Privacy Policy –
sagjili Online Casino Philippines

This Privacy Policy applies to all personal information collected, used, stored, or otherwise processed by sagjili in connection with the operation of the sagjili online gaming Platform accessible at sagjili.co. It covers all Players, registered account holders, visitors to the Platform, and any other individual whose personal information is processed by sagjili in the course of its operations.

sagjili operates as the Personal Information Controller (PIC) as defined under Section 3(h) of the Data Privacy Act of 2012 (RA 10173). This means sagjili determines the purposes and means of processing your personal information. Where sagjili engages third parties to process personal data on its behalf — such as payment processors, KYC verification providers, and game software providers — those parties act as Personal Information Processors (PIPs) under sagjili's instructions.

This Privacy Policy governs only the personal information processed by sagjili in connection with the sagjili Platform. It does not govern the privacy practices of any third-party websites, services, or applications that may be linked from the Platform.

sagjili collects the following categories of personal information in connection with the registration, operation, and ongoing management of Player Accounts on the sagjili Platform:

sagjili collects personal information through the following channels and mechanisms:

• Account registration. When you create a sagjili Account, you directly provide identity information, contact details, date of birth, and your chosen login credentials.
• KYC verification submission. When you submit identity documents for KYC verification — required under PAGCOR regulations before withdrawals are enabled — sagjili collects government ID information and document images.
• Financial transactions. When you make deposits or withdrawals via GCash, PayMaya, BDO, BPI, or Metrobank, sagjili receives transaction confirmation data and the account identifiers associated with the payment method.
• Platform usage. sagjili's systems automatically collect technical and activity data as you use the Platform — including pages visited, games launched, session data, and device information — through server logs, cookies, and web analytics tools.
• Customer support interactions. When you contact sagjili's support team via live chat or email, the content of those communications is recorded and stored for quality assurance and dispute resolution purposes.
• Third-party providers. sagjili may receive supplementary identity verification data from licensed KYC and anti-fraud service providers used to verify the accuracy of information you have provided.

sagjili processes your personal information for the following specific, legitimate purposes:

• Account creation and management — to register your Player Account, authenticate your identity at login, and manage your account settings and preferences.
• Identity verification and KYC compliance — to verify your identity and confirm that you meet the minimum age requirement of 21 years, as mandated by PAGCOR regulations.
• Financial transaction processing — to process deposits, withdrawals, and bonus credits through your chosen payment method, and to maintain accurate transaction records.
• Anti-money laundering and fraud prevention — to detect, investigate, and prevent fraudulent activity, money laundering, and other financial crime, in compliance with the Anti-Money Laundering Act (RA 9160) and AMLC reporting requirements.
• Game provision and platform operation — to deliver the games, betting markets, and features you request, and to maintain the technical performance and security of the sagjili Platform.
• Regulatory compliance — to comply with sagjili's obligations as a PAGCOR-licensed operator, including reporting obligations, audit requirements, and compliance with applicable Philippine law.
• Responsible gaming — to identify and respond to patterns of gaming behaviour that may indicate problem gambling, and to administer deposit limits, self-exclusion, and other responsible gaming tools.
• Customer support — to investigate and resolve complaints, disputes, and support requests relating to your Account or Platform use.
• Marketing communications — where you have given your consent, to send you information about sagjili promotions, bonuses, and new game launches through your preferred communication channel. You may withdraw marketing consent at any time through your account settings.
• Security monitoring and abuse prevention — to detect unauthorised access to Accounts, multi-accounting, bot activity, and other prohibited conduct under the sagjili Terms and Conditions.

Under the Data Privacy Act of 2012, sagjili processes your personal information on one or more of the following legal bases, depending on the specific purpose:

• Contractual necessity. Processing your identity, contact, and financial information is necessary to perform the contract between you and sagjili — specifically, to create and manage your Account, process transactions, and deliver gaming services. Without this processing, sagjili cannot provide you with the Platform.
• Compliance with a legal obligation. Much of sagjili's personal data processing — particularly KYC/identity verification, AML transaction monitoring, and regulatory reporting — is required by Philippine law (RA 9160, RA 10173) and PAGCOR's licensing conditions. sagjili has no discretion in this processing; it is legally mandated.
• Legitimate interests. Processing for fraud prevention, security monitoring, responsible gaming risk identification, and platform optimisation is conducted on the basis of sagjili's legitimate interests as a licensed operator, balanced against your rights and interests as a Player.
• Consent. Marketing communications are sent only where you have provided explicit, freely given consent at registration or through your account settings. Consent can be withdrawn at any time with immediate effect.

sagjili does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. sagjili shares personal information only in the following circumstances and with the following categories of recipients:

