szz77 Privacy Policy — How We Collect, Use, and Protect Your Personal Data

1. Overview and Scope

1. This Privacy Policy ("Policy") applies to all personal information collected, used, stored, disclosed, and otherwise processed by szz77 ("szz77," "we," "us," or "our") in connection with the szz77 online casino and sports betting platform accessible at szz77.vip and all related szz77 services.
2. This Policy governs personal information relating to registered players, prospective players who browse szz77.vip, and individuals who contact szz77 through any support or communication channel, including live chat and email.
3. This Policy does not apply to the data practices of third-party service providers, game studios, or payment processors whose services are integrated into the szz77 Platform. Those entities operate under their own privacy policies, and szz77 encourages you to review them separately.
4. By accessing or using any part of the szz77 Platform, you consent to the collection and use of your personal information as described in this Policy. Where szz77 relies on consent as the legal basis for processing, you may withdraw that consent at any time by contacting our Data Protection Officer, though such withdrawal will not affect the lawfulness of processing already performed.

2. Identity of the Personal Information Controller

1. For purposes of the Data Privacy Act of the Philippines (RA 10173), szz77 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the szz77 Platform.
2. szz77 has designated a Data Protection Officer (DPO) as required under the NPC's implementing rules. The DPO may be contacted using the details set out in Section 13 of this Policy.
3. Where szz77 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification partners, and cloud infrastructure providers — those entities act as Personal Information Processors (PIPs) and are contractually bound to handle data in accordance with szz77's instructions and RA 10173.

3. Categories of Personal Data We Collect

szz77 collects personal data through various means, including registration forms, KYC submissions, gameplay activity, payment transactions, and communications with our support team. The categories of data we collect include:

• Identity Data: Full legal name, date of birth, nationality, and government ID details (type, number, and expiry) submitted during KYC verification.
• Contact Data: Philippine mobile number, email address (where provided), and residential address.
• Authentication Data: Hashed account password, device identifiers, and session tokens. Raw passwords are never stored.
• Financial Data: GCash number or account reference, Maya account reference, bank account identifiers (BPI, BDO, Metrobank), USDT wallet addresses, and transaction history in Philippine Peso (PHP). szz77 does not store full bank account numbers or card numbers.
• Gaming Activity Data: Game session logs, bet amounts, wager outcomes, game preferences, bonus usage history, and VIP tier progression.
• Technical Data: IP address, browser type and version, operating system, device type, screen resolution, referring URLs, and pages visited on szz77.vip.
• Communications Data: Records of your interactions with szz77 support via live chat, email, or any other channel, including support tickets and chat transcripts.
• Responsible Gaming Data: Self-imposed deposit limits, session time alerts, cooling-off requests, and self-exclusion elections made through the szz77 responsible gaming tools.

4. How szz77 Uses Your Personal Data

szz77 uses your personal data for the following purposes, always subject to a valid legal basis as described in Section 5:

1. Account Registration and Management. To create, verify, and maintain your szz77 account; to authenticate your identity during login; and to communicate account-related notices, transaction confirmations, and security alerts.
2. KYC and Age Verification. To verify your identity and confirm that you meet the minimum age requirement of 21 years, as mandated by PAGCOR regulations and applicable Philippine gaming law. KYC is a regulatory obligation and cannot be waived.
3. Payment Processing. To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, 7-Eleven Cliqq, USDT TRC20, and Coins.ph in Philippine Peso; to maintain accurate financial records; and to comply with Anti-Money Laundering Act (AMLA) reporting obligations.
4. Gameplay and Platform Delivery. To provide access to szz77's games (slots, live dealer, bingo, sports betting), to maintain game session integrity, and to record outcomes for dispute resolution purposes.
5. Responsible Gaming Compliance. To enforce deposit limits, session limits, cooling-off periods, and self-exclusion elections set by you or required by applicable regulation. This is a legal obligation under Philippine gaming regulations.
6. Customer Support. To respond to your inquiries, resolve complaints, and maintain support records to improve service quality.
7. Marketing and Promotions. Where you have provided consent, to send personalized promotional offers, bonus notifications, and platform updates. You may opt out of marketing communications at any time without affecting your account access.
8. Security and Fraud Prevention. To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and unauthorized access to the szz77 Platform.
9. Legal Compliance and Regulatory Reporting. To comply with applicable Philippine laws including RA 10173, AMLA (RA 9160 as amended), PAGCOR regulations, and any lawful request from government authorities.
10. Platform Improvement. To analyze aggregated, anonymized usage data to improve szz77's website, game library, mobile experience, and customer support processes.

5. Legal Basis for Processing

Under RA 10173, szz77 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing required to perform the contract between szz77 and the player (account management, gameplay, payments, KYC).
• Legal Obligation: Processing required to comply with Philippine law (AMLA compliance, KYC/age verification, PAGCOR reporting, tax obligations).
• Legitimate Interests: Processing necessary for szz77's legitimate business interests, including fraud prevention, security monitoring, and platform analytics, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and non-essential cookies, where szz77 has obtained your prior consent. You may withdraw consent at any time without consequence to your account.

