At lotto7, your privacy is not a checkbox — it is a commitment. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you hold as a lotto7 player in the Philippines.
Your Privacy Matters: This Privacy Policy applies to all personal data collected by lotto7 through the lotto7.app website and any associated applications or services. By registering an account or using the lotto7 platform, you acknowledge that you have read and understood this policy. If you do not agree with how we handle your data, please do not use the lotto7 platform.
1.1 lotto7 ("we," "us," "our," or "the Company") operates the online gaming platform accessible at lotto7.app. As part of providing our services to players in the Philippines and other permitted jurisdictions, we necessarily collect and process certain personal data about you.
1.2 This Privacy Policy is intended to give you a clear and honest account of our data practices. We have written it in plain language wherever possible, while maintaining the legal precision required of a document of this nature.
1.3 This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and lotto7.
1.4 lotto7 acts as the data controller in respect of the personal data you provide to us. This means we determine the purposes and means by which your personal data is processed.
2.1 lotto7 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:
3.1 Directly from you. The majority of personal data we hold is provided directly by you during the account registration process, when completing identity verification, when making deposits or withdrawals, when contacting our support team, or when responding to surveys and promotions.
3.2 Automatically. When you access and use the lotto7 platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data is collected whether or not you are logged in to your account.
3.3 From third parties. We may receive personal data about you from third-party identity verification providers, payment processors (such as GCash, PayMaya, and banking partners), fraud prevention services, and publicly available sources where permitted by applicable law.
Note on Sensitive Data: lotto7 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where strictly required by law (for example, where a player discloses a gambling-related health concern through our responsible gaming tools). Any such data is handled with the highest level of care and is not used for marketing purposes.
4.1 lotto7 uses your personal data only for the purposes described in this policy. The primary purposes for which we process your data are set out in the table below:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity, contact, and verification data |
| Age and identity verification (21+ compliance) | Date of birth, government ID, facial image |
| Processing deposits and withdrawals | Financial data, identity data |
| Providing gaming services and game history | Gaming and activity data |
| Anti-money laundering and fraud prevention | Identity, financial, and technical data |
| Responsible gaming monitoring and tools | Gaming activity, responsible gaming settings |
| Customer support and dispute resolution | Communications data, account data |
| Marketing and promotional communications (with consent) | Contact data, marketing preferences |
| Platform security and technical maintenance | Technical and device data |
| Regulatory compliance and reporting | Identity, financial, and gaming data |
4.2 lotto7 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.
5.1 lotto7 processes your personal data on the following legal bases:
6.1 lotto7 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances:
We share data with carefully selected third-party service providers who assist us in operating the lotto7 platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, customer support software providers, and fraud detection services. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.
We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent authorities where required to do so by law, court order, or regulatory direction.
In the event of a merger, acquisition, restructuring, or sale of all or part of lotto7's business, your personal data may be transferred to the relevant successor entity. We will notify you of any such transfer and the privacy practices of the successor entity.
We may share your data with third parties in any other circumstances where you have given your explicit prior consent to such sharing.
lotto7 will never sell your personal data to advertisers, data brokers, or any other third party for commercial gain. Your data is used solely to operate and improve the lotto7 platform and to meet our legal obligations.
7.1 lotto7 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law.
7.2 Account data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering regulations and PAGCOR licensing requirements.
7.3 Identity verification documents are retained for the period required by applicable KYC and AML regulations, which is generally five (5) years from the date of the last transaction or account closure, whichever is later.
7.4 Marketing preference data and communications records are retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.
7.5 Technical and device data collected through cookies and server logs is retained for a maximum of 13 months from the date of collection, unless a longer retention period is required for security or fraud investigation purposes.
7.6 When your personal data is no longer required, lotto7 will securely delete or anonymise it in accordance with our internal data disposal procedures.
8.1 lotto7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, lotto7 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by the Data Privacy Act of 2012.
8.3 While lotto7 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your lotto7 account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.
