Privacy Policy

mnl7 is the trading name of the operator of the online gaming platform accessible at mnl7.net (the "Platform"). mnl7 operates under a license granted by the Philippine Amusement and Gaming Corporation ("PAGCOR") and is subject to PAGCOR's regulatory requirements, including those relating to the collection, processing, and protection of player personal data.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, mnl7 is the Personal Information Controller (PIC) in respect of the personal data of players and visitors to the Platform. This means mnl7 determines the purposes for which and the means by which personal data is processed.

If you have any questions about this Privacy Policy or the way mnl7 handles your personal data , please contact our Data Protection Officer at [email protected].

This Privacy Policy applies to all personal data collected and processed by mnl7 in connection with:

• Your registration for and use of a player account on the Platform.
• Your visits to the mnl7 website at mnl7.net, including any pages accessible without registration.
• Communications between you and mnl7, including via live chat, email, and in-platform messaging.
• Your participation in any promotion, bonus, or loyalty program offered by mnl7.
• Any identity verification or Know Your Customer (KYC) process conducted by mnl7 or on its behalf.

This Policy does not apply to the data practices of third-party service providers who operate their own platforms independently, such as game studios or payment providers. Where mnl7 shares data with such parties, this Policy describes the terms of that sharing, but the third party's own privacy policy will govern how it handles the data thereafter.

mnl7 collects the following categories of personal data:

mnl7 does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health data, religious beliefs, or political affiliations) unless specifically required for a regulatory compliance purpose and with your explicit consent.

mnl7 collects personal data through the following means:

• Direct submission. Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated technical collection. Data collected automatically when you visit or use the Platform, including IP addresses, device identifiers, and browsing behaviour, via cookies and similar tracking technologies (see Section 8).
• Third-party sources. Identity and address verification data received from licensed KYC and AML service providers as part of the verification process. Financial transaction data received from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank in connection with deposits and withdrawals.
• PAGCOR and regulatory bodies. In limited circumstances, mnl7 may receive data about a player from PAGCOR, such as information relating to exclusion status or regulatory investigations.

Under the Philippine Data Privacy Act of 2012, mnl7 must have a lawful basis for each processing activity. The legal bases on which mnl7 relies are:

• Contractual necessity. Processing that is necessary to perform the player account agreement, including operating your account, processing deposits and withdrawals, and providing access to games.
• Legal obligation. Processing required to comply with PAGCOR regulations, Philippine AML laws (Republic Act No. 9160, as amended), the Data Privacy Act, and other applicable Philippine laws and regulations.
• Legitimate interests. Processing that is necessary for mnl7's legitimate business interests, such as fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights and interests as a data subject.
• Consent. Where mnl7 relies on your consent as the legal basis (for example, for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

mnl7 uses the personal data we hold about you for the following purposes:

• Account creation and management. To register your account, verify your identity and age (21+ requirement), and maintain your account in accordance with PAGCOR regulations.
• Service delivery. To provide access to games, process bets, calculate and credit winnings, and deliver the full range of mnl7 Platform features.
• Payment processing. To process deposits and withdrawals via your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank) and to maintain accurate financial records.
• KYC and AML compliance. To verify player identity, source of funds, and to monitor transactions for suspicious activity in compliance with PAGCOR's AML program and Philippine law.
• Responsible gaming. To monitor gaming patterns for signs of problem gambling behaviour, to apply deposit limits, session limits, and self-exclusion restrictions set by you or required by regulation.
• Customer support. To respond to your queries, complaints, and requests, and to maintain records of those communications for quality and compliance purposes.
• Fraud prevention and security. To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and other prohibited conduct.
• Platform improvement. To analyse usage patterns, identify technical issues, and improve the performance and user experience of the mnl7 Platform.
• Marketing communications. Where you have given consent, to send you promotional offers, bonus notifications, and news about mnl7. You may unsubscribe from marketing communications at any time via your account settings or by contacting support.
• Legal and regulatory compliance. To comply with applicable Philippine laws, PAGCOR directions, court orders, and lawful requests from law enforcement authorities.

mnl7 will not use your personal data for any purpose that is incompatible with the purposes described above without obtaining your prior consent or establishing a separate legal basis for the new purpose.

mnl7 does not sell your personal data. We share personal data with third parties only in the following circumstances and subject to appropriate data processing agreements or legal obligations:

• Payment service providers. GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own regulatory frameworks and privacy policies.
• KYC and identity verification providers. Licensed third-party KYC and AML screening services receive identity documents and personal details necessary to complete verification procedures required by PAGCOR regulations.
• Game content providers. Game studios whose titles are available on the mnl7 Platform may receive anonymised or pseudonymised gameplay data for technical integration and certification purposes. mnl7 does not share identifiable personal data with game studios for their own marketing use.
• IT and infrastructure providers. Cloud hosting and cybersecurity service providers who process data on mnl7's behalf under strict contractual obligations that prohibit independent use of the data.
• PAGCOR. mnl7 is required to report certain player data and gaming activity to PAGCOR as a condition of its operating license. This includes reporting on AML-related matters and exclusion list management.
• Law enforcement and regulatory authorities. Where required by Philippine law, a court order, or a lawful regulatory direction, mnl7 will disclose personal data to the relevant authority. Where legally permissible, mnl7 will notify you of such a disclosure.
• Business transfers. In the event of a merger, acquisition, or sale of all or substantially all of mnl7's business assets, player personal data may be transferred to the acquiring entity, subject to the same protections described in this Policy.

mnl7 uses cookies and similar tracking technologies (collectively, "Cookies") on the Platform. Cookies are small data files placed on your device that help us recognise you, remember your preferences, and understand how you use the Platform.

