sureph Privacy Policy

1. Information We Collect

sureph collects various types of personal information to provide, maintain, and improve our online gaming services, comply with legal and regulatory requirements, and protect the security and integrity of our platform. The information we collect falls into the following categories:

1.1 Information You Provide Directly

When you register for a sureph account, you provide us with personal information including:

• Identity Information: Full legal name as it appears on government-issued identification, date of birth, nationality, and gender.
• Contact Information: Email address, mobile phone number, residential address including street, barangay, city/municipality, province, and postal code.
• Account Credentials: Username, password (stored in encrypted format), and security questions/answers for account recovery purposes.
• Identification Documents: Copies or photographs of Philippine government-issued ID such as passport, driver's license, UMID, SSS ID, postal ID, voter's ID, or PRC ID for identity verification and compliance with PAGCOR's Know Your Customer (KYC) requirements.
• Financial Information: Payment method details including GCash mobile number, Maya account information, bank account numbers, and transaction history for deposit and withdrawal processing.
• Communications: Content of messages you send to sureph customer support via live chat, email, or phone, including any attachments or supporting documentation.

1.2 Information Collected Automatically

When you access and use the sureph platform, we automatically collect certain technical and usage information:

• Device Information: Device type (smartphone, tablet, desktop), operating system and version, browser type and version, screen resolution, device manufacturer and model.
• Connection Information: IP address, internet service provider, geographic location (country, region, city level only), and network connection type (WiFi, mobile data).
• Usage Data: Pages visited, games played, betting history, deposit and withdrawal activity, login timestamps, session duration, click patterns, and navigation paths through the sureph website.
• Cookies and Similar Technologies: Session identifiers, preference settings, authentication tokens, and tracking cookies that help us recognize your device and maintain your logged-in state.
• Performance Data: Game loading times, technical errors encountered, feature usage patterns, and platform performance metrics.

1.3 Information from Third Parties

We may receive information about you from third-party sources including payment processors (GCash, Maya, banking partners) who confirm transaction details and account verification status, identity verification services that validate your government-issued identification documents, fraud prevention services that assess account activity for suspicious patterns, and credit reference agencies where applicable for risk assessment purposes. All third-party data collection complies with applicable privacy laws and contractual obligations.

2. How We Use Your Information

sureph processes your personal information for specific, legitimate purposes that are necessary for providing our gaming services, complying with legal obligations, and protecting our platform and users. We use your information for the following purposes:

2.1 Service Provision and Account Management

• Creating, maintaining, and managing your sureph player account and profile settings
• Processing your deposits, withdrawals, and other financial transactions securely
• Providing access to casino games, live dealer tables, sports betting markets, and other gaming services
• Tracking your gaming activity, account balance, bonus status, and wagering requirements
• Personalizing your gaming experience with recommended games and customized promotions
• Maintaining session persistence and remembering your preferences across visits
• Facilitating customer support interactions and resolving account-related inquiries

2.2 Legal and Regulatory Compliance

• Verifying your age to ensure you are 21 years or older as required by Philippine gaming laws
• Confirming your identity through KYC procedures mandated by PAGCOR regulations
• Complying with anti-money laundering (AML) requirements under Philippine law including transaction monitoring and suspicious activity reporting
• Maintaining records of gaming transactions and account activity for regulatory audits
• Responding to lawful requests from Philippine law enforcement, PAGCOR, and other government authorities
• Enforcing responsible gaming policies and implementing self-exclusion or cooling-off measures
• Detecting and preventing underage gambling, fraud, collusion, money laundering, and other illegal activities

2.3 Security and Fraud Prevention

• Monitoring account activity for unusual patterns that may indicate unauthorized access or fraudulent behavior
• Detecting multiple accounts, bonus abuse, chip dumping, and other forms of gaming manipulation
• Protecting the integrity of game outcomes and ensuring fair play for all sureph players
• Implementing technical security measures including firewalls, encryption, and intrusion detection
• Conducting investigations into suspected violations of our Terms & Conditions

2.4 Marketing and Communications

• Sending you promotional offers, bonus announcements, and loyalty program updates via email or SMS (with your consent)
• Informing you about new game releases, platform features, and service improvements
• Conducting player surveys to gather feedback and improve sureph services
• Delivering targeted advertising based on your gaming preferences and activity history

You may opt out of marketing communications at any time through your account settings or by following the unsubscribe instructions in our emails. However, you will continue to receive essential account-related and transactional communications regardless of marketing preferences.

2.5 Platform Improvement and Analytics

• Analyzing aggregated user behavior to identify popular games, features, and improvement opportunities
• Testing new features, game layouts, and interface designs to enhance user experience
• Measuring platform performance, load times, and technical reliability
• Conducting statistical research and trend analysis using anonymized data

3. Legal Basis for Processing

Under the Data Privacy Act of 2012, sureph must have a lawful basis for processing your personal information. We rely on the following legal grounds:

3.1 Consent

When you create a sureph account, accept these terms, and check the consent boxes during registration, you provide your explicit, informed consent for us to process your personal information as described in this Privacy Policy. You may withdraw consent for certain processing activities (such as marketing communications) at any time, though this may affect your ability to use some sureph features.

