Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 777sh8 ("777sh8", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of players and visitors who access the 777sh8 online gaming platform at https://777sh8.net ("Platform", "Site").

777sh8 is committed to protecting the privacy of every individual who uses our platform — especially Filipino players who entrust us with sensitive personal and financial data. We process personal information in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account, accessing, or using the 777sh8 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and its IRR, 777sh8 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. As PIC, 777sh8 determines the purposes and means of processing your personal data and bears full responsibility for ensuring lawful, fair, and transparent processing at all times.

777sh8 has designated a Data Protection Officer (DPO) as required by NPC regulations. Contact details for the DPO are provided in Section 15 of this Policy. The DPO is responsible for overseeing data protection compliance, handling data subject requests, and serving as the primary point of contact with the National Privacy Commission.

3. Data We Collect

777sh8 collects the following categories of personal data in the course of operating the Platform:

3.1 Identity & Contact Information

• Full legal name (as it appears on a government-issued Philippine ID)
• Date of birth (to verify the 21+ age requirement)
• Residential address in the Philippines (barangay, city/municipality, province)
• Valid Philippine mobile number
• Email address
• Government-issued ID type and number (e.g., PhilSys, passport, driver's license, UMID, SSS/GSIS card)

3.2 Financial & Transaction Data

• GCash or PayMaya/Maya mobile wallet account number (masked)
• Bank account details for BPI, BDO, or Metrobank (account name, masked account number)
• Deposit and withdrawal transaction records
• Gaming activity records including wager amounts, game types, wins, and losses
• Bonus and promotional transaction history

3.3 Technical & Usage Data

• IP address and approximate geographic location at the time of access
• Device type, operating system, and browser version
• Session login and logout timestamps
• Pages visited, features used, and clickstream data within the Platform
• Connection speed and network provider information

3.4 Sensitive Personal Information

In limited circumstances — primarily for enhanced KYC verification, responsible gaming assessments, or compliance with anti-money laundering (AML) obligations — 777sh8 may collect sensitive personal information as defined under Section 3(l) of the DPA. This may include, where lawfully required: source of funds declarations, taxpayer identification, or gaming behavior risk assessments. Such data is processed under strict additional safeguards.

4. How We Collect Your Data

777sh8 collects personal data through the following channels:

Collection Method	Examples
Direct submission	Registration form, KYC document uploads, deposit/withdrawal requests, support tickets
Automated collection	Cookies, server logs, session tracking, device fingerprinting during Platform access
Third-party sources	Identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services
Public sources	NPC databases, court records, or watchlists where required for AML/KYC compliance

5. Purpose & Legal Basis for Processing

777sh8 processes your personal data only for specific, legitimate purposes. The table below sets out our processing activities and the legal basis for each under the DPA:

Purpose	Legal Basis (DPA s. 12 / s. 13)
Account registration and management	Performance of contract (s. 12[b])
Identity verification (KYC) and age verification (21+)	Legal obligation (s. 12[c]); compliance with PAGCOR and AML regulations
Processing deposits and withdrawals	Performance of contract (s. 12[b])
Fraud prevention and platform security	Legitimate interests (s. 12[f]); legal obligation (s. 12[c])
Responsible gaming monitoring	Legitimate interests (s. 12[f]); legal obligation (s. 12[c])
Customer support and dispute resolution	Performance of contract (s. 12[b])
Marketing and promotional communications	Consent (s. 12[a]) — you may withdraw at any time
Platform analytics and service improvement	Legitimate interests (s. 12[f])
Regulatory reporting to PAGCOR / AMLC	Legal obligation (s. 12[c])

6. Data Sharing & Disclosure

777sh8 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may, however, share your personal data with the following categories of recipients where strictly necessary:

• Payment processors: GCash, PayMaya/Maya, BPI, BDO, Metrobank, and card networks (Visa/Mastercard) require certain data to authorize and process your transactions.
• KYC & identity verification providers: Third-party services that assist in verifying the authenticity of your government-issued Philippine IDs and documents.
• Fraud & AML detection services: Specialized providers that help 777sh8 detect suspicious activity and comply with Anti-Money Laundering Act (AMLA) reporting requirements.
• Gaming software providers: Game developers and live studio operators who supply the games available on the Platform may receive session and wager data to enable gameplay.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where required by law or lawful order.
• Professional advisors: Legal, accounting, and auditing firms engaged by 777sh8, subject to strict confidentiality obligations.

All third parties with whom 777sh8 shares personal data are required to comply with the DPA and to process your data only for the specific purpose for which it was shared. We require contractual assurances from all processors and sub-processors.

7. Data Retention

777sh8 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The general retention periods applied by 777sh8 are as follows:

• Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with the AMLA Implementing Rules.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each recorded session.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents any reasonable reconstruction of the individual's identity.