9.1 lotto7 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and deliver relevant content. The types of cookies we use are:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Essential for platform operation, login sessions, and security | Session / up to 1 year |
| Functional | Remember your language, currency, and display preferences | Up to 1 year |
| Analytics | Understand how players use the platform to improve our services | Up to 13 months |
| Marketing | Deliver relevant promotions and measure campaign effectiveness | Up to 90 days |
9.2 Strictly necessary cookies cannot be disabled as they are essential to the operation of the lotto7 platform. You may manage your preferences for all other cookie categories through the cookie settings panel accessible from the footer of the lotto7 website.
9.3 Most web browsers also allow you to control cookies through their settings. Please note that disabling certain cookies may affect the functionality of the lotto7 platform.
10.1 Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by lotto7:
10.2 To exercise any of the above rights, please contact the lotto7 Data Privacy Officer via the contact details provided in Section 14. We will respond to all verified requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.
10.3 lotto7 will not charge a fee for exercising your data rights unless your request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request.
Marketing Opt-Out: If you no longer wish to receive promotional emails or SMS messages from lotto7, you may unsubscribe at any time by clicking the unsubscribe link in any marketing email, by adjusting your notification preferences in your lotto7 account settings, or by contacting our support team. Opting out of marketing communications will not affect transactional messages related to your account.
11.1 The lotto7 platform is strictly for individuals aged 21 years and above. lotto7 does not knowingly collect personal data from individuals under the age of 21.
11.2 As part of our registration process, all players are required to confirm their date of birth and to complete identity verification. Where lotto7 discovers or has reasonable grounds to believe that a player is under the age of 21, the account will be immediately suspended, all funds will be frozen pending investigation, and the matter may be referred to the relevant authorities.
11.3 If you are a parent or guardian and believe that a minor has registered an account on the lotto7 platform, please contact our support team immediately via live chat so that we can take prompt action.
12.1 lotto7 primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and identity verification services — may process data in other countries.
12.2 Where personal data is transferred outside the Philippines, lotto7 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law. These safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other legally recognised transfer mechanisms.
12.3 By using the lotto7 platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.
13.1 lotto7 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect.
13.2 The most current version of this Privacy Policy will always be available at lotto7.app/privacy-policy. The date of the most recent revision is shown at the top of this page.
13.3 Your continued use of the lotto7 platform after any changes to this Privacy Policy take effect constitutes your acceptance of the revised policy. If you do not agree with the changes, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.
14.1 lotto7 has appointed a Data Privacy Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our DPO through the following channels:
14.2 When contacting us regarding a data rights request, please include your full name, registered email address, and a clear description of your request so that we can verify your identity and respond efficiently.
14.3 If you are not satisfied with our response to your data rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.
lotto7 is committed to handling your personal data with integrity, transparency, and respect. Your trust is the foundation of everything we do — and we take that responsibility seriously.
From the moment you register to every peso you withdraw, lotto7 applies industry-leading data protection practices to keep your information safe.
Every connection to lotto7 is protected by bank-grade 256-bit SSL encryption. Your personal details, payment information, and gaming activity are transmitted securely at all times.
lotto7 verifies every player's identity before processing withdrawals. This protects you from fraud and ensures that only the rightful account holder can access funds.
lotto7 will never sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is used solely to operate and improve the lotto7 platform.
lotto7 operates in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and the regulations of the National Privacy Commission, giving you enforceable rights over your data.
Access, correct, or request deletion of your personal data at any time. Manage your marketing preferences directly from your lotto7 account settings — no hoops to jump through.
Our Data Privacy Officer is reachable 24/7 via live chat. Whether you have a question about your data or want to exercise your rights, the lotto7 team responds promptly and professionally.
Your data is protected, your identity is verified, and your winnings are yours. Join thousands of Filipino players who trust lotto7 for a safe, fair, and exciting online gaming experience. 21+ only.
Play responsibly. lotto7 is for entertainment only. Strictly for players aged 21 and above.