hero777 Privacy Policy

1. Introduction

hero777 ("hero777," "we," "our," "us") operates an online gaming and sports betting platform at https://hero777.asia, licensed under the Philippine Amusement and Gaming Corporation (PAGCOR). We are committed to protecting the privacy and personal data of every registered Member and visitor to our platform.

This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information obtained through your use of the hero777 platform, consistent with our obligations under Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations (IRR), and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on hero777, accessing the platform, or otherwise providing personal information to us, you acknowledge that you have read, understood, and consent to the practices described in this Policy. If you do not agree to this Policy, you must not use the hero777 platform.

2. Data Controller Information

hero777 acts as the Personal Information Controller (PIC) as defined under RA 10173 in respect of the personal data processed through the hero777 platform. Decisions regarding the purposes and means of processing your personal data are determined by hero777.

Where hero777 engages third-party service providers (including payment processors, game software providers, and identity verification services) who process data on our behalf, such parties operate as Personal Information Processors (PIPs) under binding data processing agreements that require them to maintain confidentiality and security standards equivalent to those described in this Policy.

For all data privacy matters, hero777 has designated a Data Protection Officer (DPO). Contact details for our DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

hero777 collects the following categories of personal data from Members and platform visitors:

hero777 does not collect sensitive personal information (as defined under RA 10173, such as health data, political opinions, or religious beliefs) unless explicitly required for a specific regulatory purpose, in which case separate consent will be sought.

4. How We Collect Personal Data

hero777 collects personal data through the following channels and methods:

4.1 Directly from You

• Account registration form (name, mobile number, date of birth);
• Identity verification (KYC) document submission;
• Payment method registration (GCash, Maya, bank account details);
• Customer support interactions via live chat;
• Responsible gaming tool setup (deposit limits, self-exclusion);
• Promotional opt-in forms and survey participation.

4.2 Automatically Through Platform Use

• Server logs recording IP address, browser type, device information, and session timestamps;
• Gaming activity records generated each time you place a bet, spin a slot, or interact with a game;
• Cookies and similar tracking technologies (see Section 10);
• Authentication tokens generated upon login.

4.3 From Third Parties

• Identity verification providers engaged to cross-reference KYC document authenticity;
• Payment processors confirming transaction status and account ownership;
• Fraud detection and anti-money laundering screening services;
• PAGCOR-mandated reporting systems where required by regulation.

5. Purposes of Processing

hero777 processes your personal data for the following specific, legitimate purposes:

• Account creation and management: establishing and maintaining your hero777 player account, processing login authentication, and managing account preferences;
• Payment processing: executing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other accepted Philippine payment channels;
• Identity verification (KYC): verifying your identity and age (21+) in compliance with PAGCOR requirements and Philippine anti-money laundering law;
• Gaming operations: providing access to all game categories, recording game outcomes, calculating winnings, and maintaining game integrity;
• Regulatory compliance: meeting reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities;
• Fraud prevention and security: detecting and preventing unauthorized access, fraudulent activity, money laundering, and account abuse;
• Responsible gaming: administering deposit limits, self-exclusion requests, session reminders, and other responsible gaming tools;
• Customer support: responding to inquiries, resolving disputes, and providing account assistance;
• Platform improvement: analyzing aggregated, anonymized usage data to improve the hero777 platform, optimize game performance, and enhance the Member experience;
• Marketing communications (opt-in only): sending promotional offers, bonus notifications, and platform updates to Members who have affirmatively opted in to receive such communications.

hero777 does not process your personal data for purposes incompatible with those listed above without obtaining your separate, specific consent.

6. Legal Basis for Processing

Under RA 10173 and its IRR, hero777 relies on the following legal bases for processing your personal data:

• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, informed, and unambiguous consent;
• Contractual necessity: Processing required to perform our contractual obligations to you as a Member (account services, payment processing, game access);
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), and the Data Privacy Act;
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics where such processing does not override your fundamental rights and freedoms.

7. Data Sharing & Disclosure

hero777 does not sell, rent, or trade your personal data to third-party commercial entities for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly for the purposes set out in this Policy:

7.1 Service Providers (PIPs)

Third-party processors engaged by hero777 to support platform operations, including: payment gateway operators, KYC and identity verification providers, game software providers (who receive anonymized player session data only), customer support platform providers, and IT infrastructure and hosting providers. All PIPs are bound by data processing agreements requiring equivalent data protection standards.

7.2 Regulatory Authorities

hero777 discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine law enforcement or regulatory bodies where required or compelled by law, regulation, or valid legal process.

