sh77 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how sh77 ("sh77", "we", "us") collects, processes, stores, and protects the personal data of individuals ("you", "Player", "User") who access or use the online gaming platform at sh77.one and any related services, features, or communications. This Policy is an integral part of sh77's Terms and Conditions.

sh77 is committed to protecting the privacy of every Filipino player who trusts us with their personal information. We process personal data lawfully, fairly, and transparently — and only for the purposes set out in this Policy. By registering an account on sh77 or using any of our services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.

---

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, sh77 is the personal information controller responsible for your personal data processed in connection with your use of sh77.one.

All data protection enquiries, access requests, correction requests, and complaints relating to sh77's handling of your personal data should be directed to our Data Privacy Officer via the contact details set out in Section 15 of this Policy.

---

3 Data We Collect

sh77 collects the following categories of personal data in connection with your account and use of the platform:

3.1 Identity & Contact Data

• Full legal name as provided at registration or KYC verification.
• Date of birth — required to verify the 21+ age eligibility requirement.
• Philippine mobile number — used for account authentication, OTP verification, and support communications.
• Email address — if provided optionally during registration or account updates.
• Residential address — collected during KYC verification where required.

3.2 Identity Verification Documents

• Government-issued photo identification (e.g., Philippine passport, UMID, SSS ID, driver's licence, PhilSys ID).
• Proof of address documents (e.g., utility bill, bank statement) where required for KYC.
• Proof of payment method ownership where applicable.

3.3 Financial Data

• GCash-registered mobile number or Maya account reference — sufficient to process deposits and withdrawals without storing full payment credentials.
• Bank account details (account name, bank, account number) where bank transfer is the selected withdrawal method.
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method type.

3.4 Account & Gaming Activity Data

• Account username and hashed credentials (passwords are never stored in readable form).
• Login history including timestamps, device type, and approximate geolocation.
• Gaming activity — games played, bets placed, wagering history, winnings, and bonus usage.
• Responsible gaming settings — deposit limits, session restrictions, and self-exclusion status.

3.5 Technical & Device Data

• IP address.
• Device type, operating system, and browser type.
• Session duration and activity logs.
• Cookies and similar tracking identifiers (see Section 12).

3.6 Communications Data

• Content of support interactions via Live Chat, Messenger, Viber, or email — including your messages and our responses.
• Survey and feedback responses, where voluntarily provided.

Category	Examples	Primary Purpose
Identity & Contact	Name, DOB, mobile number	Account creation, age verification, communication
KYC Documents	Government ID, proof of address	Regulatory compliance, fraud prevention
Financial	GCash reference, bank details	Deposits, withdrawals, AML compliance
Gaming Activity	Bets, wins, game history	Service provision, responsible gaming monitoring
Technical	IP address, device, session logs	Security, fraud detection, platform stability
Communications	Support chat, feedback	Customer service, service improvement

---

4 How We Collect Your Data

sh77 collects personal data through the following means:

• Directly from you: When you register an account, submit KYC documents, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically: Through cookies, session tokens, and server logs when you access and navigate sh77.one (see Section 12).
• From payment processors: Transaction confirmation data from GCash, Maya, BPI, BDO, Metrobank, and InstaPay in connection with deposits and withdrawals.
• From identity verification providers: Where third-party KYC services are engaged to verify identity documents against applicable databases.
• From fraud prevention services: Risk and anomaly signals from fraud detection systems used to protect player accounts and the integrity of the platform.

---

5 How We Use Your Data

sh77 processes your personal data for the following purposes:

• Account registration and management: Creating, maintaining, and administering your sh77 player account.
• Age and identity verification: Confirming that you meet the 21+ age requirement and verifying your identity as required by applicable regulations.
• Payment processing: Processing deposits, withdrawals, and maintaining accurate transaction records in PHP.
• Service delivery: Providing access to all games, features, and promotional offers on sh77.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance via Live Chat, email, Messenger, and Viber.
• Legal and regulatory compliance: Fulfilling obligations under Philippine gaming regulations, anti-money laundering (AML) requirements, and the Data Privacy Act of 2012.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and violations of sh77's Terms and Conditions.
• Responsible gaming: Monitoring gaming patterns to identify indicators of problem gambling, administering self-exclusion and deposit limits, and fulfilling responsible gaming obligations.
• Platform improvement: Analysing aggregated, anonymised usage data to improve game performance, site usability, and feature development.
• Marketing communications: Sending you relevant offers, promotions, and account notifications — only where you have provided consent or where permitted by applicable law. You may opt out at any time.

---

6 Legal Basis for Processing

sh77 processes your personal data on one or more of the following legal bases as applicable under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — i.e., operating your sh77 account and providing gaming services.
• Legal obligation: Processing required to comply with applicable Philippine law, including KYC, AML, and gaming regulatory requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your rights.
• Consent: Processing for optional purposes such as marketing communications, where we rely on your explicit consent. You may withdraw consent at any time without affecting processing conducted prior to withdrawal.

