Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how sb777 ("sb777," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "player") who access or use the sb777 platform at sb777.asia and all associated services.

sb777 is committed to protecting your privacy and handling your personal data with transparency, integrity, and respect. We operate in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and the implementing rules and regulations issued by the National Privacy Commission (NPC).

By registering an account, accessing the sb777 platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, sb777 acts as the Personal Information Controller (PIC) in respect of the personal data collected through sb777.asia. As PIC, sb777 determines the purposes and means of processing your personal data.

Where sb777 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and analytics platforms — those parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only on sb777's documented instructions and in accordance with applicable data protection law.

Our designated Data Protection Officer (DPO) oversees compliance with this Policy and applicable data protection regulations. You may contact the DPO directly for any privacy-related concerns using the contact details provided in Section 16 of this Policy.

3 Data We Collect

sb777 collects the following categories of personal data, depending on how you interact with the platform:

4 How We Collect Data

sb777 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the sb777 platform, through cookies, log files, and similar tracking technologies (see Section 11);
• Third-party sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance databases; payment data from GCash, Maya, and banking partners to confirm transaction status;
• Publicly available sources: Information from public registries or databases where necessary for regulatory compliance or fraud prevention purposes.

sb777 collects only the minimum personal data necessary for the stated purposes. We do not collect personal data that is excessive, irrelevant, or incompatible with those purposes.

5 How We Use Your Data

sb777 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your sb777 account, including processing login authentication and account security;
• Transaction processing: Processing deposits, withdrawals, and bonus credits through your chosen Philippine payment method;
• Identity and age verification: Verifying that you meet the 21+ age requirement and confirming your identity in compliance with PAGCOR regulations and anti-money laundering (AML) obligations;
• Regulatory compliance: Meeting our obligations under Philippine gaming regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, and other prohibited conduct;
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behavior and applying responsible gaming tools where appropriate;
• Platform improvement: Analyzing usage data to improve the functionality, performance, and user experience of the sb777 platform;
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have provided consent and have not subsequently opted out.

sb777 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have provided explicit consent.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, sb777 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account registration, transaction processing, and customer support — is necessary for the provision of the sb777 service;
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

sb777 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purposes:

• Payment processors: GCash, Maya, and Philippine banking partners receive the minimum financial data necessary to process your deposits and withdrawals;
• KYC and identity verification providers: Third-party providers that assist with identity document verification and sanctions screening for regulatory compliance;
• IT and platform service providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory direction;
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of all or part of sb777's business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

8 International Data Transfers

sb777 primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines, sb777 ensures that such transfers are conducted in accordance with the Data Privacy Act of 2012 and NPC regulations, including by:

• Entering into data transfer agreements that incorporate the NPC's standard contractual clauses or equivalent data protection safeguards;
• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the NPC;
• Implementing additional technical and organizational safeguards, such as encryption and access controls, for cross-border data flows.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting our Data Protection Officer using the details in Section 16.

9 Data Retention

sb777 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your active account relationship with sb777, plus a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later;
• Customer support records: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes;
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to any overriding legal retention requirements;
• Technical and usage data: Retained for up to twenty-four (24) months for platform analytics and security purposes, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with sb777's data disposal procedures.

10 Security Measures

sb777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including financial information and KYC documents, is encrypted using AES-256 encryption;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data privacy training;
• Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication;
• Penetration testing: sb777's platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities;
• Incident response: sb777 maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to your rights and freedoms, we will notify the NPC within seventy-two (72) hours and affected individuals without undue delay, in accordance with NPC Circular 16-03.

11 Cookies & Tracking Technologies

sb777 uses cookies and similar technologies on sb777.asia to ensure the platform functions correctly, to maintain your session security, and to understand how players use the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of the platform, including session management, login authentication, and security features. These cookies cannot be disabled without affecting platform functionality;
• Performance and analytics cookies: Used to collect anonymized information about how visitors use sb777.asia, such as which pages are visited most frequently and whether error messages are received. This data helps us improve the platform;
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits, to provide a more personalized experience.

sb777 does not use third-party advertising or tracking cookies. You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the sb777 platform.

By continuing to use sb777.asia after being presented with our cookie notice, you consent to the use of cookies as described in this section.

12 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by sb777:

To exercise any of the above rights, please submit a written request to our Data Protection Officer using the contact details in Section 16. We will respond to verified requests within fifteen (15) business days. We may request proof of identity before processing your request to protect against unauthorized access to your data.

Please note that some rights are subject to limitations under applicable law. Where we are unable to fulfill a request in full, we will explain the reasons in our response.

13 Children's Privacy

The sb777 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. sb777 does not knowingly collect personal data from individuals under the age of 21.

If sb777 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data in question, and take appropriate action in accordance with our Terms & Conditions and applicable law.

14 Third-Party Links

The sb777 platform may contain links to third-party websites or services, such as payment provider portals (GCash, Maya) accessed during the deposit or withdrawal process. This Privacy Policy applies solely to data processed by sb777 through sb777.asia.

sb777 is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party services you access in connection with your use of sb777, particularly your chosen payment provider's privacy policy before initiating a transaction.

15 Changes to This Policy

sb777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be available at sb777.asia/privacy-policy, with the effective date updated accordingly.

For material changes — those that significantly affect how we collect or use your personal data, or that affect your rights — sb777 will provide advance notice of at least seven (7) days via email to your registered address or via a prominent notice on the platform. Your continued use of sb777 after the effective date of any amendment constitutes your acceptance of the revised Policy.

We recommend that you review this Policy periodically to stay informed about how sb777 protects your personal data.

16 Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by sb777, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the sb777 platform
• Response time: We aim to acknowledge all privacy requests within three (3) business days and resolve them within fifteen (15) business days

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.