7spi Casino Privacy Policy — How We Protect Your Personal Data

1. Introduction

This Privacy Policy ("Policy") describes how 7spi Casino ("7spi," "we," "us," "our") collects, processes, stores, shares, and protects the personal information of individuals who access and use the 7spi Casino website, mobile platform, games, payment services, and all associated features available at 7spi.cam (collectively, the "Platform").

7spi is committed to protecting the privacy and personal data of all Filipino players and other users of the Platform in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission ("NPC"). By registering for a 7spi account, logging in, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal information as described herein.

This Policy must be read in conjunction with the 7spi Terms and Conditions and the Responsible Gaming Policy. If you have questions about this Policy or about how 7spi handles your personal data, please refer to the Contact section at the end of this document.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, the personal information controller responsible for your data is 7spi Casino, operating through the domain 7spi.cam. As the personal information controller, 7spi determines the purposes and means by which your personal data is processed on the Platform.

Where 7spi engages third-party service providers — including game studios, payment processors, and fraud prevention services — to process personal data on its behalf, those third parties act as personal information processors under 7spi's instructions and are bound by appropriate data processing agreements that require them to maintain confidentiality and implement appropriate technical and organizational security measures.

3. Personal Data We Collect

7spi collects the following categories of personal information from users of the Platform:

3.1 Registration and Identity Data

• Full legal name (first name, middle name, last name)
• Date of birth (required for age verification — 21+ only)
• Residential address (barangay, city/municipality, province, region)
• Mobile phone number (Philippine mobile number in +63 format)
• Email address
• Username and account credentials (password is stored in hashed form only)
• Gender (optional, for personalization purposes)

3.2 Identity Verification (KYC) Data

• Government-issued photo ID (e.g., Philippine passport, driver's license, SSS ID, UMID, PhilSys National ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of GCash or bank account registered in your name)
• Selfie or facial photograph for identity match verification, where required

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment methods
• Payment method details (GCash mobile number, PayMaya account reference, bank account name and number where applicable)
• Bonus and promotional activity records
• Account balance history

3.4 Gaming Activity Data

• Game session records, including games played, bet amounts, win/loss outcomes, session duration, and timestamps
• Sports betting selections and wager history
• Responsible gaming tool usage (deposit limits set, self-exclusion periods, session time limits)

3.5 Technical and Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session cookies and login tokens
• Pages visited on the Platform, click patterns, and navigation paths
• Error logs and performance data

3.6 Communications Data

• Contents of support chat conversations, emails, and other communications with the 7spi team
• Survey responses and feedback submitted through the Platform
• Promotional communication preferences (opt-in/opt-out status for SMS, email, and push notifications)

4. How We Collect Your Data

7spi collects your personal data through the following means:

• Directly from you: Information you provide when you register a 7spi account, complete KYC verification, make deposits or withdrawals, contact support, or respond to surveys and promotions.
• Automatically through the Platform: Technical and device data collected through cookies, session tokens, server logs, and analytics tools when you access or use the 7spi website or app.
• From third-party service providers: Identity verification data from KYC providers, fraud signals from fraud prevention partners, and transaction data from payment processors such as GCash, PayMaya, and banking partners.
• From publicly available sources: Information that is publicly available and relevant to compliance obligations, such as politically exposed person (PEP) screening results from publicly maintained lists.

5. How We Use Your Personal Data

7spi processes your personal data for the following specific purposes:

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 7spi processes your personal information on the following lawful bases:

• Consent: Where you have given explicit, informed consent to the processing of your personal data for a specific purpose — for example, opting in to receive promotional SMS or email communications from 7spi. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Performance of Contract: Processing that is necessary for the performance of the contract between you and 7spi — namely, the Terms and Conditions you accepted when registering your 7spi account. This includes account management, game delivery, and payment processing.
• Legal Obligation: Processing that is required by applicable law, including the Data Privacy Act, Anti-Money Laundering Act, and gaming regulations administered by PAGCOR, including mandatory KYC procedures, age verification, and suspicious transaction reporting.
• Legitimate Interest: Processing that is necessary for the legitimate interests of 7spi or third parties, provided those interests are not overridden by your fundamental rights and freedoms. This includes fraud prevention, platform security, and internal analytics to improve the 7spi experience for Filipino players.

7. Data Sharing & Disclosure

7spi does not sell your personal data to any third party under any circumstances. We may share your personal information with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Game Providers and Studio Partners: Licensed game suppliers integrated with the 7spi Platform may receive session identifiers and pseudonymized gameplay data necessary to deliver their games. These providers are contractually prohibited from using such data for any purpose other than game delivery and compliance with their own regulatory obligations.
• Payment Processors: GCash (G-Xchange, Inc.), PayMaya Philippines, and banking partners receive the financial information necessary to process your deposit and withdrawal transactions. These entities maintain their own privacy and security standards as regulated financial service providers.
• KYC and Identity Verification Providers: Third-party identity verification services may process your KYC documents and biometric data on 7spi's behalf for age and identity confirmation purposes.
• Fraud Prevention and Security Services: Specialized providers that help 7spi detect and prevent fraudulent activity, unauthorized account access, and money laundering on the Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive personal data where disclosure is required by law, court order, or regulatory directive.
• Professional Advisers: Lawyers, auditors, and accountants engaged by 7spi may access personal data on a need-to-know basis in connection with their professional services, subject to professional confidentiality obligations.

