This Privacy Policy explains how sz77 collects, processes, stores, and protects your personal data when you use the sz77 platform. It is written in compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and applicable PAGCOR regulatory requirements. Understanding how your information is handled is important to us and to you.
Six core principles that guide how sz77 handles personal data collected from Filipino players.
sz77 processes personal data in strict accordance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations. The National Privacy Commission (NPC) of the Philippines has oversight authority over sz77's data processing practices. You may file a complaint with the NPC if you believe your data rights have been violated.
sz77 collects only the personal data strictly necessary to provide gaming services, comply with PAGCOR and AMLA requirements, and maintain account security. We do not collect data for purposes beyond those stated in this Policy, and we do not sell personal data to third parties for commercial purposes.
sz77 is transparent about what data we collect, why we collect it, how long we keep it, and who we share it with. This Privacy Policy is written in plain, accessible English — not buried in legal jargon. If any aspect is unclear, Filipino players are encouraged to contact sz77 support for a plain-language explanation.
Under the Data Privacy Act of 2012, you have the right to be informed, to access your data, to correct inaccurate data, to object to processing, to erase data, and to file complaints with the NPC. These are legal rights, not just policy commitments. sz77 is required to respond to data subject requests within the timeframes prescribed by law.
All personal data collected by sz77 is stored on secured servers with access controls, encryption at rest, and regular security audits. Passwords are stored as salted cryptographic hashes — never in plain text. Payment transaction data is processed through PCI-DSS compliant payment gateway partners and is never stored in full on sz77's own systems.
sz77 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by Philippine law. PAGCOR and AMLA regulations mandate minimum retention periods for certain transaction records. Once the retention period expires, data is securely deleted or anonymized in accordance with sz77's data disposal procedures.
sz77 ("we," "us," "our," or "the Platform") acts as the Personal Information Controller (PIC) in relation to all personal data collected through the sz77 platform available at sz77.one, as defined under Section 3(h) of the Data Privacy Act of 2012 (Republic Act No. 10173).
This Privacy Policy applies to all personal data processed by sz77 in connection with: account registration and management; gameplay and betting activity; financial transactions including deposits and withdrawals; customer support interactions; marketing communications; and KYC and AML compliance activities.
This Policy applies to all users of sz77 regardless of the device or interface used to access the Platform. By registering an account or using sz77's services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
sz77 collects personal data through three primary channels: information you provide directly during registration and use; data generated automatically through your use of the Platform; and information received from third parties in connection with payment processing and regulatory compliance.
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, ID document images | Registration; KYC upload |
| Contact Data | Philippine mobile number, email address, province/city of residence | Registration; account settings |
| Financial Data | GCash account reference, Maya account reference, bank name, deposit/withdrawal amounts | Payment processing; transaction logs |
| Gaming Activity | Games played, bets placed, wager amounts, game results, session duration, win/loss records | Automatic — Platform activity logs |
| Technical Data | IP address, device type, browser/app version, operating system, device ID, session timestamps | Automatic — server and app logs |
| Communication Data | Support chat transcripts, email correspondence, SMS OTP records, feedback submissions | Direct communication with sz77 |
| Preference Data | Saved game preferences, notification settings, responsible gaming limit settings | Account settings; gameplay behavior |
Under the Data Privacy Act of 2012, certain categories of data are classified as "sensitive personal information" requiring heightened protection. sz77 collects the following categories of sensitive personal information where required by PAGCOR and AMLA regulations:
Sensitive personal information is processed only to the extent required by applicable law and is subject to additional security controls beyond those applied to standard personal data.
sz77 processes your personal data for the following specific and lawful purposes:
sz77 may use your contact data (mobile number and email address) to send promotional offers, bonus notifications, and platform updates where you have provided consent or where marketing communications are permissible under applicable law. You may withdraw consent for marketing communications at any time by updating your notification preferences in account settings.
Under the Data Privacy Act of 2012, sz77 processes personal data on the following legal bases:
sz77 engages third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under the Data Privacy Act. These providers are contractually bound to process data only in accordance with sz77's instructions and applicable Philippine law. Categories of service providers include:
sz77 is legally required to share certain personal data with the following Philippine regulatory and government bodies:
sz77 does not sell, rent, or lease personal data to third parties for commercial purposes. Data is shared with third parties only as described in Sections 5.1 and 5.2 of this Policy or with your explicit consent.
sz77 retains personal data for the minimum period necessary to fulfill the purpose of collection, subject to mandatory retention requirements under Philippine law.
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| KYC Documents | 5 years from account closure | AMLA (RA 9160 as amended) |
| Transaction Records | 5 years from transaction date | AMLA; PAGCOR requirement |
| Gaming Activity Logs | 3 years from session date | PAGCOR audit requirement |
| Account Data (Active) | Duration of account + 5 years | AMLA; dispute resolution |
| Support Communications | 3 years from last interaction | Dispute resolution; legitimate interest |
| Security/Access Logs | 12 months | Security; fraud prevention |
| Marketing Consent Records | Until consent withdrawal + 3 years | Legal compliance; consent records |
Upon expiry of the applicable retention period, sz77 will securely delete or irreversibly anonymize personal data so that it can no longer be associated with any individual.
sz77 implements organizational and technical security measures appropriate to the sensitivity of the personal data held and the risks posed by its processing. These include:
In the event of a personal data breach that may pose a real risk to affected individuals, sz77 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC Circular No. 16-03. Affected data subjects will be notified as soon as practicable where the breach is likely to result in a risk to their rights and freedoms.
Under the Data Privacy Act of 2012, you have the following enforceable rights with respect to your personal data held by sz77:
To exercise any of the above rights, submit a written request to sz77's Data Protection Officer at the contact details in Section 12. Include your registered mobile number and a clear description of your request. sz77 will respond within fifteen (15) calendar days of receiving a verifiable request, as required by the Data Privacy Act IRR. Complex requests may require additional time, and sz77 will notify you of any extension.
sz77 uses cookies and similar technical tracking technologies to ensure the Platform functions correctly, to maintain your login session, and to understand aggregate usage patterns. The following types of cookies are used:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use sz77 — particularly functions that require an active login session. sz77 does not use third-party advertising or behavioral tracking cookies for cross-site tracking purposes.
sz77 is strictly an adult gaming platform. Access is limited to individuals aged 21 years and above under PAGCOR regulations. sz77 does not knowingly collect, process, or retain personal data of individuals under 21 years of age.
If sz77 becomes aware that personal data has been collected from a person under 21 years of age, the following actions will be taken immediately:
Parents and guardians are encouraged to use parental control software on devices accessible to minors to prevent access to online gaming platforms. If you believe a minor has registered on sz77, contact support immediately with the account details so that the account can be reviewed and suspended.
sz77 may update this Privacy Policy from time to time to reflect changes in applicable Philippine law, PAGCOR regulations, sz77's data processing practices, or the NPC's guidance on the Data Privacy Act. When changes are made:
Players who do not accept material changes to this Policy should cease using the Platform and may request account closure. Account closure following a material Policy change will not result in any early termination penalty.
sz77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO is the designated point of contact for data subject rights requests, privacy-related inquiries, and data breach notifications.
If you are dissatisfied with sz77's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012 and protecting the privacy rights of Filipino data subjects.
For general platform support unrelated to data privacy, players may use sz77's 24/7 live chat support available through the Platform after login.
sz77 handles your personal data in full compliance with the Data Privacy Act of 2012. Register your account, play your favorite games, and withdraw with GCash — all within a PAGCOR-regulated platform built for Filipino players aged 21 and above.