tg7 Privacy Policy

1.1 tg7 ("we," "us," "our," or the "Company") operates the online betting and gaming platform accessible at tg7.bio ("Platform"). tg7 is licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates under the laws of the Republic of the Philippines.

1.2 This Privacy Policy describes how tg7 collects, uses, stores, shares, and protects the personal data of individuals who use the tg7 Platform, including registered players, visitors, and prospective players.

1.3 This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and the rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

1.4 By registering an account with tg7 or using the tg7 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2.1 Registration and Identity Data. When you create a tg7 account, we collect: your full legal name, date of birth, nationality, gender, residential address, Philippine mobile number, and email address.

2.2 KYC Verification Data. As required by PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA), we collect: copies of valid Philippine government-issued identification documents (e.g., UMID, Passport, Driver's License, SSS ID, PhilHealth ID) and a selfie photograph for identity confirmation.

2.3 Financial and Transaction Data. We collect data relating to your deposits, withdrawals, bet history, win/loss records, and payment method details (e.g., GCash registered mobile number, bank account details for withdrawal verification). We do not store full bank card numbers.

2.4 Technical and Usage Data. When you access the tg7 Platform, we automatically collect: IP address, browser type and version, operating system, device identifiers, pages visited, session duration, referral source, and clickstream data.

2.5 Communications Data. Records of communications you have with tg7 customer support, including chat logs, email correspondence, and support ticket histories.

2.6 Responsible Gaming Data. Records of deposit limits, session limits, loss limits, self-exclusion requests, and responsible gaming tool usage set on your tg7 account.

2.7 Cookies and Tracking Data. As described further in Section 9 of this Policy, we collect data through cookies, web beacons, and similar tracking technologies when you visit tg7.bio.

3.1 Directly from you — when you register a tg7 account, complete KYC verification, make a deposit or withdrawal, place a bet, contact customer support, or update your account settings.

3.2 Automatically — through the tg7 Platform's technical infrastructure, including server logs, cookies, analytics tools, and device fingerprinting technologies when you access and navigate the Platform.

3.3 From third-party payment providers — including GCash, Maya (PayMaya), BPI, BDO, Metrobank, and other licensed payment processors — to confirm transaction status, detect fraud, and comply with financial regulations.

3.4 From identity verification service providers — third-party KYC technology providers that assist tg7 in verifying the authenticity of documents and confirming the identity of account holders.

3.5 From regulatory and law enforcement authorities — where tg7 is required by law to receive, process, or act upon information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine government authorities.

4.1 tg7 processes personal data only for specific, declared, and legitimate purposes. The following table sets out our processing activities, their purposes, and the applicable legal basis under the DPA:

• Account creation and management — necessary for the performance of the contract between you and tg7 (DPA Section 13(b)).
• KYC identity and age verification — compliance with PAGCOR licensing conditions and legal obligations under the DPA and AMLA (DPA Section 13(c)).
• Processing deposits and withdrawals — necessary for performance of the contract and compliance with financial regulations (DPA Section 13(b) and 13(c)).
• Fraud detection and prevention — legitimate interests of tg7 and protection of other players on the Platform (DPA Section 13(f)).
• Responsible gaming monitoring — compliance with PAGCOR responsible gaming requirements and protection of players' vital interests (DPA Section 13(c) and 13(e)).
• Customer support communications — necessary for performance of the contract (DPA Section 13(b)).
• Platform analytics and improvement — legitimate interests of tg7 in improving the Platform experience for Filipino players (DPA Section 13(f)).
• Marketing and promotions communications — your consent (DPA Section 13(a)), which you may withdraw at any time.
• Legal and regulatory reporting obligations — compliance with PAGCOR regulations, AMLA, and other applicable Philippine law (DPA Section 13(c)).

4.2 Where tg7 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. To withdraw consent for marketing communications, update your account notification preferences or contact tg7 customer support.

5.1 tg7 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. Personal data is shared with third parties only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other payment partners — to facilitate deposits and withdrawals to and from your tg7 account.
• KYC and identity verification providers: Third-party KYC service providers engaged to verify account holder identities as required by PAGCOR and AMLA.
• Game content providers: Licensed third-party game studios and live casino providers (e.g., Evolution Gaming, Pragmatic Play, PG Soft) whose games are hosted on the tg7 Platform — limited to game session data necessary for game operation and dispute resolution.
• Cloud infrastructure and security providers: Technology partners providing hosting, content delivery, fraud detection, and cybersecurity services to tg7.
• Regulatory and government authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where tg7 is legally required to disclose personal data.
• Legal advisors and auditors: Professional service firms engaged by tg7 for legal, compliance, and audit purposes, subject to confidentiality obligations.

5.2 All third-party service providers engaged by tg7 who process personal data on tg7's behalf are required to enter into data processing agreements that comply with the DPA and NPC regulations.

6.1 Some of tg7's third-party service providers — including cloud infrastructure providers and game content providers — may operate servers or process data in jurisdictions outside the Philippines. Where personal data is transferred outside the Philippines, tg7 takes appropriate steps to ensure adequate protection of such data, including:

• Requiring data processing agreements with contractual data protection clauses that provide equivalent protection to that afforded under the DPA;
• Transferring only the minimum data necessary for the specific processing purpose;
• Ensuring recipient third parties are subject to data protection laws or binding corporate rules providing comparable safeguards.

6.2 By using the tg7 Platform, you consent to the transfer of your personal data to jurisdictions outside the Philippines in the circumstances described above, subject to the safeguards described in this Section.

