747old Privacy Policy

1Introduction & Scope of This Policy

This Privacy Policy ("Policy") describes how 747old ("747old," "we," "us," "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "Player," "User") who access or use the 747old Casino platform at 747old.org (the "Platform"), including all associated games, services, promotions, and customer support channels.

This Policy is issued in compliance with the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the issuances of the National Privacy Commission (NPC), and all other applicable Philippine laws governing the processing of personal information, including the Anti-Money Laundering Act (Republic Act No. 9160, as amended) and PAGCOR's data governance requirements.

By registering an account, accessing the Platform, or otherwise providing personal information to 747old, you acknowledge that you have read and understood this Policy and consent to the processing of your personal information as described herein. This Policy must be read in conjunction with 747old's Terms & Conditions, which are incorporated by reference.

2Identity of the Personal Information Controller

For purposes of the Philippines Data Privacy Act of 2012, the Personal Information Controller (PIC) responsible for the personal data collected through the 747old Platform is:

747old has designated a Data Protection Officer (DPO) in accordance with the requirements of the NPC. The DPO is responsible for overseeing 747old's compliance with RA 10173, handling data subject rights requests, managing the personal data breach notification process, and serving as the primary point of contact with the National Privacy Commission.

3Categories of Personal Data We Collect

747old collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we process include:

4How We Collect Your Personal Data

747old collects personal data through the following channels:

• Direct submission: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or update your account settings, you directly provide personal data to 747old.
• Automated technical collection: When you access the 747old Platform, our servers and analytics infrastructure automatically collect technical data including your IP address, device identifiers, session timestamps, and browser characteristics via server logs and first-party cookies.
• Third-party payment processors: When you initiate a deposit or withdrawal through GCash, Maya, BPI, BDO, Metrobank, or other approved payment channels, those processors transmit confirmation data (transaction ID, account reference, amount, timestamp) to 747old for reconciliation and fraud prevention purposes.
• Identity verification partners: 747old may use accredited identity verification service providers to assist with KYC document validation. These providers process identity documents on 747old's behalf under strict data processing agreements.
• PAGCOR compliance systems: As a PAGCOR-licensed operator, 747old is required to participate in certain centralized regulatory systems that may involve the sharing of specific player data with PAGCOR for licensing compliance and anti-money laundering monitoring purposes.

5Purposes of Processing Your Personal Data

747old processes your personal data for the following specific, declared purposes:

5.1 Account Management & Service Delivery

To create and maintain your 747old account, authenticate your identity at login, provide access to the gaming platform, process deposits and withdrawals, deliver game outcomes, and administer your account wallet.

5.2 KYC & Age Verification

To verify your identity and confirm that you are at least 21 years of age in compliance with PAGCOR requirements. This is a legal obligation and cannot be waived.

5.3 Financial Transactions & Fraud Prevention

To process deposits and withdrawals through your chosen Philippine payment method; to detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct; and to maintain transaction records as required by the Anti-Money Laundering Act.

5.4 Regulatory Compliance

To fulfill 747old's legal obligations to PAGCOR (license compliance and reporting), the Anti-Money Laundering Council (AMLC) (suspicious transaction reporting), the Bureau of Internal Revenue (BIR) (tax withholding on winnings where applicable), and the National Privacy Commission (NPC) (data protection compliance).

5.5 Responsible Gaming

To administer responsible gaming tools including deposit limits, loss limits, session timers, and self-exclusion; to monitor gaming patterns for indicators of problem gambling; and to comply with PAGCOR's player protection requirements.

5.6 Customer Support

To investigate and respond to support queries, process complaints, and maintain records of support interactions for quality assurance and training purposes.

5.7 Platform Security & Integrity

To protect the security and integrity of the 747old platform; to detect unauthorized access, bot activity, and other technical threats; and to investigate reported security incidents.

5.8 Marketing Communications (With Consent Only)

To send promotional offers, bonus notifications, and platform news via SMS or email — only if you have explicitly opted in to receive such communications. You may withdraw this consent at any time through your account settings or by contacting support.

6Legal Basis for Processing

Under the Philippines Data Privacy Act of 2012, 747old processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 747old — account creation, game delivery, payment processing, and customer support.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA reporting requirements, BIR obligations, NPC data governance requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your data protection rights.
• Consent: Processing for optional marketing communications, where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7Sharing & Disclosure of Personal Data

747old does not sell your personal data to third parties. We do not share your personal data with advertisers or data brokers. Personal data is disclosed only in the following limited circumstances:

7.1 Authorized Third-Party Service Providers

747old engages third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under binding data processing agreements. These include: payment gateway operators (GCash, Maya, bank processors); KYC identity verification providers; game software providers (limited technical data only, not financial data); cloud infrastructure providers; and fraud detection system operators.

All PIPs are contractually bound to process data only for the purposes specified by 747old and in accordance with RA 10173. PIPs are prohibited from using 747old player data for their own purposes.

7.2 Regulatory Disclosure

747old is legally required to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities upon lawful demand. 747old complies fully with all such requirements.

7.3 Legal Process

Personal data may be disclosed to law enforcement or the courts where required by a valid subpoena, court order, or other lawful legal process under Philippine law.

