Privacy Policy – sss7 Casino

sss7 Casino ("sss7," "we," "us," "our") operates the online gambling platform accessible at sss7.club, targeting Filipino players under PAGCOR licensing. For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules, sss7 is the Personal Information Controller in respect of personal data collected through the sss7 Platform.

Questions regarding this Privacy Policy or sss7's data practices may be directed to our Data Protection Officer at the contact details specified in Section 13 of this Policy.

sss7 collects personal data across several categories depending on the nature of your interaction with the Platform:

2.1 Registration Data. When you create an sss7 account, we collect your full name, date of birth, email address, Philippine mobile number, and password (stored in hashed form). This data is required to establish and maintain your account.

2.2 Identity Verification (KYC) Data. To comply with PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA), sss7 collects government-issued identification documents (e.g., Philippine passport, driver's license, UMID, PhilSys ID), proof of address, and in some cases selfie photographs for biometric matching. KYC verification is required before withdrawal processing above applicable thresholds.

2.3 Financial Data. sss7 records transaction history including deposit amounts, withdrawal requests, payment method identifiers (GCash number, Maya account reference, bank account last four digits), and transaction timestamps. Full card or bank account numbers are not stored by sss7 — payment processing is handled by regulated payment processors.

2.4 Gaming Activity Data. We collect records of your wagering activity on sss7, including game sessions, bet amounts, game outcomes, and bonus utilization. This data is required for regulatory reporting, responsible gaming monitoring, and dispute resolution.

2.5 Technical Data. sss7 automatically collects device identifiers, IP addresses, browser type and version, operating system, session timestamps, and geolocation data (at the country/region level) when you access the Platform. This data is used for security monitoring, fraud prevention, and service optimization.

2.6 Communications Data. We retain records of communications between you and sss7 support, including live chat transcripts and email correspondence, for quality assurance and dispute resolution purposes.

sss7 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your sss7 account; processing your sss7 login; enabling account recovery.
• Service Provision: Providing access to casino games, sports betting, bingo, and all other sss7 Platform features.
• Payment Processing: Facilitating GCash, Maya, and bank deposits and withdrawals; verifying payment methods; preventing fraudulent transactions.
• Regulatory Compliance: Fulfilling obligations under PAGCOR licensing, the Anti-Money Laundering Act (AMLA), the Terrorism Financing Prevention and Suppression Act, and the Data Privacy Act of 2012.
• Identity Verification: Conducting KYC checks to verify age (21+) and identity as required by PAGCOR.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior; implementing deposit limits, self-exclusion, and reality check features.
• Security & Fraud Prevention: Detecting and preventing unauthorized access, account takeovers, bonus abuse, money laundering, and other prohibited activity.
• Customer Support: Responding to queries, resolving disputes, and processing complaints.
• Marketing (with consent): Sending promotional emails, SMS notifications, and personalized offers where you have opted in to marketing communications. You may withdraw consent at any time.
• Analytics & Improvement: Understanding how the sss7 Platform is used to improve performance, fix issues, and develop new features.

Under the Philippine Data Privacy Act of 2012, sss7 relies on the following legal bases for processing your personal data:

• Contract Performance: Processing necessary to provide you with sss7 services and fulfill the account agreement between you and sss7.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, tax reporting requirements, and other applicable Philippine law.
• Legitimate Interest: Processing for fraud prevention, security monitoring, and responsible gaming management where these interests are not overridden by your data protection rights.
• Consent: Marketing communications and optional personalization features, where your affirmative consent has been obtained and may be withdrawn at any time without affecting the lawfulness of prior processing.

sss7 does not sell your personal data. We share your data only in the following circumstances:

• Regulated Payment Processors: GCash (GXI), Maya/PayMaya, BancNet, and other payment service providers receive transaction data necessary to process deposits and withdrawals. These processors are bound by their own regulatory obligations under BSP supervision.
• Game Software Providers: Third-party game developers whose titles are hosted on sss7 may receive anonymized session and wagering data for technical and compliance purposes. No personally identifiable registration data is shared with game providers.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities may receive player data where required by law, court order, or regulatory direction.
• Identity Verification Providers: KYC verification may be conducted through third-party identity verification services. These providers process identification documents under confidentiality obligations and applicable data protection law.
• Professional Advisers: Legal, accounting, and audit professionals engaged by sss7 who are bound by professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or transfer of the sss7 business, player data may be transferred to the acquiring entity subject to equivalent data protection commitments and notification to affected players.

The sss7 Platform uses cookies and similar tracking technologies to operate core platform functions, maintain your login session, remember your preferences, and analyze Platform usage patterns.

Essential Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without impairing Platform functionality.

Functional Cookies: Store your preferences such as language settings, game display preferences, and responsible gaming limit settings across sessions.

Analytics Cookies: Used to collect aggregated, anonymized data about how users navigate the sss7 Platform. This data is used internally to improve Platform performance and user experience.

You may manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use core sss7 services but may reduce personalization functionality.

sss7 retains your personal data for the minimum period necessary to fulfill the purposes described in this Policy and comply with applicable legal retention obligations:

• Account and Registration Data: Retained for the duration of your active sss7 account plus five (5) years following account closure, consistent with PAGCOR record-keeping requirements and AMLA obligations.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification, or as required by AMLC regulations, whichever is longer.
• Transaction and Gaming Records: Retained for five (5) years from the date of each transaction, as required for regulatory audit and dispute resolution purposes.
• Support Communications: Retained for two (2) years from the date of each communication, unless related to an open dispute or investigation.
• Marketing Consent Records: Retained until consent is withdrawn, plus a reasonable period to document consent history.

After applicable retention periods expire, sss7 securely destroys or anonymizes personal data such that it can no longer be attributed to an identified or identifiable individual.

sss7 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the sss7 Platform;
• Encryption of sensitive data fields (including passwords, stored as salted hashes) at rest;
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need;
• Regular security assessments and penetration testing of the sss7 Platform and infrastructure;
• Multi-factor authentication requirements for administrative Platform access;
• Incident response procedures for data breach detection, containment, and notification to the National Privacy Commission within 72 hours of discovery as required by the Data Privacy Act.

Notwithstanding these measures, no online platform can guarantee absolute security. sss7 recommends that Players maintain strong, unique passwords and enable two-factor authentication on their sss7 accounts to maximize personal account security.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sss7:

• Right to be Informed: The right to know what personal data sss7 collects and how it is used — addressed by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data sss7 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure or Blocking: The right to request deletion or blocking of personal data processed unlawfully or no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to Data Portability: The right to receive personal data you have provided to sss7 in a structured, commonly used format where technically feasible.
• Right to Damages: The right to seek compensation for damages suffered as a result of inaccurate, incomplete, or unlawful personal data processing.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, contact sss7's Data Protection Officer using the contact details in Section 13. sss7 will respond to verified data subject requests within the timeframes prescribed by the Data Privacy Act and its implementing rules.

The sss7 Platform is strictly intended for adults aged 21 years and older. sss7 does not knowingly collect personal data from persons under 21 years of age. If sss7 becomes aware that personal data has been collected from an individual under 21, the relevant account will be immediately closed, the data will be deleted, and any associated funds will be handled in accordance with PAGCOR's requirements for underage account closures. Parents or guardians who believe a minor has created an sss7 account should contact support immediately via live chat.

sss7's primary operations and data infrastructure are based in the Philippines. Where personal data is transferred to service providers or infrastructure located outside the Philippines (for example, cloud hosting providers or international game developers), sss7 ensures such transfers comply with the cross-border data transfer requirements of the Data Privacy Act of 2012 and the National Privacy Commission's implementing rules. This includes ensuring recipient entities provide adequate data protection standards at least equivalent to those required under Philippine law, through contractual data processing agreements, standard contractual clauses, or equivalent mechanisms.

sss7 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. Where changes are material, sss7 will notify registered Players via email or in-platform notification at least seven (7) days prior to the effective date of the revised Policy. The current effective date is displayed at the top of this page. Continued use of the sss7 Platform following notification of material changes constitutes acceptance of the updated Privacy Policy.

For all privacy-related enquiries, data subject access requests, or concerns about sss7's data practices, please contact:

If you are dissatisfied with sss7's handling of a privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act.