sss7 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how sss7 ("Company," "we," "us," or "our") collects, uses, stores, shares, and protects personal information obtained from players ("you," "your," or "Player") who access and use the sss7 online casino and betting platform available at sss7.asia ("Platform").

This Policy is designed to comply with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR") as administered by the National Privacy Commission ("NPC"). Where applicable, this Policy also reflects relevant international data protection standards.

By registering an account on sss7, using any feature of the Platform, or providing personal information to us, you consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should not use the sss7 Platform.

2 Who We Are — The Data Controller

For the purposes of the DPA and this Policy, sss7 is the Personal Information Controller (PIC) with respect to the personal data of all registered Players and website visitors. As PIC, sss7 is responsible for determining the purposes and means of processing your personal data.

sss7 operates the Platform for Filipino players residing in the Philippines and processes personal data in connection with providing online casino and sports betting services, managing player accounts, processing financial transactions, and meeting regulatory obligations applicable to online gaming in the Philippines.

For data privacy inquiries, correction requests, or complaints, please contact our Data Protection Officer (DPO) using the contact details set out in Section 16 of this Policy.

3 Personal Data We Collect

sss7 collects only the personal data that is necessary for the purposes outlined in this Policy. The categories of personal data we may collect and process include:

3.1 Registration and Identity Data

• Full legal name as appearing on a Philippine government-issued ID;
• Date of birth and age verification information;
• Email address and mobile phone number registered in the Philippines;
• Username and encrypted account password;
• Residential address within the Philippines (Province, City/Municipality, Barangay).

3.2 Identity Verification (KYC) Data

• Copies of valid Philippine government-issued identification documents (e.g., PhilSys National ID, SSS/UMID card, passport, driver's license, PRC ID, voter's ID);
• Selfie or liveness verification image where required;
• Source of funds declarations or supporting documents when requested for anti-money laundering (AML) compliance.

3.3 Financial and Transaction Data

• GCash mobile number and account name;
• PayMaya account details;
• Bank account name and account number for BPI, BDO, or Metrobank transactions;
• Deposit and withdrawal transaction records, including timestamps, amounts in PHP, and reference numbers;
• Account wallet balance history.

3.4 Gaming Activity Data

• Game participation records (game name, session duration, wagers placed, results);
• Sports betting selections and outcomes;
• Bonus activation and wagering history;
• VIP tier progression and loyalty points earned.

3.5 Technical and Device Data

• IP address and approximate geographic location at time of login;
• Device type, browser type and version, operating system;
• Session timestamps, session duration, pages visited;
• Cookies and similar tracking data as described in Section 8.

3.6 Communications Data

• Customer support chat and email correspondence;
• Survey responses and feedback submitted to sss7;
• Promotional opt-in preferences and communication consent records.

4 How We Collect Your Data

sss7 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically: Through your use of the Platform, via server logs, session tracking, and cookies that collect technical and behavioral data as described in Section 8.
• From third parties: From payment processors (GCash, PayMaya, banks) in connection with transaction processing; from identity verification service providers; and from fraud detection or AML screening services where required.
• From public sources: Where permitted by applicable Philippine law, from publicly accessible government databases or verification registries used to confirm identity or screen against sanctions lists.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, sss7 processes your personal data on the following legal grounds:

6 How We Use Your Personal Data

sss7 uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your sss7 account; processing your login and session activity; delivering platform features.
• Identity verification and KYC compliance: Verifying that you are who you say you are; confirming that you meet the 21+ age requirement; complying with anti-money laundering obligations applicable to Philippine gaming operators.
• Financial transaction processing: Processing deposits via GCash, PayMaya, and linked bank accounts; processing withdrawals; maintaining accurate financial records in PHP.
• Regulatory compliance: Meeting obligations imposed by Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), requirements of PAGCOR's regulatory framework, and the Data Privacy Act.
• Customer support: Responding to your inquiries, resolving disputes, investigating account issues.
• Fraud prevention and security: Detecting and preventing unauthorized account access, fraudulent transactions, bonus abuse, and other prohibited activities described in the sss7 Terms & Conditions.
• Responsible gaming: Implementing and monitoring deposit limits, loss limits, self-exclusion requests, session time tracking, and other player protection measures.
• Marketing and promotions: Sending promotional communications about sss7 offers, new game releases, and bonuses — only to Players who have opted in to receive such communications.
• Platform analytics and improvement: Understanding how Players use sss7, identifying performance issues, and improving the game lobby, payment flows, and overall platform experience.

