sagilli Privacy
Policy

sagilli ("sagilli," "we," "us," or "our") is the operator of the online gaming platform accessible at sagilli.com and all associated subdomains, mobile applications, and digital services (collectively, the "Platform"). sagilli is committed to protecting the privacy and personal data of all players, visitors, and users who interact with the Platform.

This Privacy Policy ("Policy") describes how sagilli collects, uses, stores, shares, and protects personal data in connection with your use of the sagilli Platform, including when you register an account, complete sagilli Login, make deposits or withdrawals, participate in games such as sagilli Casino, Bingo, Slot, Triple, and Mines Grand, or contact our support team.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). By using the sagilli Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

sagilli collects the following categories of personal data, depending on how you interact with the Platform:

A. Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile number (used for sagilli Login and account communications)
• Residential address (province, city/municipality, barangay)
• Username and encrypted password
• Nationality and country of residence

B. KYC & Verification Data

• Copies of government-issued photo ID (e.g., Philippine passport, PhilSys National ID, UMID, SSS ID, driver's license, PRC ID)
• Selfie photographs taken at the time of KYC submission
• Proof of address documents (e.g., utility bills, bank statements, barangay certificates)
• Proof of payment method ownership (e.g., GCash or PayMaya account screenshots)

C. Financial & Transaction Data

• Deposit and withdrawal amounts, dates, and payment methods (GCash, PayMaya, BPI, BDO, Metrobank)
• Transaction reference numbers and payment provider identifiers
• Account balance history and bonus transaction records

D. Gaming Activity Data

• Game session logs, bet amounts, game outcomes, and win/loss records
• Responsible gaming tool usage (deposit limits, cooling-off periods, self-exclusion requests)
• Bonus and promotion participation records

E. Technical & Device Data

• IP address and approximate geolocation (used for fraud prevention and jurisdictional compliance)
• Device type, operating system, browser type and version
• Session timestamps, login history, and access logs
• Cookie identifiers and similar tracking technologies (see Section 7)

F. Communications Data

• Records of live chat conversations, email correspondence, and support ticket history with the sagilli team
• Feedback, survey responses, and promotional opt-in preferences

sagilli collects personal data through the following channels and methods:

• Directly from you — when you register an account, complete sagilli Login, submit KYC documents, make a deposit or withdrawal, contact support, or respond to a survey or promotion.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the sagilli Platform (see Section 7 for full details).
• From payment providers — GCash, PayMaya, BPI, BDO, and Metrobank may share transaction confirmation data with sagilli to verify deposits and withdrawals.
• From identity verification services — third-party KYC and AML screening providers may share verification results and watchlist screening outcomes with sagilli.
• From fraud prevention services — device fingerprinting and fraud detection partners may share risk scores and flagged activity data with sagilli to protect the integrity of the Platform.

Under the Philippine Data Privacy Act of 2012, sagilli processes your personal data on the following legal bases:

sagilli uses the personal data we collect for the following specific purposes:

Account Management & Platform Operations

• Creating and maintaining your sagilli account and enabling secure sagilli Login via username/password and SMS OTP two-factor authentication.
• Processing deposits and withdrawals through GCash, PayMaya, BPI, BDO, and Metrobank in Philippine Peso (PHP / ₱).
• Delivering gaming services including sagilli Casino, Bingo, Slot, Triple, and Mines Grand.
• Administering bonuses, promotions, and loyalty rewards.

Regulatory Compliance & AML

• Verifying your identity and age (21+) through KYC procedures as required by Philippine gaming regulations.
• Screening your identity against sanctions lists, politically exposed persons (PEP) databases, and adverse media sources as required under Philippine AML law.
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) and other relevant Philippine authorities as required by law.

Security & Fraud Prevention

• Detecting and preventing fraudulent activity, account takeovers, bonus abuse, and multi-accounting.
• Monitoring for unusual betting patterns or financial activity that may indicate money laundering or match-fixing.
• Maintaining the security and integrity of the sagilli Platform and its systems.