• Payment processors. sagjili shares the minimum personal and financial information necessary with licensed Philippine payment service providers — including GCash (Globe Fintech Innovations), PayMaya (PayMongo/Maya Bank), and Philippine commercial banks (BDO, BPI, Metrobank) — to process your deposit and withdrawal transactions.
• KYC and identity verification providers. sagjili uses accredited third-party KYC and anti-fraud service providers to verify the authenticity and accuracy of identity documents you submit. These providers act as Personal Information Processors under sagjili's instructions and are contractually bound to appropriate data protection standards.
• Game software providers. Game providers integrated into the sagjili Platform — such as JILI, Pragmatic Play, and PG Soft — may receive anonymised session and wagering data necessary to deliver game functionality, statistical tracking, and RTP compliance reporting. Identifiable personal information is not shared with game providers beyond what is technically required for the game session.
• Regulatory authorities. sagjili is legally required to share certain personal information with PAGCOR and the Anti-Money Laundering Council (AMLC) in connection with regulatory compliance, licence audits, and suspicious transaction reporting under RA 9160.
• Law enforcement. sagjili will disclose personal information in response to a valid court order, subpoena, or written request from a Philippine law enforcement agency with appropriate jurisdiction, where sagjili is legally obligated to comply.
• Professional advisers. sagjili's legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis in the course of providing professional services to sagjili, subject to professional confidentiality obligations.

Some of sagjili's third-party service providers — including game software providers and certain cloud infrastructure providers — may be located or operate servers outside the Philippines. Where personal data is transferred to a country outside the Philippines, sagjili takes the following safeguards:

• sagjili ensures that any international transfer of personal data is made only to countries or recipients that the National Privacy Commission has determined provide an adequate level of data protection, or where appropriate contractual safeguards — such as standard contractual clauses compliant with Philippine NPC guidance — are in place.
• Where game providers receive session data for game delivery purposes, this data is minimised to the extent technically possible and does not include government ID information or full financial account details.
• All international data transfers are documented and subject to review as part of sagjili's ongoing PAGCOR compliance obligations.

sagjili uses cookies and similar tracking technologies on the sagjili Platform to ensure the Platform functions correctly, to analyse usage patterns, and — where you have consented — to personalise your experience. The following categories of cookies are used:

• Strictly necessary cookies. These cookies are essential for the Platform to function. They enable session management, authentication, and security features including CSRF protection and session token management. These cookies cannot be disabled without breaking core Platform functionality.
• Performance and analytics cookies. These cookies collect anonymised data about how Players use the Platform — which pages are visited most frequently, where errors occur, and how sessions flow. This data is used to improve Platform performance and user experience. Where third-party analytics tools are used, they are configured to anonymise IP addresses before processing.
• Functional cookies. These cookies remember your preferences — such as language settings, last-visited game category, and responsible gaming tool settings — to provide a more personalised and efficient experience.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to log in and use the Platform. Disabling performance or functional cookies will not prevent you from using the Platform but may reduce its personalisation and efficiency.

sagjili retains personal information only for as long as required by applicable law, PAGCOR's regulatory requirements, and the purposes described in this Privacy Policy. The following general retention guidelines apply:

At the end of any applicable retention period, personal data is either securely deleted using methods appropriate to its format and sensitivity, or irreversibly anonymised so that it can no longer be associated with any identifiable individual. Deletion is logged for accountability purposes.

sagjili implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. Key measures include:

• Encryption in transit. All data transmitted between your device and sagjili's servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all pages of the sagjili Platform, including the sagjili Login page and all transaction pages.
• Encryption at rest. Sensitive personal information — including government ID data and financial account identifiers — is encrypted at rest in sagjili's databases using AES-256 or equivalent industry-standard encryption.
• Access controls. Access to personal data within sagjili's systems is restricted on a strict need-to-know basis using role-based access controls. Employee access to sensitive data is logged and auditable.
• Password security. Account passwords are hashed using bcrypt with per-account salts before storage. Plaintext passwords are never stored or transmitted internally.
• Two-factor authentication. sagjili's internal systems require multi-factor authentication for all staff with access to production environments containing personal data.
• Third-party security assessments. sagjili's Platform and data security practices are subject to periodic independent review as part of sagjili's PAGCOR compliance obligations.

