Privacy Policy

This Privacy Policy ("Policy") describes how s77 Casino ("s77," "we," "us," or "our"), the operator of the online gaming platform accessible at s77.one, collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "Player") who access or use the s77 platform, including all associated subdomains, mobile interfaces, and applications (collectively, the "Platform").

s77 is committed to protecting the privacy and personal data of all Filipino players and users of the Platform. This Policy has been prepared in accordance with the requirements of Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy should be read together with our Terms and Conditions, which govern your use of the s77 Platform. If you do not agree with any part of this Policy, please discontinue your use of the Platform immediately.

For the purposes of the Data Privacy Act of 2012 and this Policy, s77 Casino acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, s77 determines the purposes and means of processing your personal information.

s77 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection laws and this Policy. You may contact the DPO directly for any privacy-related concerns, requests, or complaints. Contact details for the DPO are provided in Section 15 of this Policy.

s77 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

s77 collects personal data through the following channels and methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, browser information, and session activity logs.
• Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar technologies as described in Section 8 of this Policy.
• Third-Party Sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment verification data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory Sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with licensing compliance or investigations.

s77 does not collect personal data from social media platforms or third-party data brokers for marketing purposes.

s77 uses your personal data for the following purposes, each of which is grounded in a lawful basis as described in Section 6:

• Account Management: Creating, maintaining, and administering your s77 player account, including processing your registration, verifying your identity, and managing your account settings.
• Transaction Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, and PESONet; maintaining accurate financial records.
• Regulatory Compliance: Fulfilling our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorized account access, and other security threats.
• Responsible Gaming: Monitoring gaming activity to identify potential problem gambling behaviors; administering self-exclusion, deposit limits, and other responsible gaming tools.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance through our 24/7 support channels.
• Platform Improvement: Analyzing aggregated usage data to improve the performance, features, and user experience of the s77 Platform.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time.

Under the Data Privacy Act of 2012, s77 processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or participating in optional promotions.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and s77 — specifically, the Terms and Conditions governing your use of the Platform. This includes account creation, transaction processing, and customer support.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to s77, including PAGCOR licensing requirements, AMLA obligations, tax reporting, and NPC data protection requirements.
• Legitimate Interests: Where processing is necessary for the legitimate interests of s77, provided that such interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, and improving the gaming experience.

Where s77 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

s77 does not sell, rent, or trade your personal data to any third party. We may share your personal data only in the following limited circumstances:

• Service Providers: Trusted third-party vendors who assist in operating the s77 Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, cloud hosting providers, and customer support platform providers. These parties are bound by data processing agreements and may only use your data as instructed by s77.
• Game Providers: Third-party game software providers whose games are available on the s77 Platform may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your full personal profile.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies where disclosure is required pursuant to a valid court order, subpoena, or other lawful legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of s77's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

s77 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and analyze Platform usage. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences to provide a more personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform — such as which games are most popular and how long sessions last — to help us improve the Platform. This data does not identify you personally.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the Platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the s77 Platform. s77 does not use third-party advertising or behavioral tracking cookies.

s77 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and BIR requirements.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, whichever occurs first.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, s77 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

s77 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including financial information and government ID data, is encrypted using industry-standard AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized s77 personnel on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data protection training.
• Two-Factor Authentication: s77 supports and encourages the use of two-factor authentication (2FA) for all player accounts to prevent unauthorized access.
• Penetration Testing: The s77 Platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals.
• Incident Response: s77 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, s77 will notify the NPC and affected players within the timeframes required by the Data Privacy Act.
• Vendor Security: All third-party service providers who process personal data on behalf of s77 are required to maintain equivalent security standards and are subject to regular security assessments.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by s77. To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 15.

s77 will respond to all verified data subject requests within fifteen (15) calendar days of receipt. In complex cases, this period may be extended by a further fifteen (15) days, with prior notice to you. There is no fee for exercising your data subject rights, except where requests are manifestly unfounded or excessive.

As part of our registration and KYC process, s77 requires all players to verify their age and identity before being permitted to access real-money gaming features. Any account found to belong to a person under 21 years of age will be immediately suspended, all funds will be returned, and the account will be permanently closed.

If you are a parent or guardian and believe that a minor has registered an account on the s77 Platform or submitted personal data to us, please contact our Data Protection Officer immediately at [email protected]. We will take prompt action to investigate and, where confirmed, delete all associated personal data and close the account.

s77 also supports the use of parental control software and internet filtering tools to prevent minors from accessing online gaming platforms. We encourage parents and guardians in the Philippines to make use of available tools to protect minors from exposure to gambling content.

s77's primary data processing infrastructure is located within the Philippines and in jurisdictions that maintain adequate data protection standards. In certain circumstances, your personal data may be transferred to, stored in, or processed in countries outside the Philippines — for example, where s77 uses cloud hosting providers or game software vendors with infrastructure in other jurisdictions.

Where such international transfers occur, s77 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries recognized by the NPC as providing an adequate level of data protection;
• Implementing standard contractual clauses or data processing agreements that impose equivalent data protection obligations on the recipient;
• Conducting transfer impact assessments where required by applicable NPC guidelines.

By using the s77 Platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions as described in this section, subject always to the protections described herein.

s77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be available on the s77 Platform at s77.one/privacy-policy.

Where changes to this Policy are material — meaning they significantly affect your rights or how we process your personal data — s77 will notify you by email to the address registered on your account and/or by a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.

Your continued use of the s77 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must discontinue your use of the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by s77, please contact our Data Protection Officer using the details below. All communications will be treated with strict confidentiality.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that s77 has violated your data privacy rights. The NPC can be reached through its official government channels.