7 Data Sharing & Disclosure

sss7 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances and only to the extent necessary for the specified purpose:

7.1 Payment Processors

Transaction data is shared with payment service providers (GCash, PayMaya, BPI, BDO, Metrobank) strictly for the purpose of processing deposits and withdrawals. Each payment provider operates under its own privacy policy and data security obligations.

7.2 Identity Verification and AML Service Providers

KYC data including government ID copies may be shared with third-party identity verification and AML screening service providers engaged by sss7 to fulfill its regulatory obligations. These providers are contractually bound to process data solely for the purposes of identity verification and compliance screening and may not use such data for any other purpose.

7.3 Regulatory and Law Enforcement Authorities

sss7 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or Philippine law enforcement authorities where required by applicable Philippine law, a valid court order, or a lawful request from a competent authority. sss7 will notify affected Players of such disclosures where legally permitted to do so.

7.4 Technology and Infrastructure Providers

sss7 uses third-party service providers for hosting, cloud storage, customer support software, and analytics. These providers act as Personal Information Processors (PIPs) under sss7's instructions and are prohibited from using Player data for their own purposes. All PIPs are subject to data processing agreements that require them to maintain appropriate security measures.

7.5 Business Transfers

In the event of a merger, acquisition, sale of business assets, or other corporate restructuring involving sss7, Player personal data may be transferred to the acquiring entity as part of the transaction, subject to the same protections afforded under this Policy. Players will be notified of any such transfer and any consequential changes to this Policy.

8 Cookies & Tracking Technologies

sss7 uses cookies and similar tracking technologies on sss7.asia to support Platform functionality and improve the player experience. A cookie is a small text file placed on your device by a website you visit. sss7 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your sss7 account. You cannot opt out of these without disabling the Platform entirely.
• Functional cookies: Remember your preferences (e.g., language settings, preferred game lobby view). These improve your experience but are not essential to Platform operation.
• Analytics cookies: Collect anonymized data about how Players use sss7.asia — which pages are visited most, where navigation issues occur, and how game sessions flow — to help us improve the Platform. Data collected is aggregated and not personally identifying.
• Security cookies: Used to detect fraudulent login attempts, session anomalies, and suspicious activity patterns that may indicate account compromise or prohibited activities.

You may manage cookie preferences through your browser settings. Note that disabling functional or analytics cookies will not affect your ability to use core sss7 features, but may affect the availability of certain personalized features. Disabling strictly necessary cookies will prevent Platform login and is not recommended.

9 Data Retention

sss7 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, to comply with legal obligations, or to resolve disputes. The following general retention guidelines apply:

• Account and identity data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements applicable to Philippine gaming operators.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, consistent with Philippine AML and gaming regulations.
• KYC documentation: Retained for the same period as identity data — five years post-account closure or longer if required by law.
• Gaming activity logs: Retained for at least two (2) years to support dispute resolution and regulatory audit requirements.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Marketing preferences and consent records: Retained until consent is withdrawn or the account is closed.

Where personal data is no longer required for any lawful purpose, sss7 will securely delete, anonymize, or aggregate the data in a manner that prevents re-identification.

10 Data Security Measures

sss7 implements technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Security measures currently implemented include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the sss7 servers — covering login sessions, transactions, and account management activities.
• Encryption at rest for sensitive personal data stored in sss7's databases, including passwords (stored as one-way hashed values, never in plain text), payment account references, and ID document copies.
• Role-based access controls ensuring that sss7 personnel can only access personal data required for their specific operational role.
• Multi-factor authentication for internal sss7 systems that contain personal data.
• Regular security assessments including vulnerability scanning and penetration testing of the sss7 Platform and supporting infrastructure.
• Incident response procedures that comply with the NPC's breach notification requirements under the DPA.

11 Your Rights as a Data Subject

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data processed by sss7:

• Right to be informed: You have the right to be informed of how your personal data is collected and processed, as set out in this Policy.
• Right of access: You may request a copy of the personal data sss7 holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of inaccurate or incomplete personal data held in your sss7 account. Some corrections can be made directly from the account settings panel.
• Right to erasure or blocking: You may request the deletion or blocking of personal data where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful. This right is subject to sss7's legal obligations to retain records for regulatory compliance purposes.
• Right to object: You may object to the processing of your personal data for marketing purposes at any time by updating your communication preferences in the account settings or by contacting our DPO.
• Right to data portability: Where processing is carried out by automated means and based on consent or contract, you may request that sss7 provide your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: If you believe sss7 has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact sss7's Data Protection Officer using the contact details in Section 16. We will respond to all legitimate data subject requests within 30 calendar days of receipt, in accordance with NPC guidelines.

12 Children and Minors

sss7 is strictly an adults-only platform. No person under the age of 21 years is permitted to register an account, use the Platform, or provide personal data to sss7 — consistent with PAGCOR's minimum age requirement for online gambling in the Philippines.

sss7 does not knowingly collect personal data from individuals under the age of 21. If the Company becomes aware that personal data has been collected from a person under 21 years of age, it will take immediate steps to delete such data and permanently close the associated account. Parents or guardians who believe their minor child has registered an account on sss7 should contact our DPO immediately.

13 Third-Party Services and Links

The sss7 Platform may integrate with third-party payment providers (GCash, PayMaya, banks) and game software providers. These third parties operate under their own privacy policies and sss7 has no control over their data practices. We recommend that you review the privacy policies of any third-party service through which you interact in connection with your sss7 account.

sss7 does not embed external advertising networks, social media trackers, or third-party remarketing pixels on sss7.asia. Any integration with third-party services is limited to operational requirements (payment processing, game delivery, fraud detection) and is subject to data processing agreements that restrict the third party's use of your data.

14 Cross-Border Data Transfers

Where sss7 engages service providers or technology partners located outside of the Philippines — for example, cloud infrastructure providers or game software licensors with servers in other countries — personal data may be transferred to and processed in jurisdictions other than the Philippines.

sss7 ensures that any such cross-border transfer of personal data is carried out in compliance with the DPA and NPC regulations governing cross-border data flows. Specific safeguards applied include: contractual data processing agreements requiring the recipient to maintain data protection standards equivalent to those required under Philippine law; or transfer only to jurisdictions with equivalent data protection frameworks as recognized by the NPC.

15 Amendments to This Policy

sss7 reserves the right to update, amend, or replace this Privacy Policy at any time. Changes will be published on sss7.asia with an updated "Last Updated" date at the top of this page. Where changes are material — particularly those affecting the legal basis for processing, the types of data collected, or your rights as a data subject — sss7 will notify registered Players by email and by a prominent notice displayed upon login.

Your continued use of sss7.asia after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with any revised Policy, you must cease use of the Platform and may request account closure in accordance with the sss7 Terms & Conditions.

We encourage you to review this Privacy Policy periodically. This is particularly relevant if you provide new types of personal data to sss7 (for example, additional payment method details or ID documents) or if changes in Philippine data protection law affect your rights.

16 Contact Information & Data Protection Officer

For all privacy-related inquiries, data subject rights requests, complaints regarding personal data processing, or questions about this Policy, please contact the sss7 Data Protection Officer:

Additional policy documents available on sss7.asia:

• Terms & Conditions — The full binding agreement governing your use of the sss7 Platform.
• Responsible Gaming — Player protection tools and resources available on sss7.
• About Us — Background on the sss7 platform and our mission.
• FAQ — Answers to common questions about your sss7 account and services.