Privacy Policy – sss777

1. Data Controller

1.1   The data controller responsible for personal data collected via the sss777 platform at sss777.biz is sss777 ("we," "us," "our," or "the Platform"). All data processing activities described in this Privacy Policy are carried out by sss777 or by third-party processors acting under written data processing agreements with sss777.

1.2   sss777 operates in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and any relevant issuances of the National Privacy Commission ("NPC"). Where PAGCOR regulations impose additional data handling obligations on licensed online gaming operators, those obligations take precedence.

1.3   For all privacy-related inquiries, you may contact our designated Data Privacy Officer (DPO) at [email protected] with the subject line "Data Privacy Request."

2. Personal Data We Collect

2.1   sss777 collects personal data from you directly (when you register, deposit, play, or contact support) and indirectly (through your use of the platform, including technical and behavioral data). The categories of data we collect include:

2.2   sss777 does not collect special categories of sensitive personal data (such as health data, biometric data, or political opinions) except where required by law or expressly provided by you for a specific purpose such as self-exclusion on medical grounds.

3. How We Use Your Personal Data

3.1   sss777 uses the personal data collected for the following purposes:

• Account Creation and Management: To register your account, verify your identity, and maintain your player profile on the sss777 platform;
• Game Provision: To provide you with access to the sss777 game library, process bets, calculate and credit winnings, and manage your account balance;
• Payment Processing: To facilitate deposits via GCash, Maya, and Philippine bank transfers, and to process withdrawal requests to your verified payment methods;
• Identity Verification (KYC): To verify your identity and age in compliance with PAGCOR regulations and the Anti-Money Laundering Act;
• Regulatory Compliance: To meet obligations under PAGCOR, the AMLC, the NPC, and other Philippine regulatory bodies, including filing of suspicious transaction reports where required by law;
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and platform abuse;
• Responsible Gaming: To monitor gaming behavior, enforce deposit limits and self-exclusion requests, and provide responsible gaming interventions where warranted;
• Customer Support: To respond to your inquiries, resolve account and payment disputes, and communicate material platform updates;
• Platform Improvement: To analyze aggregated usage data for performance optimization and product development — this analysis uses anonymized or pseudonymized data where possible.

4. Legal Bases for Processing

4.1   sss777 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfill sss777's obligations to you under the Terms & Conditions, including account management, game provision, and payment processing;
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), and NPC regulations;
• Legitimate Interest: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests do not override your fundamental data rights;
• Consent: Where you have provided specific, informed, and freely given consent for a particular processing activity, such as receiving promotional communications. You may withdraw consent at any time by contacting [email protected].

5. Sharing and Disclosure of Personal Data

5.1   sss777 does not sell, rent, or trade your personal data to third parties for their marketing purposes under any circumstances.

5.2   sss777 shares personal data with the following categories of recipients where necessary:

• PAGCOR and Philippine Regulatory Authorities: As required by sss777's operating license and applicable Philippine gaming and financial law;
• Anti-Money Laundering Council (AMLC): Where transaction monitoring triggers mandatory reporting obligations under RA 9160;
• National Privacy Commission (NPC): In the event of a personal data breach requiring mandatory notification, or in response to lawful NPC investigations;
• Payment Service Providers: GCash (Mynt), Maya (PayMaya Philippines, Inc.), BancNet, and Philippine bank partners — to the minimum extent necessary to process deposits and withdrawals;
• KYC / Identity Verification Providers: Third-party verification services operating under written data processing agreements with sss777, used to validate government ID documents during KYC;
• Game Software Providers: Licensed game studios whose games are hosted on sss777 may receive session-level data necessary to operate their game software — individual identity data is not shared with game studios;
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

5.3   All third-party processors engaged by sss777 are bound by contractual data processing agreements requiring them to handle your data only as directed by sss777 and in compliance with applicable Philippine data protection law.

