sg88 Privacy Policy

1 Introduction

1.1 sg88 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all players and users of the sg88 online gaming platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data.

1.2 This Policy applies to all personal data processed by sg88 in connection with the operation of the sg88 platform, including data collected through the sg88 website at sg88.one, any mobile-optimised versions of the platform, and all associated services including customer support, promotions, and payment processing.

1.3 This Privacy Policy should be read together with the sg88 Terms & Conditions. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2 Data Controller

2.1 For the purposes of the Philippine Data Privacy Act of 2012, sg88 is the personal information controller in respect of the personal data collected and processed through the sg88 platform.

2.2 sg88 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data privacy laws. You may contact the sg88 DPO at the contact details provided in Section 14 of this Policy.

2.3 sg88 operates within the PAGCOR regulatory framework and complies with all data privacy obligations imposed by PAGCOR on licensed online gaming operators in the Philippines.

3 Personal Data We Collect

3.1 sg88 collects the following categories of personal data from players and users of the platform:

3.1.1 Identity Data

• Full legal name as it appears on your government-issued Philippine ID;
• Date of birth (used to verify the 21+ age requirement);
• Gender;
• Copies of government-issued Philippine identification documents (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID) submitted during KYC verification.

3.1.2 Contact Data

• Philippine mobile number;
• Email address;
• Residential address in the Philippines.

3.1.3 Financial Data

• GCash or Maya account details (mobile number associated with the account);
• Philippine bank account details (bank name, account number) for withdrawal processing;
• Debit card details where applicable;
• Transaction history including deposits, withdrawals, and wager records.

3.1.4 Technical Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session logs and platform activity data;
• Cookie identifiers and similar tracking data.

3.1.5 Gaming Data

• Game history, wager amounts, and outcomes;
• Bonus and promotion usage history;
• Responsible gaming settings and self-exclusion records.

3.1.6 Communications Data

• Records of your communications with sg88 customer support;
• Feedback, complaints, and dispute records.

4 How We Collect Your Data

4.1 Directly from you — when you register an account on sg88, complete KYC verification, make deposits or withdrawals, contact customer support, or participate in promotions.

4.2 Automatically — through cookies, server logs, and similar technologies when you access and use the sg88 platform. This includes your IP address, device information, and browsing behaviour on the platform.

4.3 From third-party payment processors — when you make deposits or withdrawals via GCash, Maya, or Philippine bank transfers, we receive transaction confirmation data from the relevant payment processor.

4.4 From identity verification services — sg88 may use third-party KYC and identity verification services to verify the authenticity of documents you submit. These services process your data on our behalf under strict data processing agreements.

4.5 From PAGCOR and regulatory authorities — sg88 may receive information from PAGCOR or other Philippine regulatory authorities in connection with our licensing obligations, including information related to self-exclusion registers.

5 How We Use Your Personal Data

5.1 sg88 uses your personal data for the following purposes:

5.1.1 Account Management

To register and maintain your sg88 player account, verify your identity and age (21+ requirement), process your deposits and withdrawals, and provide you with access to the sg88 platform and its features.

5.1.2 Platform Operations

To operate, maintain, and improve the sg88 platform; to personalise your gaming experience; to process wagers and calculate winnings; and to administer bonuses and promotions you have opted into.

5.1.3 Legal and Regulatory Compliance

To comply with our obligations under Philippine law, including the Philippine Data Privacy Act, Anti-Money Laundering Act (AMLA), and PAGCOR licensing requirements. This includes conducting KYC verification, filing mandatory reports with the Anti-Money Laundering Council (AMLC), and maintaining records as required by law.

5.1.4 Customer Support

To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance in connection with your use of the sg88 platform.

5.1.5 Security and Fraud Prevention

To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the sg88 platform. This includes monitoring account activity and transaction patterns for suspicious behaviour.

5.1.6 Responsible Gaming

To administer responsible gaming tools including deposit limits, session time limits, cooling-off periods, and self-exclusion requests. sg88 may use your gaming data to identify patterns that may indicate problem gambling behaviour and to reach out with responsible gaming information where appropriate.

5.1.7 Marketing Communications

With your consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw your consent to marketing communications at any time by contacting sg88 customer support or using the unsubscribe option in any marketing message.

