apk7 Privacy Policy

01 Who We Are

apk7 is an online casino and sports betting platform operating at apk7.ws and serving registered players across the Philippines. We offer a comprehensive gaming experience covering slots, live casino tables, bingo, sabong, Fortune Dragon, and sports betting on events including PBA, NBA, UFC, international boxing, and football — all accessible via mobile or desktop from Metro Manila, Cebu, Davao, Quezon City, and beyond.

apk7 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is committed to the responsible collection and handling of personal data in accordance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission of the Philippines.

As the data controller, apk7 determines the purposes and means of processing the personal data of our registered players and platform visitors. We have appointed a designated Data Protection Officer (DPO) who oversees all data privacy compliance matters within the organization and serves as the primary point of contact for data subject requests and regulatory inquiries from the National Privacy Commission.

02 Personal Data We Collect

apk7 collects personal data from registered players and platform visitors across several categories, as described below. We collect only the minimum data necessary to fulfill the specific purposes outlined in Section 4 of this Policy.

03 How We Collect Your Data

apk7 collects personal data through the following methods and channels:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automated technical collection: Data collected automatically when you access the apk7 platform, including your IP address, device identifiers, browser fingerprint, session timestamps, and clickstream data, collected via server logs, cookies, and similar tracking technologies.
• Third-party sources: Identity and age verification data received from our contracted KYC service providers when verifying your government-issued ID documents. Fraud risk signals received from payment processors such as GCash and Maya regarding transaction patterns. PAGCOR player registry data where required by applicable gaming regulations.
• Gaming activity records: Bet placement data, game round records, session logs, and bonus redemption activity generated automatically as you use the apk7 platform's gaming features.

apk7 does not collect personal data from social media platforms or third-party data brokers for marketing or profiling purposes.

04 Why We Process Your Personal Data

apk7 processes your personal data for the following specific, legitimate purposes. We do not process personal data for any purpose that is incompatible with the purposes listed below without first obtaining your separate consent:

• Account creation and management: To register your player account, authenticate your identity at login, maintain your account profile, and provide access to apk7's full suite of gaming products.
• KYC and age verification: To verify that you meet the minimum age requirement of 21 years as required by PAGCOR regulations, and to confirm your identity in accordance with Philippine anti-money laundering legislation.
• Payment processing: To process deposits via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, USDT, or Coins.ph, and to process withdrawal requests to your verified Philippine payment method.
• Responsible gaming monitoring: To monitor your gaming activity for signs of problematic gambling behavior, enforce deposit limits and self-exclusion requests, and comply with PAGCOR's responsible gaming framework.
• Fraud prevention and platform integrity: To detect and prevent fraudulent account activity, bonus abuse, money laundering, collusion, and other prohibited conduct as defined in the apk7 Terms & Conditions.
• Regulatory compliance and reporting: To meet our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine legislation.
• Customer support: To respond to your inquiries, resolve disputes, process complaints, and maintain records of customer communications for quality assurance and dispute resolution purposes.
• Marketing communications (where consented): To send you promotional offers, bonus notifications, and platform updates via SMS, email, or push notification, strictly where you have opted in to such communications.
• Platform improvement and analytics: To analyze aggregate, anonymized usage data for the purpose of improving the apk7 platform's performance, game selection, and user experience.

05 Legal Basis for Processing

apk7 processes your personal data on one or more of the following legal bases as provided for under Section 12 and Section 13 of the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing is necessary for the performance of the contract between you and apk7, specifically the account registration agreement and the apk7 Terms & Conditions. This covers account management, payment processing, and the delivery of gaming services.
• Legal obligation: Processing is required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws and regulations. This covers KYC verification, regulatory reporting, and responsible gaming obligations.
• Legitimate interests: Processing is necessary for the legitimate interests of apk7, including fraud prevention, platform security, and the maintenance of platform integrity — provided that such interests are not overridden by your fundamental rights and freedoms as a data subject.
• Consent: Where processing is based on consent — specifically in relation to marketing communications via SMS, email, and push notifications — apk7 will obtain your explicit, freely given, informed consent before commencing such processing. You may withdraw consent at any time through your account settings or by contacting our DPO, without affecting the lawfulness of prior processing.