6. Data Retention

6.1   sss777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML record-keeping obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act;
• Gaming Session Logs: Retained for three (3) years from the date of the session for dispute resolution and regulatory audit purposes;
• Support Communications: Retained for two (2) years from the date of the last communication, unless ongoing legal proceedings require longer retention;
• Technical and Log Data: Retained for twelve (12) months from collection date, or longer where required for active security investigations.

6.2   Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized, unless retention is required by a valid legal hold or pending regulatory investigation.

7. Cookies and Tracking Technologies

7.1   sss777 uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential Cookies: Required for platform functionality including session management and login state. Cannot be disabled without impairing platform use;
• Security Cookies: Used to detect fraudulent login attempts and unauthorized account access. Essential for platform security;
• Analytics Cookies: Used to analyze aggregated user behavior for platform performance optimization. Data is pseudonymized before analysis;
• Preference Cookies: Store your platform preferences such as language and display settings.

7.2   sss777 does not use third-party advertising or retargeting cookies. Analytics data is processed exclusively for internal platform improvement purposes and is not shared with advertising networks.

7.3   You may manage cookie preferences through your browser settings. Disabling essential or security cookies will impair platform functionality and may prevent login to your sss777 account.

8. Data Security

8.1   sss777 implements technical and organizational security measures appropriate to the risk level of processing your personal data. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and sss777 servers;
• Encryption of sensitive stored data including payment details and KYC document references;
• Access controls limiting personal data access to sss777 personnel with a demonstrated business need;
• Multi-factor authentication for internal sss777 systems handling personal data;
• Regular penetration testing and security audits of platform infrastructure;
• Mandatory data security training for all sss777 staff with access to personal data.

8.2   In the event of a personal data breach that is likely to result in harm to affected data subjects, sss777 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected users as required by the NPC's breach notification guidelines.

9. Your Data Rights

9.1   Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sss777:

• Right to be Informed: To know what personal data we hold about you and how it is processed;
• Right of Access: To request a copy of the personal data sss777 holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure: To request deletion of your personal data, subject to our legal retention obligations under PAGCOR and AML regulations;
• Right to Object: To object to processing based on legitimate interest where your rights override that interest;
• Right to Data Portability: To receive a structured, machine-readable copy of personal data you have provided to sss777, where technically feasible;
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

9.2   To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Rights Request." Include your registered mobile number or email address and a description of the right you wish to exercise. sss777 will respond within fifteen (15) business days of receiving a verified request.

10. Children's Privacy

10.1   sss777 is strictly intended for adults aged twenty-one (21) years and older. sss777 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from an underage individual, we will immediately close the associated account and delete the data, subject to any mandatory AML record-keeping obligations.

10.2   If you believe a person under 21 has registered on sss777, please contact [email protected] immediately to report the matter.

11. Cross-Border Data Transfers

11.1   Certain third-party service providers engaged by sss777, including game software providers and KYC verification partners, may process or store personal data on servers located outside the Philippines. In all such cases, sss777 ensures that appropriate contractual safeguards are in place, including data processing agreements that impose obligations equivalent to those required under Philippine data protection law.

11.2   sss777 does not transfer personal data to jurisdictions that the NPC has determined to offer inadequate data protection unless additional safeguards have been implemented.

12. Changes to This Privacy Policy

12.1   sss777 reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the platform's data processing activities. Material changes will be notified to registered users via email or an in-platform notification at least seven (7) days before the change takes effect.

12.2   Continued use of the sss777 platform following notification of a revised Privacy Policy constitutes acceptance of the revised terms. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

13. Contact & Data Privacy Officer

13.1   For all data privacy inquiries, rights requests, or complaints, please contact sss777's designated Data Privacy Officer at [email protected] with the subject line "Data Privacy Request." Include your registered contact details to allow us to identify and respond to your account.

13.2   If you are not satisfied with sss777's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC). The NPC accepts complaints from Philippine data subjects relating to processing by Philippine-registered organizations.

13.3   This Privacy Policy was last reviewed and updated in June 2026.