777 may qualify as "sensitive personal information" under the DPA, including government identification numbers, financial account details, and data relating to health or vulnerability where relevant to responsible gaming obligations. This data is handled with heightened security measures and processed only where strictly necessary for the purposes described in this Policy.

m.fb777 processes your personal data for the following specific purposes:

• Account Registration and Management: To create and maintain your m.fb777 account, verify your identity, manage your profile and preferences, and administer account security.
• Identity Verification (KYC): To verify that you meet the minimum age requirement (21 years), confirm your identity against government-issued documentation, and comply with PAGCOR's Know Your Customer requirements.
• Payment Processing: To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, and to process withdrawal requests to your designated payment method.
• Provision of Gaming Services: To provide access to casino games, sports betting, e-sabong, bingo, and all other m.fb777 game categories, and to record gameplay for dispute resolution and audit purposes.
• Regulatory Compliance: To meet obligations under PAGCOR's licensing conditions, the Data Privacy Act, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws and regulations.
• Responsible Gaming: To administer your responsible gaming settings, monitor gaming patterns for problem gambling indicators, and implement self-exclusion or limit requests.
• Fraud Prevention and Security: To detect, investigate, and prevent unauthorized account access, financial fraud, money laundering, and other illegal activity.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and maintain records of support interactions.
• Platform Improvement: To analyze aggregate usage patterns, improve the platform's features, and personalize your experience — only in anonymized or aggregated form where not required for other purposes.
• Marketing Communications: To send you promotional information about m.fb777 offers and events, where you have given consent. You may withdraw consent at any time through your account settings.

Under the Data Privacy Act of 2012, m.fb777 processes personal data on one or more of the following lawful grounds:

• Consent: Where you have provided express, informed consent — for example, consent to receive marketing communications or consent to processing of sensitive personal information.
• Contractual Necessity: Where processing is necessary to perform our contract with you — specifically, to operate your account and provide the gaming services described in our Terms and Conditions.
• Legal Obligation: Where processing is required to comply with applicable Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interest: Where processing is necessary for the legitimate interests of m.fb777, including fraud prevention, platform security, and responsible gaming monitoring, and where those interests are not overridden by your data protection rights.

Where consent is the basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, and does not affect processing carried out on other legal bases.

m.fb777 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. Personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

m.fb777 engages third-party service providers who process personal data on our behalf, strictly under contract and subject to data processing agreements that require them to handle your data in compliance with the DPA. These include:

• Payment Processors: GCash (GCash/Mynt), PayMaya (PayMaya Philippines), BPI, BDO, Metrobank, and card payment processors — to execute deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and document verification services used to validate government-issued IDs submitted during registration.
• Game Software Providers: Certified gaming software providers (e.g., Pragmatic Play, PG Soft, Jili, and others) whose platforms power specific game verticals — limited to session and outcome data necessary for game functionality.
• Cloud and Hosting Providers: Infrastructure providers hosting the m.fb777 platform and its data systems.
• Customer Support Platforms: Software providers used to manage support tickets and live chat interactions.

m.fb777 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue, or other competent Philippine government authorities where required by law, court order, or legitimate regulatory request. m.fb777 will not notify you of such a disclosure where doing so is prohibited by law or would prejudice a regulatory investigation.

In the event of a merger, acquisition, restructuring, or sale of assets affecting m.fb777, personal data may be transferred as part of that transaction. Where such a transfer occurs, m.fb777 will take reasonable steps to ensure that the receiving entity maintains data protections equivalent to those in this Policy and will notify affected players where required by the DPA.

m.fb777 retains your personal data for only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligation. Specific retention periods applicable to m.fb777 data categories are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution, audit, and regulatory compliance purposes.
• Communications and Support Records: Retained for three (3) years from the date of the interaction.
• Responsible Gaming Records: Retained for five (5) years from the date of any self-exclusion, limit setting, or responsible gaming intervention.
• Marketing Consent Records: Retained for the duration of consent plus three (3) years to document consent history.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original personal information. Data that is required to be retained by ongoing legal proceedings or regulatory investigations will be held until those proceedings are concluded.

m.fb777 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the m.fb777 platform is encrypted using Transport Layer Security (TLS 1.2 or higher), equivalent to 256-bit SSL encryption. The padlock icon visible in your browser confirms this encrypted connection is active.
• Encryption at Rest: Sensitive personal data — including government ID numbers, financial account references, and passwords — is stored in encrypted form using industry-standard encryption protocols. Passwords are stored as salted cryptographic hashes and are never retrievable in plain text.
• Access Controls: Access to personal data systems is restricted on a least-privilege basis. Only personnel with a legitimate operational need may access personal data, and all access is logged and auditable.
• Two-Factor Authentication: Account login from new or unrecognized devices requires OTP verification via your registered Philippine mobile number, reducing the risk of unauthorized access even if credentials are compromised.
• Intrusion Detection and Monitoring: m.fb777's systems are monitored for unauthorized access attempts, unusual traffic patterns, and security anomalies on a continuous basis.
• Data Breach Response: In the event of a personal data breach that is likely to result in harm to you, m.fb777 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals as required by the DPA.

