Hero777 Privacy Policy

1. Introduction

Welcome to the Hero777 Privacy Policy. Hero777 (referred to throughout this document as "Hero777," "we," "us," or "our") operates the online gaming platform accessible at https://hero777.best. We are committed to protecting the personal information of every player — or "data subject" — who registers, visits, or interacts with the Hero777 platform.

This Privacy Policy describes in plain language what personal data Hero777 collects from you, the lawful basis on which we process it, how long we keep it, who we share it with, and what rights you have as a data subject under Philippine law. By registering an account or continuing to use the Hero777 platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, Hero777 is the personal information controller responsible for the data you provide when using the platform.

Our designated Data Protection Officer (DPO) oversees all data privacy matters and can be reached at support@hero777.best. We have registered our data processing activities with the National Privacy Commission (NPC) of the Philippines as required by law.

3. What Personal Data We Collect

Hero777 collects only the personal data that is necessary and proportionate to the services we provide. The categories of personal data we process are as follows:

4. How We Collect Your Data

Hero777 collects personal data through the following channels:

• Direct Registration: When you create a Hero777 account and fill in the registration form.
• KYC Submissions: When you upload identification documents for verification purposes.
• Payment Transactions: When you make deposits or request withdrawals via GCash, Maya, BDO, BPI, UnionBank, InstaPay, PESONet, GrabPay, Visa, or Mastercard.
• Gameplay Activity: Automatically generated as you use Hero777's games and betting features.
• Support Interactions: When you contact our support team via email or live chat.
• Device & Browser: Automatically via cookies, log files, and web analytics tools when you access the platform.
• Third-Party Verification: From identity verification service providers and fraud prevention tools that cross-reference your submitted data.

5. Why We Use Your Data

Hero777 processes your personal data for specific, legitimate purposes only. We do not use your data beyond what is reasonably necessary to provide our services and meet our legal obligations. The primary purposes are:

5.1 Account Management & Service Delivery

To create, maintain, and manage your Hero777 account; to provide access to our games including Online Casino, Poker, NBA Betting, Bingo, and Virtual Sports; and to process your deposits and withdrawals through Philippine payment channels.

5.2 Legal & Regulatory Compliance

To fulfil our obligations under Philippine gaming regulations, the Data Privacy Act of 2012, the Anti-Money Laundering Act (AMLA), and any other applicable laws. This includes verifying your identity, monitoring for suspicious transactions, and cooperating with regulatory inquiries.

5.3 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, multi-accounting, and other prohibited conduct as defined in our Terms and Conditions.

5.4 Responsible Gaming

To monitor gameplay patterns, identify potential problem gambling behaviour, and administer responsible gaming tools such as deposit limits, self-exclusion, and reality checks. Learn more on our Responsible Gaming page.

5.5 Marketing & Personalisation

With your consent, to send you relevant promotional offers, bonus notifications, and personalised recommendations based on your play history. You can opt out of marketing communications at any time through your account settings or by contacting support.

5.6 Platform Improvement

To analyse usage patterns, troubleshoot technical issues, and improve the Hero777 platform experience for all players. This analysis is conducted on aggregated, anonymised data wherever possible.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, Hero777 relies on one or more of the following lawful bases to process your personal data:

• Consent: For marketing communications and non-essential cookies. You may withdraw consent at any time.
• Contractual Necessity: Processing required to fulfil our obligations under the Hero777 Terms and Conditions (e.g., account management, payment processing).
• Legal Obligation: Processing required to comply with Philippine law, including KYC/AML obligations and regulatory reporting.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data privacy rights.

7. Sharing Your Personal Data

Hero777 does not sell, rent, or trade your personal data. We may share your information only with the following categories of recipients, and only to the extent strictly necessary:

• Payment Processors: Philippine e-wallet providers (GCash, Maya, GrabPay), InstaPay/PESONet network banks (BDO, BPI, UnionBank), and card scheme processors (Visa, Mastercard) — solely to process your transactions.
• Identity Verification Providers: Third-party KYC and AML service providers who help us verify your identity and screen transactions in line with Philippine regulations.
• Regulatory Authorities: The Philippine Amusement and Gaming Corporation (PAGCOR), the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other government agencies when required by law or a valid legal order.
• IT & Security Service Providers: Trusted technology partners who support our platform infrastructure, cybersecurity systems, and data hosting — subject to strict data processing agreements and confidentiality obligations.
• Professional Advisors: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations.

