sz77 Privacy Policy

1. Overview and Scope

This Privacy Policy ("Policy") describes how sz77 ("sz77," "we," "us," or "our") collects, processes, stores, and protects the personal data of individuals ("you," "User," or "Player") who access or use the sz77 online gaming platform available at sz77.app, including all associated pages, features, games, and services (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your use of the sz77 Platform, whether you are a registered player, a visitor browsing the site, or a person who contacts our support team. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

sz77 is committed to complying with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC). We take our obligations under Philippine data privacy law seriously and have implemented appropriate technical and organizational measures to protect your personal information.

2. Data Controller Information

For the purposes of the Data Privacy Act of 2012, sz77 acts as the Personal Information Controller (PIC) in respect of the personal data you provide when using the Platform. This means sz77 determines the purposes and means of processing your personal data.

Where sz77 engages third-party service providers to process personal data on its behalf — such as payment processors, game providers, or analytics platforms — those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data in accordance with applicable law and sz77's instructions.

If you have any questions or concerns about how sz77 handles your personal data, you may contact our Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

sz77 collects the following categories of personal data in connection with your use of the Platform:

Category	Examples
Identity Data	Full name, date of birth, government-issued ID number, selfie or photo for verification
Contact Data	Mobile number, email address, residential address (city/province)
Account Data	Username, encrypted password, account preferences, communication settings
Financial Data	GCash number, Maya/PayMaya account reference, bank account details (for withdrawals), transaction history
Gaming Data	Game history, bet amounts, win/loss records, session duration, bonus usage
Technical Data	IP address, device type, browser type and version, operating system, time zone
Usage Data	Pages visited, features used, click patterns, session timestamps
Communications Data	Support chat transcripts, email correspondence, feedback submissions

We do not collect sensitive personal information as defined under the DPA (such as health data, political opinions, or religious beliefs) unless specifically required for responsible gaming assessments or regulatory compliance, and only with your explicit consent where required.

4. How We Collect Your Data

sz77 collects personal data through the following means:

• Direct interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or participate in promotions, you directly provide us with personal data.
• Automated technologies: When you access the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for more details.
• Third-party sources: We may receive data about you from payment processors (e.g., GCash, Maya), identity verification providers, fraud prevention services, and game providers in the ordinary course of operating the Platform.
• Publicly available sources: In limited circumstances related to fraud prevention or regulatory compliance, we may consult publicly available information such as government databases or court records.

5. Purposes and Legal Basis for Processing

sz77 processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account registration and management — to create and maintain your sz77 account, verify your identity, and provide access to Platform features. Legal basis: Performance of contract.
• Age verification and regulatory compliance — to confirm that you meet the 21+ age requirement under Philippine gaming regulations and to comply with PAGCOR-related obligations. Legal basis: Legal obligation.
• Payment processing — to process deposits and withdrawals via GCash, Maya, bank transfer, and debit card. Legal basis: Performance of contract.
• Anti-money laundering (AML) and fraud prevention — to detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct. Legal basis: Legal obligation and legitimate interest.
• Customer support — to respond to your queries, complaints, and requests. Legal basis: Performance of contract and legitimate interest.
• Responsible gaming — to monitor gaming patterns, enforce self-exclusion requests, and provide responsible gaming tools. Legal basis: Legal obligation and legitimate interest.
• Marketing and promotions — to send you relevant offers, bonuses, and updates about sz77, where you have consented or where we have a legitimate interest. Legal basis: Consent or legitimate interest.
• Platform improvement and analytics — to understand how players use the Platform and to improve our services, game offerings, and user experience. Legal basis: Legitimate interest.

6. Sharing and Disclosure of Personal Data

sz77 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers — GCash, Maya/PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process financial transactions.
• Identity verification providers — third-party KYC (Know Your Customer) service providers who assist with age and identity verification.
• Game providers — licensed third-party game studios whose titles are available on the sz77 Platform, to the extent necessary for game operation and dispute resolution.
• Regulatory and law enforcement authorities — PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where required by law or court order.
• IT and security service providers — cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict contractual obligations.
• Professional advisers — lawyers, auditors, and consultants who require access to data in the course of providing professional services to sz77.

All third-party processors engaged by sz77 are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with sz77's documented instructions.

7. Cookies and Tracking Technologies

sz77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and support security functions. The main types of cookies we use are:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options.
• Analytics cookies: Help us understand how players navigate the Platform so we can improve the user experience. Data collected is aggregated and anonymized where possible.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the sz77 Platform. By continuing to use the Platform after being informed of our cookie use, you consent to the use of cookies as described in this Policy.

8. Data Retention

sz77 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML regulations and PAGCOR requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML law.
• Gaming history: Retained for a minimum of three (3) years from the date of the gaming session.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent.

When personal data is no longer required, sz77 will securely delete or anonymize it in accordance with our data disposal procedures.

9. Data Security

sz77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the sz77 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorized sz77 personnel can access personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Multi-factor authentication options for player accounts.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While sz77 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your sz77 login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

10. Your Rights Under Philippine Data Privacy Law

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sz77:

• Right to be informed: You have the right to be informed about how your personal data is being collected and processed, which this Policy fulfills.
• Right of access: You may request a copy of the personal data sz77 holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You can update basic account information directly through your sz77 account settings.
• Right to erasure or blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to applicable legal grounds.
• Right to data portability: You may request that sz77 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe sz77 has violated your data privacy rights.

To exercise any of these rights, please contact sz77's Data Protection Officer using the contact details in Section 14. We will respond to verified requests within thirty (30) days, or within such extended period as permitted by applicable law.

11. Children and Minors

The sz77 Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. sz77 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the sz77 Platform, please contact us immediately at the details provided in Section 14 so we can take appropriate action.

12. International Data Transfers

sz77 primarily processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where sz77 uses internationally hosted cloud infrastructure or engages game providers with operations in other jurisdictions.

Where such transfers occur, sz77 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under Philippine law. sz77 will not transfer personal data to jurisdictions that do not provide adequate data protection standards without implementing appropriate safeguards.

13. Changes to This Policy

sz77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory obligations. When we make material changes to this Policy, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players via their registered contact details. We encourage you to review this Policy periodically to stay informed about how sz77 protects your personal data. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way sz77 handles your personal data, please contact our Data Protection Officer:

Data Protection Officer, sz77
Email: [email protected]
General Support: [email protected]

Please note that email addresses above are displayed as plain text for informational purposes only and are not clickable links. When contacting us, please include your registered mobile number and a clear description of your request to help us respond promptly.

If you are not satisfied with sz77's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint is available on the NPC's official website.