sp777 Privacy Policy

1. Introduction

sp777 (the "Operator", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who access or use the sp777 platform at sp777.co and any associated applications or services (collectively the "Platform"). This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, sharing, and protection of your personal information.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations (the "IRR"), the issuances of the National Privacy Commission of the Philippines (the "NPC"), and the data protection requirements of the Philippine Amusement and Gaming Corporation ("PAGCOR") applicable to licensed online gaming operators.

By accessing the sp777 Platform or registering an account, you acknowledge that you have read this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must cease using the sp777 Platform immediately.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, sp777 is the Personal Information Controller ("PIC") in respect of personal data collected through the sp777 Platform. As PIC, sp777 determines the purposes and means by which your personal data is processed.

sp777 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection law. Enquiries directed to the DPO may be submitted to our customer support team at the contact details set out in Section 15 of this Policy.

3. Information We Collect

sp777 collects the following categories of personal data from Platform users:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification details (e.g., Philippine National ID, passport, driver's license, SSS/GSIS ID, PhilHealth ID, or voter's ID) collected during account registration and KYC verification.
• Contact Data: Philippine mobile number, email address, and residential address.
• Financial Data: Payment method details (GCash account number, Maya account, bank account numbers for BPI, BDO, or Metrobank), transaction history, deposit amounts, withdrawal requests, and wallet balance information. sp777 does not store complete payment card numbers.
• Gaming Activity Data: Game history, wager amounts, session duration, game preferences, bonus usage, and win/loss records maintained for regulatory reporting purposes.
• Technical Data: IP address, device type and identifiers, browser type and version, operating system, screen resolution, and approximate geolocation derived from IP address.
• Usage Data: Pages visited on the sp777 Platform, features accessed, session timestamps, referral source, and navigation patterns.
• Communications Data: Records of communications between you and sp777 customer support, including chat transcripts, support ticket content, and records of any complaints or dispute submissions.
• Responsible Gaming Data: Records of any deposit limits, self-exclusion requests, cooling-off periods, or other responsible gaming tool activations associated with your account.

4. How We Collect Your Data

sp777 collects personal data through the following means:

• Direct Provision: Information you provide during account registration, KYC submission, deposit and withdrawal processing, customer support interactions, and responses to surveys or promotions.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the sp777 Platform.
• Third-Party Sources: Identity verification data provided by accredited KYC service providers; payment confirmation data from payment processors (GCash, Maya, BPI, BDO, Metrobank); fraud detection data from anti-fraud service providers; and regulatory data from PAGCOR-mandated reporting systems.

5. Purposes of Processing

sp777 processes your personal data for the following purposes:

• Creating and managing your sp777 account, including identity verification and KYC compliance as required by PAGCOR and Philippine anti-money laundering regulations.
• Processing financial transactions including deposits, withdrawals, and bonus disbursements.
• Providing access to the games, betting markets, and features available on the sp777 Platform.
• Communicating with you regarding your account, transactions, promotions, and Platform updates.
• Detecting, investigating, and preventing fraud, money laundering, bonus abuse, and other prohibited conduct.
• Complying with PAGCOR's regulatory reporting requirements and obligations under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended), the Terrorism Financing Prevention and Suppression Act, and other applicable Philippine law.
• Operating and improving the sp777 Platform through analysis of usage data and gaming patterns.
• Administering and enforcing responsible gaming tools and restrictions, including self-exclusion and deposit limits.
• Resolving disputes, processing complaints, and defending legal claims.
• Sending promotional communications where you have consented to receive them or where permitted under applicable law.

6. Legal Basis for Processing

sp777 processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Consent: Where you have given your explicit consent to processing for specific purposes, including receiving promotional communications.
• Contractual Necessity: Processing necessary for the performance of the contract between you and sp777, including account creation, transaction processing, and Platform access.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, anti-money laundering obligations, and NPC directives.
• Legitimate Interests: Processing for purposes of fraud prevention, Platform security, dispute resolution, and Platform improvement, where such processing does not override your fundamental rights and freedoms.

