tag777 Privacy Policy — How We Handle Your Personal Data

1Who We Are

tag777 is an online casino and sports betting platform operated at tag777.app. We are a PAGCOR-licensed operator registered in the Philippines. For the purposes of the Philippine Data Privacy Act of 2012, tag777 acts as the Personal Information Controller (PIC) in respect of all personal data collected from our players and website visitors.

Our Data Privacy Officer (DPO) can be contacted at privacy@tag777.app. The DPO is responsible for ensuring tag777's compliance with the Data Privacy Act and is the primary point of contact for all data privacy queries, access requests, and complaints from Filipino players and other data subjects.

2Personal Data We Collect

tag777 collects the following categories of personal data:

3How We Collect Your Data

tag777 collects personal data through the following means:

• Direct provision: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you provide personal data to us directly.
• Automated collection: When you visit tag777.app or use our mobile platform, technical data such as your IP address, device type, and session information is collected automatically through cookies and similar tracking technologies.
• Third-party sources: We may receive identity verification data from KYC service providers and fraud detection partners when processing your account verification. We may also receive data from payment processors to confirm transaction status.
• Referral programme: If another tag777 player refers you, we receive your initial contact information to track the referral. This data is subject to the same privacy protections as all other player data.

tag777 does not purchase personal data lists or acquire personal data from social media platforms without your explicit consent.

4Why We Use Your Personal Data

tag777 uses your personal data for the following specific purposes. We use only the data necessary for each purpose — nothing more.

• Account management: Creating and maintaining your tag777 account, verifying your identity, and communicating important account information.
• Service delivery: Processing deposits, settling withdrawals, recording game play, calculating and crediting bonuses, and tracking referral rewards.
• Regulatory compliance: Fulfilling our obligations as a PAGCOR-licensed operator, including age verification, KYC checks, anti-money laundering (AML) monitoring, and reporting to PAGCOR as required by law.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, and abuse of tag777 promotions or referral programmes.
• Customer support: Responding to your queries, complaints, and responsible gaming requests, and maintaining records of support interactions.
• Platform improvement: Using aggregated, anonymised technical and usage data to improve tag777's platform performance, user interface, and game selection.
• Marketing communications: Sending promotional offers, new game announcements, and personalised recommendations — but only where you have consented to receive such communications or where we have a legitimate interest in doing so.
• Responsible gaming: Monitoring for patterns that may indicate problem gambling behaviour, administering self-exclusion requests, and facilitating referrals to support resources.

5Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, tag777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to operate your tag777 account and provide the services you signed up for — account registration, payments, game play, and customer support.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML regulations, tax reporting, and other Philippine legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics, where these interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications, optional analytics, and any other purpose where we have asked for and received your specific, informed consent. You may withdraw consent at any time.

6Who We Share Your Data With

tag777 shares personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment processors: GCash (Mynt), Maya (Paymaya Philippines), GrabPay, and banking partners require sufficient data to process your transactions. These partners maintain their own privacy policies and process data under their respective regulatory frameworks.
• KYC and identity verification providers: We use accredited third-party identity verification services to process government ID verification and selfie matching during the KYC process. These providers process data under strict data processing agreements with tag777.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission may require access to player data as part of their regulatory and law enforcement functions. tag777 complies with all valid regulatory requests.
• Fraud detection and cybersecurity providers: We use third-party tools to detect fraudulent transactions and protect platform security. These tools process technical data under data processing agreements that prohibit independent use of the data.
• Customer support platforms: Our support infrastructure may be hosted by a third-party provider. Support data is processed under a data processing agreement that requires equivalent data protection standards.
• Legal and professional advisors: tag777's legal counsel and professional advisors may access player data where necessary to provide advice or conduct proceedings, subject to professional confidentiality obligations.