6. Disclosure and Sharing of Personal Data

1. szz77 does not sell, rent, or trade your personal information to third parties. Data sharing is limited to the circumstances described in this Section.
2. Payment Processors. Transaction data is shared with GCash (Globe Fintech Innovations), Maya (Voyager Innovations), BancNet, and other payment processors solely to facilitate deposits and withdrawals. These entities process data under their own regulated frameworks.
3. KYC / Identity Verification Partners. Identity documents submitted during KYC are shared with szz77's identity verification service providers for authentication purposes only. These providers are contractually bound to RA 10173 standards.
4. Game Content Providers. Certain game providers receive anonymized session and bet data for technical support, audit, and RTP verification purposes. No personally identifiable information is shared with game studios beyond what is technically necessary.
5. Cloud Infrastructure Providers. Personal data is stored on secure cloud infrastructure. Infrastructure providers acting as PIPs are contractually prohibited from accessing or using szz77 player data for any purpose other than providing the infrastructure service.
6. Regulatory and Law Enforcement Authorities. szz77 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue, or any other competent Philippine authority where required by law, court order, or regulatory directive, or where szz77 has a good-faith belief that disclosure is necessary to prevent fraud or protect the safety of any person.
7. Business Transfers. In the event of a merger, acquisition, or sale of substantially all of szz77's assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections and prior notice to affected players where required by applicable law.

7. Cookies and Similar Technologies

1. szz77 uses cookies, web beacons, and similar tracking technologies on szz77.vip to operate the Platform, maintain your login session, prevent fraud, and analyze usage patterns.
2. Strictly Necessary Cookies are required for the szz77 Platform to function. These cannot be disabled without impairing core functionality such as login sessions, game loading, and payment processing. No consent is required for these cookies under applicable law.
3. Analytics Cookies collect aggregated, anonymized data about how players use szz77.vip to help us improve the Platform. These cookies are set only with your prior consent, which may be given or withdrawn through your browser settings or szz77's cookie preference tool.
4. Marketing Cookies may be set by szz77 with your explicit prior consent to deliver relevant promotional content based on your gaming preferences. You may withdraw consent at any time without affecting your account.
5. Most browsers allow you to control cookies through browser settings. Please note that disabling cookies beyond strictly necessary ones may impair some szz77 functionality.

8. Data Retention Periods

szz77 retains personal data for the following minimum periods, after which data is securely deleted or anonymized unless a longer retention period is required by law:

• Account and KYC data: 5 years from account closure, in accordance with AMLA and PAGCOR record-keeping requirements.
• Transaction records (deposits and withdrawals): 5 years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Game session logs: 2 years from the date of each session, for dispute resolution and audit purposes.
• Support communications: 3 years from the date of the most recent interaction in the relevant support thread.
• Marketing consent records: Until consent is withdrawn, plus 1 year for audit purposes.
• Self-exclusion records: 5 years from the expiry of the exclusion period, to prevent re-registration during active exclusions and to maintain regulatory compliance records.

Upon expiry of the applicable retention period, szz77 will securely delete or irreversibly anonymize personal data in accordance with NPC-recommended data disposal procedures.

9. Data Security Measures

1. szz77 implements technical and organizational security measures appropriate to the sensitivity of the personal data it processes, including but not limited to: 256-bit TLS/SSL encryption for all data in transit; AES-256 encryption for sensitive data at rest; one-way cryptographic hashing for account passwords (raw passwords are never stored); role-based access controls limiting staff access to personal data on a need-to-know basis; regular third-party security audits and penetration testing; and multi-factor authentication for administrative access to szz77's internal systems.
2. Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. szz77 cannot warrant the absolute security of information you transmit to us.
3. In the event of a personal data breach that is likely to adversely affect your rights and freedoms, szz77 will notify the National Privacy Commission within 72 hours of discovery and will notify affected players within a reasonable period, in accordance with NPC Circular 16-03.
4. You are responsible for maintaining the security of your szz77 login credentials. If you suspect unauthorized access to your account, contact szz77 support immediately via live chat on szz77.vip.

10. Your Rights as a Data Subject

Under the Data Privacy Act of the Philippines (RA 10173), you have the following rights in relation to your szz77 personal data. To exercise any right, contact our Data Protection Officer using the details in Section 13. szz77 will respond within fifteen (15) business days of receiving a valid, verifiable request.

11. Protection of Minors

1. The szz77 Platform is strictly intended for persons aged 21 years and above. szz77 does not knowingly collect, use, or store personal information from individuals under 21 years of age.
2. Age verification is performed during the mandatory KYC process for all szz77 accounts. Any account found to be registered by or on behalf of a person under 21 years of age will be immediately terminated, and personal data associated with that account will be purged from szz77's systems within a reasonable period, except where retention is required for fraud reporting purposes.
3. If you believe that szz77 has inadvertently collected personal data from a minor, please contact our Data Protection Officer immediately using the details in Section 13, and we will take prompt corrective action.

12. Changes to This Privacy Policy

1. szz77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, NPC guidance, or PAGCOR regulations. The version number and effective date at the top of this document will be updated accordingly.
2. Material changes — those that significantly affect your rights or szz77's data processing activities — will be notified to registered players via their registered mobile number or by a prominent notice on szz77.vip at least seven (7) days before the change takes effect.
3. Your continued use of the szz77 Platform after the effective date of a revised Policy constitutes your acknowledgment of the changes. If you do not accept the revised Policy, you must discontinue use of the Platform and contact szz77 support to arrange account closure.

13. Contact Our Data Protection Officer

To exercise your data subject rights, report a privacy concern, or make any inquiry regarding szz77's data practices, please contact our designated Data Protection Officer through the following channels. Please include your full name, registered mobile number, and a clear description of your request.

• Live Chat: Via szz77.vip (24/7) — for urgent account-related data requests, live chat is the fastest channel.
• Email: [email protected] — for formal data subject requests, include "Data Subject Request" in your subject line. Responses within 15 business days.

szz77 is committed to handling all data subject requests fairly, promptly, and in full compliance with RA 10173. If you are not satisfied with szz77's response to your data request, you may escalate the matter to the National Privacy Commission of the Philippines.