lotto7 Privacy Policy

lotto7 is an online gaming platform operated in compliance with the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of this Privacy Policy, lotto7 acts as the Personal Information Controller as defined under Republic Act No. 10173 (Data Privacy Act of 2012) with respect to the personal data of its registered players and website visitors.

lotto7 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. The DPO can be contacted at the details provided in Section 13 of this Policy.

lotto7 collects the following categories of personal data from players and website visitors:

lotto7 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion request.

lotto7 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access the lotto7 platform, including IP address, device identifiers, browser information, and session data via cookies and similar technologies.
• Third-Party Sources: Identity verification data from KYC service providers; payment verification data from GCash, PayMaya, and banking partners; fraud prevention data from security service providers. All third-party data processors engaged by lotto7 are contractually bound to handle your data in accordance with the Data Privacy Act.

lotto7 uses your personal data for the following purposes:

• To create, verify, and manage your lotto7 player account
• To process deposits and withdrawals through your chosen Philippine payment method
• To verify your identity and age (21+) in compliance with PAGCOR regulations
• To comply with Anti-Money Laundering Act (AMLA) obligations, including transaction monitoring and suspicious activity reporting
• To provide customer support and resolve disputes
• To monitor gaming activity for responsible gaming purposes and enforce self-exclusion requests
• To detect, investigate, and prevent fraud, cheating, and other prohibited conduct
• To send you transactional communications (account notices, deposit confirmations, withdrawal updates)
• To send you promotional communications, where you have provided consent and not opted out
• To improve the lotto7 platform through aggregate, anonymized analytics

lotto7 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our contract with you — operating your account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws, including mandatory KYC and transaction reporting obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests do not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

lotto7 does not sell your personal data. We share your data only in the following limited circumstances:

• Payment Processors: GCash, PayMaya, and banking partners receive the minimum data necessary to process your transactions. These providers are bound by their own privacy policies and Philippine financial regulations.
• KYC & Identity Verification Providers: Third-party identity verification services receive your identity documents solely for the purpose of verifying your identity and age in compliance with PAGCOR requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulatory directive.
• Fraud Prevention & Security Providers: Specialist security service providers who assist lotto7 in detecting and preventing fraud, cheating, and unauthorized access. These providers act as data processors under written agreements.
• Legal Proceedings: Where disclosure is required by a valid court order, subpoena, or other legal process under Philippine law.

lotto7 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data & KYC Records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• Gaming Activity Logs: Retained for three (3) years from the date of each gaming session for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for an ongoing dispute.
• Marketing Consent Records: Retained for the duration of your account and for two (2) years following account closure or withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines.

lotto7 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• AES-256 encryption for all personal data stored on lotto7 servers
• TLS 1.3 encryption for all data transmitted between your device and lotto7 servers
• Multi-factor authentication for all lotto7 administrative access
• Regular penetration testing and vulnerability assessments by independent security firms
• Role-based access controls ensuring that lotto7 staff can only access personal data necessary for their specific job function
• 24/7 security monitoring and intrusion detection systems
• Regular staff training on data privacy and security obligations

lotto7 uses cookies and similar tracking technologies on the platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and game display options. These improve your experience but are not essential.
• Analytics Cookies: Collect aggregate, anonymized data about how players use the lotto7 platform to help us improve performance and user experience. No individual player is identified through analytics data.

lotto7 does not use third-party advertising cookies or cross-site tracking technologies. You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling functional cookies may affect your experience on the platform.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by lotto7:

• Right to be Informed: The right to know what personal data lotto7 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data lotto7 holds about you, free of charge, once per calendar year.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by lotto7.
• Right to Erasure: The right to request deletion of your personal data, subject to lotto7's legal retention obligations under PAGCOR regulations and the AMLA.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe lotto7 has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. lotto7 will respond to all verified data subject requests within fifteen (15) calendar days, as required by the Data Privacy Act.

lotto7 is strictly an adult gaming platform. We do not knowingly collect personal data from individuals under the age of 21. The lotto7 platform is not directed at, and is not intended for use by, persons under 21 years of age.

If lotto7 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data, and return any deposits in accordance with applicable regulations. If you believe that a minor has registered on lotto7, please contact us immediately at [email protected].

lotto7 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will notify registered players via email and/or a prominent notice on the lotto7 platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the lotto7 platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the lotto7 Data Protection Officer: