sm777 Privacy Policy

This Privacy Policy ("Policy") sets out how sm777 ("sm777," "we," "us," "our") — the operator of the online gaming platform accessible at sm777.lat — collects, uses, stores, protects, and discloses personal information belonging to users of the sm777 platform ("Players," "you," "your").

sm777 is committed to protecting the personal data of all registered players in accordance with the Republic Act 10173 (Data Privacy Act of 2012) of the Philippines and its implementing rules. By registering an account on sm777, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

This Policy applies to all personal data collected through the sm777 website, platform services, customer support channels, and any communications between sm777 and registered players. It does not apply to third-party websites or services that may be referenced or linked from within the sm777 platform.

sm777 collects the following categories of personal data from players in the course of operating the platform:

sm777 does not knowingly collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health information, or sexual orientation. If any such information is volunteered by a player through support communications, it will not be processed for any purpose beyond resolving the immediate support matter.

sm777 collects personal data through the following means:

3.1 Direct Collection. You provide data directly to sm777 when you: register an account; complete KYC verification; make a deposit or request a withdrawal; contact customer support via live chat or email; opt into promotional communications; participate in surveys or feedback requests; or submit a formal complaint.

3.2 Automated Collection. When you access and use the sm777 platform, our systems automatically collect technical data about your device and session. This includes your IP address, browser fingerprint, device identifiers, session start and end times, pages visited, and actions taken on the platform. This data is collected using server logs, session tracking systems, and cookies as described in Section 6 of this Policy.

3.3 Third-Party Sources. In limited circumstances, sm777 may receive personal data about you from third-party sources, including: payment service providers (such as GCash and PayMaya) confirming the completion of a financial transaction; identity verification services used during the KYC process; and fraud detection and anti-money laundering screening services. Data received from third-party sources is handled with the same protections applied to directly collected data.

sm777 processes your personal data on the following legal bases and for the following purposes:

4.1 Contractual Necessity. To deliver the services described in sm777's Terms and Conditions, including: creating and maintaining your account; processing deposits and withdrawals; providing access to games and betting markets; delivering customer support; and administering bonuses and promotions you have opted into.

4.2 Legal Obligation. To comply with applicable Philippine laws and regulatory requirements, including: Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations; age verification to enforce the 21+ access restriction; reporting obligations to competent Philippine authorities; and record-keeping requirements imposed by financial regulators.

4.3 Legitimate Interest. To pursue sm777's legitimate business interests where they are not overridden by your data protection rights, including: fraud prevention and security monitoring; detecting and preventing bonus abuse; platform analytics to improve user experience; responsible gaming monitoring to identify players displaying risk indicators; and communicating material updates to platform terms and services.

4.4 Consent. Where you have given your explicit consent, sm777 will process your data for: sending promotional offers, bonus alerts, and marketing communications; sending platform newsletters and game release updates. You may withdraw your consent for marketing communications at any time without affecting the lawfulness of prior processing.

sm777 does not sell, rent, or trade your personal data to any third party for their independent commercial use. We share personal data only in the following limited circumstances:

5.1 Payment Service Providers. To process deposits and withdrawals, sm777 must share relevant financial transaction data with payment processors including GCash (G-Xchange Inc.), PayMaya (Maya Philippines Inc.), and Philippine banks. These providers process your data strictly to execute the financial transaction you have initiated and are bound by their own privacy policies and financial data protection obligations.

5.2 Identity Verification Partners. To comply with KYC obligations, sm777 engages certified identity verification service providers. These providers may process your government ID document and verification photograph for the sole purpose of confirming your identity and age. Verification data is not retained by these providers beyond the period necessary to complete the verification process.

5.3 Technology and Infrastructure Providers. sm777 uses cloud infrastructure, platform software, and fraud detection technology services to operate the platform. These service providers process player data as data processors acting on sm777's instructions and under contractual data protection obligations that prohibit independent use of your data.

5.4 Regulatory and Legal Disclosure. sm777 may disclose personal data to Philippine government authorities, regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law, valid legal process, or in connection with the investigation of suspected fraud, money laundering, or other criminal activity. Such disclosures are made only to the extent required by law and are conducted with appropriate documentation.

5.5 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of sm777's business operations, personal data held by sm777 may be transferred to the acquiring entity as part of the transaction. Affected players will be notified prior to any such transfer and their data will continue to be governed by a privacy policy consistent with this Policy.

6.1 What Are Cookies. Cookies are small text files placed on your device by a website when you visit it. sm777 uses cookies and similar tracking technologies (such as web beacons and session tokens) to operate platform functions, maintain your logged-in session, and analyse platform usage patterns.

6.2 Types of Cookies Used by sm777:

• Strictly Necessary Cookies: Required for core platform functions, including maintaining your authenticated session after login. Without these, the sm777 platform cannot function. These cannot be disabled.
• Functional Cookies: Remember your language preferences, preferred game categories, and display settings. These improve your experience but are not essential to platform operation.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate and interact with the platform — which pages are visited most, where sessions begin and end, and how long players spend in different sections. This data is used to improve platform design and performance.
• Security Cookies: Used to detect and prevent fraudulent login attempts, bot traffic, and account takeover attempts. These are part of sm777's platform security infrastructure.

