Privacy Policy

Welcome to the sg8 Privacy Policy. sg8 ("we," "us," "our," or "the Platform") operates an online casino platform accessible at sg8.live, offering live casino games, slots, bingo, crash games, and other gaming products to registered players in the Philippines. sg8 is regulated by the Philippine Amusement and Gaming Corporation (PAGCOR).

This Privacy Policy describes how sg8 collects, uses, stores, shares, and protects the personal data of individuals who visit the sg8 website, register an account, or otherwise interact with the sg8 platform ("you" or "the player"). It also explains the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and how to exercise those rights.

This Privacy Policy should be read together with the sg8 Terms and Conditions, which govern your use of the platform. In the event of any conflict between this Privacy Policy and the Terms and Conditions on a data privacy matter, this Privacy Policy shall prevail.

For the purposes of the Philippine Data Privacy Act of 2012 and its implementing rules and regulations, sg8 is the Personal Information Controller in respect of the personal data collected through the sg8 platform. This means sg8 determines the purposes and means of processing your personal data.

sg8 has appointed a Data Privacy Officer (DPO) who is responsible for overseeing compliance with the DPA and this Privacy Policy. The DPO can be contacted through the support channel detailed in Section 13 of this Policy. All data privacy inquiries, access requests, correction requests, and deletion requests should be directed to the DPO.

sg8 is registered with the National Privacy Commission (NPC) of the Philippines as required under the DPA. Players who are not satisfied with sg8's handling of a data privacy complaint may escalate the matter to the NPC through the official NPC channels.

sg8 collects personal data from you in the following ways: directly from you when you register an account or interact with the platform; automatically through your use of the platform; and from third-party service providers such as payment processors and identity verification services. The categories of personal data we collect are set out in the table below.

sg8 does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required for responsible gaming purposes (for example, information relating to a self-exclusion request or a problem gambling assessment). Where sensitive personal information is collected, sg8 will obtain your explicit consent and will process such data with heightened security measures.

sg8 processes your personal data only where there is a lawful basis for doing so under the Philippine Data Privacy Act. The primary legal bases on which sg8 relies are: contractual necessity (processing required to perform the contract between sg8 and you as a registered player); legal obligation (processing required to comply with PAGCOR regulations, anti-money laundering laws, and other applicable Philippine law); legitimate interests (processing necessary for sg8's legitimate business interests, where those interests are not overridden by your rights); and consent (where you have given explicit consent for a specific processing activity).

sg8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a new lawful basis for processing.

sg8 does not sell your personal data to any third party. sg8 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements or legal obligations:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment service providers, for the purpose of processing deposits and withdrawals. These providers receive only the financial data necessary to complete the transaction.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by sg8 to verify player identity and age in compliance with PAGCOR requirements.
• Game Suppliers: Licensed game content providers whose games are available on the sg8 platform. Game suppliers may receive anonymized or pseudonymized gaming activity data for game performance and integrity purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory mandate.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required pursuant to a valid legal order, warrant, or subpoena.
• IT and Cloud Service Providers: Hosting, infrastructure, and cybersecurity service providers engaged by sg8 to operate and secure the platform. These providers act as personal information processors under the DPA and are bound by data processing agreements.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by sg8, subject to professional confidentiality obligations.

sg8 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and maintain session security. A cookie is a small text file placed on your device by the sg8 website when you visit. The following categories of cookies are used on the sg8 platform:

• Strictly Necessary Cookies: These cookies are essential for the sg8 platform to function. They enable core features such as session management, login authentication, and security. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: These cookies remember your preferences (such as language settings and display preferences) to provide a more personalized experience. They are not strictly necessary but enhance usability.
• Analytics Cookies: These cookies collect anonymized data about how players use the sg8 platform, including pages visited, time spent, and navigation paths. This data is used to improve platform performance and user experience. You may opt out of analytics cookies through your browser settings.
• Security Cookies: These cookies support fraud detection and security monitoring functions, including detection of unusual login patterns and suspicious activity.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the sg8 platform. sg8 does not use third-party advertising or tracking cookies.

sg8 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, sg8 will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data under the DPA.

sg8 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the sg8 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal data stored on sg8 servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized sg8 personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular data privacy training.
• Two-Factor Authentication: sg8 supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized access.
• Regular Security Audits: sg8 conducts regular internal and third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response: sg8 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, sg8 will notify the NPC within 72 hours of becoming aware of the breach and will notify affected players without undue delay, as required under the DPA.

While sg8 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your sg8 account credentials and for notifying sg8 immediately if you suspect unauthorized access to your account.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by sg8. You may exercise any of these rights by contacting the sg8 Data Privacy Officer as described in Section 13.

sg8 will respond to all data rights requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, in which case sg8 will notify you of the extension and the reason for it. sg8 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive.

sg8 implements mandatory age verification as part of the account registration and KYC process. All players are required to provide proof of age in the form of a government-issued identification document before they are permitted to make deposits or access real-money gaming features. This requirement is enforced in compliance with PAGCOR regulations governing online casino gaming in the Philippines.

If you are a parent or guardian and believe that your child has registered an sg8 account or provided personal data to sg8, please contact the sg8 Data Privacy Officer immediately. sg8 will take prompt action to close the account and delete the associated personal data.

sg8 primarily processes and stores personal data within the Philippines. However, some of sg8's third-party service providers (including certain game suppliers and cloud infrastructure providers) may be located outside the Philippines. Where personal data is transferred to a recipient in a foreign country, sg8 ensures that appropriate safeguards are in place to protect your data in accordance with the DPA.

These safeguards may include: contractual clauses that impose data protection obligations on the recipient equivalent to those under the Philippine DPA; transfers to countries that the NPC has determined provide an adequate level of data protection; or other mechanisms approved by the NPC. sg8 will not transfer your personal data to a foreign country unless one of these safeguards is in place.

sg8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, sg8 will notify registered players by email or through a prominent notice on the platform prior to the changes taking effect.

The "Last Reviewed" date at the top of this page will be updated each time the Privacy Policy is revised. Your continued use of the sg8 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Privacy Policy, you should cease using the platform and may request account closure in accordance with the sg8 Terms and Conditions.

sg8 encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by sg8, please contact the sg8 Data Privacy Officer through the following channels:

• Live Chat: Available 24/7 directly from the sg8 platform. This is the fastest way to reach the support team for general inquiries.
• Email (DPO): [email protected] — for formal data privacy requests, access requests, and complaints. Please include "Data Privacy Request" in the subject line.
• General Support: [email protected]

sg8 will acknowledge all data privacy requests within 5 business days and will aim to resolve them within 30 calendar days. For complex requests, sg8 may request additional information to verify your identity before processing the request.

If you are not satisfied with sg8's response to your data privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.

// document_version: 2026.01  ·  jurisdiction: Philippines  ·  regulator: NPC / PAGCOR  ·  law: RA 10173 (DPA)