At sayaph, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have as a player.
These highlights summarise our key privacy principles. Please read the full policy below for complete details.
sayaph uses industry-standard SSL encryption and secure server infrastructure to protect your personal information from unauthorised access, disclosure, or misuse at every step.
Filipino players have the right to access, correct, and request deletion of their personal data held by sayaph. We make it straightforward to exercise these rights through our support team.
sayaph does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data is used solely to operate and improve the sayaph platform.
sayaph processes personal data in accordance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules.
sayaph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.
You can opt out of marketing communications from sayaph at any time. Simply update your communication preferences in your account settings or contact our support team directly.
This Privacy Policy ("Policy") describes how sayaph ("sayaph," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "Player") who access or use the sayaph website located at https://sayaph.net and all associated gaming services, features, and functionality (collectively, the "Platform").
sayaph is committed to protecting the privacy and personal data of all players, particularly those based in the Philippines. This Policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.
By registering a sayaph account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
If you do not agree with any part of this Policy, you should discontinue use of the sayaph Platform immediately. For questions or concerns about how we handle your personal data, please contact our Data Protection Officer using the details provided in Section 14.
sayaph is an online gaming and casino platform operating under applicable Philippine gaming regulations. For the purposes of data protection law, sayaph acts as the personal information controller in respect of the personal data of its registered players and website visitors.
As a personal information controller, sayaph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection legislation.
sayaph operates in accordance with the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with all applicable data protection and anti-money laundering obligations applicable to licensed online gaming operators in the Philippines.
sayaph collects personal data from you in a number of ways — directly when you register and use the Platform, automatically through your use of the Platform, and occasionally from third-party sources. The categories of personal data we collect are described below.
When you create a sayaph account, we collect the following information:
As part of our Know Your Customer (KYC) obligations under Philippine anti-money laundering regulations, we may collect:
When you make deposits or withdrawals, we collect:
We collect records of your gaming activity on the Platform, including:
When you access the sayaph Platform, we automatically collect certain technical information, including:
If you contact sayaph's customer support team, we collect records of those communications, including the content of your messages, the channel used (e.g., live chat, email), and the date and time of contact.
sayaph does not collect or store full payment card numbers. Where card payments are processed, this is handled by PCI-DSS compliant third-party payment processors, and sayaph receives only a tokenised reference.
sayaph uses the personal data we collect for the following purposes:
| Purpose | Description |
|---|---|
| Account Management | To create, maintain, and administer your sayaph player account, including processing your registration and verifying your identity. |
| Service Delivery | To provide you with access to the games, promotions, and features available on the sayaph Platform. |
| Payment Processing | To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods. |
| KYC & AML Compliance | To verify your identity, age (21+), and source of funds in compliance with PAGCOR requirements and Philippine anti-money laundering laws. |
| Responsible Gaming | To monitor gaming behaviour, enforce responsible gaming tools (deposit limits, self-exclusion), and identify players who may be at risk of problem gambling. |
| Customer Support | To respond to your enquiries, complaints, and support requests in a timely and effective manner. |
| Marketing | To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. |
| Security & Fraud Prevention | To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct on the Platform. |
| Platform Improvement | To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the sayaph Platform. |
| Legal Obligations | To comply with applicable laws, regulations, court orders, and requests from regulatory authorities including PAGCOR and the NPC. |
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, sayaph processes your personal data on the following legal bases:
sayaph does not sell, rent, or trade your personal data to third parties. We may, however, share your personal data with the following categories of recipients where necessary and lawful:
sayaph engages trusted third-party service providers who process personal data on our behalf and under our instructions. These include:
All third-party processors engaged by sayaph are contractually required to process personal data only in accordance with sayaph's instructions and to implement appropriate technical and organisational security measures.
sayaph may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), law enforcement agencies, or other competent authorities where required by law, court order, or regulatory directive.