7.1 tg7 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful processing. These measures include:

• Transport encryption: All data transmitted between your browser and tg7's servers is encrypted using 256-bit SSL/TLS protocols;
• Access controls: Personal data is accessible only to authorised tg7 personnel with a legitimate need to access it, on a role-based access control basis;
• Storage security: Personal data is stored on secured servers with access logging, intrusion detection systems, and regular security audits;
• Two-factor authentication: tg7 offers 2FA for player accounts to reduce the risk of unauthorised account access;
• Data pseudonymisation and anonymisation: Where feasible, personal data used for analytics and testing is pseudonymised or anonymised.

7.2 In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected individuals, tg7 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay where required by the DPA and NPC regulations.

8.1 tg7 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of the active account relationship and for a period of five (5) years after account closure, as required by PAGCOR licensing conditions.
• KYC documentation: Retained for a minimum of five (5) years after the end of the business relationship, as required by the Anti-Money Laundering Act of the Philippines.
• Transaction and betting records: Retained for five (5) years following the transaction date, in accordance with AMLA and PAGCOR record-keeping requirements.
• Customer support communications: Retained for two (2) years from the date of the communication.
• Marketing consent records: Retained for the duration of the account relationship and for three (3) years thereafter to demonstrate compliance with consent requirements.
• Technical and usage data (logs): Generally retained for ninety (90) days, except where required for fraud investigation or legal proceedings.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or anonymised in a manner that prevents reconstruction of the original data.

9.1 tg7 uses cookies and similar tracking technologies on the tg7.bio website. Cookies are small text files stored on your device that help us provide, improve, and secure the Platform.

9.2 tg7 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the tg7 Platform, including maintaining your login session, security tokens, and language preferences. These cannot be disabled.
• Functional cookies: Used to remember your preferences and personalise your experience on tg7, such as displaying your preferred sports categories or casino game filters.
• Analytics cookies: Used to understand how players use the tg7 Platform, which pages are most visited, and where players encounter issues — to improve Platform performance. Analytics data is aggregated and does not identify individual users.
• Security and fraud prevention cookies: Used to detect fraudulent activity, bot traffic, and unauthorised access attempts on the tg7 Platform.

9.3 You may configure your browser to refuse all or certain cookies, or to alert you when cookies are set. Please note that disabling strictly necessary cookies may prevent certain tg7 Platform features from functioning correctly.

10.1 The tg7 Platform is strictly restricted to individuals who are at least twenty-one (21) years of age, as required by PAGCOR regulations and Philippine gambling law. tg7 does not knowingly collect personal data from any person under the age of 21.

10.2 tg7 uses KYC identity verification to confirm the age of all account holders. Any account found to belong to a person under 21 years of age will be immediately suspended, any balance forfeited, and the matter reported to PAGCOR as required by our licensing conditions.

10.3 If you believe that tg7 has inadvertently collected personal data from a person under 21 years of age, please contact our Data Protection Officer immediately at the contact details provided in Section 15 of this Policy.

11.1 As a data subject under the Data Privacy Act of 2012, you may exercise the rights described in this Policy by submitting a written request to tg7's Data Protection Officer using the contact details provided in Section 15.

11.2 tg7 will respond to data subject rights requests within fifteen (15) calendar days of receipt of a valid request. Where a request is particularly complex or numerous, tg7 may extend this period by a further thirty (30) days, with written notification to the requestor.

11.3 tg7 reserves the right to verify the identity of a requestor before processing any data subject rights request, to ensure that personal data is not disclosed to an unauthorised party.

11.4 Certain rights — particularly the right to erasure — are subject to override by tg7's legal obligations under AMLA, PAGCOR regulations, and other applicable Philippine law. Where tg7 cannot fulfil a request due to a legal obligation, we will inform you of the applicable legal basis.

11.5 If you are not satisfied with tg7's response to your data subject rights request, or if you believe that tg7 has violated your rights under the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint channels.

12.1 As a PAGCOR-licensed operator, tg7 is a covered entity under the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended). tg7 is required by law to file suspicious transaction reports (STRs) and covered transaction reports (CTRs) with the Anti-Money Laundering Council (AMLC) in respect of qualifying transactions and activities involving tg7 player accounts.

12.2 In connection with AMLA compliance obligations, tg7 may be required to share personal data — including account information, transaction records, and KYC documentation — with the AMLC, PAGCOR, the Bureau of Internal Revenue (BIR), or other Philippine government authorities, without prior notice to the data subject where disclosure is legally required and notification would compromise law enforcement purposes.

12.3 tg7 is prohibited by law from disclosing to you if a suspicious transaction report has been filed in relation to your account.

13.1 The tg7 Platform may contain references to third-party game providers and payment services. Where you interact directly with a third-party service through the tg7 Platform, that third party's own privacy policy governs the processing of your personal data by them.

13.2 tg7 is not responsible for the privacy practices or data security measures of third-party service providers operating independently of tg7's instructions. We encourage you to review the privacy policies of any third-party services you interact with in connection with your tg7 account.

14.1 tg7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The current version of this Policy is always accessible at tg7.bio/privacy-policy.

14.2 Where amendments are material — particularly those that affect your rights or the manner in which we process your personal data — tg7 will provide reasonable advance notice via the Platform or through your registered contact details, and will seek your renewed consent where required by law.

14.3 Your continued use of the tg7 Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated Policy.

15.1 tg7 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. You may contact our DPO for all privacy-related inquiries, data subject rights requests, and data breach notifications:

15.2 If your concern relates to a potential data breach or urgent security matter, please mark your communication as "URGENT — DATA SECURITY" to ensure priority handling.

15.3 For regulatory escalations, the National Privacy Commission of the Philippines can be reached through official NPC channels. tg7 cooperates fully with NPC inquiries and investigations.