8Data Retention Periods

747old retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or for such longer periods as are required by applicable Philippine law. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, as required by AMLA record-keeping obligations.
• KYC identity documents: Retained for a minimum of five (5) years following the last gaming transaction, or longer if required by AMLC directive.
• Financial transaction records: Retained for five (5) years from the date of the transaction, in accordance with AMLA requirements.
• Customer support records: Retained for two (2) years from the closure of the support case.
• Marketing consent records: Retained for the duration of your account and for one (1) year following account closure as proof of consent or withdrawal thereof.
• Technical / server log data: Retained for ninety (90) days for security monitoring purposes, then deleted or anonymized.

Upon expiration of the applicable retention period, personal data is securely deleted or irreversibly anonymized such that it can no longer be linked to an identified individual.

9Security Measures

747old implements a comprehensive set of technical, organizational, and procedural security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Transport encryption: All data transmitted between your device and 747old's servers is encrypted using TLS 1.3 with 256-bit AES encryption — the same standard used by Philippine financial institutions.
• Password security: Account passwords are hashed using bcrypt with a unique salt per user. Passwords are never stored in plaintext. 747old staff cannot access your password.
• Two-factor authentication: OTP-based 2FA via Philippine mobile number is available and encouraged for all accounts, adding a second layer of login security beyond your password.
• Access controls: Personal data is accessible only to 747old staff and systems with a documented operational need. Role-based access control (RBAC) is enforced across all internal systems.
• Infrastructure security: 747old's servers are hosted in ISO 27001-compliant data centers with physical and network access controls, intrusion detection systems, and regular security assessments.
• Employee training: All 747old staff with access to personal data receive mandatory data privacy training covering their obligations under RA 10173.

10Cookies & Tracking Technologies

747old uses first-party cookies and similar local storage technologies on the Platform for the following purposes:

• Session cookies: Required for maintaining your authenticated session while you are logged in to the Platform. These are deleted when you close your browser or log out. These cookies are strictly necessary and cannot be disabled without affecting Platform functionality.
• Preference cookies: Store your language, display, and notification preferences so you do not have to reconfigure them on each visit. These persist for up to 12 months.
• Analytics cookies: First-party analytics cookies help 747old understand how the Platform is used in aggregate — which game categories are popular, where users encounter friction, and how to improve the experience. No individual player profiles are sold or shared based on analytics data.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and session hijacking. These are strictly necessary.

747old does not use third-party advertising cookies or cross-site tracking technologies. Your browsing activity on 747old.org is not shared with external advertising networks.

11Your Data Subject Rights Under RA 10173

As a data subject under the Philippines Data Privacy Act of 2012, you have the following enforceable rights with respect to your personal data held by 747old:

12Minors & Age Restriction

The 747old Platform is strictly intended for individuals aged 21 years and older. 747old does not knowingly collect personal data from individuals under the age of 21. All accounts are subject to mandatory age verification as part of 747old's KYC process.

13Cross-Border Data Transfers

Some of 747old's third-party service providers — including game software providers, cloud infrastructure operators, and fraud detection systems — may be based outside the Philippines or may process data on servers located in other countries. Where such cross-border transfers occur, 747old ensures that adequate safeguards are in place in accordance with RA 10173 and NPC guidelines, including:

• Data processing agreements that require the receiving party to maintain data protection standards equivalent to those required by Philippine law;
• Binding corporate rules or standard contractual clauses where applicable; and
• Transfer impact assessments for high-risk cross-border data flows.

747old does not transfer your financial or identity data outside the Philippines to any party other than for the specific, disclosed purposes of KYC verification and payment processing, under the protections described above.

14Personal Data Breach Procedures

Despite 747old's security measures, no system is immune to all risks. In the event of a personal data breach that poses a real risk to your rights and freedoms, 747old will:

1. Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by RA 10173 and NPC Circular 16-03;
2. Notify affected data subjects without undue delay, providing: a description of the nature of the breach; the categories and approximate number of individuals affected; the likely consequences of the breach; and the measures taken or proposed to address the breach; and
3. Conduct a thorough internal investigation, remediate the identified vulnerability, and implement additional safeguards to prevent recurrence.

747old maintains a Personal Data Breach Response Team and a documented incident response plan. Breach notifications to data subjects will be sent to your registered mobile number and email address.

15Updates to This Privacy Policy

747old may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR/NPC regulatory requirements. Material changes will be communicated to registered players via their registered email address or via an in-Platform notification no less than seven (7) days before the changes take effect.

The effective date at the top of this document will always reflect the date of the most recent revision. The current version of this Privacy Policy is always available at 747old.org/privacy-policy. We encourage you to review this Policy periodically.

16Contact Information & Data Protection Officer

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data at 747old, please contact our Data Protection Officer through the following channels:

If you are not satisfied with our response to your privacy request, or if you believe that 747old has processed your personal data in violation of RA 10173, you have the right to file a complaint with the National Privacy Commission of the Philippines at its official offices in Manila.

This Privacy Policy was last revised on 1 January 2026 and supersedes all prior versions. © 2026 747old. All rights reserved.