HAH777 Privacy Policy — Your Data, Handled Right

1. Who We Are

HAH777 is an online gaming platform operating under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of this Privacy Policy, HAH777 is the data controller — the entity responsible for deciding how and why personal data collected through the platform is processed.

This Privacy Policy applies to all personal information collected through the HAH777 website, including the sportsbook, casino games section, card games lobby, Tongits, Bingo, Poker, and any promotional or support communication associated with the platform. It applies to all registered players and to visitors who interact with the platform without completing registration.

If you have questions about this policy or wish to exercise your data rights, contact our Data Protection Officer directly — details are at the end of this document in Section 14.

2. What Personal Information We Collect

HAH777 collects personal information in categories. The specific data collected depends on how you interact with the platform — a casual visitor who never registers will have less data collected than a verified player who makes regular deposits and withdrawals.

3. How We Collect Your Information

HAH777 collects personal information through three main channels:

3.1 Directly From You

Most of the personal data HAH777 holds comes directly from you. When you register an account, complete identity verification, make a deposit, contact support, or participate in a promotion, you provide information that we collect and record. This is the primary source of data on the platform.

3.2 Automatically Through Platform Use

When you use the HAH777 platform — whether on desktop or mobile browser — technical data is collected automatically. This includes your IP address, device and browser information, session timestamps, and gameplay data. This data is collected using server logs and cookies, which are described in more detail in Section 7.

3.3 From Third Parties

In limited circumstances, HAH777 may receive personal data from third parties. This includes identity verification data from KYC service providers, payment confirmation data from GCash, Maya, and banking partners, and fraud or sanctions screening data from regulatory compliance services. All third-party data sources used by HAH777 operate under their own privacy frameworks and are selected on the basis of their compliance with applicable data protection standards.

4. Why We Use Your Personal Data

HAH777 uses the personal information it holds for specific, documented purposes. The table below maps each purpose to the data categories it relies on:

HAH777 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human review — for example, account closures based solely on automated risk scoring are reviewed by a compliance officer before action is taken.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), HAH777 must have a lawful basis for each type of personal data processing. The bases applicable to HAH777 are:

• Contractual necessity — processing required to fulfil the agreement between you and HAH777 (account creation, payment processing, game provision).
• Legal obligation — processing required to comply with PAGCOR regulations, Anti-Money Laundering Act obligations, and the Philippine Data Privacy Act itself (KYC verification, transaction reporting).
• Legitimate interests — processing necessary for fraud prevention, platform security, and responsible gaming monitoring where these interests are not overridden by your privacy rights.
• Consent — processing based on your explicit, informed, and freely given consent where no other basis applies (promotional email and SMS communications). You may withdraw consent at any time without affecting the legality of prior processing.

6. Who We Share Your Data With

HAH777 does not sell your personal data to any third party. We share data only where necessary and only with parties bound by appropriate data protection obligations. The categories of recipients are:

6.1 Payment Service Providers

To process your deposits and withdrawals, HAH777 shares necessary transaction and identity data with GCash, Maya, BDO, BPI, UnionBank, and other payment processors you use. Each of these providers handles your data under their own privacy frameworks and applicable Philippine financial regulations.

6.2 KYC and Identity Verification Services

HAH777 uses third-party services to verify government-issued IDs and confirm identity during account setup or withdrawal processing. These services receive only the data required to complete verification and are contractually restricted from using it for any other purpose.

6.3 Regulatory Authorities

PAGCOR has supervisory authority over HAH777 as a licensed operator. HAH777 is required to submit operational and financial reports to PAGCOR on a regular basis and may be required to provide specific player data in connection with regulatory investigations or compliance reviews. HAH777 is also required to report suspicious transactions to the Anti-Money Laundering Council (AMLC) under the Anti-Money Laundering Act.

6.4 Law Enforcement and Courts

HAH777 will disclose personal data to law enforcement agencies, courts, or other government bodies where required to do so by a valid legal order, court ruling, or regulatory direction under Philippine law.

6.5 Technology and Infrastructure Partners

HAH777 uses cloud hosting, content delivery, and cybersecurity services provided by reputable technology partners. These providers process data on behalf of HAH777 and under data processing agreements that bind them to appropriate security and confidentiality standards. They do not use HAH777 player data for their own purposes.

