tg7 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes the practices of tg7.biz ("tg7," "we," "us," "our") with respect to the collection, use, storage, disclosure, and protection of personal information relating to players, visitors, and prospective users of the tg7 online gaming platform ("Platform"), accessible at tg7.biz and any associated mobile-optimized web interface.

tg7 is committed to protecting the privacy of every Filipino player who interacts with our Platform, in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission of the Philippines ("NPC").

By registering an account with tg7, accessing the Platform, or submitting personal information to us in any form, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not register or continue to use the tg7 Platform.

Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, tg7.biz is the Personal Information Controller responsible for the personal data collected and processed through the tg7 Platform.

tg7 has appointed a Data Privacy Officer ("DPO") who is responsible for ensuring compliance with applicable data protection legislation, handling data subject rights requests, and overseeing tg7's privacy governance framework. The DPO's contact details are provided in Section 14 of this Policy.

Personal Data We Collect

tg7 collects personal data that is necessary, adequate, relevant, and limited to the purposes for which it is processed. The categories of personal data we collect are set out below.

3.1 Sensitive Personal Information

In certain circumstances, tg7 may collect information that qualifies as sensitive personal information under the DPA, specifically:

• Government-issued identification numbers (as required for KYC verification under PAGCOR-aligned AML standards).
• Financial account information (as required for processing GCash, Maya, and bank transfer transactions).

Such sensitive personal information is processed only to the minimum extent necessary to satisfy the applicable regulatory requirement and is protected under enhanced security controls described in Section 10 of this Policy.

How We Collect Personal Data

tg7 collects personal data through the following channels:

• Direct collection: Information you provide when registering a tg7 account, completing KYC verification, making a deposit or withdrawal request, contacting support, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, and server logs when you access or use the tg7 Platform. See Section 8 for details on our cookie practices.
• Third-party providers: Identity verification data from accredited KYC service providers; transaction confirmation data from GCash, Maya, BPI, BDO, and other integrated Philippine payment processors; and fraud and AML screening data from compliance service providers.

Legal Basis for Processing

tg7 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable bases for tg7's processing activities are:

• Contractual necessity: Processing required to register your tg7 account, execute your deposit and withdrawal transactions, and deliver the gaming services you have contracted for.
• Legal obligation: Processing required to comply with applicable Philippine law, including AMLA (Republic Act No. 9160, as amended), PAGCOR-aligned operating requirements, and NPC data privacy guidelines.
• Consent: For optional data processing activities such as marketing communications and personalization of bonus offers, tg7 processes your data only with your explicit, freely given, informed, and documented consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Legitimate interests: For security monitoring, fraud prevention, platform analytics, and responsible gaming monitoring, where tg7's legitimate interests in maintaining a safe and fair platform do not override your fundamental rights and freedoms.

How tg7 Uses Your Personal Data

tg7 uses the personal data we collect for the following specific purposes:

• Account registration and management: Creating and maintaining your tg7 player account, verifying your identity and age (21+ requirement), and managing your account settings and preferences.
• Payment processing: Executing GCash, Maya, and bank transfer deposits and withdrawals, reconciling transaction records, and managing your tg7 Peso wallet balance.
• Regulatory and AML compliance: Fulfilling tg7's obligations under Philippine anti-money laundering legislation, PAGCOR-aligned reporting requirements, and NPC data governance standards, including transaction monitoring and suspicious activity reporting.
• Responsible gaming: Monitoring your gaming activity against your self-set deposit, loss, and session limits; detecting patterns potentially indicative of problem gambling; administering cooling-off and self-exclusion requests.
• Customer support: Responding to your queries, resolving disputes, and maintaining records of support interactions for quality assurance.
• Security and fraud prevention: Detecting unauthorized account access, investigating suspicious transactions, and protecting tg7 and its players from fraud, collusion, and bonus abuse.
• Platform improvement: Analyzing aggregated usage data to improve the tg7 game library, payment flow, mobile experience, and customer support performance.
• Marketing communications: Sending bonus offers, promotional updates, and platform news to players who have consented to receive such communications via email or SMS.

Data Sharing & Disclosure

tg7 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BancNet, and other Philippine payment infrastructure providers, to the extent necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Accredited Philippine identity verification service providers engaged by tg7 to fulfill regulatory KYC requirements.
• AML compliance services: Regulated compliance screening providers that assist tg7 in meeting its obligations under Republic Act No. 9160 (as amended) and related AMLC guidance.
• Technology service providers: Cloud hosting, platform infrastructure, and cybersecurity providers who process data as data processors under contractual obligations consistent with DPA requirements.
• Regulatory and law enforcement authorities: The National Privacy Commission, PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine governmental authorities, where disclosure is required by law or by a lawful order.

