me779 Privacy Policy
How We Collect, Use, and Protect Your Personal Information

This Privacy Policy applies to all personal information collected by me779 in connection with your use of the me779 online gaming platform, including the website at me779.club, any mobile-optimised versions of the platform, and all related services, promotions, and customer support interactions.

This Policy applies to all registered and prospective players, visitors who browse me779.club without registering, individuals who contact the me779 customer support team, and participants in me779 promotional programmes. It applies regardless of the device or network connection used to access the platform — whether you're playing from a Manila high-rise or a Cebu City apartment.

This Policy does not apply to third-party websites or services that may be linked from the me779 platform. me779 has no control over, and accepts no responsibility for, the privacy practices of third-party operators. You should review the privacy policies of those third parties independently.

For the purposes of the Philippine Data Privacy Act of 2012, the Data Controller responsible for your personal information collected through the me779 platform is:

me779
Online Gaming Platform | me779.club
Republic of the Philippines

me779 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and the DPA. The DPO can be contacted through the details provided in Section 15 of this Policy.

Where me779 engages third-party service providers to process personal data on its behalf, those providers act as Data Processors under written data processing agreements that impose obligations equivalent to those required by the DPA and its IRR.

me779 collects personal information through several channels, including account registration, identity verification processes, gameplay activity, payment transactions, and customer support interactions. The categories of personal data collected include:

me779 does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Where the collection of sensitive data is unavoidable — for example, where a government ID reveals information about ethnicity or civil status — such data is treated with the heightened protections applicable to sensitive personal information under the DPA.

me779 processes your personal information for the following specified, legitimate, and proportionate purposes:

• Account Management: Creating, maintaining, and operating your me779 player account, including processing login authentication, managing account settings, and enforcing the one-account-per-player policy.
• Identity Verification (KYC): Verifying that you meet the minimum age requirement of 21 years and that you are the genuine owner of the payment methods associated with your account, in compliance with PAGCOR requirements and anti-money laundering obligations.
• Payment Processing: Processing your deposits and withdrawals through GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, and any additional payment methods supported by the platform, including maintaining transaction records for regulatory and dispute-resolution purposes.
• Gameplay Operations: Delivering games, recording bet and win/loss outcomes, calculating and crediting loyalty points, processing bonus awards, and maintaining gaming history accessible from your account dashboard.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, money laundering, account takeovers, and other forms of platform misuse.
• Regulatory Compliance: Meeting reporting and record-keeping obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and any other applicable Philippine laws.
• Customer Support: Responding to your queries, complaints, and account-related requests through live chat, email, and other support channels.
• Responsible Gaming: Monitoring account activity for indicators of problem gambling, enforcing self-exclusion arrangements, and delivering responsible gaming reminders and tools where applicable.
• Marketing and Promotions (with consent): Sending you information about me779 promotions, bonuses, and new games where you have given explicit consent and have not subsequently opted out.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the me779 platform, user interface, game performance, and customer experience.

Under the Philippine Data Privacy Act, me779 is required to have a lawful basis for each processing activity. The primary legal bases relied upon by me779 are:

• Contractual Necessity: Processing required to fulfil the obligations of your account agreement with me779, including account creation, payment processing, game delivery, and withdrawal requests. Without this processing, me779 cannot provide the service to you.
• Legal Obligation: Processing necessary to comply with me779's obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Data Privacy Act, and tax reporting requirements.
• Legitimate Interests: Processing carried out for me779's legitimate business interests where those interests are not overridden by your rights and freedoms — including fraud detection, platform security, internal analytics, and improvement of the gaming experience.
• Consent: Where none of the above legal bases is sufficient, me779 will seek your explicit, informed, and freely given consent before processing your personal data — primarily for marketing communications. You may withdraw consent at any time by contacting support or updating your account preferences.

6.1 No Sale of Personal Data. me779 does not sell, rent, trade, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes.

6.2 Permitted Disclosures. me779 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: GCash, PayMaya, BDO, BPI, Metrobank, and UnionBank — solely for the purpose of processing your deposits and withdrawals. These providers are subject to their own privacy policies and relevant Philippine financial data protection obligations.
• KYC and Identity Verification Partners: Third-party verification service providers engaged to assist with document authentication and age verification as required by PAGCOR.
• Game Software Providers: Providers of casino game software and live dealer streaming services who may process limited gaming activity data as required to operate the games.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other government agencies where disclosure is required by law, court order, or regulatory direction.
• Professional Advisors: Legal counsel, auditors, and accountants engaged by me779, subject to applicable confidentiality obligations.
• Business Successors: In the event of a merger, acquisition, or sale of substantially all of me779's assets, your personal data may be transferred to the successor entity. me779 will provide advance notice of any such transfer that materially affects your data rights.

6.3 Data Processing Agreements. All third-party processors engaged by me779 are required to enter into written data processing agreements that impose DPA-compliant data protection obligations and prohibit the use of your personal data for any purpose other than those specified by me779.

Some me779 service providers — particularly game software providers and cloud infrastructure vendors — may be located outside the Philippines. Where personal data is transferred to a recipient in a foreign jurisdiction, me779 takes steps to ensure that the transfer complies with the cross-border transfer provisions of the DPA and its IRR.

