sulit77 Privacy Policy
— Your Data, Explained

1.1 Identity of the Controller. The personal information controller for data collected through sulit77.vip is the operator of the sulit77 platform, duly authorized by the Philippine Amusement and Gaming Corporation (PAGCOR) to operate an online gaming service in the Philippines. All data processing activities described in this Privacy Policy are conducted by or on behalf of sulit77 as the personal information controller.

1.2 Data Protection Officer. sulit77 has designated a Data Protection Officer (DPO) in accordance with Section 21 of the Implementing Rules and Regulations of R.A. 10173. The DPO is responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act. You may contact the DPO directly for any data privacy concerns at [email protected]. The DPO will acknowledge your inquiry within five (5) business days.

1.3 Scope of This Policy. This Privacy Policy applies to all personal data processed by sulit77 in connection with your use of the sulit77.vip website, including all registration, account management, gameplay, payment processing, and customer support interactions. It applies to all users regardless of their location within the Philippines — whether you're accessing sulit77 from Metro Manila, Cebu City, Davao, Iloilo, General Santos, or any other part of the country.

sulit77 collects personal data through several channels: information you provide directly during registration and KYC; information generated automatically by your use of the platform; information from third-party service providers such as payment processors; and information required by PAGCOR for regulatory compliance. The table below categorizes the personal data sulit77 collects and explains why.

sulit77 processes your personal data on the following lawful bases as defined under R.A. 10173 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform the sulit77 User Agreement — including account registration, game access, payment processing, and withdrawal — is necessary for the performance of the contract between sulit77 and the Player.
• Legal obligation: sulit77 is legally required to collect and process certain personal data to comply with PAGCOR authorization conditions, the Anti-Money Laundering Act (R.A. 9160), the AMLC's applicable regulations, the Data Privacy Act, and other Philippine laws.
• Legitimate interests: sulit77 processes technical and usage data on the basis of its legitimate interest in maintaining platform security, preventing fraud, and improving the gaming experience — where those interests are not overridden by your data protection rights.
• Consent: Where sulit77 sends you promotional and marketing communications (e.g., bonus offers, new game announcements), processing is based on your consent given during registration or subsequently through notification preferences. You may withdraw this consent at any time through your Account settings without affecting the lawfulness of prior processing.

4.1 Account Operation. Personal data is used to create and maintain your sulit77 Account, authenticate your identity at login (including 2FA verification to your registered Philippine mobile number), process deposits via GCash, Maya, or bank transfer, and process withdrawal requests once KYC verification is complete.

4.2 Regulatory Compliance. sulit77 is required by PAGCOR and Philippine law to maintain accurate records of player identities, transactions, and gameplay data. This data may be reported to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine regulatory authorities as mandated by applicable law. sulit77 cannot limit these legally required disclosures.

4.3 Responsible Gaming. sulit77 monitors gameplay patterns and account activity to identify potential problem gambling behaviors. Where patterns suggest a player may be experiencing difficulty, sulit77 may proactively contact the player with information about responsible gaming tools and support resources. This processing is conducted in the legitimate interest of player welfare and complies with PAGCOR responsible gaming requirements.

4.4 Security and Fraud Prevention. Technical data including IP addresses, device identifiers, and login patterns are analyzed to detect unauthorized access attempts, fraudulent accounts, and prohibited activity as defined in the sulit77 Terms and Conditions. sulit77 may share relevant technical data with fraud prevention services and other PAGCOR-licensed operators in the Philippines where legally permitted to do so.

4.5 Communications. sulit77 uses your contact details to send transactional communications (deposit confirmations, withdrawal notifications, security alerts, and account status updates) — these cannot be opted out of as they are essential to the service. With your consent, sulit77 also sends promotional communications about bonuses, new games, and special events.

sulit77 does not sell your personal data to third parties. We share personal data only in the circumstances described below, and only to the extent necessary for each specified purpose.