m.fb777 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by your browser when you access a website. m.fb777 uses the following types of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a session, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing platform access.
• Functional Cookies: Store your preferences such as language settings, session time display preferences, and the "Remember Me" login option to pre-fill your username on return visits.
• Analytics Cookies: Used to collect anonymized data about how players navigate the platform — which sections are visited most, where drop-offs occur, and how features are used. This data is used to improve the platform and is not linked to your personal identity.
• Security Cookies: Support fraud detection and device recognition for OTP bypass on trusted devices. These cookies help m.fb777 identify when you are logging in from a new or unfamiliar device.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing the m.fb777 platform. m.fb777 does not currently use third-party advertising or cross-site tracking cookies.

The m.fb777 platform is strictly intended for individuals who are at least twenty-one (21) years of age. m.fb777 does not knowingly collect personal information from individuals under the age of 21. The mandatory KYC verification process — which requires submission of a Philippine government-issued ID — is specifically designed to prevent minors from accessing the Service.

If m.fb777 discovers that personal data has been collected from a player who does not meet the minimum age requirement, that account will be immediately suspended, all gaming activity will be voided, and any deposited funds will be returned through the original payment method following verification. Any personal data collected from such an individual will be deleted as soon as it is no longer required for the purpose of processing the refund and any regulatory reporting.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by m.fb777:

• Right to be Informed: You have the right to be informed that your personal data is being or will be processed, and to know the basis and purpose of that processing. This Privacy Policy fulfills that obligation.
• Right of Access: You may request a copy of the personal data m.fb777 holds about you. We will provide this within 15 business days of a verified request, subject to any legal restrictions on disclosure.
• Right to Rectification: If you believe personal data we hold about you is inaccurate, incomplete, or out of date, you may request correction. Basic profile information (email, address) can be updated directly through your account settings. Changes to identity data require support team assistance and document verification.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purpose collected, where consent has been withdrawn, or where processing was unlawful. This right is subject to overriding legal obligations — m.fb777 cannot delete data it is legally required to retain (e.g., AMLA transaction records).
• Right to Object: You may object to the processing of your personal data on the basis of legitimate interests, or to the use of your data for direct marketing purposes. You may opt out of marketing emails at any time through your account settings or by contacting support.
• Right to Data Portability: You may request that m.fb777 provide your personal data in a structured, commonly used, and machine-readable format where technically feasible, to facilitate transfer to another service provider.
• Right to File a Complaint: If you believe m.fb777 has processed your personal data in violation of the DPA, you have the right to file a complaint with the National Privacy Commission of the Philippines. Detailed information on the NPC complaints process is available on the NPC's official website.

To exercise any of the above rights, contact m.fb777's Data Protection Officer using the details in Section 15. We will acknowledge your request within 5 business days and provide a substantive response within 15 business days. We may need to verify your identity before processing a data rights request.

Some of m.fb777's service providers — including game software providers and cloud infrastructure providers — may process or store data outside the Philippines. Where personal data is transferred internationally, m.fb777 ensures that such transfers comply with the DPA's requirements for cross-border data transfers, including the requirement that the recipient country affords an adequate level of data protection or that appropriate safeguards (such as contractual data protection clauses) are in place.

m.fb777 will not transfer personal data to countries or entities that do not provide adequate data protection unless required by Philippine law or with your explicit consent. For transfers to game software providers, only the minimum session data necessary for game operation is shared — not full KYC or financial data.

m.fb777 is subject to the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended), the Terrorism Financing Prevention and Suppression Act, and PAGCOR's anti-money laundering compliance framework. These obligations require m.fb777 to collect, verify, and retain detailed identity and transaction records for all players.

In fulfillment of these obligations, m.fb777 may be required to: verify your identity and source of funds beyond standard KYC; monitor transactions for suspicious activity patterns; report covered transactions (transactions of ₱500,000 or above in a single banking day) and suspicious transactions to the Anti-Money Laundering Council; and retain AML-related records for a minimum of five years.

AMLC reporting obligations are mandatory and cannot be waived by consent. m.fb777 is legally prohibited from disclosing to you whether a suspicious transaction report has been filed in connection with your account.

m.fb777 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes — those that substantially affect your data rights or the way we use your personal information — will be communicated to you via your registered email address and through a prominent notice on the m.fb777 platform at least 15 days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the m.fb777 platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with a material change, you may request account closure before the effective date of that change.

For all privacy-related inquiries, data rights requests, and complaints regarding m.fb777's handling of your personal information, please contact our Data Protection Officer using the details below. We will respond to all inquiries within 5 business days.

This Privacy Policy was last updated on January 1, 2026 and applies to all personal data processed by m.fb777 from that date forward.