sulit77 Privacy Policy

1 Introduction

1.1 sulit77 is committed to protecting the privacy and personal data of all players who use the sulit77 online gaming platform. We understand that privacy is not an abstract legal concept for Filipino players — it is a matter of genuine personal concern. When you share your mobile number, your BDO or BPI account details, or your government-issued Philippine ID with sulit77, you are extending trust. This Policy describes precisely how that trust is honoured.

1.2 sulit77 operates in compliance with the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). Where applicable, sulit77 also adheres to the data governance requirements imposed by PAGCOR as part of its regulatory oversight of the platform.

1.3 This Policy covers all personal data processing activities conducted by sulit77, including data collected at account registration, during gameplay, in connection with deposits and withdrawals, through customer support interactions, and via the cookies and tracking technologies used on the sulit77 platform.

2 Data Controller Identity

2.1 The data controller responsible for your personal information processed through the sulit77 platform is the sulit77 operating entity, contactable at [email protected] (plain text only — not a clickable link) or via the 24/7 live chat function available on the sulit77 platform.

2.2 sulit77 has designated a Data Protection Officer ("DPO") as required under the Data Privacy Act of 2012. Players wishing to exercise their data privacy rights or raise privacy concerns may contact the DPO through the same support channels listed above.

3 Categories of Personal Data We Collect

3.1 sulit77 collects the following categories of personal data from registered players and platform visitors:

3.2 sulit77 does not intentionally collect sensitive personal data (as defined by the DPA) such as health information, biometric data, religious beliefs, or political affiliation, beyond what is incidentally disclosed in the course of KYC or support interactions. Any such data received incidentally is treated with the heightened protections applicable to sensitive personal information under the DPA.

4 How We Collect Your Personal Data

4.1 Directly from you: When you register a sulit77 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to promotions.

4.2 Automatically through platform use: When you access the sulit77 platform, technical data including your IP address, device information, and session activity is collected automatically through server logs and cookies (see Section 10).

4.3 From payment providers: When you deposit or withdraw using GCash, Maya, or a Philippine bank, sulit77 receives transaction confirmation data from the relevant payment processor sufficient to verify the transaction and match it to your account.

4.4 From identity verification services: Where sulit77 uses third-party KYC services to verify government-issued Philippine IDs, those services may provide verification results and associated identity data to sulit77.

5 Purposes of Processing

5.1 sulit77 processes your personal data for the following specific purposes:

• Account management: Creating, maintaining, and administering your sulit77 player account, including login authentication via OTP to your Philippine mobile number;
• KYC and age verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in compliance with PAGCOR and anti-money laundering regulations;
• Payment processing: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and UnionBank, and maintaining transaction records as required by law;
• Platform security and fraud prevention: Detecting and preventing unauthorized account access, fraudulent transactions, and abuse of the sulit77 platform;
• Regulatory compliance: Fulfilling reporting obligations to PAGCOR and complying with anti-money laundering (AML) and counter-terrorism financing (CTF) requirements under Philippine law;
• Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling behavior, and administering self-exclusion and deposit limit tools;
• Customer support: Responding to your queries, resolving disputes, and maintaining support interaction records;
• Platform improvement: Analyzing aggregated, anonymized usage data to improve the sulit77 platform experience.

6 Legal Bases for Processing

6.1 sulit77 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing necessary to perform the player account agreement between you and sulit77, including account operation, game access, and payment processing;
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulatory requirements, AML obligations, and NPC reporting requirements;
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your data privacy rights;
• Consent: Where sulit77 relies on your consent as the legal basis for specific processing activities (such as marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

7 Sharing of Personal Data

7.1 sulit77 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment service providers, to the extent necessary to process your transactions;
• KYC and identity verification providers: Third-party services engaged by sulit77 to verify government-issued Philippine IDs and perform AML screening, subject to contractual data protection obligations;
• PAGCOR and regulatory authorities: Regulatory bodies to whom sulit77 is legally required to report, including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission;
• Law enforcement: Philippine law enforcement agencies, where sulit77 is legally required or compelled by court order to disclose information;
• Technology service providers: Cloud hosting, security, and IT service providers who process data on sulit77's behalf under binding data processing agreements that prohibit them from using your data for any purpose other than providing services to sulit77.

7.2 All third parties with whom sulit77 shares personal data are contractually required to maintain appropriate security standards and to process the data solely for the purposes for which it was shared.

8 Data Retention

8.1 sulit77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR regulations and Philippine AML law;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act;
• Gaming activity records: Retained for the duration of account activity plus five (5) years following account closure;
• Customer support records: Retained for three (3) years from the date of the relevant interaction, unless a longer period is required for active dispute resolution.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with sulit77's data disposal procedures.

9 Data Security

9.1 sulit77 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the sulit77 platform;
• Encryption of sensitive data at rest, including financial and identity information;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication for staff access to systems containing personal data;
• Regular security assessments and vulnerability testing of the sulit77 platform;
• Incident response procedures, including notification protocols for personal data breaches as required by the NPC.

9.2 In the event of a personal data breach that poses a real risk of serious harm to affected players, sulit77 will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03.

10 Cookies and Tracking Technologies

10.1 sulit77 uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential cookies: Required for the platform to function, including maintaining your login session and security tokens. These cannot be disabled.
• Analytics cookies: Used to understand how players interact with the sulit77 platform in aggregate, in order to improve performance. Analytics data is anonymized before analysis.
• Security cookies: Used to detect and prevent fraudulent activity and unauthorized access attempts.

10.2 You may control non-essential cookies through your browser settings. Disabling certain cookies may affect the functionality of the sulit77 platform.

11 Your Data Privacy Rights

11.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by sulit77:

• Right to be Informed: The right to know what personal data sulit77 holds about you and how it is being processed — satisfied by this Privacy Policy;
• Right of Access: The right to request a copy of the personal data sulit77 holds about you;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to Erasure: The right to request deletion of your personal data, subject to sulit77's legal retention obligations;
• Right to Object: The right to object to specific processing activities, particularly where those activities are based on legitimate interests or consent;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission if you believe sulit77 has processed your personal data unlawfully.

11.2 To exercise any of these rights, contact sulit77 via live chat or at [email protected]. sulit77 will respond within thirty (30) days of a verifiable rights request, as required by the DPA.

12 Minors

12.1 The sulit77 platform is strictly for adults aged 21 years and above. sulit77 does not knowingly collect personal data from individuals under 21 years of age. If sulit77 becomes aware that personal data has been collected from a person under 21, that data will be deleted promptly and the account closed.

12.2 If you believe a minor has registered on the sulit77 platform, please contact sulit77 support immediately so that appropriate action can be taken.

13 Third-Party Links

13.1 The sulit77 platform does not contain links to third-party websites for commercial or advertising purposes. Any links present on the platform are limited to regulated payment providers and internal platform navigation. sulit77 is not responsible for the privacy practices of any third-party services accessed by players independently of the sulit77 platform.

14 Updates to This Policy

14.1 sulit77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. Material changes to the Policy will be communicated to registered players via email or via a prominent notice on the sulit77 platform prior to the changes taking effect.

14.2 The date at the top of this Policy indicates when it was last updated. Continued use of the sulit77 platform after a Policy update constitutes acceptance of the revised Policy.

15 Contact and Complaints

15.1 For all privacy-related queries, rights requests, or complaints, contact sulit77 via:

• Live Chat: Available 24/7 on the sulit77 platform — fastest response channel.
• Email: [email protected] (plain text — not clickable)

15.2 If you are not satisfied with sulit77's handling of your privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC complaints process is available on the NPC's official channels.