3.2 Contractual Necessity

Processing your personal information is necessary for sureph to perform our contractual obligations to you, including providing access to gaming services, processing transactions, maintaining your account, enforcing terms and conditions, and resolving disputes. Without this processing, we cannot deliver the services you have requested.

3.3 Legal Obligation

Philippine law requires sureph to process certain personal information to comply with PAGCOR regulations, anti-money laundering requirements, age verification mandates, tax reporting obligations, and lawful requests from regulatory authorities and law enforcement. This processing is mandatory and does not require your separate consent.

3.4 Legitimate Interests

sureph has legitimate business interests in processing your information for fraud prevention, security monitoring, platform improvement, customer support quality assurance, and analytics purposes. We balance these legitimate interests against your privacy rights and implement appropriate safeguards to protect your data.

4. Data Sharing and Disclosure

sureph does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we do share your information with carefully selected partners and service providers in limited circumstances necessary for operating our platform and complying with legal obligations:

4.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya, and banking partners who process your deposits and withdrawals receive transaction details and account verification information necessary to complete financial transactions securely.
• Game Providers: Software developers who supply casino games, live dealer platforms, and sports betting solutions receive limited information about your gaming activity to deliver game content and track outcomes.
• Identity Verification Services: Third-party KYC providers who validate your government-issued identification documents and confirm your identity for regulatory compliance purposes.
• Cloud Hosting Providers: Technology companies that provide secure server infrastructure and data storage for the sureph platform.
• Customer Support Tools: Software platforms that enable our support team to manage and respond to your inquiries efficiently.
• Marketing Services: Email service providers and SMS platforms that deliver promotional communications and account notifications on our behalf.
• Analytics Providers: Services that help us understand platform usage patterns, performance metrics, and user behavior through anonymized data analysis.

All service providers are bound by strict confidentiality obligations and are contractually required to process your information only for the specific purposes we authorize, in compliance with applicable privacy laws and security standards.

4.2 Regulatory and Legal Disclosures

sureph may disclose your personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), Philippine National Police, National Bureau of Investigation, Bureau of Internal Revenue, and other Philippine government authorities when required by law, court order, subpoena, or regulatory mandate. We may also disclose information to comply with PAGCOR audit requirements, respond to legal proceedings, enforce our Terms & Conditions, protect our legal rights, or investigate suspected fraud, illegal activity, or security threats.

4.3 Business Transfers

If sureph undergoes a merger, acquisition, corporate restructuring, or sale of all or substantially all of our assets, your personal information may be transferred to the acquiring entity or successor company. In such c ases, we will notify you through email or a prominent notice on the sureph website and ensure that the receiving party continues to protect your information in accordance with this Privacy Policy and applicable data protection laws.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you with business partners, advertisers, researchers, or the public for industry analysis, demographic profiling, marketing research, and other legitimate business purposes. This data does not constitute personal information under the Data Privacy Act.

5. Data Security and Protection

sureph implements comprehensive technical, physical, and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Our security practices include:

5.1 Technical Security Measures

• Encryption: All data transmitted between your device and sureph servers is protected using industry-standard SSL/TLS encryption protocols. Sensitive information including passwords and payment details is encrypted both in transit and at rest using advanced encryption algorithms.
• Secure Infrastructure: sureph servers are hosted in secure, professionally managed data centers with redundant power systems, climate control, fire suppression, and 24/7 physical security monitoring.
• Firewalls and Intrusion Detection: Multi-layered firewall systems and real-time intrusion detection software monitor and block unauthorized access attempts and malicious traffic.
• Regular Security Audits: Independent security professionals conduct periodic penetration testing and vulnerability assessments to identify and remediate potential weaknesses.
• Access Controls: Strict role-based access controls ensure that sureph employees and contractors can only access personal information necessary for their specific job functions.

5.2 Organizational Security Practices

• All sureph staff members with access to personal information undergo background checks, sign confidentiality agreements, and receive regular data protection training.
• We maintain detailed audit logs of all access to and modifications of personal information for accountability and incident investigation purposes.
• Security incidents and data breaches are managed through a documented incident response plan that includes containment, investigation, notification, and remediation procedures.
• We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal retention requirements.

While sureph employs robust security measures, no system is completely secure. You also play a critical role in protecting your account by maintaining the confidentiality of your login credentials, enabling two-factor authentication, using strong unique passwords, avoiding public WiFi for account access, logging out after each session, and promptly reporting any suspicious activity or unauthorized access to sureph customer support.

6. Your Privacy Rights

Under the Data Privacy Act of 2012, you have specific rights regarding your personal information. sureph respects these rights and provides mechanisms for you to exercise them:

6.1 Right to Access and Portability

You have the right to request a copy of the personal information sureph holds about you. You can access most of your information directly through your account dashboard. For a comprehensive data export in a structured, commonly used format, contact our Data Protection Officer. We will provide the requested information within thirty (30) days of verification of your identity.

6.2 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update your contact information, address, and certain profile details directly through your account settings. For changes to identity information that require verification (such as legal name or date of birth), contact customer support with supporting documentation.

