f7max Privacy Policy
Your privacy matters to us. This policy explains exactly what personal data f7max collects, why we collect it, how it is used, and the rights you hold as a Filipino player on our platform.
Our Privacy Commitments
Six core principles that guide how f7max handles every piece of data you entrust to us.
Data Security First
f7max protects your personal data with TLS encryption in transit and industry-standard hashing at rest. Account logins are protected by OTP verification for new devices, and session activity logs are visible from your dashboard at all times. Your data is never stored in plaintext where it can be read by unauthorized parties — internal or external.
No Data Selling — Ever
f7max does not sell, rent, or trade your personal information to third-party marketers, data brokers, or advertising networks. Your data is used solely to operate your f7max account, process your transactions, fulfill our PAGCOR compliance obligations, and communicate with you about matters relevant to your account.
You Control Your Data
As a data subject under the Philippine Data Privacy Act of 2012, you have the right to access, correct, and request deletion of the personal data f7max holds about you. These rights can be exercised by contacting our Data Protection Officer. f7max will respond to verified data subject requests within 15 business days of receipt.
DPA 2012 Compliance
f7max processes personal data in compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and the implementing rules and regulations issued by the National Privacy Commission (NPC). Our Data Protection Officer is registered with the NPC as required by law. Privacy impact assessments are conducted for new data processing activities before they go live.
Minimal Retention Periods
f7max retains personal data only for as long as it is needed to fulfill the purposes for which it was collected, or as required by PAGCOR regulations and Philippine law. Once data is no longer needed and there is no legal obligation to retain it, f7max disposes of it securely using methods appropriate to the sensitivity of the data involved.
Breach Notification
In the unlikely event of a personal data breach that poses a real risk to you, f7max will notify affected players and the National Privacy Commission within the timeframes required by the Data Privacy Act. Notifications will describe the nature of the breach, the categories of data affected, steps taken to contain it, and recommended actions for affected individuals.
Summary: f7max collects personal data necessary to operate your account, process payments, comply with PAGCOR and Philippine legal obligations, and keep the platform secure. We do not sell your data. You have rights over your data under the Data Privacy Act of 2012. If you have questions, contact our Data Protection Officer at the details in Section 15.
1. Introduction
This Privacy Policy ("Policy") describes how f7max ("f7max," "we," "us," or "our") — the operator of the online gaming and sports betting platform accessible at f7max.net — collects, uses, discloses, stores, and protects the personal data of individuals who access or use our platform ("you" or "Player").
f7max is committed to protecting the privacy of all Filipino players who use our services. This Policy is drafted in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines.
By registering an account on f7max.net, depositing funds, or otherwise using the f7max platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the f7max platform.
This Policy should be read alongside our Terms & Conditions, which are available at f7max.net/terms-conditions.
2. Data Controller
For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, f7max is the personal information controller in respect of all personal data collected through the f7max.net platform. As personal information controller, f7max determines the purposes and means by which your personal data is processed.
f7max has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the DPA, responding to data subject requests, liaising with the National Privacy Commission, and maintaining internal data governance practices. The contact details of our DPO are provided in Section 15 of this Policy.
Our Data Protection Officer is registered with the National Privacy Commission as required by NPC Circular No. 17-01. All data subject rights requests and privacy-related inquiries should be directed to the DPO using the contact details in Section 15.
3. Data We Collect
f7max collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy. The categories of personal data we collect include:
3.1 Registration and Identity Data
When you create an f7max account, we collect your full legal name, date of birth, email address, mobile phone number, and residential address. This information is required to create and manage your account, verify your age and identity, and fulfill our Know Your Customer (KYC) obligations under PAGCOR regulatory requirements.
3.2 Identity Verification Documents
To complete KYC verification, you may be required to submit copies of government-issued identification documents, such as your PhilSys National ID, UMID card, passport, or driver's license. You may also be asked to provide proof of residential address and, in some cases, proof of source of funds. These documents are processed solely for identity verification and regulatory compliance purposes.
3.3 Financial and Transaction Data
f7max collects data relating to financial transactions conducted through the platform, including deposit amounts, withdrawal requests, payment method identifiers (such as GCash registered mobile numbers, bank account last digits, or e-wallet reference numbers), and transaction timestamps. Full payment account numbers are never stored by f7max — payment processing is handled by our licensed payment service providers.
3.4 Gaming Activity Data
We collect records of your gaming activity on the f7max platform, including games played, bets placed, amounts wagered, game outcomes, bonus usage, and session timestamps. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting to PAGCOR as required.