These steps may include: (a) transferring data only to jurisdictions deemed to provide an adequate level of protection for personal data; (b) implementing standard contractual clauses approved by the National Privacy Commission; or (c) obtaining your explicit consent to the transfer where no other adequate safeguard is available.

me779 maintains a record of all cross-border data transfers and the safeguards applied, which is available for review by the National Privacy Commission upon request.

me779 retains your personal data only for as long as is necessary for the purposes described in this Policy or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of identifiable information.

me779 implements organisational and technical security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, without limitation:

• Transport Security: All data transmitted between your device and the me779 platform is encrypted using 256-bit TLS/SSL protocols. HTTPS is enforced across all platform pages and API endpoints.
• Access Controls: Access to personal data within me779 is restricted to authorised personnel whose job function requires access. Role-based access controls and multi-factor authentication are enforced for all staff with access to production systems containing personal data.
• Storage Security: Personal data stored on me779 servers is encrypted at rest. Server infrastructure is hosted in data centres with physical security controls appropriate to the sensitivity of the data stored.
• Penetration Testing and Audits: me779 conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential weaknesses in platform security.
• Staff Training: All me779 staff with access to personal data receive data privacy and security training as part of their onboarding and on a recurring annual basis.
• Incident Response: me779 maintains a documented data breach response plan. In the event of a confirmed breach affecting your personal data, me779 will follow the notification procedures described in Section 13 of this Policy.

Notwithstanding these measures, no data transmission over the internet or storage system can be guaranteed to be 100% secure. me779 cannot guarantee the absolute security of personal data transmitted to or from the platform. You play a role in protecting your data by maintaining the confidentiality of your me779 login credentials and notifying the support team immediately if you suspect unauthorised access to your account.

me779 uses cookies and similar tracking technologies on the platform to support essential functionality and improve the user experience. A cookie is a small text file placed on your device when you visit the me779 platform.

10.1 Types of Cookies Used. me779 uses the following categories of cookies:

• Essential Cookies: Required for the platform to function correctly — including maintaining your login session, storing your language and display preferences, and enabling secure payment flows. These cookies cannot be disabled without affecting core platform functionality.
• Functional Cookies: Used to remember your preferences across sessions, such as game settings, display options, and responsible gaming tool configurations.
• Analytics Cookies: Used to collect aggregated information about how players interact with the me779 platform — such as which games are most frequently played and how users navigate between sections — to support platform improvement. Analytics data is processed in anonymised or pseudonymised form where possible.
• Security Cookies: Used to detect fraudulent logins, bot activity, and other security threats, including session integrity verification and rate-limiting controls.

10.2 Cookie Management. You may configure your browser settings to refuse some or all cookies. Disabling essential cookies will impair or prevent access to the me779 platform. Disabling analytics cookies will not affect your ability to use the platform. For detailed instructions on managing cookies in your specific browser, please consult your browser's help documentation.

me779 does not currently use third-party advertising cookies or participate in cross-site behavioural advertising networks.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by me779. me779 is committed to facilitating the exercise of these rights promptly and without undue obstruction.

To exercise any of the above rights, please contact the me779 Data Protection Officer using the details in Section 15. me779 will respond to your request within fifteen (15) business days. In cases requiring additional verification or complex processing, me779 may extend this period by a further fifteen (15) business days with prior notice to you.

me779 reserves the right to decline requests that are manifestly unfounded, repetitive, or would require the disclosure of personal data relating to another individual, or where applicable law requires retention of the relevant data.

The me779 platform is strictly restricted to individuals who are at least 21 years of age, in accordance with applicable Philippine gaming regulations and PAGCOR guidelines. me779 does not knowingly collect personal information from individuals under the age of 21.

me779 employs age verification procedures as part of the KYC process to detect and prevent underage registration. Where me779 discovers or reasonably suspects that personal data has been collected from an individual under 21 years of age, it will immediately close the associated account, delete the personal data collected, and — where required — report the matter to the appropriate regulatory authority.

If you are a parent or guardian and believe that your minor child has registered an account on me779, please contact the me779 support team immediately so that the account can be closed and any personal data deleted.

me779 maintains a documented personal data breach response plan in accordance with the NPC's Circular on Personal Data Breach Management. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, me779 will:

• Notify the National Privacy Commission within 72 hours of becoming aware of the breach, where feasible, as required by NPC Circular No. 16-03.
• Notify affected data subjects without undue delay where the breach is likely to result in a significant risk — including risks to physical safety, financial loss, identity theft, or reputational damage.
• Provide clear information in the breach notification describing: the nature of the breach; the categories and approximate number of data subjects and records affected; the likely consequences of the breach; and the measures taken or proposed to address the breach.

me779 maintains a breach register documenting all confirmed and suspected personal data breaches, regardless of whether they trigger mandatory notification obligations. This register is available for inspection by the NPC upon request.

me779 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or platform features. When material changes are made, me779 will notify registered players via SMS to the mobile number on record, via email where an address has been provided, or by displaying a prominent notice on the me779 platform prior to the updated Policy taking effect.

The most current version of this Policy will always be available at me779.club/privacy-policy. The "Last Reviewed" date at the top of this document indicates when the current version was last updated. Your continued use of the me779 platform following the effective date of any revised Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the platform and close your account.

For all data privacy inquiries, including requests to exercise your rights under the DPA, concerns about how me779 processes your personal data, or to report a suspected data privacy violation, please contact the me779 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through the me779 platform. Request to speak with the Data Protection Officer or submit a Data Subject Rights Request.
• Email: [email protected] — please include "Data Privacy Request" in the subject line of your message. This address is for contact only and is not a clickable link.

me779 is committed to resolving data privacy concerns promptly. Initial acknowledgment of your inquiry will be provided within twenty-four (24) hours. Substantive responses to data subject rights requests will be provided within fifteen (15) business days.

If you are not satisfied with me779's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph. me779 will cooperate fully with any NPC investigation.