Privacy Policy – 7gl Casino

This Privacy Policy ("Policy") is issued by 7gl Casino ("7gl", "Company", "we", "us", "our") and governs the collection, processing, storage, disclosure, and disposal of personal data relating to all individuals who use or interact with the 7gl platform accessible at 7gl.asia, including registered members, visitors, and any person who contacts 7gl customer support.

7gl is committed to protecting your privacy in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Republic of the Philippines. 7gl also observes applicable regulations issued by the Philippine Amusement and Gaming Corporation (PAGCOR) governing the handling of player data in the online gaming sector.

By registering for a 7gl account, continuing to use the 7gl platform after the effective date of this Policy, or submitting personal data to 7gl through any channel, you confirm that you have read, understood, and consent to the data practices described herein. If you do not agree to this Policy, please discontinue use of the 7gl platform and contact us to request account closure.

For the purposes of this Policy, the following terms carry the meanings set out below:

Personal Data

Any information — whether recorded in material form or not — from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual.

Sensitive Personal Information

Personal data about an individual's race, ethnic origin, marital status, age, colour, and religious, philosophical or political affiliations or beliefs; health, education, genetic or sexual life; or information issued by government bodies, including social security numbers and tax identification numbers.

Processing

Any operation or set of operations performed upon personal data including, but not limited to, collection, recording, organisation, storage, updating, retrieval, consultation, use, consolidation, blocking, erasure, or destruction.

Data Controller

7gl Casino — the natural or juridical person, or any other body who controls the collection, holding, processing, or use of personal data.

Data Subject

An individual whose personal data is collected, held, processed, or used by 7gl Casino — in this context, you, the player or visitor.

Data Protection Officer

The individual designated by 7gl to ensure compliance with the Data Privacy Act and this Policy, and to serve as point of contact for data subject rights requests and the NPC.

Consent

Any freely given, specific, informed indication of will, whereby the data subject agrees to the collection and processing of their personal data.

7gl Casino is the registered data controller for all personal data processed in connection with the 7gl.asia platform and its associated services. 7gl has appointed a Data Protection Officer (DPO) in compliance with Section 21 of the Data Privacy Act of 2012, as required for personal information controllers engaged in the processing of sensitive personal information as part of their core functions.

The 7gl DPO is responsible for overseeing data protection strategy and implementation, ensuring compliance with RA 10173 and NPC issuances, handling data subject rights requests, and serving as the primary contact point with the National Privacy Commission. All data privacy inquiries, requests, and complaints directed to 7gl should be addressed to the DPO via the contact details provided in Section 16 of this Policy.

7gl collects the categories of personal data described below. We collect only what is necessary for the specific purposes outlined in Section 6 and do not collect personal data speculatively or beyond what is proportionate to those purposes.

4.1 Registration and Identity Data

• Full legal name as it appears on a Philippine government-issued ID
• Date of birth (used to verify 21+ age requirement)
• Gender (optional, collected for personalisation purposes)
• Home address (city, province, and postal code within the Philippines)
• Philippine mobile number (primary account identifier and OTP channel)
• Email address (account communications and support correspondence)
• Government-issued ID type and number (for KYC verification — stored encrypted)
• Selfie or facial photograph (for enhanced identity verification where required)

4.2 Financial and Transaction Data

• GCash mobile number and last four digits of linked account (not the full GCash PIN or password)
• Maya account identifier used for deposits or withdrawals
• Bank account details (account name, bank name, and last four digits of account number) for bank transfer withdrawals
• Complete transaction history including deposit amounts, withdrawal amounts, dates, times, and payment method used
• Source of funds declarations required for enhanced due diligence

4.3 Gaming Activity Data

• Game session records including game title, session ID, start and end times, stake amounts, and outcomes
• Bonus redemption history and wagering progress records
• Loyalty points accumulated and redeemed
• Sports betting selections, odds accepted, and settlement records (where applicable)
• Responsible gaming tool settings including deposit limits, session limits, and cooling-off or self-exclusion elections

4.4 Technical and Device Data

• IP address at the time of each login and during active sessions
• Device type, operating system, and browser version
• Device identifier (where available and used for trusted-device recognition)
• Geolocation data at login (city/province level — not GPS-level tracking)
• Session duration and navigation path within the 7gl platform