The following categories of Cookies are used on the mnl7 Platform:

• Strictly necessary cookies. Essential for the operation of the Platform, including maintaining your logged-in session, remembering your account preferences, and ensuring Platform security. These cannot be disabled without significantly impairing your ability to use the Platform.
• Functional cookies. Used to remember choices you have made, such as language preferences and responsible gaming settings, to provide a more personalised experience.
• Analytics cookies. Used to collect anonymised data on how visitors use the Platform — which pages are visited most frequently, where users drop off, and how the Platform performs on different devices. This data is used solely to improve the Platform.
• Session integrity cookies. Used to detect and prevent fraudulent activity, including bot access and account takeover attempts, by analysing device and session characteristics.

mnl7 does not use third-party advertising or behavioural targeting cookies that would share your browsing behaviour with external advertising networks. You may manage cookie preferences through your browser settings, although disabling strictly necessary cookies may affect Platform functionality.

mnl7 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Active player accounts. Personal data is retained for the duration of your active account relationship with mnl7 and for a period of five (5) years after account closure, in compliance with PAGCOR's record-keeping requirements and Philippine AML legislation.
• Financial transaction records. Deposit, withdrawal, and betting transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended) and PAGCOR regulations.
• KYC documents. Identity verification documents are retained for a minimum of five (5) years following account closure or the completion of the transaction for which verification was conducted.
• Customer support communications. Support communications are retained for three (3) years from the date of the communication, or longer if relevant to an ongoing dispute or regulatory investigation.
• Marketing consent records. Records of your marketing consent or opt-out are retained for as long as necessary to demonstrate compliance with your stated preferences.
• Technical and analytics data. Anonymised or aggregated technical data collected for platform analytics is retained indefinitely, as it no longer constitutes personal data once anonymised.

When personal data reaches the end of its retention period, mnl7 will securely delete it or anonymise it so that it can no longer be linked to an identifiable individual.

mnl7 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit. All data transmitted between your device and the mnl7 Platform is encrypted using Transport Layer Security (TLS) protocol. The Platform enforces HTTPS across all pages.
• Encryption at rest. Sensitive personal data, including identity documents and financial records, is stored in encrypted form within mnl7's data infrastructure.
• Access controls. Access to personal data within mnl7's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and subject to periodic audit.
• Two-factor authentication. Players are strongly encouraged to enable SMS-based two-factor authentication on their mnl7 accounts as an additional layer of protection against unauthorised access.
• Vulnerability management. mnl7 conducts regular security assessments and penetration testing to identify and remediate security vulnerabilities in its systems and infrastructure.
• Incident response. mnl7 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, mnl7 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected players as required by the Data Privacy Act.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by mnl7. These rights are genuine and enforceable — mnl7 has established internal processes to handle each type of request.

The mnl7 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations. mnl7 does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted as part of the KYC process for all registered players. Where mnl7 discovers or reasonably suspects that an account has been registered by a person under 21, the account will be immediately suspended, the matter will be reported to PAGCOR, and any personal data collected from that individual will be securely deleted to the extent permitted by law.

If you are a parent or guardian and believe that your child or ward under 21 has registered an account on the mnl7 Platform, please contact us immediately at [email protected]. mnl7 will investigate and act promptly.

mnl7 primarily processes player personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and certain KYC verification partners — may process data in servers located outside the Philippines.

Where personal data is transferred outside the Philippines, mnl7 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and the implementing rules issued by the National Privacy Commission. These safeguards may include:

• Contractual clauses in agreements with third-party processors that require them to protect the data to a standard equivalent to Philippine law.
• Transfers to jurisdictions recognised by the NPC as providing an adequate level of data protection.
• Other legally recognised transfer mechanisms approved by the NPC.

You may request further information about international data transfers and the specific safeguards in place by contacting our Data Protection Officer at [email protected].

mnl7 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The date of the most recent update is displayed at the top of this page.

For material changes — those that significantly affect how we process your personal data or your rights as a data subject — mnl7 will provide advance notice by email to your registered address and/or via a prominent in-platform notification, at least seven (7) days before the change takes effect.

Minor updates, such as corrections of typographical errors or clarifications that do not affect the substance of the Policy, may be made without advance notice. Your continued use of the Platform following the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not agree to the revised Policy, you should stop using the Platform and contact support to request account closure.

If you have any questions, concerns, or complaints about this Privacy Policy or the way mnl7 handles your personal data, please contact our Data Protection Officer:

If you are not satisfied with mnl7's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent government body responsible for administering and enforcing the Data Privacy Act of 2012. The NPC accepts complaints through its official government channels.

For matters relating to gaming regulation or PAGCOR licensing compliance, you may also contact PAGCOR through its official regulatory channels. mnl7 fully cooperates with both the NPC and PAGCOR in all matters relating to player data protection and responsible gaming regulation.