// SECURITY BLUEPRINT · v2026.06

iGaming Fraud Prevention & Player Protection

A technical walkthrough of the 7-layer defence stack protecting 50,000+ Filipino players at IQ777 — encryption, RNG audit, KYC/AML pipelines, behaviour analytics, and PAGCOR oversight.

Play on the Secure Stack

defence_stack.architecture

// 7 independent layers · each one alone stops 80%+ of attack vectors · combined >99.97% coverage

01

TLS 1.3 + HSTS Transport Encryption

All traffic between browser, app and server uses 256-bit AES-GCM. HSTS pre-loaded — downgrade attacks impossible.

network
02

GLI-Certified RNG

Mersenne Twister RNG, seeded by hardware entropy source. Audited quarterly by Gaming Labs International — certificate hosted in Trust Center.

fairness
03

Multi-Factor KYC Verification

PH government ID OCR + selfie liveness check + GCash account ownership proof. Single pass, lifetime valid. No surprise re-checks at withdrawal.

identity
04

Real-Time AML Transaction Monitoring

Every deposit + withdrawal scored by ML model trained on AMLC patterns. Suspicious activity reports filed within 24 h per RA 9160.

aml
05

Behaviour & Bot-Net Detection

Device fingerprinting, IP velocity, session pattern analysis. Multi-account farms and bonus abusers blocked at login attempt.

analytics
06

Segregated Player Fund Escrow

Player wallet balances held in a separate trust account at a BSP-regulated bank — never commingled with operator working capital.

custody
07

PAGCOR Oversight & PDR Channel

Compliance audited annually by PAGCOR. Player Dispute Resolution channel (pdr@pagcor.ph) gives every PH player a 7-day SLA backstop.

regulator

> security_specs.json

encryption.transportTLS 1.3 + HSTS preload
encryption.at_restAES-256-GCM
rng.algorithmMT19937 + HW entropy seed
rng.audit_authorityGaming Labs International (GLI)
rng.audit_frequencyQuarterly · last 2026-Q2
kyc.providersJumio + local PH ID OCR
aml.frameworkRA 9160 + AMLC guidelines
funds.custodySegregated BSP-regulated escrow
incidents.2026_ytd0 breaches · 0 fund losses
uptime.30d99.98% (target ≥ 99.9%)

security_glossary.dict

RNG
Random Number Generator — algorithm that determines slot outcomes. Must be cryptographically random and independently audited (GLI / iTech / BMM).
RTP
Return to Player — theoretical % returned to players over millions of spins. Audited at 96–97% on IQ777 slots.
KYC
Know Your Customer — identity verification process required by PAGCOR & BSP for all PH casino players.
AML
Anti-Money Laundering — transaction monitoring under RA 9160 (Anti-Money Laundering Act of the Philippines).
SSL/TLS
Transport encryption protocol. TLS 1.3 is current standard; older SSL versions are insecure and deprecated.
2FA
Two-Factor Authentication — second login factor (SMS / authenticator app) preventing password-only takeover.
GLI
Gaming Labs International — global accredited testing body for casino RNG & game fairness.
PDR
Player Dispute Resolution — PAGCOR-mandated complaint channel for unresolved operator disputes.

What Players See vs What Runs Underneath

👁 You See

"Login successful"

Behind the scenes: device fingerprint check, IP geolocation match, session token rotation, behavioural risk score < threshold.

👁 You See

"Spin → ₱285 win"

Behind the scenes: RNG seed call, GLI-certified outcome generation, payout calculation, wallet credit logged immutably, AML risk re-scored.

👁 You See

"Withdrawal sent to GCash"

Behind the scenes: KYC re-confirm, AML transaction scoring, escrow ledger debit, BSP-compliant payment partner API, audit log signed.

Player Protection FAQ

How do I know slot outcomes aren't rigged?

IQ777 uses GLI-certified RNG audited quarterly. The certificate is published in the Trust Center. Every spin's outcome is logged in an immutable audit trail PAGCOR can inspect.

What stops someone from hacking my account?

TLS 1.3 transport encryption, AES-256 password hashing, optional 2FA, device fingerprinting, IP velocity checks, and behavioural anomaly detection. Even if your password leaks elsewhere, login from a new device triggers verification.

Are my deposited funds safe if IQ777 has problems?

Yes — player balances are held in a segregated escrow account at a BSP-regulated bank, separate from company funds. Even in a worst-case operator failure, verified balances are protected.

How do I report suspicious activity on my account?

Email security@iq777p.com immediately — the security team auto-locks the account within 60 seconds pending review. 24/7 PH-time response.

Play on the Most Secure Stack in PH iGaming

7 layers of defence, 50,000+ Filipino players protected, zero breaches in 2026. 18+ only. Play responsibly.

Register Securely