8. International Data Transfers

The 7spi Platform serves Filipino players and operates primarily within the Philippines. However, certain third-party service providers — including some game studios, platform technology providers, and cloud infrastructure partners — may be located outside the Philippines and may process your personal data in their respective jurisdictions.

Where personal data is transferred outside of the Philippines, 7spi takes steps to ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required by the Philippine Data Privacy Act. These safeguards may include data processing agreements incorporating the NPC's standard contractual clauses, binding corporate rules, or processing in jurisdictions recognized as providing an adequate level of data protection.

9. Data Retention

7spi retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:

• Active account data: Retained for the duration of your active 7spi account plus a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under the AMLA.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLC requirements and applicable accounting regulations.
• Support communications: Retained for three (3) years from the date of the last interaction, or longer if the communication is relevant to an ongoing dispute or regulatory matter.
• Marketing and preference data: Retained until you withdraw consent or until 12 months following your last active engagement with 7spi communications, whichever comes first.
• Technical log data: Retained for 12 months for security and fraud investigation purposes, then deleted or anonymized.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with 7spi's internal data disposal procedures.

10. Data Security

7spi implements technical and organizational measures appropriate to the risk profile of the personal data it processes to protect against unauthorized access, accidental loss, destruction, and alteration. These measures include:

• Encryption: All data transmitted between your device and the 7spi Platform is encrypted using Transport Layer Security (TLS 1.2 or higher). Passwords are stored exclusively in hashed form using industry-standard algorithms and are never stored in plaintext.
• Access Controls: Access to personal data within 7spi's internal systems is restricted on a role-based, need-to-know basis. All internal access is logged and subject to regular audit.
• Two-Factor Authentication: 7spi offers two-factor authentication for player accounts and requires it for administrative access to internal systems containing personal data.
• Network Security: The 7spi Platform is protected by firewalls, intrusion detection systems, and DDoS mitigation services. Regular penetration testing and vulnerability assessments are conducted by independent security specialists.
• Staff Training: All 7spi personnel with access to personal data receive mandatory data protection and information security training and are bound by confidentiality obligations.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. 7spi cannot guarantee absolute security but commits to implementing security standards consistent with industry best practices and applicable Philippine regulatory requirements.

11. Cookies & Tracking Technologies

The 7spi Platform uses cookies and similar tracking technologies — including local storage, session tokens, and analytics pixels — to deliver and improve the Platform experience. Cookies are small text files stored on your device by your browser when you visit the 7spi website.

11.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function properly. These include session authentication cookies that keep you logged in to your 7spi account during a session and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without impairing core functionality.
• Functional Cookies: Store your preferences such as language settings, responsible gaming tool configurations, and game display preferences to provide a more personalized 7spi experience.
• Analytics Cookies: Used to understand how players navigate the 7spi Platform — which pages are visited most, how long players spend in different sections, and where technical errors occur. This data is used in aggregate form to improve the Platform.
• Marketing Cookies: Where you have consented, these cookies help 7spi serve relevant promotional content and measure the effectiveness of marketing campaigns. You can withdraw consent for marketing cookies at any time through your browser settings.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to and use the 7spi Platform.

12. Your Privacy Rights Under Philippine Law

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 7spi. To exercise any of these rights, please contact the 7spi Data Protection Officer using the contact details in Section 15 of this Policy.

7spi will respond to all verified privacy rights requests within thirty (30) calendar days of receipt. In cases where the request is complex or where a high volume of requests has been received, this period may be extended by a further sixty (60) days, in which case you will be informed of the extension and the reason for it.

13. Minors & Age Policy

The 7spi Platform is strictly for individuals aged 21 years and older, in accordance with applicable Philippine gaming regulations. 7spi does not knowingly collect personal information from individuals under the age of 21.

If 7spi becomes aware that it has collected personal data from a person under the age of 21 — whether through the account registration process or subsequently — the relevant account will be immediately suspended, all funds will be frozen pending investigation, and the personal data of the underage individual will be securely deleted from 7spi's systems as soon as practicable, subject to any legal obligations requiring its temporary retention for reporting purposes.

14. Changes to This Privacy Policy

7spi reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, the services we offer, or applicable legal and regulatory requirements. When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and will notify registered 7spi players via email or an in-platform notification prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how 7spi protects your personal data. Your continued use of the 7spi Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

15. Contact & Data Protection Officer

If you have questions, concerns, or requests related to this Privacy Policy or 7spi's handling of your personal data, or if you wish to exercise any of your rights under the Philippine Data Privacy Act, please contact the 7spi Data Protection Officer:

For complaints about the processing of your personal data that you feel have not been adequately resolved by 7spi, you may file a complaint with the National Privacy Commission of the Philippines. The NPC is the government agency responsible for administering and enforcing the Data Privacy Act of 2012.