4.5 Communication Data

• Content of live chat conversations with 7gl customer support
• Email correspondence sent to or received from 7gl support addresses
• SMS messages received by your registered mobile number from 7gl (system logs only — not the content of your personal SMS inbox)
• Records of marketing communication preferences and opt-out elections

7gl collects personal data through the following channels and mechanisms:

• Direct submission by you: Data you enter during account registration, the KYC verification process, deposit and withdrawal transactions, support communications, and any form-based interactions on the 7gl platform.
• Automated technical collection: Data generated automatically as a result of your use of the 7gl platform, including IP logs, session data, device identifiers, and browser telemetry collected via our platform infrastructure and session management systems.
• Payment processing partners: Transaction confirmation data, payment status codes, and partial payment instrument identifiers from GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment providers used to process your deposits and withdrawals.
• Identity verification service providers: Confirmation data from KYC verification partners who cross-reference identity documents against Philippine government databases where applicable and permitted by law.
• Anti-fraud and AML screening: Risk signals from anti-money laundering screening databases and fraud detection systems used to protect the integrity of the 7gl platform and comply with AMLA obligations.
• Cookies and similar tracking technologies: Data collected through browser cookies, local storage, and session tokens as detailed in Section 12 of this Policy.

7gl processes your personal data only for specific, declared, and legitimate purposes. Each processing activity is grounded in one or more of the lawful bases recognised under the Data Privacy Act of 2012: consent, contractual necessity, compliance with a legal obligation, protection of vital interests, or the pursuit of legitimate interests balanced against your rights.

7gl does not sell, rent, trade, or otherwise commercially transfer your personal data to third parties. We share personal data only under the circumstances described below, and only to the extent necessary for the stated purpose:

7.1 Service Providers and Processors

7gl engages reputable third-party service providers who process personal data on 7gl's behalf, subject to contractual data processing agreements that impose data protection obligations consistent with RA 10173. These include payment processors (GCash, Maya, Philippine banks), KYC and identity verification platforms, fraud detection and AML screening services, cloud infrastructure providers, and customer support platform operators. These processors are authorised to use your data only for the specific service they provide to 7gl and may not use it for their own independent purposes.

7.2 Regulatory and Law Enforcement Authorities

7gl will disclose personal data to Philippine government authorities, regulatory bodies, or law enforcement agencies when required to do so by law, regulation, court order, or other compulsory legal process. This includes mandatory reporting obligations to PAGCOR, the AMLC (Anti-Money Laundering Council), the NPC, and the Bureau of Internal Revenue (BIR) as applicable to our operations.

7.3 Game Content Providers

Third-party game suppliers whose titles are available on the 7gl platform may receive anonymised or pseudonymised session data necessary for the technical operation of their games. No personally identifiable information is shared with game content providers beyond what is required for game session authentication and jackpot verification purposes.

7gl's primary data processing infrastructure is located within the Republic of the Philippines. Where the use of internationally hosted cloud services or technology platforms necessitates the transfer of personal data outside the Philippines, 7gl ensures that such transfers comply with the requirements set out in NPC Circular No. 16-01 and subsequent NPC issuances governing cross-border data flows.

All cross-border transfers of 7gl player data are subject to contractual data transfer safeguards, including data processing agreements and, where applicable, standard contractual clauses that impose data protection obligations on receiving parties equivalent to those applicable under Philippine law. 7gl does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing appropriate supplementary safeguards.

7gl retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable Philippine legal and regulatory requirements that mandate minimum retention periods. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 7gl's data disposal procedures.

7gl implements a comprehensive set of technical, administrative, and physical security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures are reviewed and updated regularly to reflect developments in security best practices and the evolving threat landscape relevant to Philippine online gaming platforms.

