Privacy Policy

1. Introduction

1.1 nm777 ("nm777," "we," "us," "our") operates the online gaming platform accessible at nm777.asia. We are committed to protecting the privacy and personal data of all users ("you," "your," "Player") in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and all other applicable data protection laws.

1.2 This Privacy Policy ("Policy") describes how nm777 collects, uses, stores, shares, and protects your personal data when you access or use the nm777 platform, including our website, mobile interface, and any related services.

1.3 By registering for an nm777 account, accessing the platform, or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

1.4 This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

nm777 collects the following categories of personal data:

2.1 Identity & Registration Data

When you register for an nm777 account, we collect your full legal name, date of birth, gender, nationality, and a copy of a government-issued identification document (such as a Philippine passport, SSS ID, UMID, driver's licence, or PhilSys national ID) for age and identity verification purposes.

2.2 Contact Data

We collect your email address, mobile phone number, and residential address (including city, province, and postal code) to communicate with you about your account, process transactions, and comply with regulatory requirements.

2.3 Financial Data

To process deposits and withdrawals, nm777 collects payment method details, including GCash account numbers, PayMaya (Maya) account details, bank account information (bank name, account number, account name), and debit card details where applicable. nm777 does not store full card numbers; payment data is handled in accordance with applicable security standards.

2.4 Transaction Data

We maintain records of all deposits, withdrawals, wagers, game results, bonus claims, and other financial transactions conducted through your nm777 account. This data is retained for regulatory compliance and dispute resolution purposes.

2.5 Technical & Usage Data

nm777 automatically collects certain technical data when you access the platform, including your IP address, device type, operating system, browser type and version, session duration, pages visited, game activity logs, and referring URLs. This data is used to maintain platform security, detect fraud, and improve the user experience.

2.6 Communications Data

If you contact nm777 support via live chat, email, or any other channel, we retain records of those communications, including the content of your messages and any attachments, for quality assurance and dispute resolution purposes.

2.7 Responsible Gaming Data

If you use nm777's responsible gaming tools — such as deposit limits, session time limits, cooling-off periods, or self-exclusion — we record your preferences and the dates on which those tools were activated or modified. This data is used solely to enforce your responsible gaming choices.

3. How We Collect Your Data

nm777 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or use responsible gaming tools;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access the nm777 platform;
• From third parties — including identity verification service providers, payment processors, fraud prevention services, and regulatory authorities, where permitted by law.

4. How We Use Your Personal Data

nm777 uses your personal data for the following purposes:

nm777 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or as otherwise permitted by applicable law.

5. Legal Basis for Processing

nm777 processes your personal data on the following legal bases under the Philippine Data Privacy Act and applicable regulations:

• Contractual necessity — processing is necessary to perform the contract between you and nm777 (i.e., to operate your account and deliver gaming services);
• Legal obligation — processing is required to comply with applicable laws, including anti-money laundering regulations, PAGCOR licensing requirements, and tax obligations;
• Legitimate interests — processing is necessary for nm777's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights;
• Consent — where nm777 relies on your consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting nm777 support or updating your account preferences.

6. Data Sharing & Disclosure

6.1 nm777 does not sell, rent, or trade your personal information to third parties for marketing purposes.

6.2 nm777 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Identity verification providers — to conduct KYC checks and age verification as required by PAGCOR regulations;
• Payment processors — including GCash, PayMaya (Maya), and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals;
• Fraud prevention and security services — to detect and prevent fraudulent activity, money laundering, and other illegal conduct;
• IT and platform service providers — including cloud hosting, data storage, and analytics providers who process data on nm777's behalf under strict contractual obligations;
• Regulatory and law enforcement authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities, where disclosure is required by law or court order;
• Professional advisers — including lawyers, auditors, and accountants, where necessary for nm777's legal and compliance obligations.

6.3 In the event of a merger, acquisition, or sale of all or part of nm777's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

6.4 All third parties with whom nm777 shares personal data are required to handle that data in accordance with applicable data protection laws and nm777's data processing standards.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. nm777 uses cookies and similar technologies (such as web beacons and local storage) to operate the platform, remember your preferences, maintain your login session, and analyse how the platform is used.

7.2 Types of Cookies We Use

• Strictly necessary cookies — required for the platform to function. These cannot be disabled without affecting core functionality, such as maintaining your login session and processing transactions.
• Performance and analytics cookies — used to collect anonymised data about how players use the nm777 platform, helping us identify areas for improvement.
• Functional cookies — used to remember your preferences, such as language settings and responsible gaming limits.
• Security cookies — used to detect and prevent fraudulent activity and unauthorised access to your nm777 account.

7.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may impair your ability to use the nm777 platform. For more information on managing cookies, refer to your browser's help documentation.

8. Data Retention

8.1 nm777 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. In general:

• Account and identity data is retained for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and anti-money laundering regulations;
• Transaction records are retained for a minimum of five (5) years from the date of the transaction;
• Communications data is retained for up to three (3) years from the date of the communication;
• Technical and usage data is retained for up to two (2) years, after which it is anonymised or deleted.

8.2 Where nm777 is required by law to retain data for a longer period, the longer retention period will apply. Once the applicable retention period has expired, nm777 will securely delete or anonymise your personal data.

9. Data Security

9.1 nm777 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and nm777's servers;
• Encryption of sensitive data at rest, including financial and identity information;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for internal systems handling personal data;
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC requirements.

9.2 While nm777 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. nm777 cannot guarantee absolute security and is not liable for unauthorised access resulting from circumstances beyond its reasonable control.

9.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nm777 will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act and its Implementing Rules.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nm777:

• Right to be informed — you have the right to be informed about how your personal data is collected and processed, as set out in this Policy;
• Right of access — you have the right to request a copy of the personal data nm777 holds about you;
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data;
• Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nm777's legal retention obligations;
• Right to object — you have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on nm777's legitimate interests;
• Right to data portability — you have the right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe nm777 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact nm777's Data Protection Officer using the contact details in Section 15. nm777 will respond to all verified requests within thirty (30) days.

11. Children's Privacy

11.1 The nm777 platform is strictly intended for persons aged 21 years and above. nm777 does not knowingly collect personal data from individuals under the age of 21.

11.2 If nm777 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and close the associated account.

11.3 If you believe that a minor has registered for an nm777 account, please contact nm777 support immediately so that appropriate action can be taken.

12. Third-Party Links

The nm777 platform may contain links to third-party websites or services for informational purposes. nm777 is not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. This Policy applies solely to data collected by nm777 through the nm777 platform.

13. International Data Transfers

13.1 nm777 primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines, nm777 will ensure that such transfers are conducted in accordance with the Data Privacy Act and that appropriate safeguards are in place to protect your data.

13.2 Such safeguards may include data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission, or transfers to countries that have been assessed as providing an adequate level of data protection.

14. Changes to This Privacy Policy

14.1 nm777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The date of the most recent revision is indicated at the top of this page.

14.2 When material changes are made to this Policy, nm777 will notify registered players via email or a prominent notice on the platform at least fourteen (14) days before the changes take effect.

14.3 Your continued use of the nm777 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or nm777's data processing practices, please contact our Data Protection Officer (DPO):