All third-party service providers engaged by tg7 who handle personal data are required to implement data protection standards consistent with the DPA and are bound by contractual data processing agreements that limit their use of personal data to the specific service they are providing to tg7.

Cookies & Tracking Technologies

tg7 uses cookies and similar tracking technologies to operate and improve the Platform. The categories of cookies we use are:

• Strictly necessary cookies: Essential to the operation of the tg7 Platform. These cookies maintain your logged-in session, store your language preference, and enable core Platform functions. These cannot be disabled without impairing your ability to use tg7.
• Performance and analytics cookies: Used to collect aggregated, anonymized data about how players interact with the tg7 Platform — which pages are visited most, how long sessions last, and where errors occur. This data is used solely to improve the Platform.
• Functional cookies: Remember your Platform preferences (such as your preferred game categories or table stake levels) to personalize your experience on return visits.
• Security cookies: Used to detect suspicious login patterns, prevent cross-site request forgery, and support tg7's fraud prevention systems.

You may configure your browser to block or delete cookies; however, blocking strictly necessary cookies may prevent you from logging in to or using core functions of the tg7 Platform. tg7 does not use cookies to serve third-party advertising.

Data Retention

tg7 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active tg7 account plus a minimum of five (5) years following permanent account closure, in compliance with Philippine AML record-keeping obligations under RA 9160.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine financial record-keeping regulations.
• KYC verification documents: Retained for the duration of your account plus a minimum of five (5) years post-closure.
• Support communications: Retained for two (2) years from the date of the relevant interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account or until you withdraw consent, whichever is earlier, plus one (1) year to document the consent record.
• Technical and usage data: Retained in aggregated or anonymized form for platform analytics purposes. Individual session logs are retained for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with tg7's data disposal procedures.

Data Security

tg7 implements technical and organizational security measures appropriate to the risk profile of the personal data it processes. These measures include:

• Encryption in transit: All data exchanged between your device and tg7 servers is protected by 256-bit SSL/TLS encryption, the same standard used by Philippine online banking platforms.
• Encryption at rest: Sensitive personal information, including identity and financial data, is stored in encrypted form on tg7's secured infrastructure.
• Access controls: Access to personal data is restricted to tg7 personnel with a legitimate business need. All internal access is logged and audited.
• Two-factor authentication: tg7 offers SMS-based two-factor authentication on all player accounts and mandates it for internal administrative access.
• Regular security assessments: tg7 conducts periodic security reviews and vulnerability assessments of its Platform and data infrastructure.
• Incident response: tg7 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in harm to affected individuals, tg7 will notify the NPC and affected players within the timeframes required by the DPA.

Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tg7. To exercise any of these rights, please contact tg7's Data Privacy Officer using the details in Section 14.

tg7 will respond to verified data subject rights requests within fifteen (15) business days of receipt. Complex requests may require up to thirty (30) business days, in which case tg7 will notify you of the extension and its reason. tg7 may require identity verification before processing rights requests to prevent unauthorized disclosure of your personal data to a third party.

Children's Privacy & Age Restriction

The tg7 Platform is strictly restricted to individuals who are 21 years of age or older. tg7 does not knowingly collect personal data from anyone under the age of 21. Age verification is enforced through mandatory KYC verification on all accounts.

If you are a parent or guardian and believe that a minor in your care has provided personal data to tg7 and registered an account, please contact tg7's Data Privacy Officer immediately using the contact details in Section 14.

Changes to This Privacy Policy

tg7 may update this Privacy Policy from time to time to reflect changes in our data processing practices, Philippine regulatory requirements, or Platform functionality. When we make material changes to this Policy, we will:

• Update the "Effective Date" at the top of this Policy;
• Post a prominent notice on the tg7 Platform for a period of at least seven (7) days prior to the changes taking effect; and
• Where required by law or where changes are materially adverse to your interests, notify registered players via their registered email address or Philippine mobile number.

Your continued use of the tg7 Platform after the effective date of any updated Policy constitutes your acknowledgment of the changes. We encourage you to review this Policy periodically to stay informed about how tg7 protects your personal data.

Contact & Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by tg7, please contact us through the following channels:

• 24/7 Live Chat: Available on every page of the tg7 Platform — the fastest way to reach us for general privacy queries.
• Data Privacy and Compliance: [email protected] — for formal data subject rights requests, DPA compliance inquiries, and legal correspondence.
• General Support: [email protected] — for account-related data queries, marketing opt-out requests, and general privacy questions.

tg7's Data Privacy Officer oversees compliance with RA 10173 and these privacy commitments. All formal data subject rights requests submitted to the compliance channel will be acknowledged within two (2) business days and resolved within the timeframes specified in Section 11.