sb777 Privacy Policy

This Privacy Policy ("Policy") is issued by the operator of the sb777 online gaming platform ("sb777", "we", "us", "our") and applies to all personal information collected from individuals ("you", "Player") who access or use the sb777 platform at sb777.bet, including during account registration, gameplay, transactions, customer support interactions, and any other activity on the platform.

This Policy should be read together with the sb777 Terms and Conditions, which govern the overall relationship between you and sb777. By registering an Account on the sb777 platform or by otherwise providing your personal information to sb777, you confirm that you have read this Policy and consent to the collection and processing of your personal data as described herein.

This Policy applies to personal information collected through the sb777 website and browser-based platform. It does not apply to any third-party websites, services, or platforms that may be linked from within the sb777 platform — those services operate under their own privacy policies.

For the purposes of the Data Privacy Act of 2012 and this Policy, sb777 — the operator of the gaming platform accessible at sb777.bet — is the personal information controller ("PIC") responsible for the collection and processing of your personal data.

sb777 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection law. If you need to contact our DPO in relation to any data privacy matter, please reach out through the support contact details provided in Section 16 of this Policy, referencing "Data Protection Officer" in your message.

sb777 processes your data primarily within the Republic of the Philippines and in jurisdictions where its technology infrastructure and service providers are located. All international data transfers are subject to appropriate safeguards as described in Section 11 of this Policy.

sb777 collects the following categories of personal information from Players, depending on your level of account activity and the services you use:

4.1 Directly from You

The majority of the personal data sb777 holds about you is provided directly by you during account registration, KYC verification, payment transactions, customer support interactions, and the completion of any promotional opt-in or survey. You can choose not to provide certain data, but this may prevent you from accessing specific features — for example, withdrawal functionality requires completed KYC.

4.2 Automatically During Platform Use

When you access the sb777 platform, our servers automatically collect technical data including your IP address, device identifiers, browser type, operating system, session duration, and navigation patterns. This data is collected using server logs, cookies, and similar tracking technologies. Please refer to Section 8 for full details on our cookie practices.

4.3 From Third-Party Service Providers

sb777 may receive personal data about you from third-party sources in limited circumstances, including:

• Payment processors (GCash, Maya, BPI, BDO, etc.) — to confirm transaction status and validate payment instrument ownership
• KYC verification service providers — to cross-reference identity document data against authoritative databases
• Fraud prevention and anti-money laundering screening services — to flag accounts against sanctions lists or known fraud patterns

Data received from third-party providers is handled with the same protections as data collected directly from you.

sb777 processes your personal data for the following specific purposes:

sb777 does not process your personal data for automated individual decision-making that produces significant legal effects without human review. All account suspensions and KYC failure determinations involve human review at the relevant stage.

Under the Data Privacy Act of 2012, sb777 relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to perform the contract between you and sb777 — including account creation, payment processing, game provision, and withdrawal services. Without this processing, sb777 cannot provide the services you have contracted for.
• Consent: Where you have provided explicit consent — for example, opting in to receive promotional SMS communications or marketing notifications. You may withdraw consent at any time by contacting sb777 support, though withdrawal will not affect the lawfulness of processing carried out before the withdrawal.
• Legal obligation: Processing required to comply with applicable law — including PAGCOR regulatory reporting, anti-money laundering obligations, tax record retention, and responses to lawful requests from Philippine government authorities.
• Legitimate interests: Processing for sb777's legitimate business interests that do not override your fundamental rights — including fraud detection, platform security, responsible gaming monitoring, and aggregated analytics for platform improvement.

7.1 We Do Not Sell Your Data

sb777 does not sell, rent, or otherwise trade your personal data to any third party for their own commercial purposes. This is an absolute commitment — not a qualified one.

7.2 Permitted Disclosures

sb777 may share your personal data with the following categories of recipients only to the extent strictly necessary:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Visa/Mastercard acquiring banks, and USDT wallet service providers — for the sole purpose of processing your deposit and withdrawal requests.
• KYC verification providers: Third-party identity verification services used to validate your government-issued ID and confirm that you meet age and identity requirements.
• Fraud prevention services: Compliance screening providers used to check player identities against sanctions lists, politically exposed persons databases, and known fraud networks.
• Game content providers: Licensed game developers whose games are hosted within the sb777 platform may receive anonymised session data necessary for their game operation. Personal identifying information is not shared with game providers unless legally required.
• Regulatory authorities: PAGCOR and other Philippine government agencies as required by applicable law, court order, or regulatory request.
• Technology service providers: Cloud hosting, database management, and cybersecurity service providers operating under strict data processing agreements that prohibit them from using your data for any purpose other than providing services to sb777.

7.3 Business Transfers

In the event of a merger, acquisition, asset sale, or business restructuring involving sb777, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any changes to data processing practices that may result from it, prior to the transfer taking effect.

