Privacy Policy

Last Updated: January 15, 2024

1. Introduction and Scope

007l ("we," "us," "our," or "the Company") operates a PAGCOR-licensed online gaming platform at https://007l.cam, providing bingo, slot games, live casino, fishing games, and related entertainment services to users in the Philippines. We are committed to protecting your privacy and handling your personal information with the highest standards of care and security.

This Privacy Policy applies to all personal data collected through our website, mobile applications, customer service channels, and any other means through which you interact with 007l services. It supplements and should be read in conjunction with our Terms & Conditions and other applicable policies.

We comply with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, National Privacy Commission (NPC) Circulars, PAGCOR regulatory requirements, and the Anti-Money Laundering Act (Republic Act No. 9160, as amended). Our commitment to privacy extends beyond legal compliance to encompass best practices in data protection and information security.

2. Data Controller Information

007l is the data controller responsible for processing your personal information. As data controller, we determine the purposes and means of processing your personal data and are accountable for ensuring compliance with applicable data protection laws.

Data Protection Officer Contact:

• Email: [email protected]
• Response Time: Within five (5) business days
• Mailing Address: Available upon request for formal data subject access requests

Our Data Protection Officer (DPO) is responsible for overseeing our privacy compliance program, handling data subject requests, coordinating with the National Privacy Commission, and serving as the point of contact for privacy-related inquiries and complaints.

3. Information We Collect

We collect various categories of personal information necessary to provide 007l services, comply with legal obligations, and enhance user experience. The information we collect includes:

3.1 Account Registration Information

When you create an account with 007l, we collect:

• Personal Identifiers: Full legal name, date of birth, gender, nationality
• Contact Information: Residential address, mobile phone number, email address
• Account Credentials: Username, encrypted password, security questions and answers
• Financial Information: Bank account details, e-wallet account information (GCash, PayMaya), payment card details (stored by certified payment processors, not by 007l)

3.2 Identity Verification Documents (KYC)

To comply with PAGCOR regulations and Anti-Money Laundering requirements, we collect copies of government-issued identification documents, which may include:

• Philippine Passport
• Driver's License (Land Transportation Office)
• Unified Multi-Purpose ID (UMID)
• Philippine Identification (PhilID) Card
• Social Security System (SSS) or Government Service Insurance System (GSIS) ID
• Voter's ID (COMELEC)
• Postal ID or other government-issued identification
• Proof of address documents (utility bills, bank statements)

3.3 Transaction and Gaming Data

We automatically collect information about your use of 007l services, including:

• Financial Transactions: Deposit and withdrawal amounts, payment methods used, transaction dates and times, transaction status and history
• Gaming Activity: Games played, betting patterns, wager amounts, game outcomes, session duration, bonus usage
• Account Activity: Login timestamps, IP addresses, device information, browser type and version, operating system
• Communication Records: Customer service inquiries, live chat transcripts, email correspondence, phone call recordings (with consent)

3.4 Technical and Usage Information

We collect technical data through automated means, including:

• IP address and geolocation data (to verify Philippine jurisdiction)
• Device identifiers (MAC address, device ID, advertising ID)
• Browser fingerprinting data (for fraud prevention)
• Cookies and similar tracking technologies (see Section 10)
• Clickstream data and navigation patterns
• Screen resolution, language preferences, time zone settings

3.5 Marketing and Preference Data

• Marketing communication preferences (email, SMS, push notifications)
• Promotional offer participation history
• Survey responses and feedback
• Referral source information

4. How We Use Your Personal Data

007l processes your personal information for the following purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your user account
• Authenticating your identity and preventing unauthorized access
• Processing deposits, withdrawals, and financial transactions
• Enabling gameplay and providing access to gaming services
• Managing bonuses, promotions, and loyalty rewards
• Providing customer support and responding to inquiries

4.2 Legal and Regulatory Compliance

• Verifying your age and identity (KYC/AML compliance)
• Monitoring transactions for suspicious activity and money laundering
• Reporting to PAGCOR and other regulatory authorities as required
• Maintaining records for audit and compliance purposes
• Responding to legal process, court orders, and government requests
• Enforcing our Terms & Conditions and other policies