Responsible Gaming

• Enforcing deposit limits, cooling-off periods, and self-exclusion requests you have set through your account dashboard.
• Monitoring gaming behaviour to identify potential signs of problem gambling and, where appropriate, proactively reaching out with responsible gaming resources.
• Maintaining self-exclusion records to prevent excluded players from re-registering.

Communications & Marketing

• Sending transactional communications such as deposit confirmations, withdrawal notifications, and account security alerts.
• Sending promotional communications about sagilli bonuses, new games, and special offers — only where you have opted in to receive such communications.
• Responding to your support queries via live chat and email.

sagilli does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to Bangko Sentral ng Pilipinas (BSP) regulations.
• KYC & Identity Verification Providers: Third-party identity verification services receive copies of your KYC documents to perform automated and manual identity checks on sagilli's behalf.
• Fraud Prevention & Security Providers: Device fingerprinting and fraud detection partners receive technical data to assess risk and protect the sagilli Platform from abuse.
• Game Software Providers: Certified game providers whose titles are hosted on the sagilli Platform may receive anonymised session data necessary to deliver and audit game outcomes.
• Regulatory & Law Enforcement Authorities: sagilli will disclose personal data to PAGCOR, the AMLC, the NPC, the National Bureau of Investigation (NBI), or other Philippine authorities when required by law, court order, or regulatory directive.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of sagilli's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third-party service providers who process personal data on sagilli's behalf are bound by data processing agreements that require them to process your data only on sagilli's instructions and in accordance with applicable Philippine data protection law.

sagilli uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and improve your experience. A cookie is a small text file placed on your device when you visit the sagilli website.

You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the sagilli Platform, including your ability to complete sagilli Login. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

sagilli implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and sagilli servers.
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records.
• Bcrypt hashing for all stored passwords — sagilli never stores your password in plain text.
• SMS OTP two-factor authentication available for all sagilli Login sessions.
• Role-based access controls ensuring that sagilli staff can only access personal data necessary for their specific job function.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security professionals.
• 24/7 automated monitoring for suspicious access patterns, data exfiltration attempts, and system anomalies.
• Secure data centres with physical access controls, CCTV monitoring, and environmental protections.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, sagilli will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the requirements of the Philippine Data Privacy Act.

sagilli retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, sagilli will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification. Where data is anonymised rather than deleted, the anonymised data may be retained for statistical and analytical purposes without limitation, as it no longer constitutes personal data under the DPA.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sagilli. You may exercise any of these rights at any time by contacting our Data Protection Officer using the details in Section 13.

• Right to be Informed: You have the right to be informed about how sagilli collects, uses, and processes your personal data — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data sagilli holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data sagilli holds about you. You can update basic account details directly from your account dashboard after sagilli Login.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to sagilli's legal and regulatory retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time by following the unsubscribe link in any marketing email or by contacting support.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to sagilli in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where sagilli processes your data on the basis of consent (e.g., marketing communications, non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: If you believe sagilli has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

sagilli will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case sagilli will notify you of the extension and the reasons for it within the initial 30-day period.

In compliance with Philippine gaming regulations, sagilli requires all players to verify their age as part of the KYC process before being permitted to deposit funds or participate in any real-money games on the Platform. Age verification is a mandatory step that cannot be bypassed.

If sagilli discovers or has reason to believe that personal data has been collected from an individual under the age of 21, sagilli will immediately suspend the relevant account, delete all associated personal data, and reverse any financial transactions to the extent possible. Any winnings generated by an underage account will be forfeited.

If you are a parent or guardian and believe that your child has registered on the sagilli Platform, please contact our Data Protection Officer immediately using the contact details in Section 13. sagilli takes underage gambling extremely seriously and will act promptly on all such reports.

sagilli reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made to this Policy, sagilli will notify registered players by email to the address on file and/or by displaying a prominent notice on the Platform for a period of not less than seven (7) days prior to the changes taking effect.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how sagilli protects your personal data. Your continued use of the sagilli Platform after the effective date of any amendment constitutes your acknowledgement of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way sagilli processes your personal data, please contact our Data Protection Officer (DPO). The DPO is responsible for overseeing sagilli's compliance with the Philippine Data Privacy Act and is your primary point of contact for all data privacy matters.

If you are not satisfied with sagilli's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act.