Privacy Policy — sg779

1. Data Controller

sg779 ("sg779", "we", "us", "our") is the data controller responsible for the personal data you provide when using the sg779 platform accessible at sg779.app. As a PAGCOR-regulated online gaming operator serving Filipino players across the Philippines — from Manila and Quezon City to Cebu, Davao, and beyond — sg779 is committed to processing personal data lawfully, fairly, and transparently in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.

sg779 has designated a Data Protection Officer (DPO) who oversees our data privacy program and serves as the primary point of contact for all privacy-related inquiries. Contact details for our DPO are provided in Section 14 of this policy.

2. What We Collect

sg779 collects the following categories of personal data from players and platform users:

3. How We Collect Data

sg779 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account via sg779 Login, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the sg779 platform, including through cookies, web beacons, server logs, and session tracking tools. This includes your IP address, device identifiers, and browsing behaviour within the platform.
• Third-party providers: Identity verification data received from our KYC and anti-fraud service providers when you complete account verification. Payment confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay when you conduct transactions.
• Regulatory sources: In certain circumstances, sg779 may receive data from PAGCOR or law enforcement authorities as part of regulatory compliance obligations.

4. Purpose & Legal Basis

sg779 processes your personal data only for specific, legitimate purposes. The table below sets out our primary processing activities and the legal basis under the Data Privacy Act for each:

5. Data Sharing

sg779 does not sell or rent your personal data. We share your data only where strictly necessary and only with the following categories of recipients:

• Payment processors: GCash (Mynt), PayMaya (PayMongo), BPI, BDO, Metrobank, and InstaPay partner networks — solely to facilitate the processing of your deposits and withdrawal requests.
• Identity verification providers: Third-party KYC and liveness detection service providers who assist sg779 in verifying your identity and age as required by PAGCOR.
• Game content providers: Casino game studios and RNG platform providers who need minimal player session data to deliver game content and maintain fair-play audit logs.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or regulatory order.
• Professional advisers: Legal counsel, auditors, and cybersecurity consultants bound by strict confidentiality obligations.
• IT infrastructure providers: Cloud hosting and security providers who process data on sg779's behalf under data processing agreements that impose PDPA-equivalent protections.

All third parties with whom sg779 shares personal data are required to implement appropriate data protection measures consistent with the Philippine Data Privacy Act and sg779's own data security standards.

6. Data Retention

sg779 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account and KYC records: Retained for the lifetime of your account plus a minimum of five (5) years following account closure, in accordance with PAGCOR regulatory requirements and anti-money laundering record-keeping obligations under RA 9160.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for three (3) years, or longer if required for an ongoing regulatory investigation or dispute.
• Support communications: Retained for two (2) years from the date of the last interaction, unless the subject matter relates to an active dispute.
• Marketing preference data: Retained until you withdraw your consent or close your account, whichever is earlier.

When personal data is no longer required and the applicable retention period has expired, sg779 will securely delete or anonymise the data in accordance with our data disposal procedures.

7. Security Measures

sg779 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and sg779 servers is encrypted using TLS 1.3 / 256-bit SSL — the same standard used by Philippine banks and financial institutions.
• Encryption at rest: Sensitive personal data stored in sg779 databases, including financial account details and identity documents, is encrypted at rest using AES-256.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. All sg779 staff with data access undergo background screening and are bound by confidentiality agreements.
• Multi-factor authentication: Administrative access to sg779 data systems requires multi-factor authentication. We also offer MFA options to players for their sg779 Login to further protect their accounts.
• Regular security audits: sg779 conducts regular penetration testing, vulnerability assessments, and internal security audits. Critical findings are remediated within defined SLA timeframes.
• Incident response: sg779 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under the Data Privacy Act.

8. Cookies & Tracking Technologies

sg779 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and support our security and analytics functions. The cookies we use fall into the following categories:

• Strictly necessary cookies: Essential for the platform to function. These enable core features such as sg779 Login session management, secure navigation, and fraud prevention. These cookies cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences — such as language settings, game display options, and responsible gaming tool configurations — so you do not need to reset them on each visit.
• Analytics cookies: Help sg779 understand how players interact with the platform, which games and features are most popular, and where technical issues occur. Data collected is aggregated and anonymised where possible.
• Security cookies: Used to detect suspicious activity, identify compromised accounts, and enforce geo-restriction rules in accordance with PAGCOR licensing conditions.

On your first visit to the sg779 platform, you will be presented with a cookie preference panel. You may manage non-essential cookie settings at any time through your account preferences. Note that disabling certain cookies may affect the availability of some platform features.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sg779:

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 14 of this policy. sg779 will respond to all verified data subject requests within fifteen (15) business days from the date of receipt, as required under NPC regulations.

10. Minors

sg779 is strictly an adults-only platform. In accordance with PAGCOR regulations and Philippine law, the minimum age requirement for participation in online gaming through sg779 is twenty-one (21) years. sg779 does not knowingly collect, process, or store personal data from individuals under 21 years of age.

Age verification is a mandatory step in the sg779 account registration and KYC process. Any account found to belong to a person under 21 will be immediately suspended, all associated data will be secured pending regulatory review, and the incident will be reported to PAGCOR as required.

If you are a parent or guardian and believe that your minor child has registered or attempted to register an account on sg779, please contact us immediately at the email address listed in Section 14. We will investigate and take prompt action to close the account and delete any data collected.

11. Cross-Border Data Transfers

sg779 primarily processes and stores your personal data on servers located within or serving the Philippines. However, certain service providers — including cloud infrastructure partners, game content studios, and identity verification providers — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, sg779 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act and NPC Circular No. 16-01. These safeguards include:

• Data processing agreements that impose obligations equivalent to those under Philippine law on all foreign data processors.
• Transfers to jurisdictions recognised by the NPC as providing an adequate level of data protection.
• Implementation of standard contractual clauses or binding corporate rules where no adequacy decision exists.

You may request information about the specific safeguards applicable to a particular cross-border transfer by contacting our DPO.

12. Anti-Money Laundering Obligations

As a PAGCOR-licensed operator, sg779 is a covered person under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160), as amended. This means sg779 has mandatory legal obligations to:

• Conduct customer due diligence (CDD) and enhanced due diligence (EDD) on all players as part of the KYC process.
• Monitor transactions for suspicious activity and file Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) where required.
• File Cash Transaction Reports (CTRs) with the AMLC for transactions meeting or exceeding the threshold prescribed by law.
• Retain all transaction records and KYC documentation for a minimum of five (5) years as specified in Section 6 of this policy.

Compliance with AML obligations may require sg779 to process and share your personal data with the AMLC and other relevant Philippine government agencies without your prior consent, where legally required. This processing is conducted strictly within the bounds of the Data Privacy Act's exemption for processing pursuant to legal obligations.

13. Policy Changes

sg779 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or platform updates. The "Last updated" date at the top of this page will always reflect the most recent revision.

When material changes are made to this policy — particularly changes that affect how we use your personal data or the rights available to you — sg779 will provide prominent notice through the platform and/or by email to your registered address at least fourteen (14) days prior to the changes taking effect, where operationally feasible.

Your continued use of the sg779 platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you must stop using the platform and may request account closure.

14. Contact & Data Protection Officer

For all privacy-related inquiries, requests to exercise your data subject rights, or to report a potential data privacy concern, please contact the sg779 Data Protection Officer:

If you believe your data privacy rights have been violated and sg779 has not adequately addressed your concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) through its official channels. sg779 will cooperate fully with any NPC investigation.