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers receive transaction data necessary to process your deposits and withdrawals. Each payment provider is bound by their own privacy policy and Philippine payment system regulations.
• KYC verification providers: sulit77 uses accredited third-party identity verification services to perform digital KYC checks. These providers receive your submitted identity documents and biometric liveness data for the sole purpose of verifying your identity.
• PAGCOR and regulatory authorities: sulit77 is legally obligated to provide player data to PAGCOR upon request, and to file Covered Transaction Reports (CTRs) and Suspicious Transaction Reports (STRs) with the AMLC as required by the Anti-Money Laundering Act.
• Technology service providers: sulit77 uses cloud hosting, data analytics, and customer support platform providers who process data on our behalf under contractual data processing agreements that bind them to the same level of data protection as sulit77.
• Game studios: Game providers supplying titles to the sulit77 platform receive anonymized gameplay statistics. No personally identifiable information is shared with game studios unless required by a specific dispute investigation.
• Law enforcement: sulit77 will disclose personal data to law enforcement agencies, courts, or other government authorities when required by a valid legal order under Philippine law.

sulit77 retains personal data only for as long as necessary to fulfill the purpose for which it was collected and to comply with applicable legal and regulatory retention requirements. The retention periods below represent the minimum periods required by Philippine law and/or sulit77's operational necessity.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with NPC-approved disposal procedures. Anonymized data that can no longer identify an individual may be retained indefinitely for statistical and analytical purposes.

sulit77.vip uses cookies and similar technologies to ensure the platform functions correctly, maintain your login session, and analyze aggregate usage patterns. No cookies on sulit77 are used to track your behavior across third-party websites or to build advertising profiles.

You can control cookie preferences through your browser settings. Disabling required cookies will prevent the sulit77 platform from functioning correctly — you will not be able to log in or place wagers without session and authentication cookies active. Optional cookies can be disabled without affecting core functionality.

As a data subject under R.A. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by sulit77. To exercise any of these rights, submit your request in writing to [email protected]. sulit77 will respond within fifteen (15) business days of receiving a complete and verifiable request.

9.1 Internal Response. sulit77 maintains a Data Breach Response Team responsible for detecting, assessing, and containing personal data breaches. Upon discovery of a breach, the team will immediately contain the incident, assess its scope and likely impact, and determine the affected data categories and number of data subjects.

9.2 NPC Notification. In the event of a personal data breach that is likely to give rise to a real risk of serious harm to affected individuals, sulit77 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03. The notification will include the nature of the breach, categories and approximate number of affected records, contact details of the DPO, and measures taken or proposed to address the breach.

9.3 Individual Notification. sulit77 will notify affected players directly of a personal data breach without undue delay where the breach is likely to result in a high risk to their rights and freedoms. Notification will be sent to the registered mobile number and, where available, email address on file. Notification will describe the nature of the breach, the data affected, likely consequences, and steps players can take to protect themselves.

sulit77 does not knowingly collect personal data from individuals under 21 years of age. The sulit77 platform is strictly for adults aged 21 and above, in compliance with PAGCOR regulations. If sulit77 discovers that an Account was registered by a person under 21 years of age, the Account will be immediately suspended, all personal data associated with the Account will be deleted within 30 days (except where retention is required for regulatory compliance purposes), and all funds will be returned to the payment source.

sulit77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or regulatory guidance from the NPC or PAGCOR. Material changes will be communicated to registered players via SMS and, where available, email to contact details on file, at least seven (7) days before the amended policy takes effect. The version number and effective date at the top of this page will be updated with each revision. Continued use of sulit77 after the effective date of an updated Privacy Policy constitutes acknowledgment of the changes. We encourage you to review this page periodically.

12.1 Privacy Inquiries. For any questions about this Privacy Policy or about how sulit77 processes your personal data, contact the Data Protection Officer at [email protected]. Include "Privacy Inquiry" in your subject line along with your registered mobile number so we can locate your Account record.

12.2 Data Subject Requests. To exercise any of your rights under R.A. 10173 (access, correction, erasure, restriction, portability, or objection), send a written request to [email protected] with proof of identity. sulit77 will process verified requests within fifteen (15) business days.

12.3 Complaints to the NPC. If you believe sulit77 has handled your personal data in a manner inconsistent with R.A. 10173 and you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC's contact information and complaint procedures are available at the NPC's official website. sulit77 will cooperate fully with any NPC investigation.