Why Sayaph Takes Data Privacy Seriously for Every Filipino Player
When you sign up at Sayaph, you trust us with some of your personal information. That trust is something we take seriously – not just because Philippine law requires it, but because it's the right thing to do for every Kabayan who bets on this platform.
This Privacy Policy covers every service Sayaph provides, from sports betting and esports to casino games and slot titles. Whether you're depositing through GCash or watching live odds on your phone during an MPL match, this policy applies to how your data is handled throughout that experience.
Sayaph complies with the Republic Act 10173, also known as the Data Privacy Act of 2012 of the Philippines, along with its Implementing Rules and Regulations. Your data is processed lawfully, fairly, and only for the purposes described in this document.
What Data Sayaph Collects and Why
Here's a quick summary of the six main categories of data Sayaph handles. Full details are in the policy sections below.
Identity Data
Your name, date of birth, and government ID details. Collected during registration and KYC verification to confirm you are who you say you are and that you meet the age requirement.
Contact Data
Your mobile number and email address. Used to send account notifications, withdrawal confirmations, and – only if you opt in – promotional communications about Sayaph offers.
Financial Data
Transaction history, deposit and withdrawal records, and the payment channel used (e.g., GCash, Maya, BDO). Stored for regulatory compliance and fraud prevention. Sayaph does not store full card numbers.
Gaming Activity Data
Your betting history, favourite markets, session duration, and wagering patterns. Used to personalise your experience, detect problem gambling signals, and ensure platform integrity.
Device & Technical Data
IP address, browser type, device model, and operating system. Collected automatically when you access Sayaph. Used for security monitoring, fraud detection, and platform optimisation.
Communications Data
Records of your support chat sessions and email exchanges with the Sayaph team. Kept for quality assurance, dispute resolution, and to give you a better experience if you contact us again.
What You Can Ask Sayaph to Do With Your Data
Under the Data Privacy Act of 2012, every Filipino player has specific rights regarding their personal data. Here's what you're entitled to and how to exercise each right.
Right to Access
Request a copy of all personal data Sayaph holds about you at any time. We will provide it within 15 business days.
Right to Correction
Ask us to correct inaccurate or outdated information on your account. Corrections to identity data may require document verification.
Right to Erasure
Request deletion of your data when it is no longer necessary. Some data must be retained for regulatory periods even after deletion requests.
Right to Object
Object to processing your data for marketing purposes. Opting out of promotional emails is available directly in your account settings.
Right to Portability
Receive your personal data in a structured, machine-readable format so you can transfer it to another service provider if you choose.
Right to Complain
If you believe Sayaph has mishandled your data, you have the right to file a complaint with the National Privacy Commission of the Philippines.
Sayaph Full Privacy Policy
This Privacy Policy explains how Sayaph collects, processes, stores, and protects your personal data when you use any service available at sayaph.best. By creating an account and using the platform, you acknowledge that you have read and understood this policy.
1. Data Controller
Sayaph is the data controller responsible for the personal information you provide when using this platform. As the data controller, Sayaph determines the purposes and means by which your personal data is processed. All data processing activities are conducted in compliance with the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations.
If you have any questions about how Sayaph handles your personal data, you may contact our designated Data Protection Officer at privacy@sayaph.best. We aim to respond to all privacy-related inquiries within five business days.
2. Personal Data We Collect
Sayaph collects the minimum amount of personal data necessary to operate the platform safely and legally. The categories of data we process include:
- Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., PhilSys number, passport number, UMID number).
- Contact Data: Mobile phone number, email address, and – for KYC purposes – residential address.
- Financial Data: Deposit and withdrawal transaction records, GCash or Maya account references, bank account details for bank transfer withdrawals, and Visa/Mastercard last-four-digit references. Sayaph does not store full card numbers or CVV codes.
- Gaming and Betting Data: Bet placement history, wagering amounts, game preferences, bonus usage, and session duration records.
- Technical and Device Data: IP address, device type and model, operating system, browser version, and session timestamps.
- Communications Data: Live chat transcripts, email exchanges, and any other correspondence you initiate with the Sayaph support team.
- Verification Data: Copies of identification documents, selfies with ID, and proof of address documents submitted during the KYC process.
3. How We Collect Your Data
Sayaph collects your personal data through the following channels:
- Direct submission: When you register an account, complete KYC verification, make a deposit, request a withdrawal, contact support, or participate in a promotion.
- Automated collection: When you browse or use the Sayaph platform, certain technical data is automatically logged by our servers and analytics systems. This includes your IP address, device information, and browsing behaviour within the platform.
- Payment processors: When you use GCash, Maya, a bank transfer, or a card payment, the relevant payment provider shares transaction confirmation data with Sayaph to process your deposit or withdrawal.
- Identity verification services: Sayaph may use third-party KYC service providers to verify the authenticity of identification documents you submit. These providers process your data under strict contractual data processing agreements.
4. How Sayaph Uses Your Data
We only use your personal data for specific, legitimate purposes directly related to operating the Sayaph platform and serving you as a player. These purposes are:
- Creating and managing your Sayaph account, including verifying your identity and age.
- Processing deposits, settling bets, and executing withdrawals to your chosen payment method.
- Detecting and preventing fraud, money laundering, and other prohibited activities on the platform.
- Complying with our obligations under Philippine gaming regulations and anti-money-laundering laws (Republic Act 9160 and its amendments).
- Providing customer support and resolving disputes or complaints.
- Monitoring gaming activity to identify responsible gaming concerns and apply appropriate safeguards.
