sg88 Privacy Policy

1. Introduction

sg88 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users who access the sg88 website and associated gaming services. This Privacy Policy describes how sg88 collects, processes, stores, and shares personal information in connection with the operation of the sg88 online gaming platform, which serves players primarily in the Philippines.

This Policy is issued in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as well as other applicable data protection frameworks. By registering for an sg88 account or using any part of the sg88 service, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

This Privacy Policy should be read alongside the sg88 Terms & Conditions. Capitalized terms not defined here carry the meanings given to them in the Terms & Conditions.

---

2. Data We Collect

sg88 collects several categories of personal data in connection with the operation of the platform and provision of gaming services. The specific data collected may vary depending on your level of account verification and the features you use. Categories include:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., Philippine national ID, passport, driver's licence).
• Contact Data: Philippine mobile number, email address, and residential address (province, city, barangay).
• Financial Data: GCash or Maya account details, bank account information (BPI, BDO, Metrobank, UnionBank), cryptocurrency wallet addresses (USDT TRC20), deposit history, withdrawal history, and transaction records.
• Account Data: Username, encrypted password hash, account preferences, login history, and session timestamps.
• Gaming Data: Bet history, game participation records, win and loss records, bonus usage, and responsible gaming settings (e.g., deposit limits, self-exclusion status).
• Technical Data: IP address, device identifiers, browser type and version, operating system, screen resolution, and network provider.
• Usage Data: Pages visited, features accessed, session duration, clickstream data, and in-game interaction logs.
• Communications Data: Records of live chat sessions, support ticket submissions, and any written correspondence with sg88.

---

3. How We Collect Data

sg88 collects personal data through the following means:

• Direct submission: Data you provide when completing registration, identity verification, depositing or withdrawing funds, contacting support, or updating your account profile.
• Automated collection: Data collected automatically as you navigate the sg88 platform, including via cookies, web beacons, server logs, and device fingerprinting technology.
• Third-party sources: Data received from payment processors (e.g., GCash, Maya, BDO), identity verification services, fraud prevention providers, and affiliated gaming studios where technically necessary for service delivery.
• Regulatory sources: Data provided to or received from regulatory authorities, self-exclusion registers, or law enforcement agencies in connection with compliance obligations.

---

4. Purpose of Processing

sg88 processes personal data for the following purposes, each of which is necessary for the operation of the platform or compliance with legal obligations:

• Account registration, identity verification, and age verification (21+ requirement).
• Processing of deposits, withdrawals, and in-game financial transactions.
• Provision of gaming services, live dealer streams, and sports betting markets.
• Customer support, dispute resolution, and complaint handling.
• Detection and prevention of fraud, money laundering, and account abuse.
• Compliance with anti-money laundering (AML) and Know Your Customer (KYC) obligations.
• Administration of responsible gaming tools, including deposit limits, self-exclusion enforcement, and problem gambling identification.
• Platform analytics, performance optimization, and user experience improvement.
• Marketing communications, promotional offers, and personalized recommendations — where you have provided consent.
• Compliance with applicable Philippine law and regulatory requirements.

---

5. Legal Basis for Processing

sg88 processes personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to perform the gaming service contract with you — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with applicable law, including KYC, AML, age verification, and regulatory reporting obligations.
• Legitimate interests: Processing necessary for sg88's legitimate business interests, including fraud prevention, platform security, and analytics, provided those interests are not overridden by your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

---

6. Data Sharing & Disclosure

sg88 does not sell your personal data to any third party. Personal data may be disclosed to the following categories of recipients strictly where necessary:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BDO, BPI, Metrobank, UnionBank, and other financial institutions — solely for transaction processing.
• Game providers: Licensed gaming studios (including but not limited to Pragmatic Play, Evolution Gaming, PG Soft, Jili) — limited to the data required for game session integrity and studio-level compliance.
• Identity verification services: Third-party KYC and document verification providers used to fulfill age and identity verification obligations.
• Fraud prevention services: Specialized anti-fraud and AML screening providers used to detect and prevent financial crime.
• Regulatory authorities: PAGCOR or any competent Philippine regulatory body, law enforcement agencies, or courts — where required by law, court order, or regulatory directive.
• IT and hosting providers: Cloud infrastructure and data center service providers used for platform hosting, subject to data processing agreements.

All third-party processors are required to maintain the confidentiality and security of personal data and are prohibited from using it for any purpose other than the specific service they provide to sg88.

---

7. Cookies & Tracking Technologies

sg88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device by your browser. sg88 uses the following types:

• Strictly necessary cookies: Required for the platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings, game lobby view, and responsible gaming limits.
• Analytics cookies: Collect anonymized usage data to help sg88 understand how players interact with the platform and identify areas for improvement.
• Security cookies: Used for fraud detection, device fingerprinting, and bot detection.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use sg88. sg88 does not use third-party advertising cookies or share behavioral data with advertising networks.

---

8. Data Retention

sg88 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations.
• Transaction records: Retained for five (5) years from the date of the transaction.
• Gaming logs: Retained for three (3) years from the date of the game session.
• Support communications: Retained for two (2) years from the date of resolution.
• Marketing consent records: Retained until consent is withdrawn or for three (3) years from the last interaction, whichever is earlier.

After the applicable retention period, data is securely deleted or anonymized. In cases where data must be retained for ongoing legal proceedings or regulatory investigations, retention is extended until the matter is resolved.

---

9. Data Security

sg88 implements technical and organizational security measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the sg88 servers.
• Password hashing using industry-standard algorithms — sg88 never stores passwords in plaintext.
• Access controls and role-based permissions restricting internal access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of the platform infrastructure.
• Incident response procedures for detecting, containing, and notifying affected parties in the event of a data breach.
• Physical and environmental controls at data center facilities.

While sg88 applies commercially reasonable security measures, no system is completely immune to security risks. In the event of a personal data breach that poses a risk to your rights, sg88 will notify affected users and the National Privacy Commission (NPC) in accordance with applicable requirements.

---

10. Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sg88:

• Right to be informed: You have the right to know what personal data sg88 holds about you and how it is processed.
• Right of access: You may request a copy of the personal data sg88 holds about your account.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
• Right to object: You may object to processing based on legitimate interests or direct marketing at any time.
• Right to data portability: Where technically feasible, you may request a structured copy of your data in a machine-readable format.
• Right to lodge a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, contact sg88 support via live chat or in writing. sg88 will respond within the timeframes prescribed by the DPA. Identity verification will be required before processing any data subject request.

---

11. Children's Privacy

sg88 is an adult online gaming platform. No person under the age of 21 is permitted to register or use sg88. sg88 does not knowingly collect personal data from individuals under 21 years of age. If sg88 discovers that an account has been registered by a minor, the account will be immediately suspended, gameplay records will be voided, and the matter will be handled in accordance with applicable legal requirements. Parents or guardians who believe a minor may have accessed sg88 should contact support immediately.

---

12. International Data Transfers

sg88 may transfer personal data to service providers and game studios located outside the Philippines where this is necessary for the provision of services. Any such transfer is subject to appropriate safeguards, including data processing agreements that impose obligations equivalent to those under the Data Privacy Act of 2012. sg88 does not transfer personal data to jurisdictions without adequate data protection frameworks without implementing additional protective measures.

---

13. Changes to This Policy

sg88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, the revised policy will be published on this page with an updated "Last Updated" date. For significant changes affecting your rights, sg88 will notify registered users via the contact details on file. Your continued use of the sg88 platform following publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

---

14. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by sg88, please contact our Data Protection Officer through the following channel:

sg88 Data Protection Officer
Email: [email protected] (plain text — not a clickable link)
Response time: Within 3 business days for general inquiries; within 15 days for formal data subject access requests.

You may also raise concerns with the National Privacy Commission (NPC) of the Philippines, the regulatory authority responsible for enforcing the Data Privacy Act of 2012.