3.5 Technical and Device Data
When you access f7max.net, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, language settings, referring URL, and session duration. This data is used for platform security, fraud detection, and improving the performance of the f7max platform for Filipino users.
3.6 Communications Data
If you contact f7max support via live chat or email, we retain records of your communications, including the content of messages and any supporting materials you provide. These records are used to manage your inquiry, improve our support quality, and as evidence in the event of a dispute.
Sensitive Personal Information: f7max does not intentionally collect sensitive personal information as defined under the Data Privacy Act of 2012 (such as health data, religious beliefs, or political affiliations) except where strictly required by law — for example, where responsible gaming assessments require health-related disclosures at the player's own initiative.
3.7 Summary of Data Categories
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Name, date of birth, address | Account creation, KYC, age verification |
| Contact Data | Email, mobile number | Account communications, OTP, support |
| Verification Documents | Gov't ID, proof of address | KYC compliance, PAGCOR regulatory obligations |
| Financial Data | Deposit/withdrawal records, payment method identifiers | Transaction processing, AML compliance |
| Gaming Activity | Bets, game history, session records | Account management, responsible gaming, regulatory reporting |
| Technical Data | IP address, device info, browser type | Security, fraud detection, platform optimization |
| Communications Data | Support chat transcripts, emails | Customer support, dispute resolution |
4. How We Use Your Data
f7max uses the personal data we collect for the following purposes:
- Account management: Creating, maintaining, and managing your f7max player account, including processing deposits and withdrawals and maintaining your gaming history.
- Identity verification and KYC compliance: Verifying your identity, age, and eligibility to use the f7max platform in accordance with PAGCOR regulatory requirements and the Anti-Money Laundering Act (AMLA).
- Transaction processing: Facilitating deposits and withdrawals through your chosen payment method — GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, Coins.ph, or USDT — and maintaining accurate records of all financial transactions.
- Platform security and fraud prevention: Monitoring account activity to detect and prevent unauthorized access, fraudulent transactions, collusion, use of prohibited software, and other security threats to the platform and its players.
- Regulatory compliance: Fulfilling f7max's obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory authorities, including the production of required reports and responses to lawful requests for information.
- Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling behavior, administering deposit limits and self-exclusion tools, and complying with responsible gaming obligations under PAGCOR guidelines.
- Customer support: Responding to your inquiries, managing complaints and disputes, and improving the quality and responsiveness of our support services.
- Platform improvement: Analyzing aggregated, anonymized usage data to understand how Filipino players use the f7max platform, identify areas for improvement, and optimize the user experience across devices commonly used in the Philippines.
- Marketing communications: Sending you promotional offers, bonus notifications, and platform updates by email or SMS, where you have provided consent or where we have a legitimate interest in keeping you informed. You may opt out of marketing communications at any time by contacting support or using the unsubscribe mechanism in any marketing email.
5. Legal Basis for Processing
Under the Data Privacy Act of 2012, f7max processes your personal data on the following legal bases:
- Contractual necessity: Processing that is necessary to perform the contract between you and f7max — specifically, to operate your player account, process your bets and transactions, and provide the gaming services you have registered for.
- Legal obligation: Processing that is necessary for f7max to comply with its legal and regulatory obligations, including KYC verification under PAGCOR requirements, AML reporting obligations under the Anti-Money Laundering Act, and data retention obligations under Philippine law.
- Legitimate interests: Processing necessary for the legitimate interests of f7max, such as fraud detection, platform security, abuse prevention, and improving our services — where those interests are not overridden by your data protection rights.
- Consent: For marketing communications and non-essential cookies, where we rely on your consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6. Data Sharing and Disclosure
f7max does not sell your personal data to any third party. We share your personal data only in the following limited circumstances:
6.1 Service Providers
f7max engages third-party service providers to assist in operating the platform. These include payment processors (such as GCash, Maya, BPI, and BDO partner networks), identity verification providers, game studio partners, cloud infrastructure providers, and customer support platform vendors. These service providers access personal data only to the extent necessary to perform their services for f7max and are contractually required to maintain appropriate data security measures and to process data only in accordance with f7max's instructions.
6.2 Regulatory Authorities
f7max is required by Philippine law to disclose personal data and transaction records to regulatory authorities including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government agencies where lawfully required. Such disclosures are made strictly in accordance with legal requirements and only to the extent necessary to fulfill our reporting obligations.
6.3 Law Enforcement
f7max may disclose personal data to Philippine law enforcement agencies where required to do so by a valid court order, subpoena, or other lawful process, or where f7max has a good-faith belief that disclosure is necessary to prevent or investigate criminal activity, protect the safety of players or third parties, or protect the legal rights of f7max.
