sc777 Casino Privacy Policy

sc777 Casino takes the privacy and security of personal data seriously. As an online gaming platform serving Filipino players under PAGCOR oversight, sc777 is subject to the requirements of Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and all relevant National Privacy Commission (NPC) issuances. sc777 is also subject to anti-money laundering data requirements under Republic Act No. 9160 (Anti-Money Laundering Act), as amended.

This Privacy Policy describes sc777's practices with respect to personal data in plain, accessible terms. We want every Filipino player — whether based in Manila, Cebu, Davao, or anywhere across the archipelago — to understand exactly how their information is handled when they use the sc777 platform. If anything in this Policy is unclear, you are encouraged to contact our Data Protection Officer using the details provided in Section 14.

This Policy should be read alongside the sc777 Terms & Conditions, which govern the overall contractual relationship between sc777 and its players.

For the purposes of the Data Privacy Act of 2012, sc777 is the Personal Information Controller (PIC) in respect of personal data collected through the sc777 platform at sc777.one.

As the PIC, sc777 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is lawful, fair, and transparent. sc777 has designated a Data Protection Officer (DPO) in accordance with NPC requirements. The DPO can be reached via the contact details set out in Section 14 of this Policy.

sc777 collects the following categories of personal data from and about players:

sc777 does not collect sensitive personal information as defined under the Data Privacy Act (e.g., health information, political affiliations, religious beliefs) unless it is directly necessary for responsible gaming or regulatory compliance purposes and with appropriate consent.

sc777 collects personal data through the following mechanisms:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, configuring account settings, and contacting customer support;
• Automatically through platform use: Technical data including IP addresses, device information, session data, and geolocation data collected automatically when you access and use the sc777 platform;
• Through cookies and similar technologies: First-party cookies and session tokens used for authentication, security, and platform functionality as described in Section 9;
• From payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, and Metrobank in connection with your deposits and withdrawals;
• From third-party identity verification services: Data received from government ID verification and fraud detection services used in the KYC process, as required by PAGCOR regulations.

Under the Data Privacy Act, all processing of personal data must be based on one of the criteria established in Section 12 of RA 10173. The following table describes the purposes for which sc777 processes personal data and the applicable legal basis for each:

sc777 does not sell, trade, or rent your personal data to any third party. sc777 shares personal data only in the following limited circumstances:

• Payment Processors (GCash, PayMaya, BPI, BDO, Metrobank): Financial data necessary to process your deposits and withdrawals is shared with your designated payment provider. Each provider operates under its own privacy framework and regulatory obligations under BSP (Bangko Sentral ng Pilipinas) oversight.
• KYC and Identity Verification Providers: Identity document data is shared with PAGCOR-approved identity verification service providers for the purpose of completing the mandatory KYC process. These providers process data solely for verification purposes under contractual data processing agreements.
• Game Software Providers: Gaming activity data is shared with sc777's licensed game providers (including Jili, PG Soft, Pragmatic Play, and others) to enable game operation. Game providers operate under their own PAGCOR or international gaming authority licensing and associated data obligations.
• PAGCOR: sc777 may be required to disclose player data to PAGCOR in the course of regulatory audits, licensing reviews, or compliance reporting.
• Anti-Money Laundering Council (AMLC): sc777 is legally required under RA 9160 to report covered transactions and suspicious transaction reports to the AMLC. This disclosure is mandatory and does not require your consent.
• Law Enforcement and Courts: sc777 may disclose personal data to Philippine law enforcement agencies, courts, or other competent government authorities where required by a valid legal order, warrant, or regulatory direction.

sc777 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations under RA 9160.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and BIR regulations.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Gaming Activity Data: Retained for the duration of the active account plus three (3) years, for dispute resolution and responsible gaming monitoring purposes.
• Customer Support Communications: Retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained for as long as the consent is active, plus one (1) year following withdrawal of consent.
• Technical/Log Data: Retained for twelve (12) months for security monitoring and fraud detection purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC data disposal guidelines.