8. Security Measures

777sh8 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include, but are not limited to:

• TLS 1.3 encryption for all data in transit between your device and 777sh8 servers.
• AES-256 encryption for sensitive personal data stored in our databases.
• Role-based access control (RBAC) ensuring that only authorized personnel can access personal data, limited to what their role requires.
• Multi-factor authentication (MFA) for all 777sh8 internal systems that process personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security firms.
• 24/7 intrusion detection and monitoring of all Platform infrastructure and access logs.
• Staff training on data privacy obligations under the DPA, conducted at least annually for all personnel with access to personal data.

9. Cookies & Tracking Technologies

777sh8 uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Site. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core Platform features.
• Functional Cookies: Remember your preferences such as language settings, preferred games, and whether you have acknowledged this Privacy Policy notice.
• Analytics Cookies: Help us understand how players navigate and use the Platform, so we can improve performance and user experience. Data collected is aggregated and anonymized where possible.
• Security Cookies: Used for fraud prevention, bot detection, and responsible gaming monitoring — for example, tracking session durations to trigger reality checks.

777sh8 does not use third-party advertising or retargeting cookies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies may prevent you from accessing certain Platform features.

10. Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, every registered 777sh8 player in the Philippines is entitled to exercise the following rights at any time:

To exercise any of the above rights, please submit a written request to our Data Protection Officer at [email protected]. Please include your registered 777sh8 account name, mobile number, and a clear description of the right you wish to exercise. We will respond within fifteen (15) business days in accordance with NPC guidelines. Identity verification may be required before processing your request.

11. Minors & Age Restriction

The 777sh8 Platform is strictly intended for individuals who are 21 years of age or older, in compliance with applicable Philippine gaming regulations. We do not knowingly collect personal data from individuals below the age of 21.

During registration and KYC verification, 777sh8 takes steps to verify that each player meets the minimum age requirement. If we become aware or have reasonable grounds to believe that personal data has been collected from a person under 21 years of age, we will immediately:

• Suspend the relevant account pending investigation.
• Delete all personal data associated with the account as soon as practicable.
• Forfeit any winnings generated by the underage account.
• Return any deposited funds to the source payment method, net of any bonuses claimed.

Parents and guardians are encouraged to use parental control software and safe browsing tools to prevent minors from accessing online gambling platforms. If you believe a minor has created an account using your details, contact 777sh8 support immediately.

12. Cross-Border Data Transfers

777sh8 operates primarily for and from the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, cloud infrastructure providers or game software studios with servers in other jurisdictions.

Any such cross-border transfer of personal data is conducted in strict compliance with Section 21 of the DPA and the NPC's rules on cross-border data transfers. Specifically, 777sh8 ensures that:

• The recipient country provides at least an equivalent level of protection as Philippine law.
• Contractual clauses (data processing agreements) binding the recipient to DPA-equivalent standards are in place prior to any transfer.
• Where applicable, NPC registration and notification requirements for personal information processors are satisfied.

13. Data Breach Notification

In the event of a personal data breach that is reasonably likely to give rise to a real risk of serious harm to any affected data subject, 777sh8 will comply fully with its notification obligations under the DPA and NPC Circular No. 16-03 (Personal Data Breach Management).

Specifically, 777sh8 will:

• Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of a qualifying breach, providing full details of the nature, scope, and impact of the incident.
• Notify affected data subjects (i.e., 777sh8 registered players whose data may have been compromised) as soon as practicable, describing the breach, the data involved, the steps already taken to contain it, and the recommended actions for self-protection.
• Maintain a Data Breach Register documenting all breach incidents, their causes, and remediation steps, as required by the NPC.

Breach notifications to affected players will be sent to the email address and/or mobile number registered on your 777sh8 account. This is another reason it is important to keep your contact details current.

14. Changes to This Privacy Policy

777sh8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC regulations, or PAGCOR requirements. When we make material changes to this Policy, we will:

• Post the updated Policy on this page with a revised "Effective Date" at the top.
• Notify registered players via email or in-Platform notification prior to the changes taking effect.
• Where changes affect the processing of sensitive personal information or involve a new purpose that requires fresh consent, we will seek your explicit consent before proceeding.

Your continued use of the 777sh8 Platform after the effective date of any revised Privacy Policy constitutes acceptance of the updated terms. We encourage you to review this page periodically to stay informed about how 777sh8 protects your data.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or 777sh8's data processing practices, you may reach our Data Protection Officer through the following channel:

• Email: [email protected]
• Subject line: "Privacy / DPO Request – [Your 777sh8 Account Name]"
• Response time: Within fifteen (15) business days of receipt of a complete and verifiable request

If you are not satisfied with our response, or if you believe that 777sh8 has not complied with its obligations under the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC accepts complaints through its official website and offices in Quezon City, Metro Manila.