4.3 Fraud Prevention and Security

• Detecting and preventing fraudulent transactions and account takeovers
• Identifying collusion, bonus abuse, and other prohibited activities
• Protecting our systems and infrastructure from cyberattacks
• Verifying geographic location to ensure compliance with jurisdictional restrictions
• Maintaining the integrity and fairness of our games

4.4 Marketing and Communications

• Sending promotional offers, bonuses, and game updates (with consent)
• Personalizing marketing messages based on gaming preferences
• Conducting surveys and soliciting feedback
• Sending transactional notifications (account activity, withdrawals, security alerts)

4.5 Analytics and Service Improvement

• Analyzing user behavior and gaming patterns to improve our services
• Developing new features and game offerings
• Optimizing website and application performance
• Conducting market research and trend analysis
• Measuring the effectiveness of marketing campaigns

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, we rely on the following legal bases for processing your personal data:

• Consent: You have explicitly consented to the processing of your personal information for specific purposes (e.g., marketing communications, cookies)
• Contractual Necessity: Processing is necessary to perform our contractual obligations under the Terms & Conditions (account management, financial transactions, service delivery)
• Legal Obligation: Processing is required to comply with Philippine laws and regulations (KYC verification, AML monitoring, PAGCOR reporting requirements)
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, and service improvement, provided such interests do not override your fundamental rights and freedoms

6. Disclosure and Sharing of Personal Data

007l does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with the following categories of recipients under strict confidentiality and data protection obligations:

6.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, banks, and other payment service providers for transaction processing
• Gaming Software Providers: Suppliers of slot games, live casino, and other gaming content
• Identity Verification Services: Third-party KYC and AML screening providers
• Cloud Service Providers: Hosting and data storage infrastructure providers
• Customer Support Platforms: Live chat, email, and ticketing system providers
• Marketing and Analytics Services: Email service providers, SMS gateways, analytics platforms (subject to your consent)

6.2 Regulatory and Law Enforcement Authorities

• Philippine Amusement and Gaming Corporation (PAGCOR)
• Anti-Money Laundering Council (AMLC)
• National Privacy Commission (NPC)
• Law enforcement agencies pursuant to valid legal process
• Courts and tribunals in connection with legal proceedings

6.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.

6.4 Data Processing Agreements

All third-party service providers with whom we share personal data are bound by written data processing agreements that require them to maintain appropriate security measures, process data only for specified purposes, and comply with applicable data protection laws.

7. Data Security Measures

007l implements robust technical, organizational, and administrative safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

7.1 Technical Security Controls

• Encryption: All data transmissions use industry-standard SSL/TLS encryption (minimum 256-bit). Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Role-based access controls (RBAC) ensure that only authorized personnel can access personal data on a need-to-know basis.
• Network Security: Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) protect our infrastructure from cyberattacks.
• Authentication: Multi-factor authentication (MFA) is required for administrative access to systems containing personal data.
• Data Segregation: Personal data is logically separated from other data and stored in secure databases with restricted access.

7.2 Organizational Security Measures

• Regular security awareness training for all employees
• Background checks for personnel with access to personal data
• Confidentiality agreements and data protection clauses in employment contracts
• Incident response procedures and data breach notification protocols
• Regular security audits and vulnerability assessments
• Third-party penetration testing and security certifications

7.3 Data Breach Response

In the unlikely event of a personal data breach, 007l will:

• Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, if required by law
• Notify affected users without undue delay if the breach poses a risk to their rights and freedoms
• Take immediate steps to contain the breach and mitigate harm
• Conduct a thorough investigation to determine the cause and scope of the breach
• Implement corrective measures to prevent future incidents

8. Data Retention and Deletion

007l retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes.

8.1 Retention Periods

• Active Accounts: Personal data is retained for the duration of your active account relationship with 007l
• Closed Accounts: Following account closure, data is retained for five (5) years to comply with PAGCOR record-keeping requirements and potential dispute resolution
• Transaction Records: Financial transaction data is retained for five (5) years in accordance with Anti-Money Laundering Act requirements
• Identity Documents: KYC documents are retained for five (5) years after the end of the business relationship
• Marketing Communications: Consent records and marketing preference data are retained for three (3) years after withdrawal of consent

8.2 Secure Deletion

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized using industry-standard data destruction methods that prevent recovery or reconstruction of the data.

