7spain Privacy Policy

01 Who We Are

This Privacy Policy is issued by 7spain ("7spain," "we," "us," or "our"), the operator of the online casino and sports betting platform accessible at https://7spain.cam. 7spain is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates in full compliance with Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations promulgated by the National Privacy Commission (NPC).

As a personal information controller under RA 10173, 7spain determines the purposes and means of processing personal data collected through this platform. All players accessing 7spain's services from anywhere in the Philippines — whether in Metro Manila, Cebu, Davao, or the wider archipelago — are entitled to the protections described in this policy.

02 Data We Collect

7spain collects personal data through several distinct channels. The categories of data collected, and the context in which each is gathered, are described below.

2.1 Registration & Account Data

When you create a 7spain account, we collect the information required to verify your identity, meet our PAGCOR Know Your Customer (KYC) obligations, and establish a contractual relationship with you. This includes:

• Full legal name (as it appears on a government-issued ID)
• Date of birth (to verify you are 21 years of age or older, as required under PAGCOR rules)
• Philippine address — barangay, city/municipality, province
• Mobile number (used for account verification and security alerts)
• Email address
• Username and encrypted password
• Government-issued ID type and number (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID)

2.2 Financial & Transaction Data

To process deposits and withdrawals — including via GCash, Maya, BPI, BDO, Metrobank, and other Philippine payment channels — 7spain processes the following:

• GCash or Maya registered mobile number and transaction reference numbers
• Bank account details (account name, account number, bank name) for bank transfer withdrawals
• Transaction amounts, timestamps, and payment method identifiers
• Records of deposits, withdrawals, bonuses received, and balance history

2.3 Gaming Activity Data

As part of operating a regulated gambling platform, 7spain maintains records of:

• Game sessions played (title, start time, duration, wager amounts, outcomes)
• Bonus participation and wagering progress
• Responsible gaming tool usage (deposit limits set, session timers activated, self-exclusion elections)

2.4 Technical & Device Data

When you access 7spain, our servers and analytics tools automatically receive certain technical information:

• IP address and approximate geolocation (country and region level)
• Device type, operating system, and browser version
• Screen resolution and language settings
• Session logs, page views, click events, and navigation paths within the platform
• Cookie identifiers and local storage tokens (see Section 6)

2.5 Communications Data

If you contact 7spain's customer support team via live chat or email, we retain records of those communications, including the content of your messages, timestamps, and the resolution status of any support tickets raised.

03 How We Use Your Data

7spain uses personal data for the following purposes:

1. Account creation and management — establishing, maintaining, and closing your 7spain account in accordance with our Terms & Conditions.
2. Identity verification (KYC) — confirming that you are who you say you are and that you meet the 21+ age requirement mandated by PAGCOR.
3. Payment processing — processing deposits from and withdrawals to your GCash, Maya, or bank accounts.
4. Anti-money laundering (AML) compliance — monitoring transactions as required under the Anti-Money Laundering Act (AMLA) and its implementing rules, and reporting to the Anti-Money Laundering Council (AMLC) where legally required.
5. Responsible gaming — monitoring gaming patterns to identify potential problem gambling behaviors and administering tools such as deposit limits, session reminders, and self-exclusion.
6. Fraud prevention and security — detecting suspicious activity, unauthorized access attempts, and bonus abuse.
7. Customer support — responding to your queries, resolving disputes, and improving service quality.
8. Marketing communications — sending you promotional offers, bonus notifications, and platform updates via email or SMS, where you have provided consent. You may opt out at any time.
9. Analytics and platform improvement — understanding how players navigate 7spain in order to improve usability, game selection, and the overall player experience.
10. Legal compliance — meeting our obligations to PAGCOR, the NPC, the AMLC, and other Philippine regulatory authorities.

04 Legal Basis for Processing

Under RA 10173, 7spain processes personal data on the following legal bases:

• Consent — for marketing communications and non-essential cookies, where you have given explicit agreement.
• Performance of a contract — for processing necessary to operate your account, handle transactions, and deliver the gaming services you have signed up for.
• Legal obligation — for KYC verification, AML reporting, PAGCOR regulatory compliance, and tax-related record-keeping.
• Legitimate interests — for fraud prevention, platform security, and analytics, where such interests do not override your fundamental rights and freedoms.

05 Data Sharing

7spain does not sell or rent your personal data. We may share your data with the following categories of third parties, strictly for the purposes described:

• Payment processors — GCash (Globe Fintech Innovations), Maya (PayMaya Philippines), BancNet, and partner banks (BPI, BDO, Metrobank) receive the transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers — third-party services used to verify government IDs and screen against watchlists, as required by PAGCOR's KYC standards.
• Game content providers — RNG certification bodies and game studios may receive aggregated, anonymized gaming data for certification and audit purposes. No personally identifiable information is shared with game studios.
• Regulatory authorities — PAGCOR, the NPC, the AMLC, the Bureau of Internal Revenue (BIR), and other government bodies, where disclosure is required by law or in response to a lawful order.
• Cloud infrastructure and IT service providers — hosting, data storage, and cybersecurity vendors operating under binding data processing agreements with equivalent data protection obligations.
• Customer support platforms — live chat and ticketing software vendors who process support communications on our behalf under processor agreements.

