Privacy Policy

1. Overview and Scope

1.1 This Privacy Policy ("Policy") describes how me778.club ("me778," "we," "us," or "the Platform") collects, uses, stores, shares, and protects the personal data of individuals ("Data Subjects," "Players," "Users," or "you") who access or use the me778 online gaming platform at https://me778.club.

1.2 This Policy applies to all personal data collected through the me778 website, account registration process, game play, payment transactions, customer support interactions, and any other service offered under the me778.club domain.

1.3 me778 is the Personal Information Controller (PIC) as defined under Republic Act No. 10173, the Data Privacy Act of 2012 (DPA 2012), and its Implementing Rules and Regulations. As PIC, me778 determines the purposes and means of processing your personal data.

1.4 This Policy should be read alongside me778's Terms & Conditions and Responsible Gaming Policy. Terms not defined in this Policy carry the meaning assigned to them in the Terms & Conditions.

2. Personal Data We Collect

2.1 me778 collects the following categories of personal data:

2.2 me778 does not collect sensitive personal information (as defined under Section 3(l) of the DPA 2012) unless strictly required by PAGCOR regulations or applicable law, and only with your explicit consent where such consent is the appropriate legal basis.

3. How We Collect Personal Data

3.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.

3.2 Automatically during platform use — through server logs, session analytics, and technical monitoring systems that record device and usage data as you interact with the platform.

3.3 From payment service providers — GCash, PayMaya, BDO, BPI, and Metrobank provide transaction confirmation data to me778 to reconcile deposits and withdrawals.

3.4 From identity verification providers — during the KYC process, me778 may use third-party identity verification services to validate government-issued ID documents. These providers process data under strict data processing agreements with me778.

3.5 From regulatory bodies — PAGCOR and the Anti-Money Laundering Council (AMLC) may provide information relevant to compliance screenings that me778 is legally required to conduct.

4. Purposes of Data Processing

4.1 me778 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your me778 account.
• Service delivery: Enabling access to all games, promotions, and platform features.
• Payment processing: Processing deposits, withdrawals, and bonus transactions through GCash, PayMaya, and banking channels.
• Identity verification (KYC): Confirming your identity and age (21+) as required by PAGCOR regulations.
• Regulatory compliance: Meeting obligations under PAGCOR licensing conditions, the AMLA, and the DPA 2012.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, and platform abuse.
• Responsible gaming: Monitoring gaming patterns to identify potentially problematic behaviour and administering responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Customer support: Responding to queries, resolving disputes, and processing complaints.
• Platform improvement: Analysing aggregated usage data to improve platform performance, user experience, and game selection.
• Marketing communications: Sending promotional offers and platform updates to players who have opted in to receive them. Opt-out is available at any time via your account settings or by contacting support.

5. Legal Basis for Processing

5.1 me778 processes your personal data under the following legal bases as recognised by the DPA 2012:

• Contractual necessity: Processing required to perform the contract between you and me778 (your account agreement and these Terms) — covers account management, service delivery, and payment processing.
• Legal obligation: Processing required to comply with Philippine law — covers KYC, AML compliance, PAGCOR reporting, and tax obligations.
• Legitimate interests: Processing necessary for me778's legitimate business interests where these are not overridden by your data rights — covers fraud prevention, platform security, and analytics.
• Consent: Processing based on your freely given, specific, and informed consent — covers marketing communications and any processing of sensitive personal data where legally required.

6. Data Sharing and Disclosure

6.1 me778 does not sell, rent, or trade your personal data. Data is disclosed only in the following circumstances:

• Payment processors: GCash, PayMaya, BDO, BPI, and Metrobank receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC providers receive identity document data to perform verification checks required by PAGCOR.
• Game content providers: Game providers receive pseudonymised session and bet data necessary to operate the games you play.
• Regulatory authorities: PAGCOR, the AMLC, and other competent Philippine regulatory or law enforcement bodies receive data as required by law.
• Legal proceedings: Data may be disclosed to courts, regulators, or legal advisers in connection with legal proceedings where me778 is a party or is required to disclose by court order.
• Corporate transactions: In the event of a merger, acquisition, or sale of business assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 All third-party service providers who receive personal data from me778 are bound by contractual data processing agreements that require them to maintain confidentiality, implement appropriate security measures, and process data only for the purposes specified by me778.

