Privacy & Data

SM777 Privacy Policy – How We Protect Your Data

Your personal information is handled with care at SM777. This policy explains exactly what we collect, why we need it, and how it is kept secure.

256-bit
SSL Encryption
0
Third-Party Data Sales
PH
Data Stored Locally
72 hrs
Max Breach Notification
Last Updated: 1 July 2025  ·  Effective immediately for all SM777 accounts.

SM777 (sm777.run) takes the privacy of every player seriously. This Privacy Policy describes how SM777 collects, uses, stores, shares, and protects the personal information of members registered on the platform, visitors to the website, and anyone who interacts with SM777's services including live Sabong, Baccarat, Tongits, Bingo, Jackpot Slots, the VIP Club, and all payment-related features.

SM777 operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. As a Philippine-focused platform, SM777 processes and stores data primarily within the Philippines unless otherwise specified.

By creating an account at SM777 or continuing to use the platform, you confirm that you have read and understood this Privacy Policy. If you have questions at any point, reach out to support@sm777.run.

Short version: SM777 collects only what it genuinely needs to run your account and comply with regulations. Your data is never sold to unrelated third parties. You have clear rights over your information and can exercise them at any time.

1 About This Policy

This Privacy Policy applies to all SM777 services accessible at sm777.run, including the website, any mobile-optimised interface, live game streams, the player account portal, customer support channels, and any electronic communications SM777 sends to you.

SM777 is the data controller for personal information collected through the platform. This means SM777 decides the purposes and means of processing your data. Where SM777 engages third-party processors (such as payment providers), those processors act under SM777's instructions and their own applicable obligations under Philippine law.

This policy should be read alongside the SM777 Terms and Conditions and the Responsible Gaming Policy, which together form the complete framework governing your relationship with SM777.

2 Data We Collect

SM777 collects personal data in several ways, depending on how you use the platform.

2.1 Data You Provide Directly

When you register, verify your account, or contact support, SM777 collects:

Full legal name Date of birth Email address Mobile number Philippine address Payment details Government ID documents Support messages

2.2 Data Collected Automatically

When you use the SM777 platform, we automatically collect certain technical information to ensure the service works correctly and securely:

  • IP address and approximate geographic location
  • Device type, operating system, and browser version
  • Pages visited, features used, and time spent on the platform
  • Game activity including bets placed, game outcomes, and session duration
  • Login timestamps and authentication events
  • Cookies and similar tracking technologies (see Section 6)

2.3 Data from Payment Providers

When you deposit or withdraw through GCash, Maya, BDO, BPI, UnionBank, GrabPay, or other payment channels, SM777 receives transaction confirmation data including transaction reference numbers, amounts, and payment account identifiers. SM777 does not receive or store your complete payment credentials — these remain with your payment provider.

2.4 KYC Verification Data

For identity verification (Know Your Customer / KYC) purposes, SM777 may collect copies of government-issued Philippine identification documents. These are processed with heightened security controls and are retained only as long as required by law.

sm777

3 How We Use Your Data

SM777 uses your personal data only for specific, legitimate purposes:

Purpose Data Used
Account creation and management Name, email, mobile number, date of birth, address
Identity verification (KYC) Government ID, name, date of birth, selfie/photo where required
Processing deposits and withdrawals Payment account details, transaction records, wallet balance
Providing and improving games Game activity logs, session data, device information
Customer support Account details, support message history, transaction records
Fraud prevention and security IP address, device fingerprint, login history, transaction patterns
Anti-money laundering compliance Transaction data, source of funds, KYC documents
Responsible gaming monitoring Betting patterns, session duration, self-exclusion status
Marketing communications (with consent) Email address, mobile number, game preferences
Legal and regulatory compliance All required data as mandated by Philippine gaming regulations

SM777 only sends marketing messages (promotions, new game announcements, bonus offers) if you have opted in to receive them. You can unsubscribe at any time through your account settings or by contacting support.

4 Legal Bases for Processing

Under the Philippine Data Privacy Act, SM777 must have a lawful basis for each type of personal data processing. The bases SM777 relies on are:

  • Contractual necessity: Processing required to operate your SM777 account, process bets and payments, and deliver the services you have signed up for.
  • Legal obligation: Processing required to comply with Philippine gaming regulations, anti-money laundering laws (AMLA and its amendments), and tax reporting requirements.
  • Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services — where these interests are not overridden by your rights.
  • Consent: Processing for optional purposes such as marketing communications and non-essential cookies, where SM777 has obtained your explicit agreement.

Where SM777 relies on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

5 Sharing Your Data

SM777 does not sell your personal data to unrelated third parties. SM777 shares personal data only in the following limited circumstances:

5.1 Payment Processors

To process your GCash, Maya, BDO, BPI, UnionBank, GrabPay, and card transactions, SM777 shares the minimum necessary transaction data with the relevant payment processor. These processors operate under their own privacy policies and Philippine regulatory requirements.

