Privacy Policy — sisigbet Online Gaming Platform

1. Introduction

sisigbet ("we," "us," "our," or "the Platform") is committed to safeguarding the privacy of all individuals who access or use the sisigbet website and associated services (collectively, the "Platform"). This Privacy Policy ("Policy") describes how sisigbet collects, uses, stores, discloses, and protects personal data in connection with the operation of the Platform.

This Policy applies to all registered players, prospective players, and visitors to the sisigbet website. By accessing the Platform or creating a sisigbet account, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with sisigbet's Terms and Conditions and Responsible Gaming Policy, both of which are available on the sisigbet website. In the event of any conflict between this Policy and the Terms and Conditions with respect to data privacy matters, this Policy shall prevail.

2. Data We Collect

sisigbet collects the following categories of personal data from players and platform users:

Identity Data:

• Full legal name as it appears on a government-issued identification document.
• Date of birth (used to verify the 21+ age requirement).
• Nationality and country of residence.
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence).

Contact Data:

• Email address.
• Mobile phone number (Philippine mobile number required for SMS verification).
• Residential address (province, city/municipality, barangay, postal code).

Financial Data:

• GCash or PayMaya mobile wallet number.
• Bank account details (BPI, BDO, Metrobank) where used for deposits or withdrawals.
• Transaction history, including deposit amounts, withdrawal amounts, and dates.

Technical & Usage Data:

• IP address and approximate geolocation.
• Device type, operating system, and browser information.
• Session duration, pages visited, and features used on the Platform.
• Game history, wagering activity, and account balance movements.

Communications Data:

• Records of communications between you and sisigbet support staff, including live chat transcripts and email correspondence.

3. How We Collect Your Data

sisigbet collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from licensed KYC (Know Your Customer) service providers; fraud prevention data from risk management partners; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.

4. Purpose of Processing

sisigbet processes your personal data for the following purposes:

• To create, verify, and manage your sisigbet account.
• To verify your identity and confirm that you meet the 21+ age requirement under Philippine gaming regulations.
• To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, BPI, BDO, and Metrobank.
• To provide customer support and respond to your enquiries and complaints.
• To detect, investigate, and prevent fraud, money laundering, and other illegal or prohibited activities.
• To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations and reporting requirements.
• To administer bonuses, promotions, and loyalty programmes in accordance with their applicable terms.
• To send you service-related communications, including account notifications, transaction confirmations, and security alerts.
• To improve the Platform's performance, features, and user experience through analysis of aggregated usage data.
• To enforce sisigbet's Terms and Conditions and other applicable policies.

5. Legal Basis for Processing

sisigbet processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform the contract between you and sisigbet, including account management, transaction processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, tax reporting obligations, and gaming regulatory requirements.
• Legitimate interests: Processing necessary for sisigbet's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and certain cookie-based data collection.

6. Data Sharing and Disclosure

sisigbet does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Identity verification providers: Licensed KYC and AML service providers engaged to verify your identity and screen against sanctions and watchlists.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers necessary to process your deposits and withdrawals.
• Game providers: Licensed game studios and live dealer operators whose games are available on the sisigbet platform, to the extent necessary to deliver gameplay services.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers who process data on sisigbet's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine government agencies, including the National Privacy Commission, gaming regulators, and law enforcement bodies, where disclosure is required by law or a valid legal order.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by sisigbet are required to implement appropriate technical and organisational measures to protect your personal data and are prohibited from using your data for any purpose other than the specific service they provide to sisigbet.

7. Data Retention

sisigbet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule, sisigbet applies the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under Philippine law.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Communications data: Retained for up to three (3) years from the date of the communication, unless a longer period is required for the resolution of a dispute or regulatory investigation.
• Technical and usage data: Retained for up to two (2) years from collection, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, sisigbet will securely delete or anonymise your personal data in accordance with its data disposal procedures.

8. Data Security

sisigbet implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the sisigbet platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• Multi-factor authentication requirements for all internal systems that process personal data.
• Incident response procedures for the detection, containment, and notification of personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, sisigbet will notify the National Privacy Commission and affected individuals in accordance with the timeframes and procedures prescribed by the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by sisigbet:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data sisigbet holds about you, together with information about how it is being used.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by sisigbet.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to sisigbet's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact sisigbet's Data Protection Officer using the contact details provided in Section 13 of this Policy. sisigbet will respond to all verified data subject requests within thirty (30) days of receipt, or within such other period as may be prescribed by applicable law.

10. Cookies and Tracking Technologies

sisigbet uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the sisigbet website. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies and security tokens. These cookies cannot be disabled.
• Performance cookies: Used to collect anonymised information about how visitors use the Platform, such as which pages are visited most frequently. This data helps sisigbet improve platform performance and user experience.
• Functional cookies: Used to remember your preferences, such as your preferred language and display settings, to provide a more personalised experience.

sisigbet does not use advertising or tracking cookies to build profiles for third-party advertising purposes. You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

11. Minors and Age Restriction

The sisigbet platform is strictly intended for individuals who are 21 years of age or older, in accordance with applicable Philippine online gaming regulations. sisigbet does not knowingly collect personal data from individuals under the age of 21.

If sisigbet becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended and the personal data will be deleted in accordance with sisigbet's data disposal procedures, subject to any legal retention obligations.

If you believe that a minor has registered an account with sisigbet, please contact our support team immediately at [email protected] so that we can take prompt action.

12. Changes to This Privacy Policy

sisigbet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via email or an in-platform notification at least seven (7) days prior to the effective date of the change.

The date of the most recent revision is indicated at the top of this Policy. Your continued use of the sisigbet platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy. We encourage you to review this Policy periodically to stay informed about how sisigbet protects your personal data.

13. Contact Information and Data Protection Officer

sisigbet has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data privacy laws. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the sisigbet DPO through the following channel:

Email: [email protected]

Please include "Data Privacy Request" in the subject line of your email, along with your full name and registered account email address, so that we can verify your identity and process your request efficiently.

sisigbet aims to respond to all data privacy enquiries within thirty (30) days of receipt. If you are not satisfied with sisigbet's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.