segi777 Privacy Policy

This Privacy Policy ("Policy") describes how segi777 ("segi777," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you," "your," or "Data Subject") who access or use the segi777 platform, including the website at segi777.app, the segi777 mobile application, and all related services (collectively, the "Platform").

segi777 is committed to protecting the privacy and personal data of all Filipino players and users of the Platform. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on the segi777 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the segi777 Platform.

This Policy should be read together with segi777's Terms & Conditions, which govern your use of the Platform. Defined terms used but not defined in this Policy have the meanings given to them in the Terms & Conditions.

For the purposes of the Philippine Data Privacy Act of 2012, segi777 is the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, segi777 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data privacy laws and regulations.

segi777 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy.

Where segi777 engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors (PIPs) and are contractually required to process personal data only in accordance with segi777's instructions and in compliance with RA 10173.

segi777 collects the following categories of personal data from users of the Platform. We collect only the data that is necessary for the purposes described in Section 5 of this Policy.

segi777 does not intentionally collect sensitive personal information as defined under RA 10173 (such as health data, religious beliefs, or political affiliations) unless specifically required by law or PAGCOR regulations, in which case you will be separately notified and your explicit consent obtained.

segi777 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity logs.
• Cookies and tracking technologies: Data collected through cookies, web beacons, and similar technologies as described in Section 10 of this Policy.
• Third-party sources: Identity verification data from KYC service providers; fraud detection data from anti-money laundering (AML) screening services; payment verification data from GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory sources: Data received from PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

segi777 processes your personal data only for specific, legitimate purposes and on a valid legal basis under RA 10173. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each.

segi777 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• PAGCOR and Philippine regulatory authorities: segi777 is required by law to report certain player data and gaming activity to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) of the Philippines. Such disclosures are mandatory and do not require your separate consent.
• KYC and identity verification providers: Third-party providers engaged to verify your identity and documents as part of the account registration and KYC process.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers engaged to process your deposits and withdrawals. These providers receive only the data necessary to complete your transaction.
• Fraud prevention and AML screening services: Third-party providers engaged to screen transactions and player activity for fraud, money laundering, and other financial crimes.
• IT and platform service providers: Cloud hosting, data storage, and platform infrastructure providers engaged to operate the segi777 Platform. All such providers are contractually bound to process data only on segi777's instructions.
• Legal and law enforcement authorities: Where required by a valid court order, subpoena, or lawful request from a Philippine law enforcement or government authority.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of segi777's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom segi777 shares personal data are required to maintain appropriate technical and organizational security measures and to process personal data only in accordance with segi777's instructions and applicable Philippine data privacy law.

segi777 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act (RA 9160, as amended).
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLC regulations.
• Gaming activity data: Retained for a minimum of three (3) years following account closure.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last communication.
• Marketing preference data: Retained until you withdraw your consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, segi777 will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless further retention is required by law.

segi777 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the segi777 Platform.
• AES-256 encryption for sensitive data stored in segi777's databases, including financial data and identity documents.
• Multi-factor authentication (MFA) options for player account access.
• Role-based access controls limiting internal access to personal data to authorized personnel only, on a need-to-know basis.
• Regular security audits and penetration testing of the segi777 Platform and infrastructure.
• 24/7 security monitoring and intrusion detection systems.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, segi777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected Data Subjects without undue delay, in accordance with NPC Circular No. 16-03 and applicable NPC issuances.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by segi777. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14.

segi777 will respond to all data privacy rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, in which case you will be notified of the extension and the reason for it.

Please note that certain rights are subject to limitations under RA 10173. For example, the right to erasure does not apply where segi777 is required to retain your data to comply with a legal obligation, such as PAGCOR record-keeping or AMLC reporting requirements.

The segi777 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain your session, and collect analytical data about Platform usage. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, authentication, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytical Cookies: Used to collect aggregated, anonymized data about how users interact with the Platform, including pages visited, time spent, and navigation paths. This data helps segi777 improve the Platform.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the segi777 Platform, including account login and game access.

segi777 does not use third-party advertising cookies or share cookie data with external advertising networks.

The segi777 Platform is strictly intended for individuals who are 21 years of age or older, in compliance with Philippine law and PAGCOR regulations governing online casino gaming. segi777 does not knowingly collect personal data from individuals under the age of 21.

If segi777 becomes aware that personal data has been collected from an individual under the age of 21, it will immediately close the relevant account, delete the personal data collected, and return any deposits made, less any amounts already wagered, in accordance with segi777's Terms & Conditions.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account on the segi777 Platform, please contact our Data Protection Officer immediately using the contact details in Section 14.

segi777 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services.

Where personal data is transferred outside the Philippines, segi777 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual data processing agreements requiring the recipient to maintain data protection standards equivalent to those required under RA 10173.
• Transfer only to countries or organizations that the NPC has determined provide an adequate level of data protection.
• Implementation of standard contractual clauses approved by the NPC where no adequacy determination exists.

By using the segi777 Platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

segi777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When material changes are made to this Policy, segi777 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how segi777 protects your personal data. Your continued use of the segi777 Platform following the publication of any changes constitutes your acceptance of the revised Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by segi777, please contact our Data Protection Officer (DPO). All data privacy rights requests and privacy-related complaints should be directed to the DPO in the first instance.

If you are not satisfied with segi777's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173.

For questions about responsible gaming or self-exclusion, please visit our Responsible Gaming page. For general platform terms, please refer to our Terms & Conditions.