5.2 Identity Verification Providers

SM777 uses licensed KYC verification service providers to validate identity documents. These providers process your data solely for verification purposes and are prohibited from using it for any other purpose.

5.3 Regulatory and Law Enforcement Authorities

SM777 is legally required to report certain transactions and player information to Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), and law enforcement authorities where mandated by law. SM777 will comply with valid legal orders without prior notice to the player where legally permitted.

5.4 Technology and Hosting Providers

SM777 uses cloud infrastructure and technology partners to host the platform and deliver its services. These providers access personal data only to the extent necessary to provide their services and are bound by data processing agreements.

5.5 Business Transfers

If SM777 is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. SM777 will notify you before your data is transferred and becomes subject to a different privacy policy.

SM777 does not share your data with advertisers, data brokers, or unrelated commercial third parties. Any service provider receiving your data does so under a contractual obligation to protect it.

sm777

6 Cookies and Tracking

SM777 uses cookies and similar tracking technologies to keep the platform working correctly, understand how players use the site, and — where you consent — to deliver relevant promotions. Here's what SM777 uses and why:

Essential Cookies

These are required for the SM777 platform to function. They maintain your login session, remember your language and display preferences, and enable the betting and payment features to work. You cannot opt out of essential cookies while using SM777, as they are strictly necessary for service delivery.

Analytics Cookies

SM777 uses analytics tools to understand which games are most popular, how long sessions last, and where technical issues occur. This helps improve the platform. Analytics data is aggregated and does not identify individual players. You can opt out of analytics cookies in your account settings.

Security Cookies

SM777 uses security tokens and device fingerprinting cookies to detect unusual login patterns, flag potential fraud, and protect your account from unauthorised access. These operate alongside essential cookies and cannot be disabled.

Marketing Cookies

If you have opted in to receive SM777 promotions, SM777 may use cookies to track which offers you have seen and whether you have acted on them. These are only active where you have given explicit consent and can be withdrawn at any time.

You can manage cookie preferences through your device browser settings or your SM777 account privacy settings. Disabling non-essential cookies will not affect your ability to play games or process payments on SM777.

7 Data Retention

SM777 retains personal data for only as long as necessary to fulfil the purpose it was collected for, or as required by Philippine law. The key retention periods are:

  • Active account data: Retained for the duration of your account and for 5 years after account closure, in compliance with Philippine AML record-keeping requirements.
  • Financial transaction records: Retained for 5 years from the date of each transaction as required by the AMLA.
  • KYC documents: Retained for 5 years after account closure or the last transaction, whichever is later.
  • Customer support records: Retained for 3 years from the date of last interaction.
  • Responsible gaming records (self-exclusion): Retained indefinitely to prevent re-registration during an active exclusion period.
  • Marketing data (with consent): Retained until you withdraw consent or for 2 years from your last active engagement, whichever comes first.

When data is no longer required, SM777 deletes or anonymises it securely. Anonymised data — where all personal identifiers have been removed — may be retained indefinitely for statistical and platform improvement purposes.

8 Data Security

SM777 implements industry-standard security measures to protect your personal data from unauthorised access, loss, alteration, or disclosure. These include:

  • 256-bit SSL/TLS encryption on all data transmitted between your device and SM777
  • Encryption at rest for sensitive stored data including KYC documents and payment records
  • Multi-factor authentication options for player accounts
  • Role-based access controls limiting which SM777 staff can access personal data
  • Regular security audits and penetration testing by independent security firms
  • Intrusion detection systems monitoring for unusual access patterns
  • Secure data centres with physical access restrictions

Despite these measures, no online system is completely immune to security risks. SM777 strongly encourages players to use strong, unique passwords for their account and to enable two-factor authentication where available.

In the event of a personal data breach that poses a risk to your rights and freedoms, SM777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

sm777

9 Your Rights Under the Data Privacy Act

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by SM777:

  • Right to be informed: To know whether SM777 holds personal data about you and what that data is being used for. This policy fulfils that right.
  • Right of access: To request a copy of the personal data SM777 holds about you, along with information about how it is processed.
  • Right to rectification: To have inaccurate or incomplete personal data corrected. You can update most profile information directly in your account settings; for KYC-related corrections, contact support.
  • Right to erasure: To request deletion of your personal data where SM777 no longer has a lawful basis to retain it. Note that legal retention obligations (e.g., AML records) may limit what can be deleted.
  • Right to object: To object to processing based on legitimate interests, including profiling for marketing purposes.
  • Right to data portability: To receive your personal data in a structured, machine-readable format for transfer to another service where technically feasible.
  • Right to withdraw consent: To withdraw any consent given to SM777 at any time, without affecting the lawfulness of prior processing.
  • Right to file a complaint: To lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe SM777 has mishandled your personal data.

To exercise any of these rights, contact SM777 at support@sm777.run with the subject line "Data Privacy Request." SM777 will respond within 15 business days.

10 Children's Privacy

SM777 is strictly an adults-only platform. The minimum age to register and play on SM777 is 21 years old, consistent with Philippine gaming regulations.

SM777 does not knowingly collect personal data from anyone under 21 years of age. If SM777 discovers that an account belongs to a minor, the account will be immediately suspended, all bets will be voided, and deposits will be returned to the original payment source after identity verification. KYC data collected in connection with the minor account will be securely deleted after the matter is resolved.

If you are a parent or guardian and believe your child has created an SM777 account, please contact support@sm777.run immediately. SM777 will act on verified reports promptly.

11 Cross-Border Data Transfers

SM777 operates primarily within the Philippines and stores player data on infrastructure located within Philippine territory or in jurisdictions with equivalent data protection standards.

In limited cases — such as when using internationally hosted cloud infrastructure or security tools — personal data may be processed outside the Philippines. Where this occurs, SM777 ensures that appropriate safeguards are in place, including:

  • Contractual data processing agreements requiring the recipient to protect data to standards equivalent to the Philippine Data Privacy Act
  • Transfer only to jurisdictions recognised as having adequate data protection frameworks
  • Limiting the scope of data transferred to the minimum necessary

SM777 does not transfer your KYC documents or financial transaction records to jurisdictions without adequate data protection unless legally compelled to do so (e.g., by a valid mutual legal assistance treaty request).

12 Changes to This Privacy Policy

SM777 reviews and updates this Privacy Policy periodically to reflect changes in the platform, applicable laws, or our data practices. When significant changes are made — particularly changes that affect what data is collected or how it is shared — SM777 will:

  • Update the "Last Updated" date at the top of this page
  • Send a notification to your registered email address
  • Display a prominent notice within the SM777 platform for at least 7 days

For minor clarifications and non-substantive edits, SM777 may update this policy without direct notification. Checking this page periodically is the best way to stay informed of the current policy.

Continued use of SM777 after a policy update takes effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you should close your SM777 account before the changes take effect.

13 Contact and Complaints

SM777's Data Protection Officer (DPO) oversees compliance with the Philippine Data Privacy Act and is your primary contact for privacy-related concerns.

  • Email: support@sm777.run — use subject "Data Privacy Request" or "Privacy Complaint"
  • Response time: Within 15 business days for all data rights requests
  • Urgent concerns: Live chat available 24/7 through the SM777 platform

If you are unsatisfied with SM777's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act.

SM777 takes every data privacy concern seriously. Most issues are resolved within 5 business days. SM777 will never ask for your password, full credit card number, or OTP through any privacy-related communication.

Your Rights at a Glance

What the Data Privacy Act Means for You as an SM777 Player

These are enforceable rights — not just policy statements.

Right to Access
Request a complete copy of all personal data SM777 holds about you at any time. SM777 will provide this within 15 business days.
Right to Correct
If your data on SM777 is inaccurate or outdated, you have the right to have it corrected promptly. Most details can be updated in your account settings.
Right to Delete
Request erasure of your personal data where SM777 no longer has a valid reason to hold it. Legal retention obligations may apply to financial and AML records.
Right to Object
Object to SM777 processing your data for marketing or profiling at any time. Withdraw consent and processing for those purposes stops immediately.
Right to Portability
Receive your data in a portable format. SM777 can provide account and transaction data in a structured file that you can use elsewhere.
Right to Complain
If SM777 doesn't address your concern to your satisfaction, you can file a complaint with the National Privacy Commission of the Philippines.

How SM777 Keeps Your Data Safe

The technical and operational measures protecting every SM777 account.

256-Bit SSL Encryption

All data exchanged between your browser or device and the SM777 platform is encrypted using 256-bit SSL/TLS. This is the same level of encryption used by major Philippine banks for online transactions. Your login credentials, payment details, and game data are never transmitted in plain text.

Encrypted Data at Rest

Sensitive stored data — including KYC documents, identity records, and financial transaction logs — is encrypted at rest in SM777's database systems. Even in the unlikely event of unauthorised database access, your sensitive information cannot be read without the encryption key.

Access Controls and Staff Vetting

SM777 operates on a least-privilege access model. Only the specific staff members who need your data to perform their job function can access it — and all access is logged. SM777 staff undergo background checks and regular training on data protection obligations.

Regular Independent Audits

SM777's security infrastructure is tested by independent cybersecurity firms through regular penetration tests and vulnerability assessments. Findings are acted upon promptly. SM777 does not wait for an incident to review its security posture.

Fraud and Anomaly Detection

SM777's security systems monitor account activity in real time for unusual patterns — logins from new devices or locations, rapid successive failed authentication attempts, and transaction patterns that deviate from a player's established norms. Suspicious activity triggers automatic protective measures and review.

Breach Notification Within 72 Hours

If a data breach occurs that poses risk to your rights, SM777 will notify the National Privacy Commission within 72 hours and inform affected players without undue delay. Transparency in incidents is a core commitment — SM777 does not hide security events from the players they affect.

Play at SM777 – Where Your Privacy Is Taken Seriously

Register for free and experience a platform that respects your data as much as it respects your game. GCash deposits, live Sabong, Tongits, and more — all with your privacy protected at every step.