06 Data Sharing & Disclosure

apk7 does not sell, rent, or trade your personal data to third parties for any commercial marketing purpose. Personal data is shared with third parties only in the following limited and controlled circumstances:

• Payment service providers: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, 7-Eleven Philippines, Coins.ph, and our USDT processing partner — solely for the purpose of processing your deposit and withdrawal transactions.
• KYC and identity verification providers: Third-party identity verification services contracted by apk7 to authenticate government-issued ID documents and perform age verification checks in compliance with PAGCOR and AMLA requirements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government agencies — where disclosure is required by law, court order, or regulatory directive.
• Technology and infrastructure providers: Cloud hosting providers, cybersecurity partners, and game software providers who process data on apk7's behalf as data processors under binding contractual agreements that require them to maintain confidentiality and implement appropriate security measures consistent with the Data Privacy Act.
• Fraud prevention networks: Industry fraud-sharing consortia operated under PAGCOR oversight, for the purpose of preventing cross-platform bonus abuse and identity fraud in the Philippine online gaming market.

All third parties with whom apk7 shares personal data are required to process that data only for the specific purpose for which it was shared, to implement appropriate technical and organizational security measures, and to comply with the Data Privacy Act of 2012 and all applicable Philippine data protection regulations.

07 Cookies & Tracking Technologies

apk7 uses cookies, web beacons, pixel tags, and similar tracking technologies on the apk7 platform. These technologies help us maintain your logged-in session, remember your language and display preferences, analyze how players navigate the platform, and detect fraudulent or suspicious access patterns.

The cookies used on the apk7 platform fall into the following categories:

You can manage or delete cookies at any time through your browser's settings menu. Please note that disabling functional or analytics cookies may affect certain features of the apk7 platform, such as saved display preferences and personalized game recommendations. Disabling strictly necessary cookies will prevent you from logging into your account and using the platform's core gaming features.

apk7 does not use third-party advertising cookies or behavioural tracking technologies that build profiles of your browsing activity across external websites for commercial marketing purposes.

08 Data Retention

apk7 retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to any longer retention periods required by PAGCOR regulations, the Anti-Money Laundering Act, or other applicable Philippine law. The following retention schedule applies:

• Account and KYC records: Retained for a minimum of five (5) years following the date of account closure. This period is mandated by AMLA compliance requirements and PAGCOR licensing conditions.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in line with AMLA recordkeeping obligations. Individual transaction records include deposit amounts, withdrawal requests, and payment method details.
• Gaming activity logs: Retained for three (3) years from the date of the relevant gaming session. These records support dispute resolution, responsible gaming monitoring, and PAGCOR audit compliance.
• Customer support communications: Retained for two (2) years from the date of the last communication in each support thread, to support dispute resolution and quality assurance processes.
• Marketing consent records: Retained for the duration of your account plus two (2) years, to demonstrate compliance with consent-based processing obligations under the Data Privacy Act.
• Technical and access logs: Retained for ninety (90) days from the date of generation, primarily for fraud detection and platform security purposes.

Upon expiry of the applicable retention period, personal data is securely and irreversibly deleted from apk7's systems, or anonymized such that it can no longer be linked to an identifiable individual. Data that has been anonymized falls outside the scope of the Data Privacy Act and may be retained indefinitely for statistical and analytical purposes.

09 Data Security Measures

apk7 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures are reviewed and updated regularly in line with evolving cybersecurity standards and the security requirements of the Data Privacy Act of 2012.

Our technical security measures include, but are not limited to:

• TLS 1.3 encryption for all data transmitted between your device and the apk7 platform, ensuring that login credentials, payment details, and personal information cannot be intercepted in transit.
• AES-256 encryption at rest for stored personal data, including government ID records, payment method details, and KYC verification documents.
• Multi-factor authentication requirements for all apk7 internal systems that process personal data, including our customer support and compliance platforms.
• Continuous automated monitoring of platform access logs for anomalous access patterns, unauthorized login attempts, and potential data exfiltration activity.
• Regular third-party penetration testing and vulnerability assessments of the apk7 platform and supporting infrastructure.
• Strict role-based access controls ensuring that apk7 staff can access only the personal data necessary for their specific job function.

While apk7 takes all reasonable technical and organizational precautions to protect your personal data, no online platform can guarantee absolute security. We strongly recommend that you use a unique, strong password for your apk7 account, enable SMS-based two-factor authentication, and promptly report any suspicious activity to our 24/7 live chat support.

