Privacy Policy

This Privacy Policy is issued by 7ktaya ("7ktaya," "we," "us," or "our"), the operator of the online casino platform accessible at 7ktaya.app and its associated subdomains and mobile interfaces. 7ktaya is the data controller responsible for the personal data of players and visitors who use our platform.

We are committed to protecting the privacy and personal data of all users, with particular attention to the rights of Filipino players under applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering a 7ktaya account or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

7ktaya collects personal data that is necessary to provide our services, comply with legal obligations, and maintain a safe and fair gaming environment. The categories of personal data we collect include:

We do not collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for KYC verification and responsible gaming compliance. We do not collect biometric data beyond liveness checks required for identity verification.

7ktaya collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the 7ktaya platform, including through cookies, web beacons, log files, and similar tracking technologies (see Section 9);
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, PayMaya, and banking partners; and publicly available information where permitted by law.

All data collection by 7ktaya is conducted on a lawful basis and limited to what is necessary for the specified purposes. We do not purchase personal data from data brokers or marketing list providers.

7ktaya uses your personal data for the following purposes:

1. Account management: Creating, maintaining, and securing your 7ktaya account;
2. Service delivery: Processing deposits and withdrawals, providing access to games, and delivering customer support;
3. Identity verification: Verifying that you meet the 21+ age requirement and confirming your identity in compliance with PAGCOR regulations and Philippine AML law;
4. Legal and regulatory compliance: Meeting our obligations under the Data Privacy Act of 2012, PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
5. Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, and other security threats;
6. Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and enforcing responsible gaming tools and self-exclusion requests;
7. Platform improvement: Analyzing usage data to improve the performance, features, and user experience of the 7ktaya platform;
8. Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

Under the Data Privacy Act of 2012, 7ktaya processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (i.e., providing the 7ktaya gaming platform and associated services);
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, AML/CTF obligations, and tax reporting requirements;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7ktaya shares your personal data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, and Philippine banking partners receive the financial data necessary to process your deposits and withdrawals;
• KYC and identity verification providers: Accredited third-party providers who assist with identity verification, age verification, and document authentication;
• AML and fraud screening services: Compliance technology providers who assist 7ktaya in meeting its anti-money laundering and counter-terrorism financing obligations;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory order;
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform technology partners who process data on 7ktaya's behalf under strict data processing agreements;
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers who process personal data on behalf of 7ktaya are bound by data processing agreements that require them to maintain appropriate security standards and process data only for the purposes specified by 7ktaya.

7ktaya retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and BIR requirements;
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 7ktaya's data disposal procedures.

7ktaya implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 7ktaya platform;
• Encryption at rest for all sensitive personal and financial data stored on 7ktaya servers;
• Multi-factor authentication options for player accounts and mandatory MFA for all 7ktaya staff with access to personal data;
• Role-based access controls ensuring that 7ktaya staff can only access personal data necessary for their specific job functions;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists;
• 24/7 security monitoring with automated threat detection and incident response procedures;
• Data breach response plan compliant with NPC notification requirements under RA 10173.

7 ktaya uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The types of cookies we use are:

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the 7ktaya platform. Withdrawing consent for analytics or marketing cookies will not affect your ability to play or access your account.

7ktaya does not use cookies to collect sensitive personal information or to track your activity on third-party websites outside of the 7ktaya platform.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 7ktaya:

1. Right to be informed: You have the right to know what personal data 7ktaya collects about you, how it is used, and with whom it is shared — which is the purpose of this Privacy Policy;
2. Right of access: You may request a copy of the personal data 7ktaya holds about you at any time. We will respond to verified access requests within 15 business days;
3. Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account information directly through your 7ktaya account settings;
4. Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR regulations and the AMLA;
5. Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our overriding legal obligations;
6. Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible;
7. Right to lodge a complaint: If you believe 7ktaya has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Privacy Officer via the contact details in Section 13. We may require you to verify your identity before processing your request. We will not charge a fee for reasonable data subject requests.

7ktaya implements age verification procedures during account registration to prevent minors from accessing the platform. If we become aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete the personal data, and report the matter to the appropriate authorities where required by law.

If you are a parent or guardian and believe that a minor in your care has registered a 7ktaya account, please contact our support team immediately via live chat so we can take prompt action.

7ktaya may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or PAGCOR regulatory requirements. When we make material changes, we will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect.

The current version of this Privacy Policy is always available at 7ktaya.app/privacy-policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the 7ktaya platform after the effective date of any revision constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 7ktaya handles your personal data, please contact our Data Privacy Officer:

For complaints that cannot be resolved directly with 7ktaya, you may contact the National Privacy Commission of the Philippines at privacy.gov.ph (reference only — not a clickable link on this page).