Your privacy matters to sagilli. This policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you hold as a data subject under the Philippine Data Privacy Act of 2012.
These are not aspirational statements. They are built into how sagilli's data systems are architected, how our team is trained, and how every data decision is made.
sagilli collects only the personal data that is genuinely necessary for the specific purpose at hand — registration, payments, identity verification, or regulatory compliance. We do not collect data speculatively or for purposes beyond those stated in this policy.
sagilli does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your data belongs to you. It is used exclusively to operate and improve the sagilli platform and to comply with our legal obligations in the Philippines.
All personal data stored by sagilli is encrypted at rest using industry-standard AES-256 encryption. All data transmitted between your device and sagilli's servers is protected by TLS 1.3 with 256-bit SSL certificates — the same standard used by major Philippine banks.
sagilli recognizes and honours all data subject rights under the Philippine Data Privacy Act of 2012, including your rights to access, correction, erasure, portability, and objection. These rights can be exercised at any time by contacting sagilli's Data Privacy Officer.
sagilli retains your personal data only for as long as it is necessary for the original purpose of collection, or as required by applicable Philippine law — including anti-money laundering record-keeping requirements. Retention periods are documented and reviewed regularly.
In the event of a personal data breach that poses a real risk to Filipino players, sagilli will notify affected individuals and the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under RA 10173 and NPC issuances.
In this Privacy Policy, the following terms carry the meanings set out below:
sagilli is the Data Controller responsible for all personal data collected and processed in connection with the sagilli platform. As the Data Controller, sagilli determines the purposes for which your personal data is processed, the means of processing, and the security measures applied to protect it.
sagilli has appointed a Data Privacy Officer (DPO) as required under the DPA and its implementing rules. The DPO is responsible for overseeing sagilli's compliance with the DPA, handling data subject rights requests, and serving as the point of contact with the National Privacy Commission. Contact details for the DPO are provided in Section 14 of this Policy.
sagilli collects the following categories of personal data in connection with the operation of the Platform:
sagilli collects personal data through the following means:
sagilli processes your personal data only for specific, legitimate purposes. The table below sets out the primary processing purposes and the legal basis for each under the Philippine Data Privacy Act of 2012:
| Processing Purpose | Categories of Data Used | Legal Basis (RA 10173) |
|---|---|---|
| Account registration and management | Identity, contact, registration data | Performance of contract (Art. 12(b)) |
| Age and identity verification (KYC) | KYC documents, identity data | Legal obligation (Art. 12(c)); legitimate interest |
| Processing deposits and withdrawals | Financial and transaction data | Performance of contract (Art. 12(b)) |
| Anti-money laundering (AML) compliance | Identity, financial, transaction data | Legal obligation — RA 9160 (AMLA) (Art. 12(c)) |
| Regulatory reporting to PAGCOR / AMLC | Identity, financial, gaming activity | Legal obligation (Art. 12(c)) |
| Platform security and fraud prevention | Technical, device, session data | Legitimate interest (Art. 12(f)) |
| Responsible gaming enforcement | Gaming activity, self-exclusion data | Legal obligation; legitimate interest |
| Platform improvement and analytics | Technical, gaming activity (anonymized) | Legitimate interest (Art. 12(f)) |
| Personalized promotional communications | Contact, preferences, gaming activity | Consent (Art. 12(a)); opt-out available |
| Customer support and dispute resolution | Identity, communications, transaction data | Performance of contract; legitimate interest |
sagilli does not sell, rent, or commercially trade your personal data to any third party. Your personal data is disclosed only in the circumstances described in this Section:
sagilli engages certain trusted third-party service providers who process personal data on sagilli's behalf and under sagilli's documented instructions. These include payment processing partners (GCash/PayMaya infrastructure providers, Philippine banking APIs), identity verification and KYC service providers, cloud infrastructure and hosting providers, and customer support platform providers. All data processors are contractually bound to process data only as instructed by sagilli and to maintain security standards no less protective than those applied by sagilli.
sagilli's game library is provided by third-party game studios and platform providers. Certain game session data may be transmitted to these providers to enable gameplay, calculate outcomes, and maintain game integrity. Game providers are contractually prohibited from using this data for their own marketing or analytics purposes.
sagilli may disclose personal data to the following authorities as required by Philippine law:
In the event of a merger, acquisition, restructuring, or sale of all or part of sagilli's business, personal data held by sagilli may be transferred to the acquiring entity as part of that transaction, subject to the acquirer's agreement to be bound by obligations no less protective than those set out in this Privacy Policy. sagilli will provide advance notice to affected Players via email before any such transfer takes effect.