7. Cookies and Tracking Technologies

HAH777 uses cookies and similar technologies on the platform. A cookie is a small text file stored by your browser when you visit a website. HAH777 uses the following types:

• Essential cookies — required for the platform to function. These manage your login session, maintain your game state, and keep your bet slip active. You cannot opt out of essential cookies while using the platform.
• Functional cookies — remember your preferences such as language settings and display options across sessions.
• Analytics cookies — collect aggregated, anonymised data on how players navigate the platform — which game sections are visited, how long sessions run, and where players drop off in a registration flow. This data is used to improve the platform experience.
• Security cookies — help detect unusual access patterns, potential fraud, and session hijacking attempts.

HAH777 does not use third-party advertising cookies or share browsing data with advertising networks. You can manage cookie preferences through your browser settings, though disabling essential cookies will affect platform functionality. On most mobile browsers, cookie settings are accessible through the browser's privacy or site settings menu.

8. How Long We Keep Your Data

HAH777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Retention periods by data category:

• Account and registration data: Retained for the duration of your active account and for a minimum of five years following account closure. This retention period is required under PAGCOR licensing obligations and AML regulations.
• KYC and identity documents: Retained for a minimum of five years from the date of verification, in line with Anti-Money Laundering Act requirements.
• Transaction records: Retained for a minimum of five years from the date of each transaction, as required under the Anti-Money Laundering Act and PAGCOR financial reporting obligations.
• Gaming and betting records: Retained for three years from the date of each gaming session for platform integrity, dispute resolution, and responsible gaming monitoring purposes.
• Customer support records: Retained for two years from the date the support interaction is resolved.
• Marketing preferences and communication records: Retained while your account is active and for 12 months after account closure or unsubscription, whichever is earlier.

When the applicable retention period expires and no legal obligation requires continued storage, HAH777 securely deletes or anonymises the data so that it can no longer be associated with an individual.

9. Security Measures

HAH777 implements technical and organisational security measures appropriate to the risk profile of the personal data it holds. These include:

No online platform can guarantee absolute security against all threats. If you believe your HAH777 account has been compromised, contact support immediately so we can secure your account and investigate.

10. Your Data Rights Under Philippine Law

The Philippine Data Privacy Act of 2012 gives you specific rights over your personal data. HAH777 is committed to respecting and facilitating these rights. Here's what you're entitled to:

11. Minors and Age Restriction

HAH777 is strictly for individuals aged 21 and above. The platform does not knowingly collect personal data from anyone under 21 years of age. Age verification is a mandatory part of the account registration and KYC process.

If HAH777 discovers that personal data has been collected from an individual under the age of 21 — whether through a misrepresentation during registration or any other means — that account will be immediately closed, all associated funds will be handled in accordance with PAGCOR requirements, and the collected data will be deleted to the extent permitted by applicable law.

If you believe a minor has registered on the HAH777 platform, please contact support immediately at support@hah777.net with as much detail as you can provide. HAH777 will investigate and act promptly.

12. Cross-Border Data Transfers

HAH777 primarily processes and stores data within the Philippines. In limited cases, personal data may be accessed or processed by technology partners whose infrastructure is located outside the Philippines — for example, cloud hosting providers or cybersecurity services with globally distributed data centres.

Where personal data is transferred outside the Philippines, HAH777 ensures that appropriate safeguards are in place in accordance with the National Privacy Commission's guidelines on cross-border data transfers. These safeguards include contractual data processing agreements that bind recipient parties to data protection standards consistent with the Philippine Data Privacy Act.

HAH777 does not transfer personal data to jurisdictions with materially weaker data protection frameworks without implementing compensating controls.

13. Changes to This Privacy Policy

HAH777 may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or data handling practices. When material changes are made, HAH777 will notify registered players via email and post a notice on the platform for a reasonable period before the updated policy takes effect.

The date at the top of this page always reflects the most recent revision. We recommend checking it periodically, especially after receiving a notification of updates from HAH777.

Continued use of the platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. If you do not agree with a change, you may close your account and request data deletion as described in Section 10.

14. Contact Us and Data Protection Officer

HAH777 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. You can reach the DPO and the general support team through the following channels:

• Privacy and data rights enquiries: privacy@hah777.net
• General support (account issues, payments, responsible gaming): support@hah777.net
• Support availability: 24 hours a day, 7 days a week
• Languages: English and Tagalog

When submitting a data rights request, please include your registered email address and a description of your request. We may need to verify your identity before processing certain requests — this is to protect you from unauthorised access to your own data.

If your privacy concern relates to responsible gaming — such as a request for self-exclusion or account restriction — you can also visit the Responsible Gaming page directly. For general platform terms, see the Terms and Conditions.