sg7 Casino Privacy Policy

Introduction

sg7 Casino ("sg7," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy ("Policy") describes how sg7 collects, processes, stores, and discloses personal information in connection with the sg7 Casino website at sg7.club and all related services (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, this Policy also reflects internationally recognised data protection principles.

By registering an account on sg7 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.

Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller responsible for your data is:

sg7 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with applicable data privacy laws. You may contact the DPO directly at the email address above for any privacy-related enquiries, complaints, or requests to exercise your data subject rights.

Data We Collect

sg7 collects personal data from you in the following categories, depending on how you interact with the Platform:

sg7 does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data, health information, or political or religious affiliations.

How We Use Your Data

sg7 processes your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

• Account Management: To create, maintain, and administer your sg7 player account, including verifying your identity and age (21+) in accordance with PAGCOR requirements.
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card, and to maintain accurate financial records of all transactions.
• Regulatory Compliance: To fulfil our obligations under Philippine anti-money laundering (AML) laws, PAGCOR regulations, and the Data Privacy Act of 2012, including Know Your Customer (KYC) verification and suspicious transaction reporting.
• Platform Security: To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited conduct on the Platform.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 Filipino support team.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods.
• Service Improvement: To analyse usage patterns and Platform performance in order to improve the sg7 experience for all Filipino players.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw consent at any time.
• Legal Obligations: To comply with court orders, regulatory investigations, or other legally mandated disclosures.

Legal Basis for Processing

Under the Data Privacy Act of 2012, sg7 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and sg7 — specifically, to operate your account, process transactions, and deliver the gaming services you have signed up for.
• Legal Obligation: Processing is required to comply with Philippine law, including AML obligations, PAGCOR licensing conditions, and NPC data privacy requirements.
• Legitimate Interests: Processing is necessary for sg7's legitimate interests in preventing fraud, maintaining platform security, and improving our services — provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing & Disclosure

sg7 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, and our banking partners receive the minimum data necessary to process your deposits and withdrawals. These providers are contractually bound to process your data only for payment purposes and in compliance with applicable law.
• Identity Verification Providers: Third-party KYC service providers may process your identity documents and verification data on our behalf to fulfil our regulatory obligations. All such providers are subject to data processing agreements with sg7.
• Game Software Providers: Game providers whose titles are hosted on the sg7 Platform may receive technical session data (such as player ID and bet amounts) necessary to operate the game. They do not receive your full identity or financial data.
• Regulatory Authorities: sg7 may disclose your data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine government authorities where required by law or in response to a lawful order.
• Law Enforcement: Where required by a valid court order, subpoena, or other legal process, sg7 may disclose personal data to law enforcement agencies in the Philippines or other jurisdictions.
• Professional Advisers: Our lawyers, auditors, and compliance consultants may access your data on a need-to-know basis, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of sg7's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. You will be notified of any such transfer in advance.

Data Retention

sg7 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with PAGCOR licensing requirements and AML record-keeping obligations under Republic Act No. 9160.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML law.
• KYC Verification Documents: Retained for five (5) years after account closure or the completion of the last transaction, whichever is later.
• Support Communications: Retained for two (2) years from the date of the last communication, unless the matter is subject to ongoing legal proceedings.
• Technical and Usage Data: Retained for up to twelve (12) months from collection, after which it is aggregated and anonymised for analytical purposes.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of the consent given.

When personal data is no longer required, sg7 will securely delete or anonymise it in accordance with our internal data disposal procedures. Anonymised data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

Data Security

sg7 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the sg7 Platform is protected by 256-bit SSL/TLS encryption. Sensitive data at rest is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data is restricted to sg7 staff and authorised third parties who have a legitimate need to process it. All access is logged and audited.
• Two-Factor Authentication: sg7 offers 2FA for all player accounts and requires it for administrative access to systems containing personal data.
• Regular Security Audits: sg7 conducts periodic security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses in our systems.
• Staff Training: All sg7 employees who handle personal data receive regular training on data privacy obligations and security best practices.
• Incident Response: sg7 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission within 72 hours and affected players without undue delay, as required by the DPA.

While sg7 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact sg7 support immediately.

Cookies & Tracking Technologies

sg7 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how the Platform is used. The following types of cookies may be placed on your device:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming limits you have set. Disabling these may affect your experience.
• Analytics Cookies: Collect anonymised data about how players use the Platform — which pages are visited most, where players encounter errors, and how long sessions last. This data helps sg7 improve the Platform. These are only placed with your consent.
• Security and Fraud Prevention Cookies: Help sg7 detect and prevent fraudulent activity, bot access, and account takeover attempts.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling strictly necessary cookies will prevent you from using the sg7 Platform. For analytics cookies, you may withdraw consent at any time through your account settings.

Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sg7. To exercise any of these rights, contact our Data Protection Officer at [email protected]. sg7 will respond to all verified requests within thirty (30) days.

• Right to Be Informed: You have the right to be informed about how your personal data is collected and processed. This Policy fulfils that obligation.
• Right of Access: You may request a copy of the personal data sg7 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. For basic account details, you can update these directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under Philippine AML and PAGCOR regulations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though sg7 may be entitled to continue processing if there are compelling legitimate grounds.
• Right to Data Portability: You may request a copy of the personal data you have provided to sg7 in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: If you believe sg7 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

Please note that some rights are subject to limitations. For example, sg7 cannot delete data that we are legally required to retain under Philippine AML law, even if you request erasure. We will always explain the reason if we are unable to fulfil a request in full.

Minors

sg7 Casino is strictly for players aged 21 years and above, in accordance with PAGCOR regulations. sg7 does not knowingly collect personal data from persons under 21 years of age. If you are under 21, you must not register an account or use the Platform.

If sg7 discovers that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and report the incident to our compliance team. If you are a parent or guardian and believe your child has registered on sg7, please contact us immediately at [email protected] so we can take prompt action.

Cross-Border Data Transfers

Some of sg7's service providers and game software partners may be located outside the Philippines. Where your personal data is transferred to a country outside the Philippines, sg7 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012.

Such safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission.
• Transfers to countries that the NPC has determined provide an adequate level of data protection.
• Binding corporate rules where the recipient is part of the same corporate group as sg7.

You may request information about the specific safeguards in place for any cross-border transfer of your data by contacting our Data Protection Officer.

Policy Updates

sg7 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the National Privacy Commission. When material changes are made, we will notify you by email to your registered address and by displaying a prominent notice on the Platform for at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

If any update to this Policy requires your fresh consent — for example, a new processing purpose that was not covered by your original consent — sg7 will seek that consent separately before commencing the new processing activity.

Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact sg7's Data Protection Officer:

If you are not satisfied with sg7's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines: