sd777 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by sd777 ("sd777," "we," "us," or "our"), the operator of the online gaming platform accessible at sd777.club. This Policy describes our practices regarding the collection, use, storage, processing, disclosure, and protection of personal data submitted by or collected from persons who access or use the sd777 Platform ("Members," "Users," or "you").

sd777 operates as a Personal Information Controller (PIC) as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR). We are committed to processing your personal data lawfully, transparently, and in a manner that respects your rights as a data subject under Philippine law.

This Policy applies to all personal data collected through: (a) the sd777 website and gaming platform; (b) account registration and KYC verification processes; (c) financial transactions including deposits and withdrawals; (d) communications with sd777 customer support; and (e) automated data collection through platform cookies and analytics tools.

2 Personal Data We Collect

sd777 collects the following categories of personal data in the course of operating the Platform and complying with applicable legal obligations:

2.1 Registration & Identity Data

• Full legal name (as appearing on government-issued ID)
• Date of birth and age verification data
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address in the Philippines

2.2 KYC & Verification Data

• Copies of Philippine government-issued identification documents (UMID, PhilSys ID, passport, driver's license)
• Selfie photographs submitted for liveness verification
• Proof of address documents
• Payment method ownership documentation where required

2.3 Financial & Transaction Data

• GCash and PayMaya account references (account number suffixes only — full account numbers are not stored by sd777)
• Bank account details for BPI, BDO, and Metrobank transfers (account name and last four digits)
• Deposit and withdrawal history including amounts, timestamps, and payment method
• Wallet balance history and transaction logs

2.4 Gaming & Activity Data

• Game session logs, wager amounts, game outcomes, and session durations
• Sports betting selections and live betting activity
• Bonus usage, promotional participation, and loyalty tier data
• Responsible gaming tool settings including deposit limits and self-exclusion status

2.5 Technical & Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Session timestamps and login history
• Platform interaction logs for fraud detection and security monitoring

2.6 Communications Data

• Records of live chat and email communications with sd777 support
• Feedback, complaints, and dispute records

3 How We Use Your Data

sd777 processes your personal data for the following purposes, each supported by a lawful basis under RA 10173:

• Account management: Creating, maintaining, verifying, and administering your sd777 member account.
• KYC and age verification: Confirming that you meet the minimum age requirement of 21 years as mandated by PAGCOR and Philippine law, and verifying your identity in compliance with Anti-Money Laundering regulations.
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, and partner banks; reconciling transactions; and investigating payment discrepancies.
• Gaming operations: Enabling access to all Platform games and features; recording game outcomes; calculating and paying out winnings.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, multi-accounting, money laundering, and unauthorized access.
• Regulatory compliance: Fulfilling reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) as required by applicable Philippine law.
• Responsible gaming: Monitoring gaming behavior for indicators of problem gambling; administering deposit limits, cooling-off periods, and self-exclusion requests; complying with PAGCOR responsible gaming requirements.
• Customer support: Responding to inquiries, complaints, and disputes submitted through sd777's support channels.
• Platform improvement: Analyzing aggregated, anonymized usage data to improve platform features, game offerings, and user experience.
• Communications: Sending transactional messages (deposit confirmations, withdrawal notifications, security alerts) to your registered email address or mobile number. Marketing communications are sent only with your explicit consent and you may opt out at any time.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, sd777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with Philippine laws applicable to PAGCOR-licensed operators, including the Anti-Money Laundering Act (RA 9160 as amended), the Revised PAGCOR Online Gaming Regulations, and the Data Privacy Act (RA 10173).
• Consent: Processing for optional purposes such as marketing communications, where we have obtained your explicit prior consent. You may withdraw consent for marketing communications at any time without affecting your account.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where our legitimate interests in operating a safe and compliant platform do not override your fundamental rights and freedoms.

5 Data Sharing & Disclosure

sd777 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. We share personal data only in the following circumstances and with the following categories of recipients:

• Payment processors: GCash (G-Xchange Inc.), PayMaya (PayMaya Philippines Inc.), and partner banks (BPI, BDO, Metrobank) receive transaction data necessary to process deposits and withdrawals. These entities are independent data controllers for their own processing activities and are governed by their own privacy policies.
• Game software providers: Third-party game providers integrated into the sd777 Platform receive session data necessary to deliver game functionality. Data shared is limited to what is operationally required and is subject to contractual data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities as required by applicable law, court order, or regulatory direction.
• KYC and identity verification services: Third-party identity verification providers used to process KYC submissions. These providers act as data processors under contractual agreements with sd777 and are not permitted to use your data for their own purposes.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by sd777, subject to confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or asset transfer, personal data may be transferred to a successor entity, subject to equivalent privacy protections and notification to affected members.

6 Data Retention

sd777 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention schedules:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, as required by PAGCOR regulations and Philippine AML law (RA 9160).
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction in accordance with Anti-Money Laundering Council record-keeping requirements.
• KYC documents: Retained for five (5) years after the end of the business relationship, consistent with AMLC regulations.
• Gaming activity logs: Retained for three (3) years for operational and dispute resolution purposes.
• Support communications: Retained for two (2) years from the date of the last communication.
• Marketing consent records: Retained for the duration of the consent plus three (3) years as evidence of consent.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with sd777's data destruction procedures. Anonymized data may be retained indefinitely for statistical and analytical purposes.

7 Data Security

sd777 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your browser or device and sd777's servers is encrypted using Transport Layer Security (TLS) 1.2 or higher.
• Encryption at rest: Sensitive personal data stored on sd777's servers — including KYC documents, financial data, and password hashes — is encrypted using AES-256 or equivalent industry-standard encryption.
• Password security: Member passwords are stored using one-way cryptographic hashing functions. sd777 does not store or have access to your plaintext password.
• Access controls: Access to systems containing personal data is restricted to authorised sd777 personnel on a need-to-know basis, with role-based access controls and audit logging.
• Fraud detection: Automated systems monitor for unusual login patterns, suspicious transaction activity, and potential account compromise, with real-time alerts for high-risk events.
• Security assessments: sd777 conducts periodic security assessments and vulnerability scans of its platform infrastructure.

Notwithstanding these measures, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the security of your account credentials. Report any suspected unauthorized access to your sd777 account immediately to [email protected].

8 Cookies & Tracking Technologies

sd777 uses cookies and similar technologies to operate and improve the Platform. A cookie is a small data file stored on your device by your web browser when you visit a website. sd777 uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your gaming session, security cookies for CSRF protection, and cookies that remember your language and display preferences. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as game display settings, sidebar state, and responsible gaming tool configurations to provide a consistent experience across sessions.
• Analytics cookies: Used to collect anonymized, aggregated data about how members use the Platform — such as which game categories are most popular, typical session lengths, and navigation patterns. This data is used solely to improve sd777's services. No personally identifiable information is included in analytics reports.

You may manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in to and using the Platform. Disabling functional cookies may affect your personalized experience without impairing core functionality.

9 Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sd777:

• Right to be informed: The right to be notified of how your personal data is being collected and processed — which is the primary purpose of this Policy.
• Right of access: The right to request a copy of the personal data sd777 holds about you, the purposes for which it is processed, and the recipients to whom it has been disclosed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by sd777. You may update most profile information directly through your account dashboard.
• Right to erasure ("right to be forgotten"): The right to request deletion of your personal data where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. Note that this right is subject to overriding legal retention obligations under AML and PAGCOR regulations, which may require sd777 to retain certain data notwithstanding your erasure request.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time by contacting support or using the unsubscribe link in any marketing email.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe sd777 has violated your rights under RA 10173. The NPC is the supervisory authority for data protection in the Philippines.

To exercise any of the above rights, please submit a written request to sd777's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." We will respond within fifteen (15) business days of receipt of your verified request, consistent with NPC guidelines. We may need to verify your identity before processing your request.

10 Minors & Age Verification

The sd777 Platform is strictly intended for persons aged twenty-one (21) years or older. sd777 does not knowingly collect personal data from individuals below the age of 21. If sd777 discovers that personal data has been collected from a person below the minimum age, such data will be deleted promptly and the associated account will be terminated.

Age verification is performed during the KYC process using government-issued identification documents. sd777 employs automated and manual review processes to identify and reject underage registrations. Parents or guardians who believe a minor may have registered with sd777 should contact [email protected] immediately so that the account can be closed and data deleted without delay.

11 Third-Party Services

The sd777 Platform integrates with third-party game providers, payment gateways, and technology service providers necessary to deliver the gaming experience. While sd777 exercises due diligence in selecting service partners and requires contractual data protection commitments from all data processors, sd777 does not control the privacy practices of independent data controllers such as GCash, PayMaya, and partner banks.

This Policy does not cover the data practices of third-party services. Members who interact with these services should review the applicable privacy policies of those providers directly. sd777 is not responsible for the privacy or security practices of third-party controllers.

12 Cross-Border Data Transfers

Some of sd777's technology infrastructure, game software providers, and support systems may involve the processing of personal data outside of the Republic of the Philippines. Where such transfers occur, sd777 ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to the protections afforded under RA 10173, including contractual data transfer agreements containing the standard contractual clauses prescribed by the National Privacy Commission.

sd777 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate transfer safeguards, in accordance with NPC Circular 17-01.

13 Changes to This Policy

sd777 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material — meaning they significantly affect your rights or how your data is processed — sd777 will notify registered members via email to their registered address or via an in-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of the sd777 Platform following notification of material changes constitutes your acceptance of the revised Policy.

Previous versions of this Privacy Policy are available upon written request to our Data Protection Officer.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests related to this Privacy Policy or sd777's data processing activities, please contact sd777's Data Protection Officer:

If you are not satisfied with sd777's response to your data protection concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), which serves as the independent supervisory authority responsible for enforcing RA 10173. Information on how to file a complaint with the NPC is available through official Philippine government channels.