sp777 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") applies to all personal data processed by sp777 in connection with your use of the sp777 online gaming platform at sp777.one and all associated interfaces (the "Platform"). For the purposes of this Policy, "personal data" means any information that identifies or could reasonably identify you as an individual, as defined under Republic Act No. 10173 (the "Data Privacy Act") and its Implementing Rules and Regulations.

By registering an account with sp777, making a deposit, or otherwise using the Platform, you acknowledge that you have read this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and close your account.

This Policy should be read together with the sp777 Terms & Conditions, which govern your use of the Platform generally.

2. Data We Collect

sp777 collects personal data through the following channels: account registration, identity verification (KYC), payment processing, gameplay activity, customer support interactions, and automated technical means (such as cookies and server logs). The categories of personal data we collect include:

sp777 does not collect sensitive personal information (as defined under Section 3(l) of the Data Privacy Act) unless explicitly required by PAGCOR regulations or anti-money laundering law and with your express consent.

3. How We Use Your Data

sp777 uses the personal data we collect for the following purposes:

• Account administration: Creating and managing your sp777 account, verifying your identity, and maintaining accurate records;
• Service delivery: Processing deposits and withdrawals via GCash, Maya, QR Ph, and other Philippine payment channels; providing access to games; crediting bonuses;
• Legal and regulatory compliance: Meeting sp777's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA) as amended, and the Data Privacy Act — including KYC verification, transaction monitoring, and mandatory reporting;
• Fraud prevention and security: Detecting and investigating suspicious activity, unauthorized access attempts, and potential breaches of the sp777 Terms & Conditions;
• Customer support: Responding to your enquiries, resolving disputes, and managing complaints;
• Responsible gaming: Monitoring gaming patterns for indicators of problem gambling and administering self-exclusion, cooling-off, and deposit limit tools;
• Platform improvement: Analysing aggregated, anonymised usage data to improve game selection, payment processes, and user interface performance;
• Marketing communications: Sending you information about sp777 promotions, bonuses, and new games — only where you have provided separate, explicit consent to receive such communications and only via the channels you have authorised.

sp777 does not use your personal data for automated decision-making that produces legal or similarly significant effects without a separate notification and the opportunity for human review, except where required by anti-money laundering transaction screening obligations.

4. Legal Basis for Processing

Under the Data Privacy Act, sp777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract constituted by the sp777 Terms & Conditions — account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, AMLA obligations, NPC directives, and applicable court orders;
• Legitimate interests: Fraud detection, security monitoring, and aggregated platform analytics — where these interests are not overridden by your privacy rights;
• Consent: Marketing communications and, where applicable, the processing of sensitive personal information — in each case, consent is separately sought and may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Cookies & Tracking Technologies

sp777 uses cookies and similar tracking technologies (web beacons, pixel tags, local storage) on the Platform to:

• Maintain your authenticated session after sp777 login so you are not required to re-enter credentials on every page;
• Remember your language preferences and display settings;
• Detect and prevent fraudulent or bot-driven access attempts;
• Collect anonymised analytics about Platform performance and usage patterns.

Cookie Categories

Strictly Necessary: Required for the Platform to function. Cannot be disabled without breaking core functionality including sp777 login and session management.

Performance / Analytics: Anonymised usage data used to improve the Platform. You may opt out of these via your browser settings without affecting access to sp777.

Functional: Remember preferences (e.g., language). Disabling these may reduce convenience but will not prevent access.

sp777 does not use third-party advertising cookies or sell cookie data to data brokers. You can manage cookie preferences in your browser settings. Note that blocking strictly necessary cookies will prevent sp777 login and account access.

6. Data Sharing & Disclosure

sp777 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: GCash (Mynt), Maya (Voyager), and other payment service providers receive the minimum data necessary to process your transactions. Each provider is contractually bound by data processing agreements that comply with the Data Privacy Act;
• Identity verification providers: Third-party KYC and liveness-verification providers process identity documents under strict confidentiality and data minimisation obligations;
• Game technology providers: Game suppliers may receive anonymised player session identifiers for game delivery and RTP audit purposes — no personally identifiable data is shared for this purpose;
• PAGCOR and regulatory authorities: sp777 is required to provide player data, transaction records, and gaming histories to PAGCOR and other lawfully authorised Philippine government agencies upon valid request or as required by ongoing reporting obligations;
• Anti-money laundering reporting: The Anti-Money Laundering Council (AMLC) may receive mandatory reports for covered or suspicious transactions in compliance with Republic Act No. 9160 as amended;
• Legal proceedings: Where sp777 is required to disclose personal data by valid court order, subpoena, or other binding legal process issued by a Philippine court or lawfully authorised authority.

In all cases of data sharing, sp777 applies the principle of minimum necessary disclosure — only the data required for the specific purpose is shared.

7. International Data Transfers

sp777 processes data primarily within the Philippines. Where personal data is transferred to servers, processors, or service providers located outside the Philippines — for example, cloud infrastructure providers with Philippine data residency options or internationally operating KYC providers — sp777 ensures that such transfers are subject to appropriate safeguards, including data processing agreements that impose data protection standards equivalent to those required under the Data Privacy Act.

sp777 will not transfer your personal data to any jurisdiction that the National Privacy Commission has assessed as providing inadequate data protection, without your explicit prior consent and notification of the associated risks.

8. Data Retention

sp777 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention schedule:

• Account and KYC data: Retained for the duration of the account relationship plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations;
• Transaction records: Retained for five (5) years from the date of each transaction, as required by Philippine anti-money laundering law;
• Customer support records: Retained for three (3) years from the date of resolution;
• Technical and analytics data: Retained in anonymised or aggregated form only, for up to two (2) years;
• Marketing consent records: Retained for the duration of consent plus three (3) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised using industry-standard data destruction methods.

9. Security Measures

sp777 implements technical and organisational security measures proportionate to the risks associated with processing your personal data. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the sp777 platform;
• Encryption at rest for all stored personal data and financial records;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication options for player accounts and mandatory multi-factor authentication for all sp777 staff with access to personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Continuous fraud and anomaly monitoring systems that flag unusual account activity for investigation;
• Data breach response procedures aligned with the NPC's Personal Data Breach Management Regulations, including the 72-hour notification obligation for breaches affecting sensitive personal information.

Despite these measures, no internet transmission or electronic storage system is completely secure. sp777 cannot guarantee absolute security. You play a role in protecting your account by using a strong, unique password and enabling two-factor authentication for your sp777 account.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by sp777:

To exercise any of these rights, please contact the sp777 Data Protection Officer (DPO) at [email protected] with a clear description of your request and sufficient identification to verify your identity. sp777 will respond within fifteen (15) working days of receiving a verifiable request.

Please note that certain rights may be subject to limitations where processing is required for compliance with PAGCOR regulations, anti-money laundering obligations, or the defence of legal claims. sp777 will always explain any such limitation in writing.

If you are unsatisfied with sp777's response to a data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) at privacy.gov.ph.

11. Children's Privacy

The sp777 Platform is strictly intended for individuals aged 21 years and older, in compliance with PAGCOR's minimum age requirements for online gaming in the Philippines. sp777 does not knowingly collect personal data from individuals under the age of 21. If sp777 becomes aware that personal data has been collected from a person under 21, such data will be immediately deleted and the account suspended. If you believe that a minor has accessed the sp777 platform, please contact [email protected] immediately.

12. Responsible Gaming & Data

sp777 processes gaming activity data not only for service delivery and fraud prevention, but also for the responsible gaming purposes described in the sp777 Responsible Gaming page. Specifically, sp777 uses gameplay and session data to:

• Monitor for signs of problem gambling patterns, such as significantly increased session frequency, rapidly escalating deposit amounts, or extended uninterrupted play;
• Administer player-requested responsible gaming tools including deposit limits, loss limits, session timers, cooling-off periods, and self-exclusion;
• Fulfil obligations to PAGCOR to report and take action in respect of players displaying indicators of disordered gambling.

Processing for responsible gaming purposes is conducted under the legal basis of legitimate interests (protecting player wellbeing) and legal obligation (PAGCOR responsible gaming requirements). This processing cannot be opted out of as it forms part of sp777's core licensed obligations.

13. Changes to This Policy

sp777 reserves the right to amend this Privacy Policy at any time. Material changes — including changes to the categories of data collected, purposes of processing, or data sharing arrangements — will be communicated to registered players via your registered contact details or a prominent notice on the Platform at least seven (7) days before the amended Policy takes effect.

The version of this Policy in force at the time any dispute arises shall govern that dispute. The "Last updated" date at the top of this Policy reflects the date of the most recent revision.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the sp777 Data Protection Officer:

Email: [email protected]
Platform: Live chat support, available 24/7 in English and Tagalog via sp777.one

For complaints or concerns that cannot be resolved through sp777's internal process, you may contact the National Privacy Commission of the Philippines.