7Cookies and Tracking Technologies

tag777 uses cookies and similar technologies on our website and mobile platform. Here's what we use and why:

You can manage your cookie preferences at any time through your browser settings or through the tag777 cookie preference centre available on your account settings page. Disabling strictly necessary cookies will prevent you from using core tag777 features.

tag777 does not use third-party advertising cookies to track your behaviour across other websites. Our tracking is limited to activity on tag777.app and our associated mobile platform.

8How Long We Keep Your Data

tag777 retains personal data only for as long as necessary for the purpose it was collected, or as required by Philippine law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your active account plus a minimum of five years after account closure, in compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five years from the date of each transaction, as required by the AMLC and for tax purposes.
• Customer support communications: Retained for two years from the date of the final communication, or longer if a dispute or legal matter is pending.
• Technical and analytics data: Aggregated, anonymised analytics data may be retained indefinitely. Individual session logs are retained for up to 12 months.
• Marketing consent records: Retained until you withdraw consent, plus a period sufficient to demonstrate compliance with consent obligations.

When data is no longer required, tag777 securely deletes or anonymises it in accordance with our data disposal procedures.

9How We Protect Your Data

tag777 implements multiple layers of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• SSL/TLS encryption: All data in transit between your device and tag777 is encrypted using 256-bit SSL/TLS — the same standard used by Philippine banks and financial institutions.
• Encrypted data storage: Sensitive personal data, including identity documents and financial account references, is encrypted at rest using industry-standard encryption.
• Access controls: Access to personal data within tag777 is restricted to authorised personnel on a need-to-know basis. All staff with access to personal data receive regular data privacy training.
• Two-factor authentication: tag777 supports and encourages the use of two-factor authentication (2FA) for all player accounts to prevent unauthorised access.
• Regular security testing: tag777's systems undergo regular vulnerability assessments and penetration testing by qualified cybersecurity professionals.
• Incident response: In the event of a personal data breach, tag777 will notify the National Privacy Commission within 72 hours of discovery, and affected data subjects will be notified without undue delay, as required by the Data Privacy Act.

10Your Rights Under the Data Privacy Act

As a Filipino data subject, you have the following rights under the Data Privacy Act of 2012. tag777 honours all valid rights requests without charge and responds within 15 business days of receipt:

To exercise any of these rights, submit a written request to privacy@tag777.app with the subject line "Data Rights Request — [your registered email address]". We may request proof of identity before processing your request to prevent unauthorised access to your data.

11Children's Privacy

tag777 is strictly for adults aged 21 and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we discover that we have inadvertently collected personal data from an individual under 21, we will immediately delete the data and close the associated account. Any winnings generated through such an account will be forfeited.

Parents or guardians who believe that a minor has registered on tag777 should contact support@tag777.app immediately. We treat all underage access reports as urgent and will investigate and respond within 24 hours.

12International Data Transfers

tag777's primary data storage and processing infrastructure is located within or in accordance with standards compatible with Philippine data privacy requirements. However, some of our third-party service partners — such as KYC verification providers and fraud detection services — may process data in data centres outside the Philippines.

Where personal data is transferred outside the Philippines, tag777 ensures that appropriate safeguards are in place, including:

• Data processing agreements that require the recipient to maintain equivalent data protection standards to those required under Philippine law.
• Selection of partners located in jurisdictions recognised as providing adequate data protection under NPC guidance.
• Use of standard contractual clauses or equivalent binding data protection commitments where required.

You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting our DPO at privacy@tag777.app.

13Changes to This Privacy Policy

tag777 may update this Privacy Policy from time to time to reflect changes in our data practices, updates to Philippine law, or changes in our services. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address explaining the nature of the changes.
• Where the changes materially affect how we use your data and we rely on consent as the legal basis, request fresh consent before applying the new processing.

We encourage tag777 players to review this Privacy Policy periodically. Continued use of tag777 after a notified update constitutes acceptance of the revised policy.

14Contact Us and Data Privacy Officer

For any privacy-related queries, data rights requests, or concerns about how tag777 handles your personal data, please reach out through any of the following channels: