1 Introduction and Scope
This Privacy Policy ("Policy") is issued by 747link ("we," "us," or "our"), the operator of the online gaming platform accessible at https://747link.com. 747link is a PAGCOR-regulated gaming operator serving Filipino players across the Philippines.
This Policy describes how 747link collects, processes, uses, stores, transfers, and protects personal data submitted by or collected about individuals who access or use the 747link platform — including registered players, prospective players who interact with our platform without completing registration, and visitors to our website. This Policy is published in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations.
By creating a 747link account or using any service on the platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy. If you do not agree, please discontinue use of the 747link platform and contact our support team to request account closure.
Data Controller: For the purposes of the Philippine Data Privacy Act, 747link is the personal information controller (PIC) in respect of all personal data collected through the 747link platform. Inquiries regarding this Policy and requests to exercise data subject rights should be directed to the 747link Data Privacy Officer at the contact details provided in Section 13 of this Policy.
2 Personal Data We Collect
747link collects personal data from you through multiple channels: directly when you provide it (e.g., during registration), automatically when you use our platform (e.g., through cookies and server logs), and from third parties (e.g., payment processors and identity verification service providers). The categories of personal data we collect are described in the table below.
2.1 Sensitive Personal Information
Certain personal data collected during the KYC verification process — including government ID numbers (e.g., PhilSys ID, UMID, passport number) and facial photograph data — constitutes "sensitive personal information" as defined under Section 3(l) of the Data Privacy Act. 747link processes this category of data exclusively for identity verification, fraud prevention, and PAGCOR-mandated KYC compliance purposes, under lawful bases described in Section 4 of this Policy.
3 Cookies and Tracking Technologies
747link uses cookies and similar tracking technologies (including session tokens, local storage objects, and browser fingerprinting signals) on its platform. These technologies serve the following functions:
- Essential Cookies: Required for core platform functionality, including maintaining your logged-in session, processing transactions, and implementing security measures. These cannot be disabled without impairing your use of 747link.
- Analytics Cookies: Used to understand aggregate player behavior on the platform — including which games are most popular, where players encounter errors, and how navigation flows are used. Data from analytics cookies is used in aggregated, non-identifiable form to improve the 747link platform experience.
- Security Cookies: Used to detect and prevent fraudulent activity, including bot logins, credential stuffing attempts, and abnormal transaction patterns.
- Preference Cookies: Used to remember your account preferences, such as display language and notification settings, across sessions.
You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the 747link platform. Disabling non-essential cookies does not affect your ability to play games or conduct transactions.
4 Legal Basis for Processing
747link processes personal data under the following lawful bases recognized by the Data Privacy Act of 2012:
- Contractual Necessity: Processing required to perform the contract between you and 747link — including account creation, game participation, deposits, and withdrawals.
- Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and KYC requirements under BSP and AMLC regulations.
- Legitimate Interests: Processing necessary for 747link's legitimate interests in fraud prevention, platform security, responsible gaming compliance, and service improvement, provided such interests are not overridden by your fundamental rights.
- Consent: For optional data processing activities (such as marketing communications), 747link will obtain your prior, informed, and freely given consent. You may withdraw consent at any time through your account settings.
5 How We Use Your Personal Data
747link uses the personal data it collects for the following purposes:
- Creating and managing your 747link player account.
- Verifying your identity and age (21+ requirement) as mandated by PAGCOR.
- Processing deposits, withdrawals, and all financial transactions on the platform.
- Providing customer support and responding to account inquiries.
- Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities.
- Monitoring and enforcing compliance with 747link's Terms & Conditions.
- Administering responsible gaming tools including deposit limits, session reminders, and self-exclusion.
- Sending transactional communications — account notifications, deposit confirmations, withdrawal receipts, and security alerts — to your registered mobile number or email.
- With your consent: sending marketing communications about 747link promotions, new games, and relevant offers.
- Improving the 747link platform through analysis of aggregated usage data.
- Complying with all applicable Philippine legal and regulatory obligations.
6 Data Sharing and Disclosure
747link does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
6.1 PAGCOR and Philippine Regulatory Authorities
747link is required by its PAGCOR operating license to provide certain player data to PAGCOR and other competent Philippine regulatory authorities upon request, including the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and courts of competent jurisdiction. Such disclosures are made pursuant to legal obligation and are non-negotiable aspects of 747link's regulatory compliance framework.
6.2 Payment Processors
To process your deposits and withdrawals, 747link shares necessary financial data with third-party payment processors, including GCash (Mynt — Globe Fintech Innovations, Inc.), Maya (Voyager Innovations, Inc.), GrabPay, and partner banking institutions (BPI, BDO, Metrobank). These processors act as independent personal information controllers in respect of their own processing activities and are governed by their own privacy policies.
6.3 Identity Verification Services
KYC verification — the process of confirming a player's identity through government ID and selfie submission — may be facilitated by third-party identity verification service providers operating under data processing agreements with 747link that prohibit any use of player data beyond the specific KYC verification purpose.
6.4 Technology Service Providers
747link engages technology service providers (including cloud hosting providers, game platform operators, and security service providers) who process certain personal data on 747link's behalf as personal information processors (PIPs). All PIPs are bound by data processing agreements that restrict their use of personal data to the specific purposes for which they are engaged.
International Transfers: Some 747link technology partners and game providers are based outside the Philippines. Where personal data is transferred internationally, 747link ensures that appropriate safeguards are in place, including contractual protections consistent with the Data Privacy Act's requirements for cross-border data transfers.
7 Data Retention
747link retains personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:
- Account and Identity Data: Retained for the duration of your active 747link account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations.
- Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and BIR requirements.
- Gaming Session Logs: Retained for a minimum of three (3) years from the date of each gaming session.
- Customer Support Communications: Retained for two (2) years from the date of the most recent relevant interaction.
- Marketing Consent Records: Retained for the duration of your account, and for one (1) year following consent withdrawal, as evidence of the consent history.
Upon the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with 747link's data disposal procedures.
8 Data Security Measures
747link implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
- 256-bit TLS/SSL Encryption: All data transmitted between your device and 747link's servers is encrypted using the same standard applied by major Philippine banks.
- Password Hashing: Passwords are stored exclusively as one-way cryptographic hashes using industry-standard algorithms. 747link staff cannot access or retrieve your plaintext password.
- Access Controls: Access to player personal data by 747link personnel is restricted on a strict need-to-know basis, with role-based access controls and activity logging.
- Intrusion Detection: 747link operates continuous monitoring systems to detect abnormal access patterns, unauthorized login attempts, and potential data security incidents.
- Regular Security Audits: The 747link platform undergoes periodic security assessments and penetration testing by qualified security professionals.
- Incident Response: 747link maintains a data breach response procedure compliant with the National Privacy Commission's breach notification requirements under NPC Circular 16-03.
Your Responsibility: You share responsibility for the security of your 747link account. Use a strong, unique password, enable SMS two-factor authentication, and never share your login credentials. 747link will never ask you to reveal your password through any channel. If you receive a communication requesting your password, treat it as fraudulent and report it to our support team immediately.
9 Your Data Subject Rights
As a data subject under the Philippine Data Privacy Act, you have the following legally enforceable rights in relation to the personal data 747link holds about you:
To exercise any of these rights, submit a written request to the 747link Data Privacy Officer using the contact details in Section 13. 747link will respond to all valid data subject requests within thirty (30) calendar days of receipt, in accordance with NPC Circular 23-01. In complex cases, this period may be extended by a further thirty (30) days, with prior notification to you.
10 Minors and Age Restrictions
747link is strictly prohibited from providing gaming services to individuals under 21 years of age in the Philippines. 747link does not knowingly collect personal data from any person under the age of 21. If 747link becomes aware that personal data has been collected from an underage individual, we will promptly delete all associated data, close the account, and report the incident to PAGCOR as required by our operating license conditions.
If You Believe a Minor Has Registered: If you have reason to believe that a person under 21 years of age has registered on 747link, please contact our support team immediately. 747link takes underage gambling prevention extremely seriously and will investigate and act on all such reports promptly.
11 Third-Party Services
The 747link platform integrates with third-party service providers — including GCash, Maya, GrabPay, and partner banks — whose own privacy policies govern the processing of personal data submitted directly to those services. 747link is not responsible for the privacy practices of third-party platforms. We encourage you to review the privacy policies of GCash, Maya, and any other payment provider you use in connection with your 747link account.
12 Updates to This Privacy Policy
747link reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable Philippine law, and PAGCOR regulatory requirements. When material changes are made, 747link will notify registered players via a notification on the platform and/or a message to your registered Philippine mobile number or email address, with a minimum of seven (7) days' advance notice before the updated Policy takes effect.
We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of 747link following any update constitutes acceptance of the revised Policy.
13 Data Privacy Officer and Contact Details
747link has appointed a Data Privacy Officer (DPO) in accordance with Section 21 of the Data Privacy Act and NPC Circular 17-01. The 747link DPO is responsible for ensuring compliance with the DPA and this Policy, and serves as the primary contact for all data subject rights requests and privacy-related inquiries.
To contact the 747link Data Privacy Officer, or to submit a data subject rights request, please use the support email address displayed in the footer of this page. Your request must include your full registered name, your 747link username, and a clear description of the right you wish to exercise or the concern you wish to raise. Include a copy of a valid government-issued ID to confirm your identity before we process requests involving access to or modification of personal data records.
If you are not satisfied with 747link's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact information for the NPC is available on the official NPC government website.
By using 747link, you confirm that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein, where such consent is the applicable legal basis for processing. This Policy is governed by the laws of the Republic of the Philippines.