Privacy Policy

1. Introduction

sy888 ("we," "us," or "our") is committed to protecting the privacy and personal data of all users of the sy888 online gaming platform ("Platform"). This Privacy Policy ("Policy") describes how sy888 collects, uses, discloses, stores, and protects personal information in connection with your use of the Platform, including our website at sy888.org, our mobile applications, and all related services.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "PDPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC). sy888 acts as the personal information controller in respect of the data described in this Policy.

We encourage all sy888 players — whether you are based in Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the Philippines — to read this Policy carefully so you fully understand how your personal information is handled. If you have any questions after reading this Policy, please contact us using the details provided in Section 12.

2. Personal Data We Collect

sy888 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number and email address
• Username and encrypted password
• Residential address (province, city, barangay)

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, driver's license, SSS/GSIS ID, PhilSys National ID)
• Proof of address documentation
• Source of funds documentation where required by PAGCOR anti-money laundering rules
• Selfie or liveness verification images where required

2.3 Financial and Transaction Data

• GCash or PayMaya account numbers linked to your sy888 account
• BDO, BPI, Metrobank, or UnionBank account details used for deposits or withdrawals
• Transaction history, including deposit amounts, withdrawal requests, and gaming activity records
• Note: sy888 does not store full payment card numbers on its servers

2.4 Technical and Usage Data

• IP address and approximate geolocation at the time of login
• Device type, operating system, and browser information
• Session duration, pages visited, and features used within the Platform
• Cookies and similar tracking technologies (see Section 6)

2.5 Communications Data

• Records of your communications with sy888 customer support, including live chat transcripts, email correspondence, and support ticket history
• Responses to surveys, promotions, or feedback requests

2.6 Responsible Gaming Data

• Self-exclusion requests and cooling-off period settings
• Deposit, loss, and session time limits you have configured
• Any responsible gaming assessments or interventions conducted by sy888

3. How We Use Your Personal Data

sy888 uses the personal data we collect for the following purposes:

sy888 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, sy888 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to provide you with access to the sy888 Platform, process your transactions, and manage your account.
• Legal obligation: Processing is required to comply with our obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the PDPA itself.
• Legitimate interests: Processing is necessary for sy888's legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending you marketing communications or using non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Disclosure

sy888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

5.1 Service Providers

sy888 engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, BDO, BPI, Metrobank, UnionBank), identity verification providers, cloud hosting providers, and customer support platform operators. These providers are contractually bound to process your data only on sy888's instructions and in accordance with applicable data protection law.

5.2 Regulatory and Law Enforcement Authorities

sy888 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or regulatory directive. sy888 will notify affected players of such disclosures where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of sy888's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

5.4 With Your Consent

sy888 may share your personal data with other third parties where you have given your explicit prior consent to such sharing.

6. Cookies and Tracking Technologies

sy888 uses cookies, web beacons, pixel tags, and similar tracking technologies on the Platform. These technologies help us deliver a functional, personalized, and secure gaming experience.

6.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences, such as your preferred language, display settings, and responsible gaming limits. Disabling these may affect your experience.
• Analytics cookies: Help us understand how players use the Platform — which games are most popular, where players encounter difficulties, and how we can improve. Data collected is aggregated and anonymized where possible.
• Marketing cookies: Used to deliver relevant promotional content to you on the sy888 Platform. These are only set with your consent.

6.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the sy888 Platform. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

7. Data Retention

sy888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by the AMLC and BIR regulations.
• KYC documentation: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory directive or ongoing investigation.
• Customer support communications: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it is anonymized or deleted.
• Marketing consent records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, sy888 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

8. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by sy888:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed. This Privacy Policy fulfils that obligation.
• Right of access: You have the right to request a copy of the personal data sy888 holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly through your sy888 account dashboard.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on sy888's legitimate interests.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another personal information controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe sy888 has violated your data privacy rights.

To exercise any of the above rights, please contact the sy888 Data Privacy Officer using the contact details in Section 12. We will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

9. Data Security

sy888 implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the sy888 Platform.
• Encryption of sensitive data at rest, including passwords (stored as salted cryptographic hashes) and KYC documentation.
• Role-based access controls ensuring that sy888 staff can only access personal data that is necessary for their specific job function.
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform infrastructure.
• Multi-factor authentication (MFA) requirements for administrative access to systems containing personal data.
• Secure data centers with physical access controls, CCTV monitoring, and environmental safeguards.
• Staff training on data privacy obligations and information security best practices.

While sy888 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your sy888 account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

10. Children's Privacy and Age Restriction

The sy888 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR regulations governing online gaming in the Philippines. sy888 does not knowingly collect personal data from any person under the age of 21.

During registration, sy888 requires all applicants to confirm their date of birth and to submit government-issued identification as part of the KYC verification process. Any account found to be held by a person under 21 years of age will be immediately terminated, all associated balances will be forfeited, and any personal data collected will be securely deleted in accordance with our data disposal procedures.

If you are a parent or guardian and believe that a minor has registered an account on sy888 without your knowledge, please contact us immediately at the details provided in Section 12 so we can take prompt action.

11. Updates to This Privacy Policy

sy888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. When we make material changes to this Policy, we will notify registered players by posting a prominent notice on the sy888 Platform and, where appropriate, by sending a notification to your registered email address or mobile number.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the sy888 Platform following the posting of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how sy888 protects your personal data.

12. Contact Our Data Privacy Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way sy888 handles your personal data, please contact our designated Data Privacy Officer (DPO):

sy888 Data Privacy Officer
Email: [email protected]

Please include "Data Privacy Request" in the subject line of your email, along with your registered username and a clear description of your request. We will acknowledge receipt of your request within three (3) business days and provide a full response within fifteen (15) business days.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. For more information about your rights and how to file a complaint, please visit the NPC's official resources.

For responsible gaming support, please visit our Responsible Gaming page. For our full platform terms, see our Terms & Conditions.