sc777 implements a comprehensive set of organizational, technical, and physical security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your browser/device and sc777 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This covers all authentication, payment, and account management activities.
• Encryption at Rest: Sensitive personal data — including identity documents, financial data, and authentication credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Password Security: User passwords are never stored in plain text. sc777 uses bcrypt hashing with salt to store password data.
• Two-Factor Authentication (2FA): sc777 offers and strongly recommends 2FA for all player accounts as an additional layer of account security.
• Access Controls: Personal data is accessible only to sc777 personnel who have a legitimate business need for that access, subject to role-based access controls and audit logging.
• Fraud Detection Systems: sc777 operates real-time monitoring systems for fraud detection, including unusual login patterns, transaction anomalies, and suspicious account behavior.
• Regular Security Audits: sc777 conducts periodic security assessments and vulnerability testing to identify and remediate potential security weaknesses.

sc777 uses cookies and similar session technologies to operate the platform securely and to enhance your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the sc777 platform to function. They include session authentication tokens that keep you logged in during your active session, security cookies that protect against cross-site request forgery (CSRF), and cookies that remember your account preferences. These cookies cannot be disabled without disrupting the platform's core functionality.
• Functional Cookies: These cookies remember choices you make (such as your preferred language, game lobby view, or notification settings) to provide a more personalized experience on sc777. They are not required for platform operation but improve usability.
• Analytics Cookies: sc777 uses first-party analytics cookies to understand aggregated, de-identified usage patterns on the platform — such as which games are most popular, which pages have high exit rates, and how players navigate the lobby. This data helps sc777 improve the platform. No individual player is identified through analytics data.

sc777 does not use third-party advertising or tracking cookies. Your browsing behavior on sc777 is not shared with ad networks or data brokers.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to sc777 and accessing the platform.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by sc777. All requests may be submitted to sc777's Data Protection Officer using the contact details in Section 14 and will be responded to within fifteen (15) business days of receipt.

If you believe a person under 21 has registered on sc777, please notify our Data Protection Officer immediately using the contact details in Section 14. Protecting minors from online gambling is a legal obligation and a core ethical commitment of sc777.

sc777's primary data processing infrastructure is hosted on servers located within jurisdictions that provide adequate data protection standards. Where personal data is transferred outside the Philippines — for example, to international game software providers or cloud infrastructure providers — sc777 ensures that appropriate safeguards are in place as required under Section 21 of RA 10173.

Safeguards for cross-border transfers include:

• Standard contractual clauses incorporating data protection obligations equivalent to Philippine DPA requirements;
• Transfer only to recipients in countries recognized by the NPC as providing adequate levels of personal data protection;
• Binding corporate rules where transfers are made within a corporate group;
• Explicit consent where none of the above safeguards apply and transfer is legally permissible.

sc777 maintains a record of all cross-border data transfer arrangements, which is available for inspection upon request by the National Privacy Commission.

sc777 may amend this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or PAGCOR regulatory obligations. Material changes will be communicated to registered players via email (sent to the address on record) and via in-platform notification at least fourteen (14) days before the amended Policy takes effect.

The current version of this Privacy Policy, together with its effective date, is always available at sc777.one/privacy-policy. Continued use of the sc777 platform after the effective date of any amendment constitutes acceptance of the amended Privacy Policy.

For historical versions of this Privacy Policy or questions about specific amendments, please contact the sc777 Data Protection Officer.

For any questions, concerns, or formal data privacy rights requests in connection with this Privacy Policy or sc777's handling of your personal data, please contact the sc777 Data Protection Officer:

• Email: [email protected] — use the subject line "Data Privacy Inquiry" or "Data Privacy Rights Request"
• Live Chat: Available 8:00 AM – 2:00 AM Philippine Standard Time via the sc777 platform — for general data privacy questions

sc777 will acknowledge all data privacy requests within three (3) business days and will provide a substantive response within fifteen (15) business days of receipt. If additional time is required due to the complexity of a request, sc777 will notify you of the extension and reason before the initial 15-day period expires.