Your privacy is a priority at sugarph. This policy explains exactly what data we collect, why we collect it, and how we keep it safe for every Filipino player on our platform.
At sugarph, we understand that trust is the foundation of everything we do. When you create an account, make a deposit, or simply browse our platform, you share personal information with us. This Privacy Policy explains in clear, straightforward terms how sugarph collects, uses, stores, and protects that information. We are committed to full compliance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and all related regulations issued by the National Privacy Commission (NPC).
Six core principles guide how sugarph handles your personal data every single day.
sugarph uses industry-standard SSL/TLS encryption for all data in transit and AES-256 encryption for data at rest. Your personal and financial information is protected by the same technology trusted by Philippine banks.
sugarph will never sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data belongs to you, and we treat it that way - full stop.
Under the Philippine Data Privacy Act, you have the right to access, correct, delete, and port your data. sugarph makes exercising these rights straightforward - no bureaucratic runaround, no unnecessary delays.
We only collect the personal data we genuinely need to provide our services, comply with legal obligations, and keep your account secure. We do not collect data speculatively or "just in case."
This policy is written in plain language so every Filipino player can understand it. We tell you exactly what we collect, why we collect it, who we share it with, and how long we keep it. No hidden clauses.
sugarph is fully compliant with Republic Act No. 10173 (Data Privacy Act of 2012) and all NPC circulars and advisories. We maintain a registered Data Protection Officer and conduct regular privacy impact assessments.
This Privacy Policy applies to all personal data collected by sugarph through the sugarph.app website, any associated mobile web application, customer support channels, and any other services operated by sugarph (collectively, the "Platform"). It applies to all registered users, prospective users who browse the Platform without registering, and individuals who contact sugarph through any communication channel.
This Policy should be read together with sugarph's Terms and Conditions, which govern your use of the Platform. By using sugarph, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
When you register for a sugarph account, make deposits or withdrawals, contact customer support, or participate in promotions, you provide us with personal information. This includes:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number | Account verification, KYC compliance, age verification (21+) |
| Contact Data | Email address, mobile number, residential address | Account communication, transaction notifications, support |
| Financial Data | GCash number, PayMaya account, BPI/BDO/Metrobank account details | Processing deposits and withdrawals, AML compliance |
| Account Data | Username, password (hashed), account preferences | Account access and security |
| Support Data | Chat transcripts, email correspondence, complaint records | Resolving disputes, improving service quality |
When you use the sugarph Platform, we automatically collect certain technical and behavioral data, including: IP address and approximate geographic location; device type, operating system, and browser version; pages visited, time spent on each page, and navigation paths; game sessions played, bets placed, and gaming history; login timestamps and session duration; and referral source (how you arrived at sugarph).
This data is collected through cookies, web beacons, server logs, and similar tracking technologies. It helps us maintain platform security, detect fraud, improve user experience, and comply with regulatory reporting requirements.
sugarph may receive information about you from third-party identity verification services, payment processors, fraud prevention agencies, and publicly available sources. This information is used solely to verify your identity, process payments, and comply with anti-money laundering obligations.
sugarph uses your personal data for the following purposes:
Account Management: To create and maintain your sugarph account, verify your identity, process your transactions, and provide you with access to our gaming services.
Payment Processing: To process deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment methods. Financial data is processed in accordance with PCI-DSS standards.
Legal and Regulatory Compliance: To comply with the Philippine Anti-Money Laundering Act (AMLA), PAGCOR regulations, the Data Privacy Act of 2012, and other applicable laws. This includes Know Your Customer (KYC) verification and suspicious transaction reporting.
Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct on the sugarph platform.
Customer Support: To respond to your inquiries, resolve disputes, and improve our support services based on interaction history.
Platform Improvement: To analyze usage patterns, identify technical issues, and develop new features that better serve Filipino players.
Marketing Communications: To send you promotional offers, bonus notifications, and platform updates - but only if you have opted in to receive such communications. You may opt out at any time.
Responsible Gaming: To monitor gaming behavior and identify patterns that may indicate problem gambling, enabling us to provide appropriate support and intervention tools.
sugarph processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
Contractual Necessity: Processing required to fulfill our obligations under the Terms and Conditions you agreed to when registering, including account management, payment processing, and game provision.
Legal Obligation: Processing required to comply with Philippine laws and regulations, including AMLA, PAGCOR requirements, tax obligations, and NPC directives.