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to the personal data that apk7 holds about you. These rights may be exercised by contacting our Data Protection Officer at [email protected] with the subject line "Privacy — Data Subject Request":

• Right to be Informed (Section 16a): You have the right to be informed about the collection and processing of your personal data, including the identity of the data controller, the purposes of processing, the recipients of your data, and your rights under the Data Privacy Act. This Privacy Policy fulfills apk7's obligation to provide this information.
• Right to Access (Section 16b): You have the right to request a copy of the personal data that apk7 holds about you, together with information about how that data is being processed. Access requests are responded to within fifteen (15) business days of receipt.
• Right to Correction (Section 16c): You have the right to request correction of any inaccurate, outdated, or incomplete personal data that apk7 holds about you. Corrections to non-KYC account details can be made directly through your account profile settings.
• Right to Erasure or Blocking (Section 16d): You have the right to request erasure or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, where consent has been withdrawn, or where processing is unlawful — subject to overriding legal retention obligations under PAGCOR regulations and the AMLA.
• Right to Data Portability (Section 18): You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that apk7 transmit that data directly to another organization where technically feasible.
• Right to Object (Section 16f): You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may opt out of marketing communications via your account settings or by contacting our DPO.
• Right to Lodge a Complaint: If you believe that apk7 has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

11 Children and Minors

The apk7 platform is strictly restricted to individuals who are at least 21 years of age, the minimum legal age for casino-style gambling in the Philippines as prescribed by PAGCOR. apk7 does not knowingly collect, process, or store personal data from individuals under the age of 21.

Where apk7 becomes aware that personal data has been collected from an individual who is under 21 years of age, we will take the following immediate steps:

• Suspend the associated account pending verification.
• Conduct an expedited review of all transactions associated with the account.
• If the individual is confirmed to be under 21, permanently close the account and delete all associated personal data to the extent permitted by applicable law and PAGCOR regulatory requirements.
• Report the matter to PAGCOR as required under applicable responsible gaming regulations.

If you believe that a minor has registered an apk7 account or that an individual under 21 has accessed the platform, please contact our customer support team immediately via live chat so that we can investigate and take appropriate action.

12 Cross-Border Data Transfers

The apk7 platform is operated primarily within the Philippines and processes personal data in accordance with Philippine law. However, certain technology infrastructure and third-party service providers engaged by apk7 — including cloud hosting providers and game software companies — may process or store personal data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, apk7 ensures that appropriate safeguards are in place to protect your data at the receiving end, consistent with the standards required by the Data Privacy Act of 2012 and the National Privacy Commission. These safeguards include binding contractual clauses that require overseas data processors to implement security measures equivalent to those mandated under Philippine data protection law, and to process personal data only for the specific purposes for which it was transferred.

apk7 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing contractual safeguards approved by the National Privacy Commission. Players who have concerns about cross-border data transfers may contact our DPO at [email protected] for further information about the specific safeguards in place.

13 Amendments to This Privacy Policy

apk7 reserves the right to amend, update, or revise this Privacy Policy at any time to reflect changes in applicable Philippine law, PAGCOR regulatory requirements, our data processing practices, or the technical architecture of the apk7 platform. All amendments will be published on this page at apk7.ws/privacy-policy with an updated effective date and version number.

Where a proposed amendment materially affects your rights as a data subject or significantly changes the manner in which apk7 processes your personal data, we will provide advance notice of the change via a platform notification or email to your registered address at least fourteen (14) days before the amended Policy takes effect. Your continued use of the apk7 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how apk7 protects your personal data. The version number and effective date displayed at the top of this page will always reflect the most current version of the Policy.

14 Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the manner in which apk7 processes your personal data, you may contact our designated Data Protection Officer through the following channels:

• Email: [email protected] — subject line: "Privacy — Data Subject Request"
• Live Chat: Available 24/7 via the apk7 platform at apk7.ws
• Response Time: Email inquiries are responded to within approximately two (2) business hours. Formal data subject requests are processed within fifteen (15) business days of identity verification.

If you are not satisfied with apk7's response to your privacy concern or data subject request, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. Information about the NPC complaints process is available on the official NPC website.