Privacy Policy

1. Introduction

This Privacy Policy applies to all players who register and use the SG7 online gaming platform, accessible at sg7.org. SG7 operates for players based in the Philippines, and this policy is written to reflect the applicable Philippine legal framework, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By creating an SG7 account and using our platform, you acknowledge that you have read, understood, and agreed to the collection and processing of your personal data as described in this Privacy Policy. If you do not agree, please do not use the platform and contact us at [email protected] to discuss alternatives or account closure.

This policy may be updated from time to time. When material changes are made, we will notify you via the email address linked to your SG7 account and update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

2. What Personal Data We Collect

SG7 collects personal data in three main ways: information you provide directly, information generated through your use of the platform, and information received from third-party service providers. Below is a breakdown of each category.

2.1 Information You Provide Directly

• Registration details: full legal name, date of birth (to verify you are 21 or older), email address, mobile number, and preferred username
• Identity verification (KYC) documents: government-issued Philippine ID such as a PhilSys National ID, passport, driver's licence, or SSS/GSIS card; selfie or liveness check images
• Payment information: GCash account number, Maya wallet number, or Philippine bank account details used for deposits and withdrawals in PHP
• Communication records: messages, emails, and chat logs submitted to our customer support team
• Responsible gaming preferences: deposit limits, session time limits, and self-exclusion settings you configure in your account

2.2 Information Generated by Your Use of the Platform

• Transaction history: all deposits, withdrawals, wagers placed, game results, bonuses received, and balance adjustments
• Device and technical data: IP address, browser type, operating system, device model, screen resolution, and mobile app version
• Session data: login timestamps, session duration, pages visited, games played, and feature interactions
• Location data: approximate geographic location inferred from your IP address, used to confirm you are accessing from the Philippines and to fulfil our responsible gaming obligations
• Cookies and similar technologies: see Section 7 for a full explanation of how SG7 uses cookies

2.3 Information from Third Parties

• Identity verification providers: confirmation of document authenticity and watchlist screening results
• Payment processors: transaction status updates from GCash, Maya, InstaPay, or Philippine banking partners
• Fraud prevention services: risk scores and signals used to protect accounts from unauthorised access

3. How We Use Your Personal Data

SG7 processes personal data only for clear, legitimate purposes. The table below summarises each use and its legal basis under the Data Privacy Act of 2012.

SG7 will never use your personal data for purposes that are incompatible with those listed above without first obtaining your explicit consent.

4. Who We Share Your Data With

SG7 does not sell your personal data. We may share it with the following categories of third parties, strictly on a need-to-know basis and subject to data processing agreements:

4.1 Payment Service Providers

To process deposits and withdrawals in PHP, we share the minimum necessary payment details with GCash, Maya, InstaPay-connected banks, and other Philippine banking partners. These providers are independently governed by their own privacy policies and are regulated by the Bangko Sentral ng Pilipinas (BSP).

4.2 Identity Verification Providers

SG7 uses a third-party KYC provider to verify the authenticity of government-issued Philippine IDs and to screen players against relevant watchlists. This provider processes your ID documents and verification images solely for the purpose of identity confirmation and is contractually prohibited from using your data for any other purpose.

4.3 Game Technology Providers

Game studios and platforms that supply slots, live casino, and fish shooting games to SG7 may receive anonymised session identifiers to deliver game content and calculate outcomes. These providers do not receive your full name, contact details, or payment information.

4.4 IT Infrastructure and Security Providers

We use cloud hosting, content delivery, and cybersecurity services to operate the SG7 platform. These providers may process account data as part of their services and are bound by strict confidentiality and data processing agreements.

4.5 Legal and Regulatory Bodies

SG7 may disclose personal data to Philippine government authorities, law enforcement agencies, or regulators where we are legally required to do so, including for anti-money laundering (AML) compliance and in response to valid legal process.

5. How Long We Keep Your Data

SG7 retains personal data for the minimum period necessary to fulfil the purpose it was collected for. The following retention periods apply:

• Account data and KYC records: retained for the lifetime of your account plus five years after closure, in accordance with Philippine AML regulations
• Transaction records: retained for five years from the date of the transaction
• Customer support communications: retained for two years from the date of the last interaction
• Marketing consent records: retained until you withdraw consent, plus one additional year for compliance auditing
• Session and device logs: retained for 12 months from the date of the session
• Cookies: session cookies are deleted when you close your browser; persistent cookies expire as stated in Section 7

When the applicable retention period expires, your data is securely deleted or anonymised so that it can no longer be associated with your identity.

6. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights as a data subject:

6.1 Right to Be Informed

You have the right to know that your personal data is being collected and processed, and to be told the purposes and basis for that processing. This Privacy Policy fulfils that obligation.

6.2 Right to Access

You may request a copy of the personal data SG7 holds about you at any time by contacting [email protected]. We will respond within 15 business days.

6.3 Right to Correction

If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. For registered details such as your email address or mobile number, you may update these directly in your account settings. For KYC records, please contact our support team.

6.4 Right to Erasure (Right to Be Forgotten)

You may request that SG7 delete your personal data. Note that we may be required to retain certain records for the mandatory periods described in Section 5, regardless of your request, to comply with Philippine law. We will inform you of any data we are legally required to retain.

6.5 Right to Object

You have the right to object to the processing of your personal data for marketing purposes. To opt out of marketing emails and notifications, you may adjust your communication preferences in your account settings or contact [email protected].

6.6 Right to Data Portability

Where processing is based on your consent or a contract, you may request that SG7 provide your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service.

6.7 Right to Lodge a Complaint

If you believe that SG7 has not handled your personal data in accordance with this Privacy Policy or the Data Privacy Act of 2012, you may file a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

To exercise any of the rights listed above, please contact us at [email protected] with the subject line "Data Rights Request" and a brief description of your request. We will acknowledge all requests within two business days.

7. Cookies and Tracking Technologies

SG7 uses cookies and similar tracking technologies to operate the platform efficiently, keep your session secure, remember your preferences, and understand how players interact with our services.

7.1 Types of Cookies We Use

• Strictly necessary cookies: required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without disrupting your ability to use the platform.
• Functional cookies: remember your preferences such as language settings, last game played, and VIP dashboard layout. These persist for up to 30 days.
• Analytics cookies: help us understand platform usage patterns, such as which game categories are most popular and where players encounter difficulties. Data collected is aggregated and anonymised.
• Security cookies: used for fraud prevention and to detect unusual login behaviour. These are session-based and are deleted when you close your browser.

7.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your SG7 account. Disabling functional cookies means some preferences will not be saved between sessions. Instructions for managing cookies in major browsers are available in each browser's help documentation.

SG7 does not use third-party advertising cookies or cross-site tracking for the purpose of serving you advertisements outside of the SG7 platform.

8. Data Security

SG7 implements a layered approach to data security that includes the following measures:

• TLS encryption: all data in transit between your browser or mobile app and SG7 servers is encrypted using Transport Layer Security (TLS 1.2 or higher)
• Encrypted storage: sensitive fields such as payment details and KYC document references are encrypted at rest using AES-256
• Access controls: access to player data within SG7 is restricted to authorised personnel on a need-to-know basis, governed by role-based access policies
• Two-factor authentication: optional two-factor authentication is available for your SG7 account and is strongly recommended
• Security monitoring: our infrastructure is monitored continuously for unusual activity, intrusion attempts, and data access anomalies
• Regular audits: SG7 conducts periodic security reviews and penetration testing to identify and address vulnerabilities

9. Protection of Minors

SG7 is strictly a 21+ platform. We do not knowingly collect personal data from any individual under the age of 21. Age verification is conducted as part of the registration process and again at the KYC stage for withdrawals. If SG7 discovers that an account was created by a person under 21, the account will be suspended immediately, all funds will be handled in accordance with applicable law, and any associated personal data will be deleted. If you are a parent or guardian and believe a minor has created an SG7 account, please contact us at [email protected] immediately.

10. International Data Transfers

SG7 primarily stores and processes data within the Philippines or in jurisdictions that offer comparable levels of data protection. Where data is transferred internationally — for example, to cloud infrastructure providers — we ensure that appropriate safeguards are in place, including standard contractual clauses and data processing agreements that require the recipient to maintain data protection standards equivalent to those required under Philippine law.

11. Changes to This Privacy Policy

SG7 may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. When material changes are made, we will send a notification to the email address associated with your account and update the "Last updated" date at the top of this page. We recommend bookmarking this page and reviewing it periodically. Your continued use of the SG7 platform after a change becomes effective constitutes acceptance of the updated policy.

12. Contact Us About Privacy

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the SG7 Data Privacy team:

• Email: [email protected] (subject line: "Privacy Enquiry")
• Support Hours: 24 hours a day, 7 days a week
• Response Commitment: We aim to acknowledge all privacy-related enquiries within two business days and resolve them within fifteen business days

For formal data rights requests such as access, correction, or erasure, please use the subject line "Data Rights Request" so that your message is routed to the correct team immediately.