• TLS 1.3 encryption in transit: All data transmitted between your browser or device and 7gl's servers is encrypted using TLS 1.3 or higher. The 7gl.asia domain enforces HTTPS for all connections.
• AES-256 encryption at rest: Personal data and sensitive financial information stored in 7gl's databases is encrypted at rest using AES-256 symmetric encryption with hardware security module (HSM)-protected key management.
• Access controls: Internal access to personal data is restricted to staff whose roles specifically require it, governed by role-based access controls, audit logging, and mandatory periodic access reviews.
• Multi-factor authentication for staff: All 7gl administrative personnel with access to production systems and player data are required to use multi-factor authentication for system access.
• Intrusion detection and monitoring: 7gl operates 24/7 network and application-layer intrusion detection systems with automated alerting for anomalous access patterns.
• Regular security assessments: 7gl engages qualified third-party security professionals to conduct periodic penetration testing and vulnerability assessments of the platform's technical infrastructure.
• Staff data privacy training: All 7gl employees who handle personal data receive mandatory training on RA 10173 obligations, internal data handling procedures, and social engineering awareness.

As a data subject under the Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by 7gl Casino. These rights are enforceable in the Philippines and can be exercised by contacting 7gl's Data Protection Officer using the details in Section 16. 7gl will respond to all rights requests within 15 business days of receipt of a verifiable request.

7gl uses cookies and similar client-side storage technologies to enable essential platform functionality, enhance user experience, maintain session security, and understand aggregate usage patterns. We do not use cookies to build detailed cross-site advertising profiles or to sell data to third-party advertising networks.

Types of Cookies Used by 7gl

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 7gl account, as these cookies are integral to the platform's session security architecture.

7gl Casino is strictly prohibited from collecting or processing personal data of individuals under 21 years of age for the purposes of account registration or participation in any real-money gaming activity. This age restriction is mandated by PAGCOR for all Philippine online gambling platforms and is non-negotiable under 7gl's operating conditions.

7gl implements mandatory age verification at the registration stage and requires documentary identity verification (KYC) prior to enabling withdrawal functionality. In the event that 7gl becomes aware that personal data has been collected from an individual who was under 21 years of age at the time of collection, 7gl will immediately suspend the associated account, delete the personal data to the extent not required for legal reporting obligations, and where appropriate, notify the relevant Philippine authorities.

In the event of a personal data breach that is likely to result in significant harm to affected data subjects, 7gl will comply with the mandatory breach notification obligations set out in Section 20(f) of the Data Privacy Act of 2012 and NPC Circular No. 16-03 (Personal Data Breach Management).

Specifically, 7gl will notify the National Privacy Commission within 72 hours of becoming aware of a reportable breach, and will notify affected data subjects within a reasonable time if the breach is likely to give rise to a significant risk of serious harm. Notifications to affected 7gl members will be issued via the registered mobile number and email address on file and will include a plain-language description of the nature of the breach, the categories of data involved, the likely consequences, and the measures 7gl has taken or proposes to take.

7gl maintains a documented Incident Response Plan covering breach detection, containment, assessment, notification, and post-incident remediation. This plan is reviewed annually and following any material security incident.

7gl reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or regulatory requirements imposed by PAGCOR. The "Effective Date" displayed at the top of this Policy indicates the date of the most recent revision.

Material changes to this Policy — meaning changes that significantly affect your rights as a data subject or alter the ways in which 7gl uses your personal data — will be communicated to registered 7gl members via SMS to the registered mobile number and/or email notification at least 14 calendar days before the revised Policy takes effect. Continued use of the 7gl platform after the effective date of a revised Policy constitutes acceptance of the changes.

Minor changes, such as typographical corrections, clarifications of existing practices, or updates required for immediate regulatory compliance, may be made without advance individual notice. The archive of previous versions of this Privacy Policy is available on request from the 7gl Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or 7gl's data processing practices — including the exercise of your data subject rights under the Data Privacy Act of 2012 — please contact 7gl's designated Data Protection Officer through any of the following channels:

• Data Protection Officer Email: [email protected] — for formal data privacy requests, rights exercise submissions, and DPA-related inquiries
• General Support Email: [email protected] — for general account and operational inquiries
• Live Chat: Available 24/7 through your 7gl account dashboard and on the 7gl.asia homepage — fastest response channel for general queries
• Response Commitment: All data subject rights requests are acknowledged within 3 business days and substantively responded to within 15 business days of receipt of a complete and verifiable request.

If you are not satisfied with 7gl's response to your data privacy inquiry or rights request, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. The NPC's official website and contact information are available at the NPC's public portal. 7gl encourages you to contact us first so we can attempt to resolve any concern before escalating to the NPC.