Privacy Policy

sugal888 collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Identity & Registration Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Nationality
• Government-issued ID number and document type (e.g., passport, driver's license, PhilSys ID, SSS ID)

2.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (city, province, postal code)

2.3 Financial & Payment Data

• GCash account name and number (last digits only; full numbers are not stored by sugal888)
• PayMaya account details
• Bank account name and number for BPI, BDO, or Metrobank transfers
• Credit/debit card type and last four digits (full card numbers are processed by our PCI-DSS compliant payment processor and are never stored on sugal888 servers)
• Transaction history, deposit amounts, and withdrawal records

2.4 Account & Gaming Activity Data

• Username and account ID
• Login timestamps and session durations
• Game history, wager amounts, wins, and losses
• Bonus and promotion usage history
• Responsible gaming settings (deposit limits, self-exclusion status)

2.5 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Unique device identifiers
• Referring URL and pages visited on sugal888.one
• Cookie and tracking data (see Section 7)

2.6 Communications Data

• Records of live chat conversations with sugal888 support
• Email correspondence with sugal888
• Feedback, complaints, and survey responses

sugal888 does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (e.g., responsible gaming assessments).

sugal888 collects personal data through the following means:

3.1 Directly From You

The majority of personal data we hold is provided directly by you when you register for a sugal888 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion.

3.2 Automatically Through Platform Use

When you use the sugal888 platform, certain technical data is collected automatically through cookies, web beacons, and server logs. This includes your IP address, device information, and browsing behavior on sugal888.one. This data helps us maintain platform security, detect fraud, and improve the user experience.

3.3 From Third-Party Service Providers

sugal888 may receive personal data from third-party service providers in the following contexts:

• Payment processors (e.g., GCash, PayMaya, BPI) may share transaction confirmation data with sugal888 to verify deposits and withdrawals.
• Identity verification providers may share the results of document verification checks.
• Fraud prevention services may share risk signals or flagged activity associated with your device or payment method.
• Game providers may share game session data necessary for dispute resolution and audit purposes.

sugal888 uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

Purpose	Data Used
Account registration & management	Identity data, contact data, account data
Age & identity verification (KYC)	Identity data, government ID documents
Processing deposits & withdrawals	Financial data, identity data
Providing gaming services	Account data, gaming activity data
Fraud detection & prevention	Technical data, financial data, gaming activity data
Anti-money laundering (AML) compliance	Identity data, financial data, transaction history
Customer support	Contact data, communications data, account data
Responsible gaming monitoring	Gaming activity data, account data
Marketing & promotions (with consent)	Contact data, gaming activity data
Platform improvement & analytics	Technical data, gaming activity data (aggregated)
Legal & regulatory compliance	All categories as required by applicable law

4.1 Marketing Communications

sugal888 will only send you promotional emails, SMS messages, or in-platform notifications if you have given your explicit consent to receive them during registration or through your account settings. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account or by contacting our support team. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before the withdrawal.

Under the Philippine Data Privacy Act of 2012, sugal888 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and sugal888 — i.e., to provide you with gaming services, process your transactions, and manage your account.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including KYC requirements, AML obligations, and regulatory reporting to PAGCOR and other competent authorities.
• Legitimate interests: Processing is necessary for sugal888's legitimate interests, including fraud prevention, platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw this consent at any time.

sugal888 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Service Providers

sugal888 engages trusted third-party service providers to assist in operating the platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa/Mastercard networks), identity verification providers, cloud hosting providers, game software suppliers, and customer support tools. All service providers are contractually bound to process your data only on sugal888's instructions and to maintain appropriate security standards.

6.2 Regulatory & Law Enforcement Authorities

sugal888 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. sugal888 will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of sugal888's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the new entity before your data is transferred.

6.4 With Your Consent

sugal888 may share your data with other third parties where you have given your explicit consent to such sharing.

6.5 Cross-Border Transfers

Some of sugal888's service providers may be located outside the Philippines. Where personal data is transferred internationally, sugal888 ensures that appropriate safeguards are in place — such as contractual data protection clauses — to protect your data to a standard equivalent to that required under Philippine law.

sugal888 uses cookies and similar tracking technologies on sugal888.one to enhance your experience, maintain session security, and analyze platform usage. A cookie is a small text file placed on your device when you visit a website.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming limits you have set.
• Analytics cookies: Help us understand how players use sugal888.one so we can improve the platform. Data collected is aggregated and anonymized where possible.
• Marketing cookies: Used only with your consent to deliver relevant promotions. You may opt out of marketing cookies at any time through your browser settings or account preferences.

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling strictly necessary cookies will affect your ability to use the sugal888 platform. For more information on managing cookies, refer to your browser's help documentation.

sugal888 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years after account closure, in compliance with AML regulations and PAGCOR requirements.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, as required by Philippine financial regulations.
• Gaming activity logs: Retained for 3 years from the date of the activity, or longer if required for dispute resolution or regulatory purposes.
• Customer support communications: Retained for 2 years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your consent and for 1 year after withdrawal of consent.

When personal data is no longer required, sugal888 will securely delete or anonymize it in accordance with our data disposal procedures.

sugal888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and sugal888 servers
• AES-256 encryption for sensitive data stored at rest
• Multi-factor authentication (MFA) options for player accounts
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security audits and penetration testing of the sugal888 platform
• PCI-DSS compliant payment processing — full card numbers are never stored on sugal888 servers
• 24/7 fraud monitoring and anomaly detection systems

While sugal888 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying sugal888 immediately if you suspect unauthorized access to your account.

9.1 Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, sugal888 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Philippine Data Privacy Act. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their rights.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by sugal888. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request".

sugal888 will respond to all data privacy requests within 30 calendar days of receipt. In complex cases, this period may be extended by a further 30 days, and you will be notified of the extension.

The sugal888 platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gambling regulations. sugal888 does not knowingly collect personal data from individuals under the age of 21.

If sugal888 discovers or has reason to believe that a registered user is under 21 years of age, the account will be immediately suspended, all personal data associated with the account will be reviewed, and any funds deposited will be returned to the original payment method after verification. The account will then be permanently closed.

If you are a parent or guardian and believe that a minor has registered on sugal888 using false information, please contact us immediately at [email protected] so we can take prompt action.

sugal888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification at least 7 days before the changes take effect, where practicable.

The updated Policy will be published on this page with a revised "Last Updated" date. Your continued use of the sugal888 platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. We encourage you to review this page periodically to stay informed about how sugal888 protects your data.

sugal888 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data, please contact our DPO using the details below:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 via the chat widget on sugal888.one

sugal888 aims to acknowledge all data privacy inquiries within 3 business days and to provide a full response within 30 calendar days. For complaints that cannot be resolved through our internal process, you may escalate the matter to the National Privacy Commission (NPC) of the Philippines.