In the event of a merger, acquisition, restructuring, or sale of all or part of sayaph's business, your personal data may be transferred to the relevant successor entity. sayaph will notify affected players of any such transfer and the privacy implications thereof.
sayaph will never share your personal data with third parties for their own independent marketing or commercial purposes without your explicit prior consent.
sayaph uses cookies and similar tracking technologies on the Platform to enhance your user experience, analyse Platform performance, and deliver relevant content. A cookie is a small text file placed on your device when you visit a website.
sayaph uses the following categories of cookies:
You can manage your cookie preferences through the cookie consent banner displayed when you first visit the sayaph Platform. You may also configure your browser settings to block or delete cookies at any time. Please note that disabling certain cookies may affect the functionality of the Platform.
sayaph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and registration data | Duration of account + 5 years after closure | Legal / Regulatory obligation |
| KYC and identity documents | Duration of account + 5 years after closure | PAGCOR / AMLC requirement |
| Financial transaction records | Duration of account + 5 years after closure | Anti-money laundering law |
| Gaming activity records | Duration of account + 2 years after closure | Legitimate interests / Regulatory |
| Customer support communications | 3 years from date of communication | Legitimate interests |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent / Legal obligation |
| Technical and device data (logs) | Up to 12 months | Legitimate interests (security) |
Upon expiry of the applicable retention period, sayaph will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.
sayaph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
While sayaph takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, sayaph will notify you and the National Privacy Commission in accordance with applicable breach notification requirements.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by sayaph. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14.
You have the right to request a copy of the personal data sayaph holds about you, along with information about how it is being processed.
You have the right to request correction of any inaccurate or incomplete personal data sayaph holds about you.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
You have the right to object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
sayaph will respond to all valid privacy rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly. There is no fee for exercising your privacy rights, unless requests are manifestly unfounded or excessive.
If you are not satisfied with sayaph's response to your privacy rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).
Age Restriction — 21+ Only: The sayaph Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. sayaph does not knowingly collect personal data from individuals under the age of 21.
sayaph employs age verification measures during the registration process to prevent minors from accessing the Platform. If sayaph becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.
If you are a parent or guardian and believe that your child has registered a sayaph account or provided personal data to sayaph, please contact our Data Protection Officer immediately using the contact details in Section 14.
sayaph primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where sayaph engages cloud hosting or technology service providers whose infrastructure is located abroad.
Where personal data is transferred outside the Philippines, sayaph ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. These safeguards may include:
You may request further information about the safeguards in place for international data transfers by contacting our Data Protection Officer.
sayaph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.
Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your personal data — sayaph will provide advance notice to registered players via email or a prominent notice on the Platform prior to the changes taking effect.
Your continued use of the sayaph Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should cease using the Platform and may request the closure of your account.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way sayaph processes your personal data, please contact our Data Protection Officer (DPO):
sayaph Data Protection Officer
Email: [email protected]
General Support: [email protected]
Live Chat: Available 24/7 through the sayaph Platform after logging in to your account.
sayaph aims to respond to all privacy -related enquiries within five (5) business days. For formal privacy rights requests, the response period is as described in Section 10 above.
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government website and offices in Manila.
Under the Philippine Data Privacy Act of 2012, sayaph players are entitled to the following protections at all times.
sayaph will always tell you what personal data we hold about you, why we hold it, and how long we intend to keep it — no hidden processing, ever.
Your data is protected by AES-256 encryption at rest and TLS in transit. sayaph's security team monitors the Platform around the clock for threats.
Marketing communications and non-essential cookies are only sent or placed with your explicit consent. You can withdraw that consent at any time, no questions asked.
The sayaph Platform is strictly for adults aged 21 years and above in accordance with Philippine gaming regulations. By using sayaph, you confirm that you meet this age requirement. sayaph is committed to responsible gaming — if you or someone you know needs support, please visit our Responsible Gaming page for tools and resources.
Now that you know exactly how sayaph protects your personal data, it's time to experience the thrill. Register your account today and enjoy slots, bingo, crash games, and more — all in a safe, secure, and fair gaming environment built for Filipino players.
21+ only | Play responsibly | Terms & Conditions apply