The sb777 platform uses cookies and similar tracking technologies (including session tokens and local storage) to enable core functionality, maintain your login session, and improve platform performance. The following categories of cookies are used by sb777:

sb777 does not use third-party advertising cookies or cross-site tracking cookies that monitor your behaviour on websites other than sb777.bet. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in or using the platform.

sb777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Account data and transaction records: Retained for a minimum of five (5) years following Account closure, in compliance with anti-money laundering record-keeping obligations under Philippine law.
• KYC documents: Retained for the duration of the account relationship and for five (5) years following closure, in compliance with PAGCOR and AMLC requirements.
• Gaming activity logs: Retained for five (5) years for regulatory compliance and dispute resolution purposes.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.
• Marketing consent records: Retained for the period during which consent is active plus three (3) years following withdrawal of consent, as evidence of the lawful basis for any communications sent.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised so that it can no longer be linked back to you as an individual. Anonymised data may be retained indefinitely for statistical analysis and platform improvement purposes.

sb777 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser and sb777's servers is encrypted in transit using current TLS standards.
• At-rest encryption: Sensitive personal data — including KYC documents and financial details — is encrypted at rest in sb777's databases using AES-256 or equivalent standard encryption.
• Password hashing: Account passwords are never stored in plain text. They are hashed using a strong one-way hashing algorithm (bcrypt or equivalent). sb777 staff cannot retrieve your password — only reset it through the authenticated recovery process.
• Access controls: Internal access to personal data is restricted to authorized personnel on a strict need-to-know basis. All internal access is logged and subject to regular audit review.
• Two-factor authentication: Players are strongly encouraged to enable SMS-based 2FA on their Accounts. Internal sb777 staff with access to personal data systems are required to use 2FA.
• Penetration testing and security audits: sb777 conducts regular security assessments of its infrastructure and applications.
• Breach response: In the event of a personal data breach that poses a risk to you, sb777 will notify the National Privacy Commission (NPC) and affected Players within the timeframes required by the Data Privacy Act and its IRR.

Despite these measures, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your Account credentials and for notifying sb777 promptly if you suspect unauthorized access to your Account.

The sb777 platform is primarily operated from and for the Philippines. However, some of sb777's technology infrastructure providers — including cloud hosting services and certain game content providers — may operate data centers in jurisdictions outside the Philippines, including in Asia-Pacific regions.

Where personal data is transferred outside the Philippines, sb777 ensures that appropriate safeguards are in place as required by the Data Privacy Act of 2012. These safeguards include:

• Contractual data processing agreements that require overseas processors to maintain data protection standards equivalent to those required under Philippine law
• Transfer only to jurisdictions that the National Privacy Commission has recognized as providing adequate levels of data protection
• Data minimization — only the minimum data necessary for the specific cross-border processing purpose is transferred

By creating an Account and using the sb777 platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described in this section.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sb777. To exercise any of these rights, contact sb777 support as described in Section 16:

Requests to exercise data subject rights will be acknowledged within five (5) business days. sb777 aims to fully respond to all requests within thirty (30) days. Complex requests may require additional time, in which case you will be notified of the extended timeline and the reason for it. Identity verification will be required before processing any data subject request to ensure that data is not disclosed to unauthorized parties.

The sb777 platform is strictly prohibited for individuals under the age of 21 years. This minimum age requirement is prescribed by PAGCOR regulations governing online gaming in the Philippines. sb777 does not knowingly collect or process personal data from individuals who are under 21 years of age.

If sb777 discovers or has reason to believe that personal data has been collected from an individual who is under the minimum age, the Account will be immediately closed, all gameplay will be voided, and the personal data of the minor will be deleted without delay, except where retention is required by law for fraud investigation or regulatory reporting purposes.

If you have reason to believe that a minor has registered an Account on the sb777 platform, please contact sb777 support immediately with any relevant details. sb777 takes reports of underage access seriously and will act on them promptly.

The sb777 platform integrates third-party game content from licensed providers including Pragmatic Play, PG Soft, Habanero, Jili, and other developers. When you play these games within the sb777 platform interface, certain session data — including bet amounts, game round identifiers, and RNG seed data — is transmitted to the relevant game provider's servers as technically necessary for the game to function. This data exchange is governed by data processing agreements between sb777 and each game provider.

sb777's platform may also integrate third-party payment services (GCash, Maya, BPI, BDO, etc.) that redirect you to external transaction screens or apps. When you interact with these external payment interfaces, your data is processed by the respective financial institution under their own privacy policies and terms. sb777 is not responsible for the privacy practices of third-party payment providers once you leave the sb777 payment initiation screen.

This Policy does not apply to the privacy practices of any third party whose services may be accessible through or alongside the sb777 platform. You should review the privacy policies of any third-party service you interact with.

sb777 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal requirements. All updates will be published at sb777.bet/privacy-policy with the "Last updated" date revised accordingly.

Where changes are material — meaning they significantly affect how we process your personal data or expand the purposes for which your data is used — sb777 will provide advance notice to registered Players via platform notification or SMS (to your registered Philippine mobile number) at least seven (7) days before the changes take effect, unless a shorter period is required by law.

Your continued use of the sb777 platform following the effective date of any update constitutes your acceptance of the revised Policy. If you do not agree with a material change to this Policy, you should close your Account before the change takes effect. Previous versions of this Policy are available on request from sb777 support.

16.1 Contacting sb777 About Privacy

For any questions, concerns, or requests relating to this Privacy Policy or the personal data sb777 holds about you, please contact our support team through the live chat feature available on the sb777 platform or by writing to:

Privacy inquiries and data subject requests:
[email protected]
(plain text — not a clickable link)
Please include "Privacy Request" in the subject line of your message.

All privacy-related inquiries are handled by sb777's Data Protection Officer or a designated deputy. You will receive an acknowledgement within five (5) business days of receipt of your inquiry.

16.2 Complaints to the National Privacy Commission

If you are not satisfied with sb777's response to a privacy concern or data subject rights request, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent authority responsible for enforcing the Data Privacy Act of 2012 and protecting the privacy rights of Philippine residents.

sb777 cooperates fully with NPC investigations and respects the authority of the NPC in all matters relating to personal data protection.