6 Legal Basis for Processing

6.1 sg88 processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contract with you, including operating your account, processing transactions, and providing platform services;
• Legal obligation — processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC directives;
• Legitimate interests — processing necessary for sg88's legitimate business interests, including fraud prevention, platform security, and improving our services, where these interests are not overridden by your privacy rights;
• Consent — processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing and Disclosure

7.1 sg88 does not sell, rent, or trade your personal data to any third party. We may share your personal data only in the following limited circumstances:

7.1.1 Service Providers

sg88 engages trusted third-party service providers to assist in operating the platform, including payment processors (GCash, Maya, Philippine banks), KYC and identity verification providers, IT infrastructure and hosting providers, and customer support tools. These providers process your data solely on sg88's instructions and are bound by data processing agreements that require them to maintain appropriate security measures.

7.1.2 Regulatory and Law Enforcement Authorities

sg88 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law, court order, or regulatory directive. sg88 will notify you of such disclosures where legally permitted to do so.

7.1.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of sg88's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

7.1.4 With Your Consent

sg88 may share your personal data with third parties in any other circumstances where you have given your explicit prior consent to such sharing.

8 Data Security

8.1 sg88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the sg88 platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security vulnerability assessments and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Secure data centres with physical access controls.

8.2 Data Breach Response. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, sg88 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the requirements of the Philippine Data Privacy Act.

8.3 While sg88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for keeping your sg88 login credentials confidential and for notifying sg88 immediately if you suspect any unauthorised access to your account.

9 Data Retention

9.1 sg88 retains your personal data for as long as your account remains active and for such additional periods as are required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations;
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA requirements;
• Customer support communications — retained for three (3) years from the date of the communication;
• Marketing consent records — retained for the duration of your consent and for one (1) year following withdrawal of consent;
• Technical and log data — retained for up to twelve (12) months from the date of collection.

9.2 When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, sg88 will securely delete or anonymise the data in accordance with our data disposal procedures.

10 Your Rights as a Data Subject

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by sg88:

• Right to be informed — the right to be informed that your personal data is being collected and processed, and the purposes for which it is being used;
• Right of access — the right to request a copy of the personal data sg88 holds about you;
• Right to rectification — the right to request correction of any inaccurate or incomplete personal data sg88 holds about you;
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to sg88's legal retention obligations;
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) if you believe sg88 has violated your data privacy rights.

10.2 To exercise any of these rights, please contact the sg88 Data Protection Officer using the contact details in Section 14. sg88 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

11 Cookies and Tracking Technologies

11.1 sg88 uses cookies and similar tracking technologies on the sg88 platform. Cookies are small text files placed on your device that help us operate the platform, remember your preferences, and understand how players use our services.

11.2 sg88 uses the following types of cookies:

• Strictly necessary cookies — essential for the operation of the sg88 platform, including session management, security, and login authentication. These cookies cannot be disabled without affecting platform functionality;
• Functional cookies — used to remember your preferences and settings on the sg88 platform, such as your preferred language and display settings;
• Analytics cookies — used to collect anonymised data about how players use the sg88 platform, helping us identify areas for improvement. This data does not identify individual players.

11.3 sg88 does not use advertising or tracking cookies that follow you across third-party websites or build advertising profiles based on your browsing behaviour.

11.4 You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the sg88 platform.

12 Children's Privacy and Age Restriction

12.1 The sg88 platform is strictly intended for individuals who are at least twenty-one (21) years of age. sg88 does not knowingly collect personal data from individuals under the age of 21.

12.2 If sg88 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds in such an account may be forfeited in accordance with applicable regulations.

12.3 If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to sg88, please contact our Data Protection Officer immediately using the contact details in Section 14.

13 Changes to This Privacy Policy

13.1 sg88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements.

13.2 When we make material changes to this Privacy Policy, we will notify registered players by email or through a prominent notice on the sg88 platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly.

13.3 Your continued use of the sg88 platform following the publication of any changes to this Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree to the revised Privacy Policy, you must cease using the platform and may request account closure by contacting sg88 customer support.

14 Contact Us & Data Protection Officer

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way sg88 handles your personal data, please contact us through any of the following channels:

14.2 If you are not satisfied with sg88's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available through official Philippine government channels.

14.3 For responsible gaming support, self-exclusion requests, or to set account limits, please visit our Responsible Gaming page or contact our support team directly.