s2777 Privacy Policy

1 Introduction & Scope

s2777 ("we," "us," "our") is an online gaming platform operating at https://s2777.cam, duly licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) to provide online gaming services to eligible players in the Philippines. We are committed to protecting the privacy and personal data of every player ("you," "your") who accesses or uses the s2777 Platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC). It describes the personal data s2777 collects, the purposes for which it is processed, the parties with whom it may be shared, and the rights you hold in respect of your personal data.

This Privacy Policy applies to all personal data processed in connection with your use of the s2777 Platform — including registration, account management, deposits and withdrawals, gameplay, promotional participation, and customer support interactions. It is incorporated into and must be read alongside the s2777 Terms & Conditions.

2 Personal Data We Collect

s2777 collects the following categories of personal data from players:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify you are at least 21 years of age);
• Residential address — including city, province, and ZIP code within the Philippines;
• Philippine mobile number;
• Email address;
• Username and account credentials (password stored in encrypted, hashed form only).

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents — such as a PhilSys National ID, passport, driver's licence, SSS ID, UMID, or Voter's ID;
• Proof of address documents where required;
• Selfie photographs or video verification for biometric identity matching, where applicable;
• Source-of-funds declarations for high-value accounts as required under AMLA regulations.

2.3 Financial and Transaction Data

• GCash account number or Maya wallet details (reference identifiers only — s2777 does not store full payment credentials);
• Bank account details for bank transfer transactions;
• Deposit amounts, dates, and references;
• Withdrawal requests, amounts, and processing records;
• Gaming transaction history, including wagers placed, outcomes, and account balance movements.

2.4 Technical and Usage Data

• IP address and approximate geolocation at the time of login;
• Device type, operating system, browser type, and version;
• Session data including login timestamps, session duration, and pages visited;
• Game interaction data including games accessed, bet sizes, and session activity.

2.5 Communications Data

• Records of live chat, Messenger, and Viber conversations with s2777 support agents;
• Email correspondence with s2777 customer support;
• Feedback, complaints, and dispute records.

3 How We Collect Your Data

s2777 collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make deposits or withdrawals, contact support, or participate in promotions;
• Automatically — through technical systems including cookies, web beacons, server logs, and analytics tools that record your interactions with the s2777 Platform;
• From third-party service providers — including identity verification services, payment processors such as GCash and Maya, fraud prevention systems, and PAGCOR regulatory databases where applicable;
• From publicly available sources — such as government registries, where required for regulatory compliance purposes.

4 Purposes of Processing

s2777 processes your personal data for the following specific, legitimate purposes:

s2777 does not process your personal data for purposes other than those listed above without first obtaining your explicit consent or as required by applicable law.

5 Legal Bases for Processing

Under the Data Privacy Act of 2012, s2777 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and s2777 — including account registration, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and other applicable Philippine legislation.
• Legitimate interests: Processing carried out for s2777's legitimate operational interests — including fraud prevention, platform security, and responsible gaming monitoring — provided such interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and optional personalisation features, where you have given freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by contacting s2777 support.

6 Sharing and Disclosure of Personal Data

6.1 Third-Party Service Providers

s2777 engages third-party service providers who process personal data on our behalf, strictly for the purposes described in this Policy. These include payment processors (GCash, Maya, InstaPay, PesoNet, and banking institutions), identity verification providers, cloud infrastructure and data hosting providers, fraud detection and cybersecurity vendors, and customer communications platforms. All third-party processors are contractually bound to process data only as instructed by s2777 and in accordance with applicable Philippine data protection law.

6.2 Regulatory and Law Enforcement Authorities

s2777 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or lawful regulatory directive.

6.3 No Sale of Personal Data

s2777 does not sell, rent, or otherwise commercially transfer your personal data to any third party for their own marketing or commercial purposes. Any data sharing is strictly limited to the operational and regulatory purposes described in this Policy.

6.4 Business Transfers

In the event of a corporate restructuring, merger, acquisition, or sale of assets involving s2777, personal data may be transferred to the relevant successor entity, subject to the same privacy protections described in this Policy. Affected players will be notified in accordance with applicable NPC requirements prior to any such transfer.