6.4 Business Transfers
In the event that f7max undergoes a merger, acquisition, or sale of all or a substantial portion of its assets, your personal data may be transferred to the acquiring entity as part of that transaction. In such circumstances, f7max will provide notice to affected players and will ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.
f7max never shares your personal data with advertising networks, data brokers, or third-party marketers. Any sharing of data is strictly limited to what is necessary for platform operations, regulatory compliance, or legal obligations.
7. Cookies & Tracking Technologies
f7max uses cookies and similar tracking technologies on the f7max.net platform. Cookies are small text files stored on your device that help us recognize returning visitors, maintain session state, detect fraud, and analyze platform usage. The types of cookies we use include:
- Strictly necessary cookies: These are essential for the f7max platform to function. They include session cookies that keep you logged in as you navigate between pages and security cookies that help detect fraudulent account access. These cookies cannot be disabled without impairing platform functionality.
- Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, and recently played games — to provide a more personalized experience on the f7max platform.
- Analytics cookies: With your consent, f7max uses analytics cookies to collect aggregated, anonymized data about how players navigate and interact with the platform. This data is used to identify performance issues and improve the user experience for Filipino players.
- Security and fraud prevention cookies: These cookies help f7max identify and block suspicious activity, including multiple account registration attempts from the same device, automated bot activity, and other forms of platform abuse.
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the f7max platform, including account login functionality. For modern browsers used in the Philippines — Chrome, Safari, Firefox, and Samsung Internet — instructions for managing cookies are available in the browser's help section.
8. Data Retention
f7max retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to any longer retention periods required by PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, or other applicable Philippine law. Our general retention practices are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR regulatory requirement |
| KYC verification documents | 5 years post-account closure | AMLA and PAGCOR compliance |
| Financial transaction records | 5 years from transaction date | Anti-Money Laundering Act (RA 9160) |
| Gaming activity records | Duration of account + 2 years | Dispute resolution, regulatory reporting |
| Support communications | 3 years from last interaction | Dispute resolution, quality assurance |
| Marketing consent records | Until consent is withdrawn + 1 year | DPA compliance, consent audit trail |
| Technical / log data | 12 months rolling | Security monitoring, fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using methods appropriate to the sensitivity and format of the data. Anonymized data that cannot be re-linked to an identifiable individual may be retained indefinitely for statistical and analytical purposes.
9. Data Security
f7max implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
- Encryption in transit: All data transmitted between your device and f7max.net is encrypted using TLS (Transport Layer Security) protocol. Connections to f7max.net via unencrypted HTTP are automatically redirected to HTTPS.
- Password security: Account passwords are stored using strong one-way cryptographic hashing algorithms. f7max staff cannot view your plaintext password at any time. If you forget your password, it must be reset — it cannot be recovered.
- Two-factor authentication: f7max requires OTP (one-time password) verification for account logins from new or unrecognized devices, adding a second layer of protection against unauthorized account access.
- Access controls: Personal data is accessible only to f7max staff and systems that require it to perform their authorized functions. Access is governed by role-based permissions and reviewed regularly. All internal access to player personal data is logged for audit purposes.
- Third-party security assessments: f7max conducts periodic security reviews, including vulnerability assessments, to identify and remediate potential weaknesses in the platform's security posture.
- Incident response: f7max maintains a documented data breach response procedure. In the event of a breach, our DPO coordinates containment, investigation, notification to the NPC (within 72 hours of confirmed breach discovery where required), and communication to affected players.
While f7max takes data security seriously and implements robust protective measures, no online platform can guarantee absolute security. You play an important role in keeping your account secure by using a strong, unique password, enabling device-level security features, and notifying f7max support immediately if you suspect unauthorized access to your account.
10. Your Data Rights
Under the Data Privacy Act of 2012, you have the following rights in relation to the personal data f7max holds about you. To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 15.
- Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
- Right of access: You have the right to request a copy of the personal data f7max holds about you, along with information about how it is being processed.
- Right to correction: If any personal data f7max holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections — such as name or date of birth changes — may require supporting documentation.
- Right to erasure: You may request that f7max delete your personal data where it is no longer necessary for the purposes for which it was collected and there is no legal obligation requiring its retention. Note that f7max is required by PAGCOR and AMLA regulations to retain certain data for specified periods even after account closure.
- Right to data portability: You have the right to request that f7max provide you with your personal data in a structured, commonly used, and machine-readable format where technically feasible.
- Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests, subject to f7max's ability to demonstrate compelling legitimate grounds that override your interests.