9. Your Privacy Rights Under Philippine Law

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal information:

9.1 Right to Be Informed

You have the right to be informed about the collection and processing of your personal data, including the purposes, extent, and manner of processing. This Privacy Policy serves as our primary means of fulfilling this obligation.

9.2 Right to Access

You may request access to your personal data held by 007l, including information about the sources of data, purposes of processing, and recipients to whom the data has been disclosed. Access requests can be submitted to our Data Protection Officer.

9.3 Right to Rectification

You may request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings or by contacting customer support.

9.4 Right to Erasure or Blocking

You may request deletion or blocking of your personal data under certain circumstances, including:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• The data was unlawfully processed
• Erasure is required to comply with a legal obligation

Please note that we may be required to retain certain data to comply with legal obligations or to establish, exercise, or defend legal claims.

9.5 Right to Object

You may object to the processing of your personal data based on legitimate interests, including processing for direct marketing purposes. You can opt out of marketing communications at any time through the unsubscribe link in emails or by contacting customer support.

9.6 Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.

9.7 Right to Lodge a Complaint

If you believe 007l has violated your privacy rights, you may file a complaint with the National Privacy Commission:

• National Privacy Commission
• 5th Floor, Philippines Judicial Academy Building, Padre Faura St., Ermita, Manila 1000
• Email: [email protected]
• Hotline: (+63 2) 8234-2228
• Website: www.privacy.gov.ph

9.8 Exercising Your Rights

To exercise any of these rights, please submit a written request to our Data Protection Officer at [email protected]. We will respond to verified requests within fifteen (15) days. For complex requests, we may extend the response period by an additional fifteen (15) days with notice.

10. Cookies and Tracking Technologies

007l uses cookies and similar tracking technologies to enhance user experience, analyze site usage, and deliver personalized content. A cookie is a small text file stored on your device that enables us to recognize your browser and capture certain information.

10.1 Types of Cookies We Use

• Essential Cookies: Required for site functionality, authentication, and security. These cannot be disabled without affecting site operation.
• Performance Cookies: Collect information about how visitors use our site, including page views, traffic sources, and error messages. This data is aggregated and anonymous.
• Functionality Cookies: Remember your preferences (language, currency, game favorites) to provide enhanced, personalized features.
• Targeting/Advertising Cookies: Used to deliver relevant advertisements and track campaign effectiveness. These cookies are set with your consent and can be disabled.

10.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may prevent you from accessing certain features of 007l services. Disabling analytics or advertising cookies will not affect site functionality but may result in less personalized content.

10.3 Third-Party Cookies

Some cookies on our site are placed by third-party service providers (analytics platforms, payment processors, advertising networks). These third parties have their own privacy policies governing their use of your information.

11. Protection of Minors' Privacy

007l services are exclusively intended for individuals aged twenty-one (21) years and above. We do not knowingly collect personal information from minors under the age of 21. If we become aware that a minor has provided personal data, we will immediately:

• Terminate the account
• Delete all personal information associated with the account
• Forfeit any funds or winnings in the account
• Notify the parent or guardian if contact information is available
• Report the incident to PAGCOR if required

If you believe a minor has registered an account or provided personal information to 007l, please immediately contact our Data Protection Officer at [email protected].

12. Changes to This Privacy Policy

007l reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through prominent notice on our website, email notification, or other appropriate means at least thirty (30) days before the changes take effect.

Your continued use of 007l services after the effective date of the revised Privacy Policy constitutes acceptance of the changes. If you do not agree with the updated policy, you must cease using our services and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information. The "Last Updated" date at the top of this document indicates when the most recent revisions were made.

13. Contact Information for Privacy Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

• Data Protection Officer: [email protected]
• Customer Support: [email protected] (24/7 live chat also available)
• Response Time: Privacy inquiries will be addressed within five (5) business days
• Formal Data Subject Requests: Submit in writing to [email protected] with valid identification for verification purposes