- Improving the platform based on usage patterns and player feedback, including A/B testing of new features.
- Sending transactional communications such as deposit confirmations, withdrawal updates, and account security alerts.
- Sending promotional communications about Sayaph offers, bonuses, and events – only if you have explicitly opted in to receive these.
5. Legal Basis for Processing
Sayaph processes your personal data under one or more of the following legal bases as defined by the Data Privacy Act of 2012:
- Contractual necessity: Processing required to perform the contract between you and Sayaph – including account creation, bet settlement, and payment processing.
- Legal obligation: Processing required to comply with Philippine laws, including gaming regulations, anti-money-laundering requirements, and tax reporting obligations.
- Legitimate interests: Processing necessary for Sayaph's legitimate business interests, such as fraud prevention, platform security, and analytics – provided these interests do not override your fundamental rights.
- Consent: Where required by law or where Sayaph has requested your consent for a specific type of processing, such as receiving marketing communications. You may withdraw consent at any time.
6. Data Sharing and Third Parties
Sayaph does not sell your personal data. We share your data only in the following limited circumstances:
- Payment processors: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, InstaPay/PESONet, and card networks require transaction data to process your deposits and withdrawals. Each processor operates under their own privacy policy and is bound by applicable Philippine financial regulations.
- KYC and identity verification providers: We may share identity documents with licensed third-party verification services to confirm your identity. These providers act as data processors under contract and cannot use your data for their own purposes.
- Regulatory authorities: Sayaph is required by law to share certain data with Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), and law enforcement agencies when legally required to do so.
- IT and infrastructure providers: Cloud hosting, security monitoring, and database management partners may process data on our behalf under strict data processing agreements that prohibit independent use.
- Professional advisors: Lawyers, auditors, and insurance providers may have access to limited personal data where necessary in the course of their professional services to Sayaph.
Any third party that accesses your personal data through Sayaph is required to maintain appropriate security standards and process your data only for the purposes specified by Sayaph.
7. Data Retention
Sayaph retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements.
Transaction Records: Retained for a minimum of 10 years as required by AMLC regulations.
KYC Documents: Retained for the period of account activity plus 5 years post-closure.
Marketing Preferences: Retained until you withdraw consent or request deletion, whichever comes first.
When personal data is no longer required and no legal obligation requires its retention, Sayaph will securely delete or anonymise it so it can no longer be linked to your identity.
8. Data Security
Sayaph implements technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the Sayaph platform.
- Encrypted storage for sensitive data fields including identification numbers and financial references.
- Access controls that limit which Sayaph staff can view sensitive player data, based on their role and need-to-know basis.
- Regular security audits and penetration testing of the platform infrastructure.
- Two-factor authentication options for player accounts to prevent unauthorised access.
- Automated fraud detection systems that flag unusual login attempts or transaction patterns for review.
In the event of a data breach that is likely to result in risk to your rights and freedoms, Sayaph will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.
9. Cookies and Tracking
Sayaph uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. Here's what each type of cookie does:
- Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in. You cannot opt out of these without stopping use of the platform.
- Functional cookies: Remember your preferences such as language settings and display options to improve your experience across sessions.
- Analytics cookies: Collect anonymised data about how players navigate the platform, which pages are visited most, and where issues occur. This helps Sayaph improve the product.
- Security cookies: Help detect and prevent fraudulent activity, bot traffic, and suspicious login attempts.
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality. Sayaph does not use third-party advertising cookies or behavioural tracking for the purpose of targeted advertising.
10. Minors
Sayaph's services are strictly for adults aged 21 and above. Sayaph does not knowingly collect personal data from anyone under the age of 21. If you believe a minor has registered an account, please contact us immediately at privacy@sayaph.best. Upon confirmation, we will close the account and delete all associated personal data.
11. Exercising Your Privacy Rights
To exercise any of your rights under the Data Privacy Act of 2012, contact the Sayaph Data Protection Officer by email at privacy@sayaph.best. Please include your registered email address and a brief description of your request.
Sayaph will acknowledge your request within 3 business days and will complete the action or provide a substantive response within 15 business days. In complex cases, this period may be extended by an additional 30 days with notice to you.
Sayaph may request additional identification verification before processing certain requests to protect against unauthorised access to your data.
12. Updates to This Privacy Policy
Sayaph may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or improvements to the platform. When material changes are made, we will notify registered players by email and display a prominent notice on the platform for at least 7 days before the updated policy takes effect.
The effective date at the top of this document will always reflect the most recent revision. We encourage you to review this policy periodically. Continued use of Sayaph after the effective date of any changes constitutes your acceptance of the revised policy.
13. Contact and Complaints
For any privacy-related questions, data access requests, or concerns about how Sayaph handles your personal information:
Email: privacy@sayaph.best
General Support: support@sayaph.best
Response Time: Within 3–5 business days for privacy requests.
If you are not satisfied with Sayaph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC can be reached through their official government channels. Sayaph cooperates fully with NPC investigations.
Privacy Is Not an Afterthought at Sayaph – It's Built In
A lot of online platforms write a privacy policy because they have to, then forget about it. Sayaph approaches it differently. Our data practices were designed from the start with Filipino players in mind – because data privacy is a genuine concern for anyone transacting online in the Philippines, and because you deserve a platform that respects that.
We store only what's necessary. We share only with who needs it. We protect everything with real technical safeguards, not just policy language. And when you ask us about your data, we answer honestly and promptly.
That's not a pitch – it's how Sayaph was built. If you ever feel that anything described in this policy wasn't followed, our Data Protection Officer is ready to hear from you and make it right.