sagilli retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention principles apply:
Upon the expiry of applicable retention periods, sagilli will securely delete or irreversibly anonymize personal data. Where anonymization is applied, the resulting anonymized data sets may be retained indefinitely for analytical and statistical purposes as they no longer constitute personal data under the DPA.
sagilli implements organizational and technical security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Key security measures include:
While sagilli takes all reasonable precautions to secure your personal data, no online system can guarantee absolute security. You are responsible for maintaining the security of your sagilli account credentials. sagilli recommends enabling two-factor authentication (2FA) on your Account.
sagilli uses cookies and similar tracking technologies to operate the Platform, improve your experience, and analyse Platform usage. This Section explains sagilli's use of these technologies.
Cookies are small text files placed on your device by the sagilli Platform when you visit the site. They allow the Platform to recognize your device across sessions and enable various features to function correctly.
sagilli does not use advertising or behavioral tracking cookies that share data with external advertising networks. You may manage cookie preferences through your browser settings. Note that disabling functional cookies may impair some Platform features.
Under the Philippine Data Privacy Act of 2012, as a data subject you have the following rights with respect to your personal data held by sagilli. These rights can be exercised free of charge by contacting sagilli's Data Privacy Officer at the details provided in Section 14:
You have the right to request confirmation from sagilli as to whether your personal data is being processed, and to receive a copy of that data together with information about how it is being used and on what legal basis.
You have the right to request that sagilli correct inaccurate or incomplete personal data held about you without undue delay. You may update many personal details directly through your Account settings.
You have the right to request the deletion of your personal data where it is no longer necessary for its original purpose, where consent has been withdrawn, or where processing was unlawful — subject to sagilli's legal retention obligations.
You have the right to receive your personal data that you have provided to sagilli in a structured, commonly used, machine-readable format, and to have that data transmitted to another controller where technically feasible.
You have the right to object at any time to the processing of your personal data for direct marketing purposes. You also have the right to object to processing based on legitimate interests where your individual rights override those interests in your specific circumstances.
You have the right to request that sagilli restricts the processing of your personal data in certain circumstances — for example, while the accuracy of the data is being contested or while an objection request is under consideration.
Where sagilli uses automated processing to make decisions that significantly affect you, you have the right to request human review of that decision and to express your point of view before a final decision is reached.
If you believe sagilli has processed your personal data in violation of the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines without prejudice to any other legal remedy.
sagilli does not knowingly collect personal data from persons under twenty-one (21) years of age. The sagilli Platform is strictly an adult gambling service available exclusively to individuals who have attained the minimum age of twenty-one (21) years as required under applicable Philippine gaming regulations enforced by PAGCOR.
sagilli encourages parents and guardians in the Philippines to use parental control software to restrict minors' access to online gambling platforms. If you believe a minor has registered a sagilli account, please contact the sagilli support team immediately.
sagilli's primary data storage and processing infrastructure is located within secure data centres serving the Asia-Pacific region. In certain circumstances — including where sagilli engages third-party game providers with international studio infrastructure or uses global cloud services — your personal data may be transferred to servers or processed in jurisdictions outside the Philippines.
Where such international transfers occur, sagilli ensures that adequate data protection safeguards are in place in accordance with the requirements of the Philippine Data Privacy Act of 2012, including through the use of contractual data processing agreements with all international data processors that impose obligations no less protective than those required under Philippine law.
sagilli does not transfer personal data to jurisdictions that the National Privacy Commission has determined to provide an inadequate level of protection without appropriate additional safeguards.
sagilli reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable Philippine law, or NPC guidance. When we make material changes to this Policy, we will:
Your continued use of the sagilli Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you may close your Account and request deletion of your personal data in accordance with Section 10.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how sagilli processes your personal data, please contact sagilli's Data Privacy Officer:
If you are not satisfied with sagilli's response to a data subject rights request, or if you believe that sagilli has processed your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
This Privacy Policy was last reviewed and updated on 1 January 2026 and is effective from that date. sagilli is committed to being a platform Filipino players can trust — with their money, their time, and their personal data.
sagilli handles your personal data with the same care and precision it applies to every other part of the platform — fully compliant with the Philippine Data Privacy Act, transparent about every processing purpose, and genuinely committed to your privacy. Filipino players deserve that standard. sagilli delivers it.
Must be 21 years of age or older. Please gamble responsibly. sagilli operates under applicable Philippine gaming regulations.