8. How Long We Keep Your Data

Hero777 retains your personal data only for as long as is necessary for the purposes described in this policy, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in line with AMLA and gaming regulatory requirements.
• KYC/Identity Documents: Retained for at least five (5) years from the date of verification, or longer if required by regulatory directive.
• Transaction Records: Retained for five (5) years from the date of each transaction.
• Support Communications: Retained for two (2) years from the date of each interaction, unless related to an active dispute or legal matter.
• Marketing Data: Retained until you withdraw consent, at which point it is deleted within thirty (30) days.

When personal data is no longer required, Hero777 securely deletes or anonymises it so that it can no longer be linked to any individual.

9. Security Measures

Protecting your personal data from unauthorised access, disclosure, alteration, or destruction is a top priority at Hero777. Our technical and organisational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and Hero777 is encrypted in transit.
• Encrypted Storage: Sensitive data including passwords and financial details are stored in encrypted form using industry-standard algorithms.
• Access Controls: Strict role-based access controls ensure that only authorised Hero777 personnel can access personal data, and only to the extent required for their role.
• Regular Security Audits: Our platform and data systems undergo regular penetration testing and security reviews by independent specialists.
• Two-Factor Authentication (2FA): Available to all players and mandatory for internal administrative access.
• Breach Response Plan: In the event of a personal data breach, Hero777 will notify affected users and the National Privacy Commission within 72 hours of becoming aware of the incident, where required by law.

10. Cookies & Tracking Technologies

Hero777 uses cookies and similar tracking technologies to make the platform work properly and to understand how players use it. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the platform to function — these include session management cookies that keep you logged in. These cannot be disabled.
• Performance & Analytics Cookies: Help us understand how players navigate the platform so we can improve it. Data collected is aggregated and anonymised. These are only activated with your consent.
• Functional Cookies: Remember your preferences such as language settings and display options for a smoother experience.
• Security Cookies: Used for fraud detection, bot prevention, and account security purposes.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using Hero777, but may affect some features.

11. Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by Hero777:

• Right to be Informed: The right to know what personal data we hold about you and how it is being used — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data Hero777 holds about you.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to our processing of your personal data, particularly for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, contact our Data Protection Officer at support@hero777.best. We will respond to all valid requests within fifteen (15) working days.

12. Minors & Age Restrictions

Hero777 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of 21, which is the minimum legal age for online gaming in the Philippines. If we discover that personal data has been collected from a minor, it will be deleted immediately and the account will be permanently closed.

If you are a parent or guardian and believe your child has registered on Hero777, please contact us immediately at support@hero777.best so we can take prompt action.

13. Cross-Border Data Transfers

Some of Hero777's technology partners and service providers may be located outside the Philippines. When personal data is transferred to entities in other countries, Hero777 ensures that appropriate safeguards are in place — including contractual clauses requiring the recipient to maintain data protection standards equivalent to those required by Philippine law. We will not transfer your data internationally unless such transfers are legally permissible and properly protected.

14. Changes to This Privacy Policy

Hero777 may update this Privacy Policy periodically to reflect changes in our data practices, applicable laws, or platform features. When material changes are made, we will:

• Post the updated policy on this page with a revised "Last Updated" date.
• Send a notification email to all registered players at least seven (7) days before the changes take effect, where reasonably practicable.
• Display a prominent notice on the Hero777 platform when you next log in.

We encourage you to review this page periodically. The current version of the Privacy Policy always supersedes all previous versions.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our Data Protection Officer:

If you believe Hero777 has violated your data privacy rights and our internal resolution process has not resolved your concern, you may file a formal complaint with the National Privacy Commission of the Philippines (NPC).