signaph Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how signaph ("the Platform," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("you" or "your") who access or use the signaph website at signaph.net and all associated services, features, and content.

signaph is committed to safeguarding the privacy and personal data of all its users in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). We also comply with applicable PAGCOR regulations concerning the handling of player data.

This Policy applies to all personal data collected through the signaph platform, whether submitted during registration, account use, customer support interactions, or through automated means such as cookies and analytics tools. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, signaph acts as the Personal Information Controller (PIC) with respect to the personal data of its registered users and website visitors.

signaph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at any time using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

signaph collects the following categories of personal data, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — must be 21 years or older)
• Gender
• Nationality and country of residence
• Government-issued identification number (e.g., PhilSys ID, passport, driver's license)
• Email address and mobile number
• Username and encrypted password

3.2 Financial & Transaction Data

• GCash or Maya account number (masked)
• Bank account details (for withdrawal processing)
• Debit card information (card number masked, expiry, billing address)
• Transaction history, deposit and withdrawal records
• Bonus and promotional activity records

3.3 Gaming & Behavioral Data

• Game session history, bet amounts, and outcomes
• Platform navigation and feature usage patterns
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Customer support interaction records

3.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and duration
• Cookie identifiers and analytics data

4. How We Collect Your Data

signaph collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the signaph platform, including IP addresses, device identifiers, session data, and cookie-based analytics.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; and, where applicable, information from PAGCOR or other regulatory bodies for compliance purposes.
• Platform activity: Gaming behavior, transaction records, and responsible gaming tool usage generated through your normal use of the signaph platform.

5. How We Use Your Personal Data

signaph uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your signaph account, including authentication and security.
• Identity verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR regulations and anti-money laundering requirements.
• Payment processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card.
• Platform operation: To deliver gaming services, process bets, calculate winnings, and maintain game integrity.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Regulatory compliance: To meet our obligations under Philippine law, including reporting to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC).
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: To monitor gaming behavior and apply responsible gaming tools where necessary to protect vulnerable players.
• Communications: To send you account-related notifications, security alerts, and — where you have opted in — promotional communications about signaph offers and updates.
• Platform improvement: To analyze usage patterns and improve the signaph platform's features, performance, and user experience.

6. Legal Basis for Processing

signaph processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Consent: Where you have given explicit consent for a specific processing activity, such as receiving marketing communications or enabling optional analytics cookies.
• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game delivery.
• Legal obligation: Processing necessary to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing carried out for signaph's legitimate business interests, such as fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.

7. Data Sharing & Disclosure

signaph does not sell, rent, or trade your personal data. We may share your information only in the following limited circumstances:

7.1 Service Providers

We engage trusted third-party service providers to assist in operating the signaph platform. These include identity verification (KYC) providers, payment processors (GCash, Maya, banking partners), fraud detection services, cloud hosting providers, and customer support platforms. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

7.2 Regulatory & Legal Authorities

signaph may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of signaph's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.

7.4 With Your Consent

signaph may share your data with third parties in circumstances not described above where you have given your explicit prior consent to such sharing.

8. Data Retention

signaph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and anti-money laundering laws.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act of the Philippines.
• KYC documents: Retained for the period required by PAGCOR and AMLC regulations, typically five (5) years from the end of the business relationship.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.
• Marketing preferences: Retained until you withdraw consent or request deletion, subject to legal retention requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

9. Data Security

signaph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the signaph platform is encrypted using TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized signaph personnel on a strict need-to-know basis. All staff with access to personal data undergo data privacy training and are bound by confidentiality obligations.
• Two-factor authentication: signaph supports and encourages the use of two-factor authentication (2FA) for all user accounts to prevent unauthorized access.
• Security monitoring: signaph employs real-time security monitoring, intrusion detection systems, and regular vulnerability assessments to identify and address potential security threats.
• Data breach response: In the event of a personal data breach that poses a risk to your rights and freedoms, signaph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected users without undue delay.

10. Cookies & Tracking Technologies

signaph uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The following types of cookies are used:

• Essential cookies: Strictly necessary for the platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations to provide a personalized experience.
• Analytics cookies: Collect anonymized data about how users interact with the signaph platform to help us improve performance and usability. These are only set with your consent.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the signaph platform. signaph does not use third-party advertising cookies or share cookie data with external marketing platforms.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by signaph:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed, as described in this Policy.
• Right of access: You may request a copy of the personal data signaph holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond within fifteen (15) business days of receiving your request, as required by the Data Privacy Act.

12. Children's Privacy

The signaph platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online gaming. signaph does not knowingly collect personal data from individuals under the age of 21.

If signaph becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all associated data will be deleted, and any funds will be returned to the verified payment source. If you believe a minor has registered on the signaph platform, please notify us immediately at [email protected].

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. signaph supports the responsible use of such tools as part of its commitment to child protection.

13. Third-Party Links

The signaph platform may contain references to third-party services such as payment processors (GCash, Maya, banking partners) that are necessary for platform operation. While signaph takes care to work only with reputable service providers, we are not responsible for the privacy practices of third-party platforms.

When you interact with a third-party payment service, you will be subject to that service's own privacy policy and terms of use. signaph encourages you to review the privacy policies of any third-party services you use in connection with your signaph account.

14. Changes to This Privacy Policy

signaph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered users via email or through a prominent notice on the signaph platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the signaph platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Policy periodically to stay informed about how signaph protects your personal data.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by signaph, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.