- Right to file a complaint: If you believe that f7max has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
f7max will respond to verified data subject rights requests within 15 business days of receipt. We may need to verify your identity before processing certain requests to ensure we do not disclose or modify data belonging to another person.
To exercise any of your data rights, contact our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." Please include your registered account username and a description of the right you wish to exercise.
11. Children's Privacy
The f7max platform is strictly restricted to individuals aged 21 years and above. f7max does not knowingly collect personal data from individuals below the age of 21. The 21+ age threshold reflects the minimum legal age for participation in casino-style online gambling in the Philippines as prescribed under PAGCOR regulatory guidelines.
Age verification is conducted as part of the f7max account registration and KYC processes. Where f7max discovers or has reasonable grounds to believe that an account has been registered by or used by a person under the age of 21, the account will be closed immediately, all funds will be frozen pending investigation, and the matter will be escalated in accordance with our regulatory obligations.
If you are a parent or guardian and believe that a minor in your care has registered an f7max account, please contact our support team via live chat or at [email protected] immediately. We will investigate and take appropriate action as quickly as possible.
12. Cross-Border Data Transfers
f7max's primary data processing infrastructure is located within the Asia-Pacific region. However, some of our third-party service providers — including game studio partners and cloud infrastructure providers — may process data in jurisdictions outside the Philippines. Where such cross-border transfers of personal data occur, f7max ensures that appropriate safeguards are in place to protect your data in accordance with the standards required by the Data Privacy Act of 2012.
Safeguards for cross-border transfers may include contractual clauses requiring the receiving party to maintain data protection standards equivalent to those required under Philippine law, or reliance on the adequacy of data protection laws in the destination jurisdiction as assessed by f7max and our Data Protection Officer.
By using the f7max platform and accepting this Privacy Policy, you consent to the transfer of your personal data to jurisdictions outside the Philippines where such transfers are necessary to provide the services you have requested, subject to the safeguards described above.
13. Third-Party Services and Links
The f7max platform integrates third-party game content provided by licensed game studios. These studios may collect certain technical and gameplay data directly from your browser as part of delivering their game content — for example, in the context of live casino games streamed from a third-party studio environment. The privacy practices of third-party game studios are governed by their own privacy policies, and f7max is not responsible for those practices.
f7max does not include external links to third-party websites within the main platform navigation or content areas. Where third-party service integrations exist — such as payment gateway redirects — those services are engaged by f7max under data processing agreements that include appropriate privacy and security obligations.
Your interactions with payment providers such as GCash, Maya, BPI, and BDO when processing deposits and withdrawals are subject to those providers' own terms of service and privacy policies, which govern their handling of your financial data independently of f7max.
14. Changes to This Privacy Policy
f7max reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or the f7max platform itself. The date of the most recent revision is always shown at the top of this document.
Where changes to this Policy are material — meaning they significantly affect your rights or the way we use your personal data — f7max will notify registered players by email at the address associated with their f7max account at least 7 days before the revised Policy takes effect. Non-material changes, such as clarifications and corrections, may take effect immediately without advance notice.
Your continued use of the f7max platform after the effective date of any revision to this Policy constitutes your acceptance of the revised terms. If you do not agree with a revision, you must discontinue use of the platform and may request account closure in accordance with Section 12 of our Terms & Conditions.
We encourage you to review this Privacy Policy periodically to stay informed about how f7max protects your personal data.
15. Contact & Data Protection Officer
If you have questions, concerns, or requests relating to this Privacy Policy or the personal data f7max holds about you, you may contact us through the following channels:
- Live Chat: Available 24 hours a day, 7 days a week via your f7max account dashboard. For general account and privacy inquiries, live chat provides the fastest response.
- Data Protection Officer (Email): [email protected] — please use the subject line "Privacy Inquiry" or "Data Subject Rights Request" so your message is routed directly to our DPO. Responses to DPO inquiries are provided within 15 business days of receipt.
When submitting a data subject rights request, please include your full name as registered on your f7max account, your registered email address or mobile number, and a clear description of the right you wish to exercise or the concern you wish to raise. This will allow us to locate your records and process your request efficiently within the timeframes required by the Data Privacy Act of 2012.
If you are not satisfied with f7max's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the regulatory authority responsible for enforcement of the Data Privacy Act of 2012.
f7max is committed to resolving all privacy concerns promptly and in good faith. We take every data subject rights request seriously and will work with you to address your concern in full compliance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.
Play Safe, Play Smart at f7max
Your data is protected, your account is secure, and the games are fair. Join thousands of Filipino players from Manila to Davao who trust f7max for their slots, live casino, and sports betting entertainment.