The Data Privacy Act of 2012 (RA 10173) grants you the following rights with respect to your personal information held by sagjili. To exercise any of these rights, contact sagjili's Data Privacy Officer using the details in Section 16:

• Right to be informed. You have the right to be informed whether sagjili holds personal information about you, and to receive the information set out in this Privacy Policy regarding how it is processed.
• Right of access. You have the right to request a copy of the personal information sagjili holds about you, together with information about the purposes for which it is processed and any third parties with whom it has been shared.
• Right to correction. You have the right to request that inaccurate or outdated personal information held by sagjili be corrected or updated. For KYC-related data, correction requests will require supporting documentation.
• Right to erasure or blocking. You have the right to request that sagjili delete or block personal information that is no longer necessary for the purpose for which it was collected, or where the processing is unlawful. This right is subject to overriding legal obligations — for example, AML retention requirements may prevent deletion of financial transaction records.
• Right to object. You have the right to object to processing of your personal information for direct marketing purposes or for processing conducted on the basis of legitimate interests, where your interests or rights override those legitimate interests.
• Right to data portability. You have the right to receive your personal information in a structured, commonly used, machine-readable format, and to request its transmission to another personal information controller where technically feasible.
• Right to lodge a complaint. If you believe sagjili has not handled your personal information in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

sagjili will respond to data rights requests within 30 days of receipt. In complex cases or where verification of the requestor's identity is required, this period may be extended with written notification to you of the reason for the extension.

The sagjili Platform is strictly restricted to persons aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. sagjili does not knowingly collect personal information from individuals below the age of 21.

The KYC verification process is designed to confirm that all registered Players meet this age requirement before withdrawal privileges are granted. If sagjili discovers that personal information has been collected from an individual below the age of 21, that Account will be immediately suspended, the personal information will be deleted in accordance with applicable law, and any balance will be handled in accordance with PAGCOR's guidelines on underage account closures.

If you have reason to believe that sagjili has collected personal information from a person under 21, please contact sagjili's Data Privacy Officer immediately using the contact details in Section 16.

sagjili may send you promotional communications — including information about bonuses, new games, VIP programme updates, and sagjili promotions — only where you have given explicit, freely given consent to receive such communications.

You may provide or withdraw marketing consent through your sagjili Account settings at any time. Withdrawal of marketing consent takes effect immediately and does not affect the lawfulness of marketing communications sent before the withdrawal. Withdrawal of marketing consent does not affect your ability to use the sagjili Platform or any other aspect of your Account.

Even where marketing consent has been given, sagjili will not send marketing communications to Players who are subject to active responsible gaming restrictions (such as self-exclusion or deposit limits) where such communications would be inconsistent with those restrictions.

In the event that sagjili becomes aware of a personal data breach that poses a real risk of harm to the rights and freedoms of affected individuals, sagjili will take the following steps in accordance with the NPC's Circular on Personal Data Breach Management:

• Containment. Upon detection of a breach, sagjili's security team will take immediate steps to contain the breach, prevent further unauthorised access, and preserve evidence for investigation.
• Assessment. sagjili will conduct a prompt and thorough assessment of the breach to determine the nature of the data involved, the likely scope of affected individuals, and the probable cause.
• NPC notification. Where a notifiable breach has occurred, sagjili will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required under the NPC's Circular 16-03.
• Individual notification. Where the breach poses a high risk to the rights and freedoms of specific individuals, sagjili will notify those individuals directly without undue delay, providing information about the nature of the breach, the data involved, and the steps sagjili is taking to address it.

sagjili reserves the right to amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR requirements, or sagjili's data processing practices. The effective date and last updated date at the top of this document will be updated to reflect any amendment.

Where amendments are material — meaning they significantly affect how your personal information is processed or your rights thereunder — sagjili will notify you via your registered email address or mobile number at least 14 days before the amendment takes effect. For minor clarifications or non-material updates, the updated effective date on this page provides sufficient notice.

Your continued use of the sagjili Platform after the effective date of any amendment constitutes your acknowledgement of the updated Privacy Policy. If you do not accept a material amendment, you may close your Account before the effective date and request return of any available balance.

sagjili has designated a Data Privacy Officer (DPO) as required under Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing sagjili's compliance with RA 10173 and this Privacy Policy, and serves as the primary contact point for data privacy enquiries and rights requests from Players.

To exercise any of your data rights under Section 11, to raise a data privacy concern, or to request a copy of any internal data processing records relating to your Account, please contact sagjili through the following channels:

• Live Chat: Available 24/7 on the sagjili Platform. For data privacy requests, please indicate "Data Privacy Request" at the start of your message so it can be routed to the DPO team without delay.
• Email: [email protected] — for formal written data rights requests, include your registered username, the right you wish to exercise, and sufficient detail to enable sagjili to identify and retrieve the relevant data. Email responses to data rights requests are provided within 30 days of receipt of a complete, verifiable request.

For complaints that remain unresolved after engaging with sagjili's Data Privacy Officer, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the regulator responsible for enforcing the Data Privacy Act of 2012.