6.3 Cookie Management. You may manage cookie preferences through your browser settings. Please note that disabling functional cookies may affect your experience on the sm777 platform, and disabling security cookies may cause login or account access issues. sm777 does not use third-party advertising or retargeting cookies.

7.1 Technical Safeguards. sm777 implements a layered security architecture to protect your personal data, including: TLS/SSL encryption for all data in transit between your device and sm777 servers; AES-256 encryption for sensitive data stored at rest; access controls that limit internal access to personal data on a strict need-to-know basis; multi-factor authentication requirements for internal system access; and automated intrusion detection systems monitoring for anomalous access patterns.

7.2 Organisational Safeguards. Personnel with access to player personal data are subject to confidentiality obligations and receive regular data protection training. Third-party service providers are vetted for their data security standards and bound by contractual data protection requirements before being granted access to any sm777 player data.

7.3 Data Breach Response. In the event of a confirmed personal data breach that is likely to result in a risk to the rights and freedoms of affected players, sm777 will notify the National Privacy Commission (NPC) of the Philippines within 72 hours of becoming aware of the breach, and will notify affected players as promptly as practicable. The notification will include a description of the nature of the breach, the categories of data affected, and the steps sm777 is taking to address it.

7.4 Your Responsibility. While sm777 takes extensive measures to protect your data on its end, you also play a role in account security. Keep your sm777 login credentials confidential, enable two-factor authentication, use a unique password not shared with other services, and log out of your account when using shared or public devices.

8.1 Retention Principles. sm777 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, and contractual obligations.

8.2 Specific Retention Periods:

• Account and Identity Data: Retained for the duration of the account's active period plus 5 years following account closure, as required for AML compliance and regulatory record-keeping obligations.
• Financial Transaction Records: Retained for 10 years following the date of each transaction, consistent with Philippine financial record-keeping requirements.
• KYC Verification Documents: Retained for 5 years from the date of verification or from account closure, whichever is later.
• Gaming Activity Logs: Retained for 3 years from the date of each session, used for dispute resolution, responsible gaming monitoring, and regulatory reporting.
• Customer Support Communications: Retained for 3 years from the date of each communication, used for quality assurance and dispute resolution.
• Marketing Consent Records: Retained for the duration of active consent, plus 3 years following withdrawal of consent as evidence of lawful processing during the consent period.

8.3 End of Retention. Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to any individual player. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data sm777 holds about you. These rights may be exercised by contacting sm777 support via live chat or at [email protected].

The sm777 platform is strictly intended for individuals who are 21 years of age or older. sm777 does not knowingly collect personal data from any person under the age of 21. The 21+ age requirement is enforced through age declaration at registration and through mandatory KYC document verification prior to the processing of any withdrawal.

If sm777 becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be deleted to the extent not required to be retained for fraud prevention or legal reporting purposes, and any balance associated with the account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that a minor has registered an sm777 account or accessed the platform using your credentials, please contact sm777 support immediately via live chat or at [email protected] so that the matter can be addressed without delay.

The sm777 platform may contain references to third-party game providers, payment processors, or other services. While sm777 selects its service partners carefully, sm777 does not control and is not responsible for the privacy practices, content, or data handling of any third-party services.

This Privacy Policy applies solely to data collected and processed by sm777 through the sm777.lat platform and its associated services. If you interact with a third-party service accessible through sm777, you are subject to that third party's own privacy policy. sm777 encourages you to review the privacy policies of any third-party services you engage with.

sm777 reserves the right to update this Privacy Policy at any time to reflect changes in our data handling practices, applicable law, or platform functionality. Material changes — those that substantially affect how your personal data is collected, used, or shared — will be communicated to registered players via email to their registered address at least 7 days before the change takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically so that you remain informed about how sm777 protects your data. Your continued use of the sm777 platform following the effective date of any updated Policy constitutes your acknowledgment of the revised terms.

13.1 Data Rights Requests. To exercise any of your data protection rights described in Section 9, or to raise a privacy concern, please contact sm777 through either of the following channels:

• Live Chat: Available 24/7 from the sm777 platform — fastest response, typically under 2 minutes.
• Email: [email protected] — for formal written data rights requests. Include your registered email address and a brief description of your request. sm777 will respond within 15 business days.

13.2 Identity Verification for Requests. To protect your privacy, sm777 will require verification of your identity before actioning any data access, correction, or deletion request. Verification typically involves confirming your registered mobile number or providing the last 4 digits of your government ID.

13.3 Complaints to the National Privacy Commission. If you believe that sm777 has not handled your personal data in accordance with the Philippine Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website. sm777 encourages players to contact us first to attempt to resolve any privacy concern directly before escalating to the NPC.