7. Disclosure to Third Parties

sp777 does not sell your personal data to third parties. sp777 may disclose your personal data to the following categories of recipients in the circumstances described:

• PAGCOR: Mandatory reporting of gaming activity data, player identity information, and financial transaction data as required under sp777's PAGCOR license conditions.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and other disclosures required under the Anti-Money Laundering Act of 2001.
• Payment Processors: Identity and financial data necessary to process deposits and withdrawals through GCash, Maya, BPI, BDO, Metrobank, and USDT payment channels.
• KYC Verification Providers: Identity data shared with accredited identity verification service providers for the purposes of fulfilling KYC obligations.
• Technology Service Providers: Technical data shared with hosting, cloud infrastructure, game platform, and cybersecurity service providers who process data on sp777's behalf under data processing agreements consistent with the DPA.
• Legal and Regulatory Authorities: Personal data disclosed to courts, law enforcement, or other government authorities in response to valid legal process, court orders, or regulatory directives.

All third parties with whom sp777 shares personal data are required to process such data only for the specified purpose and in compliance with applicable data protection law.

8. International Data Transfers

Some of the third-party service providers used by sp777 — particularly game platform providers and cloud infrastructure services — may process personal data outside of the Philippines. Where such transfers occur, sp777 ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act of 2012, including contractual clauses requiring the recipient to apply data protection standards equivalent to Philippine law.

By using the sp777 Platform, you consent to the transfer of your personal data to recipients located outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

9. Data Retention

sp777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account Data: Retained for the duration of your active sp777 account and for a minimum of five (5) years following account closure, consistent with PAGCOR's record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act of 2001.
• KYC Documentation: Retained for a minimum of five (5) years from account closure or from the date of last transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the relevant interaction.
• Gaming Activity Logs: Retained for five (5) years from the date of each session, consistent with PAGCOR regulatory requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

10. Cookies & Tracking Technologies

The sp777 Platform uses cookies and similar technologies (including web beacons and local storage) to operate the Platform, analyze usage patterns, and improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function, including session management, login authentication, and security. These cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how users navigate and interact with the Platform, enabling sp777 to identify and fix issues and improve performance.
• Functional Cookies: Used to remember your preferences such as language settings and game lobby configuration.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to access and use the sp777 Platform. sp777 does not use cookies to track your activity on third-party websites.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you are entitled to exercise the following rights in respect of your personal data held by sp777:

• Right to be Informed: The right to be informed of the collection and processing of your personal data, as fulfilled by this Policy.
• Right of Access: The right to request a copy of your personal data held by sp777.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where processing is no longer necessary, subject to sp777's overriding legal obligations to retain certain data.
• Right to Object: The right to object to processing of your personal data for purposes not strictly required for contract performance or legal compliance, including objection to use of your data for direct marketing.
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact sp777's customer support team using the details in Section 15. sp777 will respond to verified data subject requests within thirty (30) days.

12. Security Measures

sp777 implements technical, organizational, and physical security measures appropriate to the nature and volume of personal data processed, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the sp777 servers.
• Encryption of sensitive data at rest, including payment method details and government ID information.
• Access controls limiting employee access to personal data on a strictly need-to-know basis.
• Regular security assessments and penetration testing of the Platform infrastructure.
• SMS OTP verification for account login and withdrawal authorization.
• Automated systems for detecting and blocking suspicious login attempts and fraudulent transactions.

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, sp777 will notify the NPC and affected data subjects in accordance with the timelines and requirements prescribed by the DPA and NPC circulars.

13. Children and Minors

The sp777 Platform is strictly for persons aged twenty-one (21) years and above, consistent with PAGCOR's age requirements for casino-style online gaming in the Philippines. sp777 does not knowingly collect personal data from individuals under the age of 21. If sp777 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, the relevant data deleted, and any deposited funds returned subject to identity verification of the legitimate account holder.

If you believe a minor has registered an account on the sp777 Platform, please notify sp777 customer support immediately.

14. Amendments to This Policy

sp777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR regulatory requirements, or our data processing practices. Material amendments will be communicated to registered account holders via SMS notification to their registered Philippine mobile number and/or a notice displayed upon their next login, at least fourteen (14) days prior to the amendments taking effect.

The current version of this Policy is identified by the effective date stated at the top of this document. Your continued use of the sp777 Platform after any amendment takes effect constitutes your acceptance of the revised Policy.

15. Contact & Complaints

For enquiries, data subject rights requests, or complaints regarding this Privacy Policy or sp777's data processing practices, please contact:

• Customer Support / DPO: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 within the sp777 Platform
• Languages: English and Tagalog

If you are unsatisfied with sp777's response to a data protection complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the competent supervisory authority for the Data Privacy Act of 2012.