saggili Privacy Policy

saggili is committed to protecting the personal data of every Filipino player who uses our platform. This Policy has been prepared in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").

The Policy applies to all personal data that saggili processes in connection with the operation of the saggili platform, including data collected during account registration, gameplay, deposits and withdrawals, customer support interactions, and general browsing of saggili.org.

By registering an account on saggili, making a deposit, placing a bet, or otherwise using the Platform, you represent that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein, to the extent that such consent is required by applicable Philippine law.

For the purposes of this Policy, saggili is the personal information controller responsible for the processing of your data in connection with the saggili online gaming platform. saggili operates the platform at saggili.org and is the entity that determines the purposes and means of processing personal information collected through the Platform.

If you have any questions about how saggili processes your data, or if you wish to exercise any of the rights described in this Policy, you may contact saggili's data protection contact at the email address provided in Section 17 of this Policy.

saggili collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect include the following:

saggili collects personal data through the following means:

saggili processes your personal data only where we have a valid legal basis under the Data Privacy Act of 2012 and applicable Philippine regulations. The legal bases saggili relies upon are:

• Performance of a Contract: Processing your data is necessary to open and operate your saggili Account, execute deposits and withdrawals, and provide the gaming services you have requested.
• Legal Obligation: saggili is required by Philippine law — including anti-money laundering regulations, tax obligations, and gaming compliance requirements — to collect, retain, and share certain personal data.
• Legitimate Interests: saggili processes certain data on the basis of its legitimate interests, including fraud detection, security monitoring, platform improvement, and responsible gaming compliance, where such interests are not overridden by your rights and interests.
• Consent: Where required, saggili will seek your explicit consent prior to processing, such as for direct marketing communications. You may withdraw consent at any time as described in Section 13 of this Policy.

saggili uses the personal data it holds about you for the following specific purposes:

• Creating, verifying, and managing your saggili Account;
• Verifying your age (21+) and identity in compliance with Philippine online gaming requirements;
• Processing deposits and withdrawals via GCash, PayMaya, bank channels, and other payment methods;
• Complying with anti-money laundering (AML) and know-your-customer (KYC) legal obligations;
• Detecting, investigating, and preventing fraud, cheating, collusion, and other prohibited conduct on the Platform;
• Providing customer support through live chat, email, and other channels;
• Operating responsible gaming tools including deposit limits, self-exclusion, and session reminders;
• Personalizing your saggili experience — game recommendations, promotional offers, and platform settings;
• Sending transactional communications — deposit confirmations, withdrawal notifications, security alerts, and account updates;
• Sending marketing communications where you have provided consent or where permitted by law;
• Analysing Platform usage to improve saggili's games, features, and performance;
• Complying with orders, requests, or requirements from Philippine regulatory authorities or law enforcement.

saggili shares your personal data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

saggili uses cookies and similar tracking technologies on saggili.org to support Platform functionality, security, and analytics. Cookies are small text files stored on your device when you access a website.

saggili retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The specific retention periods that apply to different categories of data are set out below:

• Account and Identity Data: Retained for the duration of your active saggili Account plus a minimum of five (5) years following account closure, as required by Philippine AML and gaming regulations.
• Financial Transaction Data: Retained for a minimum of five (5) years following each transaction, in compliance with Philippine anti-money laundering record-keeping requirements.
• Gaming History: Retained for five (5) years from the date of each gaming session for regulatory compliance and dispute resolution purposes.
• Customer Support Records: Retained for three (3) years from the date of each support interaction.
• Technical and Log Data: Generally retained for twelve (12) months from collection, except where retained longer for security incident investigation purposes.
• Marketing Consent Records: Retained for three (3) years from the date of the most recent consent or withdrawal of consent.

Upon expiry of the applicable retention period, saggili will securely delete or anonymize your personal data in accordance with its internal data disposal procedures.

saggili implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmissions between your device and saggili's servers;
• Encryption at rest for sensitive data categories including identity documents and financial account details;
• Role-based access controls that limit access to personal data to authorized personnel with a legitimate operational need;
• Multi-factor authentication requirements for administrative access to systems holding player data;
• Regular security assessments and penetration testing by qualified third-party security professionals;
• Employee training on data protection obligations and security best practices;
• Incident response procedures that include notification to the National Privacy Commission and affected players within the timelines prescribed by the DPA and NPC issuances.

In operating the saggili Platform, certain personal data may be transferred to, stored in, or processed by service providers located outside the Republic of the Philippines. This may occur, for example, in connection with cloud hosting infrastructure or third-party technology service providers whose data processing facilities are located abroad.

Where personal data is transferred outside the Philippines, saggili ensures that an adequate level of protection is applied to that data, consistent with the requirements of the Philippine Data Privacy Act of 2012 and NPC issuances on cross-border data transfers. This is achieved through:

• Engaging only third-party processors that demonstrate compliance with internationally recognized data protection standards;
• Including appropriate data transfer mechanisms and obligations in contracts with overseas service providers;
• Where required, registering cross-border data transfers with the National Privacy Commission in accordance with applicable NPC guidelines.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by saggili. saggili is committed to respecting and facilitating the exercise of these rights:

To exercise any of the rights listed above, please contact saggili's data protection contact as described in Section 17. saggili will respond to all valid requests within thirty (30) days of receipt, or within a longer period where permitted and communicated in writing to you in advance.

saggili will not charge a fee for handling most data rights requests. However, saggili reserves the right to charge a reasonable administrative fee for manifestly excessive or repetitive requests.

saggili may send you promotional communications — including bonus offers, new game announcements, and platform updates — by email or SMS to your registered Philippine mobile number, where you have given your consent to receive such communications, or where permitted by applicable law in connection with your existing account relationship with saggili.

You may opt out of marketing communications at any time by:

• Using the unsubscribe link included in any saggili marketing email;
• Replying STOP to any saggili marketing SMS;
• Adjusting your communication preferences in your saggili Account settings; or
• Contacting saggili support at the email address in Section 17.

Opting out of marketing communications will not affect the delivery of transactional communications related to your Account (such as deposit confirmations, withdrawal alerts, and security notices), which saggili is required to send regardless of your marketing preferences.

If you believe that saggili has inadvertently collected personal data from a person under the age of 21, please contact us immediately at the address provided in Section 17, and saggili will take prompt remedial action.

The saggili Platform may contain links to third-party websites or integrations with third-party services (such as GCash or PayMaya payment portals). This Policy applies only to data processed by saggili. When you are redirected to a third-party website or service, that third party's own privacy policy will govern the processing of your data.

saggili is not responsible for the privacy practices of third-party websites or services linked from the saggili Platform. We recommend reviewing the privacy policies of any third-party service you use in connection with your saggili Account — particularly the privacy policies of payment providers such as GCash and PayMaya.

saggili reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Where amendments are material, saggili will notify registered players via email to their registered address or through a prominent notice on the Platform prior to the changes taking effect.

The current version of this Policy, together with the effective date shown at the top of this page, supersedes all prior versions and is always accessible at saggili.org/privacy-policy. Your continued use of the saggili Platform following notification of policy changes constitutes your acceptance of the revised Policy to the extent permitted by applicable Philippine law.

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by saggili, please contact us through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 at saggili.org, accessible from your Account dashboard

Please include "Privacy Request" in the subject line of your email so that your inquiry can be directed promptly to saggili's data protection team. saggili aims to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within 30 days.

If you are not satisfied with saggili's handling of your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available on the NPC's official government website.