boss778 Privacy Policy

01 Introduction

boss778 ("we," "us," "our") operates the online casino and sports betting platform accessible at boss778.org. We are committed to protecting the privacy and personal data of all players, visitors, and users of our platform ("you," "your").

This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It describes how boss778 collects, processes, stores, shares, and protects your personal data in connection with your use of our platform.

We encourage you to read this policy carefully. If you have any questions about how boss778 handles your personal data, please contact our Data Protection Officer using the details provided in Section 14 of this policy.

02 Personal Data We Collect

boss778 collects the following categories of personal data from players and platform users:

Identity & Contact Data

Financial Data

Technical & Usage Data

Communications Data

03 How We Collect Your Data

boss778 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the boss778 platform, including IP address, device identifiers, browser information, and session activity logs.
• Cookies and tracking technologies: Data collected through cookies, web beacons, and similar technologies as described in Section 7 of this policy.
• Third-party sources: Identity verification data from KYC service providers, fraud detection signals from payment processors, and publicly available information used to verify your identity or comply with anti-money laundering obligations.

04 How We Use Your Personal Data

boss778 uses your personal data for the following purposes:

boss778 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

05 Legal Basis for Processing

boss778 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering (AML) regulations, know-your-customer (KYC) requirements, and tax reporting obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

boss778 does not sell your personal data. We may share your data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment service providers, solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers engaged to verify your identity and comply with regulatory requirements.
• Fraud prevention services: Specialist providers that help boss778 detect and prevent fraudulent activity, money laundering, and account abuse.
• Regulatory authorities: The National Privacy Commission (NPC), PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies where disclosure is required by law or court order.
• IT and platform service providers: Cloud hosting, data storage, and software providers engaged to operate the boss778 platform, all of whom are contractually bound to process data only on our instructions and in accordance with applicable privacy law.
• Professional advisers: Lawyers, auditors, and accountants where necessary for legal compliance or dispute resolution.

All third parties with whom boss778 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only for the specified purpose.

07 Cookies & Tracking Technologies

boss778 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies may be used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and display options to personalise your experience.
• Analytics cookies: Collect anonymised data about how players use the boss778 platform, helping us identify areas for improvement. This data does not identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the boss778 platform. boss778 does not use third-party advertising or behavioural tracking cookies.

08 Data Retention

boss778 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of 5 years following account closure, in compliance with Philippine AML and record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments.
• KYC documents: Retained for a minimum of 5 years following account closure or the completion of the transaction to which they relate.
• Support communications: Retained for 2 years from the date of the last communication, unless a longer period is required for dispute resolution.
• Technical and usage logs: Retained for up to 12 months for security and fraud prevention purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry best practices.

09 Data Security

boss778 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and boss778 servers.
• Encryption at rest for sensitive personal and financial data stored on boss778 servers.
• Multi-factor authentication (MFA) for all internal staff access to systems containing personal data.
• Role-based access controls ensuring that only authorised personnel with a legitimate need may access player data.
• Regular security audits and penetration testing conducted by independent security specialists.
• Intrusion detection systems and 24/7 security monitoring of platform infrastructure.
• Secure data disposal procedures for physical and digital media containing personal data.

While boss778 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. In the event of a data breach that poses a risk to your rights and freedoms, boss778 will notify you and the National Privacy Commission within the timeframes prescribed by Philippine law.

10 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by boss778:

• Right to be informed: The right to know what personal data boss778 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data boss778 holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within 30 days of receipt. We may need to verify your identity before processing your request.

11 Children's Privacy

The boss778 platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gambling regulations. boss778 does not knowingly collect personal data from individuals under the age of 21.

If boss778 discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all funds will be frozen pending investigation, and the matter may be referred to the appropriate Philippine authorities. Any personal data collected from an underage individual will be deleted as soon as practicable upon discovery.

If you are a parent or guardian and believe that your child has registered an account on boss778, please contact us immediately at [email protected] so that we can take appropriate action.

12 Third-Party Links

The boss778 platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies solely to data collected by boss778 through the boss778.org platform. boss778 is not responsible for the privacy practices of any third-party websites or services.

We encourage you to review the privacy policies of any third-party services you access in connection with your use of boss778, particularly those of your chosen payment provider (e.g., GCash, PayMaya, BPI, BDO, Metrobank).

13 Changes to This Privacy Policy

boss778 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect, where practicable.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. Your continued use of the boss778 platform after the effective date of any amendment constitutes your acknowledgement of the updated policy. We encourage you to review this page periodically to stay informed about how boss778 protects your data.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way boss778 handles your personal data, please contact our Data Protection Officer (DPO):

• Email: [email protected]
• Subject line: Privacy / Data Protection Request
• Response time: We aim to acknowledge all privacy-related enquiries within 48 hours and to provide a full response within 30 days.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the independent authority responsible for enforcing the Data Privacy Act of 2012.