7.3 Business Transfers

In the event of a merger, acquisition, sale, or transfer of hero777's business assets, personal data held by hero777 may be transferred to the acquiring entity, subject to equivalent privacy protections and notification to affected Members.

7.4 Protection of Rights

hero777 may disclose personal data where necessary to protect the legal rights, safety, or property of hero777, its Members, or the public, including disclosure to prevent fraud, unauthorized use, or illegal activity on the platform.

8. Data Retention

hero777 retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: retained for the duration of the Member's account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements;
• KYC documents: retained for a minimum of five (5) years from the date of submission or from the date of the last transaction, whichever is later;
• Transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Gaming records: retained for a minimum of three (3) years from the date of each game session;
• Marketing consent records: retained until consent is withdrawn and for one (1) year thereafter as evidence of consent;
• Server logs and technical data: retained for up to ninety (90) days unless required for an ongoing investigation.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with the NPC's guidelines on data disposal.

9. Security Measures

hero777 implements technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• Encryption: All data transmitted between your browser and the hero777 platform is protected by TLS (Transport Layer Security) encryption. Passwords are stored using one-way hashing with salting — hero777 staff cannot read your password;
• Access controls: Personal data is accessible only to hero777 staff and contractors who require access to perform their job functions, subject to role-based access controls and documented authorization;
• Two-factor authentication: Login on new devices is protected by OTP verification sent to your registered Philippine mobile number;
• Regular security audits: The hero777 platform undergoes regular security testing and vulnerability assessments;
• Incident response: hero777 maintains a data breach response procedure and will notify the NPC and affected Members within 72 hours of discovering a breach that poses a risk to your rights, consistent with RA 10173 requirements.

While hero777 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us promptly of any suspected unauthorized use of your account.

10. Cookies & Tracking Technologies

hero777 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored by your browser that enables the platform to recognize your session, remember your preferences, and analyze usage.

10.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function — authentication tokens, session management, and security cookies. These cannot be disabled;
• Functional cookies: Remember your language preferences, game settings, and other personalization choices;
• Analytics cookies: Collect aggregated, anonymized data about how Members interact with the platform, used to improve performance and user experience. hero777 uses privacy-respecting analytics tools that do not share individual data with advertising networks;
• Marketing cookies (opt-in): Used only where you have provided explicit consent to receive personalized promotional communications.

10.2 Managing Cookies

You may disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will prevent the platform from functioning. Disabling functional cookies may affect your ability to save preferences. Instructions for managing cookies are available in your browser's help documentation.

11. Your Data Privacy Rights

Under RA 10173, hero777 Members have the following rights with respect to their personal data. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15.

hero777 will respond to verified data subject requests within fifteen (15) business days. In complex cases, we may extend this period by a further thirty (30) days with prior notification. Identity verification will be required before processing data access or deletion requests to prevent unauthorized disclosure.

12. Minors

The hero777 platform is strictly for adults aged 21 years and older in accordance with Philippine gambling law and PAGCOR requirements. hero777 does not knowingly collect personal data from individuals under 21 years of age. If hero777 discovers that an account has been created by or on behalf of a person under 21, the account will be immediately suspended and any personal data collected will be deleted in accordance with applicable law, with any account balance handled under PAGCOR guidelines.

If you are a parent or guardian and believe your child has registered on hero777, please contact our support team immediately at [email protected].

13. Cross-Border Data Transfers

hero777 primarily processes and stores data within server infrastructure serving the Philippine market. Where personal data is processed by third-party service providers located outside the Philippines — for example, game software providers with servers in other jurisdictions — hero777 ensures that such transfers comply with Section 21 of RA 10173 and NPC guidelines on cross-border data flows.

This includes implementing standard contractual clauses or other approved transfer mechanisms to ensure that your personal data receives adequate protection regardless of where it is processed. A list of jurisdictions to which data may be transferred is available upon written request to our DPO.

14. Changes to This Privacy Policy

hero777 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. The revised Policy will be posted on this page with an updated effective date. Where changes are material — meaning they significantly affect your rights or how we process your data — hero777 will notify you via your registered mobile number or through a platform notification at login.

Your continued use of the hero777 platform following the posting of a revised Policy constitutes your acknowledgment of the changes. We encourage you to review this Policy periodically.

15. Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact hero777's designated Data Protection Officer:

For complaints that remain unresolved after contacting hero777's DPO, you have the right to file a complaint with the National Privacy Commission of the Philippines. For further information, please refer to our Terms & Conditions and Responsible Gaming pages.