7 Cookies and Tracking Technologies

7.1 Types of Cookies Used

s2777 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies deployed are:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, security tokens, and load-balancing. These cannot be disabled without affecting your ability to use the Platform.
• Functional cookies: Store your preferences such as language settings and game lobby display options to improve your experience between sessions.
• Analytics cookies: Collect anonymised or pseudonymised data about how players interact with the Platform — pages visited, session durations, and error occurrences — used to improve Platform performance.
• Security cookies: Help detect fraudulent activity, bot traffic, and unauthorised access attempts.

7.2 Managing Cookies

You may adjust cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to log in and use the s2777 Platform. Disabling analytics cookies will not affect your gaming experience but will limit our ability to improve the Platform based on usage patterns.

8 Data Security

s2777 implements technical and organisational security measures proportionate to the sensitivity of the data we hold. These include:

• Transport encryption: All data transmitted between your device and s2777 servers is protected by 256-bit SSL/TLS encryption, the same standard used by Philippine commercial banks;
• Data-at-rest encryption: Personal data stored on s2777 servers is encrypted using industry-standard encryption protocols;
• Access controls: Access to player personal data within s2777's systems is strictly limited on a need-to-know basis, with role-based permissions, multi-factor authentication for internal staff, and detailed audit logging of all data access;
• Password hashing: Account passwords are never stored in plain text. They are stored as one-way hashed values using modern cryptographic algorithms;
• Penetration testing and security audits: s2777 conducts regular security assessments to identify and remediate vulnerabilities;
• Incident response: s2777 maintains a data breach response procedure consistent with NPC notification requirements under Section 20 of the Data Privacy Act.

While s2777 employs robust security measures, no system is entirely impenetrable. You also bear responsibility for safeguarding your own account credentials. If you suspect unauthorised access to your s2777 account, notify us immediately at [email protected].

9 Data Retention

s2777 retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, subject to the following minimum retention periods:

• Active account data: Retained for the duration of your account's existence;
• KYC and identity records: Retained for a minimum of five (5) years from the date of account closure, as mandated by PAGCOR regulations and the AMLA;
• Financial transaction records: Retained for a minimum of five (5) years as required under the AMLA and applicable tax regulations;
• Customer support records: Retained for three (3) years following resolution of the relevant query or dispute;
• Marketing consent records: Retained for the duration of your account and for two (2) years following withdrawal of consent;
• Technical log data: Retained for a maximum of twelve (12) months unless longer retention is required for ongoing investigations.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification.

10 Your Data Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you are entitled to exercise the following rights in respect of your personal data held by s2777. To exercise any of the rights below, please contact us at [email protected]. We will respond within fifteen (15) business days of receiving a verified request.

11 Children and Minors

The s2777 Platform is strictly prohibited to individuals under the age of twenty-one (21) years. s2777 does not knowingly collect personal data from minors. The 21+ age requirement is enforced at registration through date-of-birth collection and at the point of withdrawal through KYC identity verification.

If s2777 becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe that your minor child has registered on s2777, please contact us immediately at [email protected] so that we may take prompt corrective action.

12 Cross-Border Data Transfers

s2777's primary data processing infrastructure is located within or operated in compliance with Philippine data protection standards. Where s2777 engages third-party service providers whose systems are located outside the Philippines — such as internationally hosted cloud infrastructure or game content providers — such transfers are conducted under data processing agreements that contractually ensure equivalent data protection standards to those required under the Data Privacy Act of 2012.

s2777 does not transfer personal data to jurisdictions that do not afford an adequate level of data protection without implementing appropriate safeguards. If you have questions about the specific safeguards applicable to cross-border transfers involving your data, please contact our Data Protection Officer.

13 Changes to This Privacy Policy

s2777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, PAGCOR directives, or NPC guidance. Where amendments are material — meaning they significantly affect your rights or how your data is used — s2777 will provide at least seven (7) days' advance notice via email to your registered address or via a prominent notification within your account dashboard.

The updated effective date will be displayed at the top of this page. Your continued use of the s2777 Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree to the amended terms, you must stop using the Platform and contact support to close your account.

14 Contact & Complaints

14.1 Data Protection Officer

s2777 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. To exercise your data rights, report a privacy concern, or make a data-related inquiry, contact the s2777 DPO through:

• Email: [email protected] — mark your subject line "Data Privacy Request"
• Live Chat: Available on the s2777 Platform 24/7 — state that your query relates to data privacy
• Viber / Messenger: Available in English and Filipino, 24 hours a day

14.2 National Privacy Commission

If you believe s2777 has failed to adequately address your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC is the independent government body responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint is available on the NPC's official website at privacy.gov.ph.