7. Data Retention

7.1 me778 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account data: Retained for the duration of the account and for a minimum of 5 years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of 5 years as required by the AMLA and PAGCOR regulations.
• KYC documents: Retained for the duration of the account relationship and for a minimum of 5 years following account closure.
• Customer support records: Retained for a minimum of 2 years from the date of the relevant interaction.
• Marketing consent records: Retained until withdrawal of consent plus 1 year for audit purposes.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8. Your Data Subject Rights

8.1 Under the DPA 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by me778:

• Right to be Informed: The right to know that your personal data is being or has been collected and processed, and the details of such processing — as provided in this Policy.
• Right of Access: The right to obtain a copy of your personal data held by me778 and information about how it is being processed.
• Right to Rectification: The right to correct inaccurate or incomplete personal data. You may update most account data directly in your me778 account settings.
• Right to Erasure: The right to request deletion of your personal data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful — subject to legal retention obligations.
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Damages: The right to seek compensation for damages suffered as a result of inaccurate, incomplete, or unlawful processing of your personal data.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

8.2 To exercise any of the above rights, please contact me778's Data Privacy Officer using the contact details in Section 13 of this Policy. me778 will respond to data subject requests within 15 calendar days, or within 30 calendar days for complex requests, in accordance with NPC guidelines.

9. Data Security Measures

9.1 me778 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and me778 servers.
• Encryption at rest for stored personal data and financial records.
• Access controls restricting internal access to personal data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability management.
• Multi-factor authentication for staff accessing administrative systems.
• Intrusion detection systems and 24/7 security monitoring.
• Employee data protection training and confidentiality obligations.

9.2 In the event of a personal data breach that poses a real risk of serious harm to your rights and freedoms, me778 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected Data Subjects without undue delay as required under the DPA 2012.

10. Cookies and Tracking Technologies

10.1 me778 uses cookies and similar tracking technologies to operate the platform, maintain session integrity, detect fraud, and analyse platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — session cookies, authentication tokens, security cookies. These cannot be disabled without preventing access to me778.
• Functional cookies: Remember your preferences such as language settings and game lobby filters to improve your experience.
• Analytical cookies: Collect aggregated, anonymised data about how players use the platform, used to improve site performance and game navigation. No individual player is identified in analytical reports.

10.2 You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing me778, but may affect certain convenience features. me778 does not use third-party advertising cookies or cross-site tracking for advertising purposes.

11. Minors and Age Restriction

11.1 me778 is strictly restricted to adults aged 21 years or older. me778 does not knowingly collect personal data from individuals under the age of 21. If me778 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the account will be closed.

11.2 If you believe that a minor has registered on me778 or has provided their personal data to the platform, please notify me778's Data Privacy Officer immediately at the contact details in Section 13. Reports will be acted upon as a priority.

12. Changes to This Privacy Policy

12.1 me778 reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, or platform operations. Material changes will be communicated to registered players via email notification and/or prominent notice on the me778 platform not less than 7 days before taking effect.

12.2 The "Last updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the me778 platform following the effective date of any update constitutes acceptance of the revised Policy.

12.3 me778 recommends that players review this Policy periodically to remain informed about how their personal data is handled.

13. Contact and Data Privacy Officer

13.1 For any queries, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by me778, please contact our designated Data Privacy Officer:

me778 is committed to resolving data privacy concerns promptly and in accordance with NPC guidelines. Where a concern cannot be resolved directly with me778, you have the right to escalate your complaint to the National Privacy Commission.