All third-party processors engaged by 7spain are bound by contractual data protection obligations no less protective than those in this policy.

06 Cookies & Tracking Technologies

7spain uses cookies and similar tracking technologies to operate the platform, remember your session, and analyze how players interact with the site. The main categories of cookies we use are:

• Strictly necessary cookies — essential for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. You cannot opt out of these without losing access to the platform.
• Functional cookies — remember your language preferences, display settings, and lobby view configurations between sessions.
• Analytics cookies — collect anonymized data on page views, navigation flows, and feature usage to help us understand and improve the platform experience. Activated only with your consent.
• Marketing cookies — track whether you arrived at 7spain via a specific promotional link. Used only with your explicit consent and only for internal attribution purposes. We do not use cross-site behavioral advertising cookies.

You can manage your cookie preferences through your browser settings. Removing or blocking cookies may limit certain platform features. A cookie consent banner will be presented on your first visit to 7spain, allowing you to accept or decline non-essential cookies.

07 Data Security

7spain implements technical and organizational security measures appropriate to the risk level associated with the personal data we process:

• 256-bit TLS/SSL encryption on all data in transit
• AES-256 encryption for sensitive data at rest (including payment details and ID document copies)
• Multi-factor authentication (MFA) for all internal administrative access to player data systems
• Role-based access controls ensuring employees can only access data necessary for their specific function
• Regular penetration testing and vulnerability assessments by independent third-party security firms
• 24/7 intrusion detection and security event monitoring
• Formal data breach response procedures, including mandatory NPC notification within 72 hours of discovering a breach that poses a real risk of harm

Despite these measures, no internet-based system is completely impenetrable. 7spain cannot guarantee absolute security but commits to maintaining industry-standard protections and responding promptly and transparently to any security incidents.

08 Retention & Deletion

7spain retains personal data only for as long as necessary to fulfill the purposes described in this policy and to meet our legal obligations:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymized in accordance with NPC-approved disposal procedures.

09 Your Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 7spain:

• Right to be informed — to receive clear, accessible information about how your personal data is collected and processed, which is the primary purpose of this Privacy Policy.
• Right of access — to request a copy of the personal data 7spain holds about you and information about how it is being processed.
• Right to rectification — to have inaccurate or incomplete personal data corrected. You can update most account details directly through your 7spain account settings. For KYC document corrections, contact the DPO.
• Right to erasure ("right to be forgotten") — to request deletion of your personal data where it is no longer necessary for the purposes collected, or where you withdraw consent and no other legal basis applies. Note that statutory retention requirements (such as AMLA's 10-year financial records retention) may prevent immediate erasure of certain data categories.
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format and to have it transferred to another controller where technically feasible.
• Right to object — to object to processing based on legitimate interests, including profiling for marketing purposes. Where you object to marketing, 7spain will immediately cease sending promotional communications.
• Right to restrict processing — to request that 7spain limits the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to damages — to claim compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
• Right to lodge a complaint — to file a complaint with the National Privacy Commission if you believe your data rights have been violated. The NPC can be reached at privacy.gov.ph.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to verified requests within 15 business days of receipt, in accordance with NPC guidelines.

10 Children & Minors

7spain is an online gambling platform. Access is strictly prohibited for individuals under 21 years of age, as mandated by PAGCOR regulations. We do not knowingly collect personal data from anyone under the age of 21. Our registration process includes mandatory age verification, and KYC document review is required before any player can make a deposit or withdraw funds.

If you are a parent or guardian and believe a minor may have created a 7spain account, please contact our DPO immediately at the address in Section 13 so we can take appropriate action.

11 Cross-Border Data Transfers

7spain's primary data processing infrastructure is hosted in data centers located within the Asia-Pacific region. Some third-party service providers engaged by 7spain may process data outside the Philippines. Where such transfers occur, 7spain ensures they are covered by one of the following safeguards:

• A finding by the NPC that the recipient country provides an adequate level of data protection
• Standard contractual clauses approved by the NPC, binding the recipient to obligations equivalent to those in RA 10173
• The recipient is a party to an approved binding corporate rules scheme
• Your explicit consent to the specific transfer

You may request details of the specific safeguards applicable to any third-country transfer involving your personal data by contacting the DPO.

12 Changes to This Policy

7spain may update this Privacy Policy from time to time to reflect changes in our practices, applicable laws, or PAGCOR requirements. When we make material changes, we will notify you through one or more of the following channels:

• A prominent notice posted on the 7spain platform for at least 30 days before the changes take effect
• An email notification sent to your registered email address
• An in-platform notification visible upon your next login

The "Last Updated" date at the top of this policy will always reflect when the most recent revision was made. Continued use of 7spain after the effective date of any revised policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you may close your account before the effective date by contacting customer support.

13 Contact & Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a potential data protection issue, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you are not satisfied with how 7spain handles your data rights request. The NPC's official website is privacy.gov.ph.