sagisagph Privacy Policy

This Privacy Policy ("Policy") describes how sagisagph ("we," "us," "our," or "the Platform") collects, uses, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the sagisagph website at https://sagisagph.app and all associated services, games, and features.

sagisagph is committed to protecting the privacy and security of your personal data. This Policy is drafted in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account, making a deposit, or otherwise using the sagisagph platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the platform immediately.

For the purposes of the Philippine Data Privacy Act of 2012, sagisagph acts as the Personal Information Controller (PIC) in respect of the personal data it collects from users of the platform. As PIC, sagisagph determines the purposes and means of processing your personal information.

Where sagisagph engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and analytics platforms — those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with sagisagph's instructions and applicable Philippine law.

sagisagph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 16 of this Policy.

sagisagph collects the following categories of personal data from users of the platform:

sagisagph collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the sagisagph platform, including through cookies, server logs, and similar tracking technologies described in Section 8.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and regulatory databases where permitted by law.
• Publicly available sources: Information from public records or government databases used to verify identity or comply with anti-money laundering obligations under Philippine law.

sagisagph will always inform you at the point of collection what data is being collected and for what purpose, unless an exemption under the Data Privacy Act applies.

sagisagph uses the personal data it collects for the following purposes:

• To create, verify, and manage your sagisagph player account.
• To process deposits and withdrawals through your chosen Philippine payment method (GCash, PayMaya, BPI, BDO, Metrobank).
• To verify your identity and age (21+) in compliance with PAGCOR licensing requirements and Philippine gaming regulations.
• To comply with the Anti-Money Laundering Act (AMLA) of the Philippines, including transaction monitoring and suspicious activity reporting.
• To provide customer support and respond to your queries, complaints, and disputes.
• To send you account-related communications, including transaction confirmations, security alerts, and policy updates.
• To monitor gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behavior.
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited conduct on the platform.
• To improve the sagisagph platform, including game offerings, user interface, and overall user experience.
• To send you promotional communications about sagisagph offers and bonuses, where you have consented to receive such communications.

Under the Philippine Data Privacy Act of 2012, sagisagph processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the use of non-essential cookies.
• Contractual necessity: Where processing is necessary to perform the contract between you and sagisagph — specifically, to operate your player account, process transactions, and deliver gaming services.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to sagisagph, including obligations under the Anti-Money Laundering Act, PAGCOR regulations, and the Data Privacy Act itself.
• Legitimate interests: Where processing is necessary for the legitimate interests of sagisagph, such as fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and freedoms.

Where sagisagph relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

sagisagph does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary and permitted by law:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with PAGCOR and AMLA requirements.
• Regulatory and law enforcement authorities: The Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or court order.
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics providers who process data on sagisagph's behalf as Personal Information Processors under binding data processing agreements.
• Professional advisers: Lawyers, auditors, and accountants where necessary for the conduct of sagisagph's business, subject to professional confidentiality obligations.

All third parties with whom sagisagph shares personal data are required to maintain appropriate technical and organizational security measures and to process data only in accordance with sagisagph's instructions and applicable Philippine law.

sagisagph uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Essential cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect aggregated, anonymized data about how users interact with the sagisagph platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Preference cookies: Used to remember your platform settings and preferences, such as language and display options, to improve your experience on return visits.

sagisagph does not use third-party advertising or retargeting cookies. You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of some platform features.

sagisagph retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming history: Retained for a minimum of three (3) years following the relevant gaming session, for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with sagisagph's data disposal procedures.

sagisagph implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the sagisagph platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that only authorized sagisagph personnel can access personal data, and only to the extent required for their specific role.
• Regular security assessments, vulnerability scanning, and penetration testing of the sagisagph platform.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Staff training on data protection obligations and information security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, sagisagph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected users without undue delay, in accordance with the Data Privacy Act and NPC Circular No. 16-03.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by sagisagph:

• Right to be informed: The right to be notified of how your personal data is being collected and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data sagisagph holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by sagisagph.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to sagisagph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on sagisagph's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact sagisagph's Data Protection Officer using the contact details provided in Section 16. sagisagph will respond to all verified data subject requests within fifteen (15) business days of receipt.

sagisagph is strictly an adult platform. In accordance with Philippine gaming regulations, the minimum age to register and use sagisagph is 21 years old. sagisagph does not knowingly collect personal data from individuals under the age of 21.

If sagisagph becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all data associated with that account will be deleted, and any deposits will be returned subject to verification. If you believe a minor has registered on sagisagph, please contact our support team immediately.

sagisagph primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or systems located outside the Philippines — for example, cloud infrastructure or international payment processing networks — sagisagph ensures that such transfers are carried out in compliance with the Data Privacy Act and NPC guidelines on cross-border data transfers.

Specifically, sagisagph will only transfer personal data outside the Philippines where:

• The recipient country provides an adequate level of data protection as recognized by the NPC; or
• Appropriate safeguards are in place, such as binding contractual clauses that impose data protection obligations on the recipient equivalent to those under Philippine law; or
• The transfer is necessary for the performance of a contract with you, such as processing an international payment.

The sagisagph platform may contain references to third-party services, such as payment providers. sagisagph is not responsible for the privacy practices of any third-party services. When you interact with a third-party payment provider such as GCash, PayMaya, BPI, BDO, or Metrobank, your data is subject to that provider's own privacy policy.

sagisagph encourages you to review the privacy policies of any third-party services you interact with in connection with your use of the sagisagph platform.

sagisagph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, sagisagph will notify registered users via the email address associated with their account and will post a prominent notice on the platform.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the sagisagph platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you must cease using the platform and may request account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or sagisagph's handling of your personal data, please contact our Data Protection Officer (DPO). The DPO is responsible for ensuring sagisagph's compliance with the Data Privacy Act and for handling all data subject requests.

You may reach the sagisagph Data Protection Officer at the following email address:

Please include your full name, registered account username, and a clear description of your request or concern. sagisagph aims to acknowledge all privacy-related inquiries within three (3) business days and to resolve them within fifteen (15) business days.

If you are not satisfied with sagisagph's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.