---

7 Sharing Your Data

sh77 does not sell your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, and InstaPay — to process your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC service providers engaged to verify identity documents as required by regulatory compliance obligations.
• Fraud and AML detection providers: Services that assist sh77 in detecting suspicious transactions, fraudulent account activity, and money laundering risks.
• Game software providers: Where game providers host the game servers, gameplay data (bets, outcomes) is processed by those providers in accordance with their own data processing agreements with sh77.
• Regulatory and law enforcement authorities: Where required by applicable Philippine law, court order, or regulatory instruction — including the Anti-Money Laundering Council (AMLC) and applicable gaming regulators.
• Professional advisers: Legal, accounting, and auditing professionals engaged by sh77 in the context of their professional services, subject to appropriate confidentiality obligations.

All third parties who receive sh77 player data are subject to contractual obligations that require them to handle that data in accordance with applicable privacy law and to use it only for the specific purpose for which it was shared.

---

8 International Data Transfers

Some of sh77's service providers — including game software providers and certain technical infrastructure providers — may process personal data outside of the Philippines. Where such transfers occur, sh77 takes reasonable steps to ensure that your data receives an equivalent level of protection to that afforded under the Data Privacy Act of 2012, including through contractual safeguards and data processing agreements.

sh77 will not transfer personal data internationally in a manner that circumvents applicable Philippine privacy protections.

---

9 Data Retention

sh77 retains personal data for as long as is necessary for the purposes for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:

• Active account data: Retained for the duration of your account relationship with sh77, plus a minimum of five (5) years following account closure — in compliance with applicable AML and gaming regulatory retention requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of collection or the date of account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years in accordance with applicable financial record-keeping obligations.
• Support communications: Retained for a minimum of two (2) years from the date of the interaction.
• Marketing consent records: Retained for as long as necessary to demonstrate compliance with consent obligations, or until the consent is withdrawn and all associated processing has ceased.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

---

10 Security Measures

sh77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and sh77's servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive data including payment details and KYC documents is encrypted in storage.
• Password security: Account passwords are stored as one-way cryptographic hashes — sh77 cannot retrieve your actual password.
• Access controls: Access to player personal data is restricted to authorised sh77 personnel on a strict need-to-know basis, enforced through role-based access controls and audit logging.
• Intrusion detection: sh77's infrastructure is monitored continuously for anomalous access patterns and potential security incidents.
• Account security features: OTP-based verification, login anomaly alerts, and session management tools are available to all players to protect their accounts.

---

11 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sh77. To exercise any of these rights, contact sh77's Data Privacy Officer using the details in Section 15.

sh77 will respond to verified data subject requests within thirty (30) days. Where a request is complex or involves a large volume of data, this period may be extended by a further thirty (30) days with prior notice. sh77 will not charge a fee for responding to data subject requests unless requests are manifestly unfounded or excessive.

---

12 Cookies & Tracking Technologies

sh77.one uses cookies and similar tracking technologies to provide and improve the platform. Cookies are small text files stored on your device when you visit the site. sh77 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function — including session authentication, login persistence (where "Remember Me" is enabled), and security features. These cannot be disabled.
• Functional cookies: Remember your preferences — such as language settings and game lobby view — to personalise your experience on return visits.
• Analytics cookies: Aggregate, anonymised data about how players navigate and use sh77 — used to improve site performance and usability. No individual-level identification is used in analytics.
• Security and fraud detection cookies: Used to identify suspicious access patterns and protect accounts from unauthorised access.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use sh77 — you will not be able to remain logged in or complete transactions without them.

---

13 Minors

sh77 does not knowingly collect personal data from individuals under the age of 21. The platform is strictly prohibited to persons under 21 years of age. If sh77 becomes aware that personal data has been collected from a person under 21, that data will be permanently deleted and the associated account closed immediately.

If you are a parent or guardian and believe that a minor has registered on sh77.one, please contact our support team immediately via Live Chat or email so that the account can be investigated and closed.

---

14 Changes to This Privacy Policy

sh77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, sh77 will notify registered players via the mobile number or email address on their account, or through a prominent notice on sh77.one.

The current effective date is displayed at the top of this Policy. Continued use of sh77 following notification of a Policy update constitutes your acceptance of the revised Policy. If you do not accept the updated Policy, you must cease using sh77 and may close your account by contacting our support team.

---

15 Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or sh77's handling of your personal data, please contact sh77's Data Privacy Officer through the following channels:

• Live Chat: Available 24/7 on sh77.one — average response time 3–5 minutes. Identify your enquiry as a "Data Privacy Request" at the start of the chat.
• Email: [email protected] — responses within 24 hours for standard enquiries; within 3 business days for formal data subject requests.
• Messenger / Viber: Available during Philippine business hours (8AM–12MN PHT) for general enquiries.

If you believe that sh77 has handled your personal data in a manner that does not comply with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available on the NPC's official website.