Legitimate Interests: Processing necessary for sugarph's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
Consent: Processing based on your explicit consent, such as receiving marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.
sugarph shares personal data with carefully selected third-party service providers who assist in operating our platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification services, cloud hosting providers, customer support software providers, and fraud detection services. All service providers are contractually bound to process your data only on sugarph's instructions and in accordance with applicable data protection laws.
sugarph may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and courts when required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or part of sugarph's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new entity before your data is transferred.
sugarph does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own commercial or marketing purposes. This is an absolute commitment, not subject to exceptions.
sugarph uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our services.
Essential Cookies: Required for the Platform to function. These cannot be disabled as they are necessary for account login, session management, and security features.
Functional Cookies: Remember your preferences such as language settings, game preferences, and display options to provide a personalized experience.
Analytics Cookies: Help us understand how visitors interact with sugarph by collecting anonymous usage statistics. This data is used to improve platform performance and user experience.
Marketing Cookies: Track your activity across websites to deliver relevant promotional content. These cookies are only set with your consent and can be disabled through your browser settings.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit your ability to use some features of the sugarph platform.
sugarph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.
Active Accounts: Personal data is retained for the duration of your active account plus any applicable legal retention period.
Closed Accounts: After account closure, we retain identity verification records, transaction history, and compliance-related data for seven (7) years as required by Philippine anti-money laundering regulations and tax laws.
Marketing Data: If you opt out of marketing communications, we retain only the minimum data necessary to honor your opt-out preference and prevent future contact.
Technical Logs: Server logs and security-related data are typically retained for ninety (90) days unless required for ongoing investigations or legal proceedings.
sugarph implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:
Encryption: All data transmitted between your device and sugarph servers is protected by SSL/TLS encryption. Sensitive data at rest is encrypted using AES-256 encryption.
Access Controls: Personal data is accessible only to authorized sugarph personnel who require it to perform their job functions. All access is logged and monitored.
Password Security: User passwords are hashed using industry-standard algorithms and are never stored in plain text. We enforce strong password requirements and offer two-factor authentication.
Network Security: Our infrastructure is protected by firewalls, intrusion detection systems, and regular security audits conducted by independent third parties.
Incident Response: sugarph maintains a data breach response plan. In the event of a security incident affecting your personal data, we will notify you and the National Privacy Commission within seventy-two (72) hours as required by law.
While we implement robust security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify sugarph of any suspected unauthorized access.
Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data:
Right to Access: You may request a copy of all personal data sugarph holds about you. We will provide this information in a commonly used electronic format within fifteen (15) days of your request.
Right to Rectification: You may request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.
Right to Erasure: You may request deletion of your personal data, subject to legal retention requirements. Data required for compliance with AMLA, tax laws, or ongoing legal proceedings cannot be deleted until retention obligations expire.
Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests by providing specific reasons.
Right to Data Portability: You may request that sugarph transfer your personal data to another service provider in a structured, commonly used, machine-readable format where technically feasible.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted before withdrawal.
To exercise any of these rights, contact our Data Protection Officer using the contact information provided in Section 12. We will respond to all requests within fifteen (15) days. If your request is complex or we receive multiple requests from you, we may extend this period by an additional fifteen (15) days with notice.
sugarph services are strictly intended for individuals aged twenty-one (21) years and older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information and close the associated account.
Parents or guardians who believe their child has provided personal data to sugarph should contact our Data Protection Officer immediately. We will investigate and take appropriate action within seventy-two (72) hours.
sugarph reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated to you via email or prominent notice on the Platform at least thirty (30) days before taking effect.
Your continued use of sugarph after the effective date of any changes constitutes acceptance of the updated Privacy Policy. If you do not agree to the changes, you must cease using the Platform and may request account closure.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
sugarph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and handling data subject requests. If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how your personal data is processed, please contact:
Data Protection Officer
sugarph
Email: [email protected]
Subject Line: "Data Privacy Request"
For general customer support inquiries unrelated to data privacy, please contact [email protected] or use the live chat feature available 24/7 on the Platform.
If you are not satisfied with how sugarph has handled your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines at [email protected] or through their official website.
This Privacy Policy is effective as of May 7, 2026. Last reviewed and updated: May 7, 2026.
sugarph is committed to protecting your personal data and respecting your privacy rights. Join thousands of Filipino players who trust us with their information.
Explore sugarph