6.3 Right to Erasure

You may request deletion of your personal information in certain circumstances, including when the information is no longer necessary for the purposes for which it was collected, you withdraw consent and no other legal basis for processing exists, or you object to processing and there are no overriding legitimate grounds. However, we may retain certain information where required by law, for regulatory compliance (PAGCOR record-keeping requirements), to resolve disputes, enforce our Terms & Conditions, or for legitimate business purposes such as fraud prevention.

6.4 Right to Object and Restrict Processing

You have the right to object to certain types of data processing, particularly for direct marketing purposes. You can opt out of promotional communications at any time. You may also request restriction of processing in specific situations, such as when you contest the accuracy of data or object to processing while we verify legitimate grounds.

6.5 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. However, withdrawal does not affect the lawfulness of processing that occurred before withdrawal, and certain processing may continue based on other legal grounds such as contractual necessity or legal obligation.

6.6 Right to Lodge a Complaint

If you believe sureph has violated your privacy rights or mishandled your personal information, you have the right to file a complaint with the National Privacy Commission of the Philippines. You can reach the NPC through their website or by mail at 5th Floor, Philippine International Convention Center, Vicente Sotto Street, Pasay City, Metro Manila, Philippines.

To exercise any of these rights, contact sureph customer support or email our Data Protection Officer at [email protected]. We will respond to verified requests within the timeframes required by Philippine law, typically within thirty (30) days.

7. Cookies and Tracking Technologies

sureph uses cookies, web beacons, and similar tracking technologies to enhance your experience, maintain security, and analyze platform usage. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

7.1 Types of Cookies We Use

• Essential Cookies: Necessary for basic platform functionality including account login, session management, security authentication, and fraud prevention. These cookies cannot be disabled without severely limiting platform usability.
• Performance Cookies: Collect anonymous information about how visitors use sureph, which pages are most popular, error messages encountered, and loading times. This helps us improve platform performance and user experience.
• Functionality Cookies: Remember your preferences such as language selection, game filters, display settings, and notification preferences to provide a personalized experience across visits.
• Marketing Cookies: Track your activity across sessions to deliver relevant promotional offers, measure advertising effectiveness, and prevent showing you the same promotion repeatedly. You can disable marketing cookies through your account settings.

7.2 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are being sent. However, disabling essential cookies will prevent you from using certain sureph features including account login and transaction processing. Instructions for managing cookies in popular browsers are available through browser help menus.

8. Data Retention

sureph retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory requirements, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Account Information: Retained for the duration of your account relationship plus six (6) months after voluntary account closure to accommodate reactivation requests and resolve pending matters.
• Transaction Records: Financial transaction history, deposits, withdrawals, and gaming activity are retained for seven (7) years in compliance with PAGCOR regulations and Philippine accounting standards.
• Identity Verification Documents: KYC documentation is retained for seven (7) years after account closure as required by anti-money laundering regulations.
• Communications: Customer support interactions are retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Maintained for three (3) years after consent withdrawal to demonstrate compliance with marketing regulations.
• Closed or Terminated Accounts: Personal information is anonymized or deleted within ninety (90) days of account closure, except where longer retention is required by law or legitimate business needs.

After applicable retention periods expire, sureph securely deletes or anonymizes personal information using industry-standard data destruction methods that prevent recovery or reconstruction.

9. International Data Transfers

sureph primarily stores and processes personal information within the Philippines. However, some of our service providers and technology partners operate internationally, which may require transferring your information outside the Philippines to countries such as Singapore, the United States, or European Union member states where our cloud infrastructure, payment processors, or game providers are located.

When we transfer personal information internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with Philippine law, including standard contractual clauses, adequacy determinations by the National Privacy Commission where applicable, and contractual obligations requiring service providers to maintain equivalent data protection standards. All international transfers comply with Chapter VIII of the Data Privacy Act of 2012 and its implementing rules.

10. Children's Privacy

sureph services are strictly intended for adults aged twenty-one (21) years and older. We do not knowingly collect personal information from minors under the age of twenty-one. Our registration process requires date of birth verification, and we implement age verification checks to prevent underage access.

If we discover that we have inadvertently collected personal information from an individual under twenty-one years of age, we will immediately delete that information, close the account, return any deposited funds to the funding source, and implement additional measures to prevent future underage access. Parents or guardians who become aware of a minor using sureph services should contact us immediately at [email protected].

11. Changes to This Privacy Policy

sureph reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, regulatory guidance, or business operations. When we make material changes that significantly affect how we collect, use, or share your personal information, we will notify you through prominent notice on the sureph website, email notification to your registered address, or in-platform messaging before the changes take effect.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how sureph protects your information. Your continued use of sureph services after changes become effective constitutes your acceptance of the updated Privacy Policy.

If you do not agree with any changes to this Privacy Policy, you may close your account by contacting customer support. We will process your closure request and, where applicable, return any remaining account balance in accordance with our standard procedures.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, your personal information, or sureph's data protection practices, please contact us through the following channels:

For regulatory complaints or concerns about data protection practices that we have not adequately addressed, you may contact the National Privacy Commission of the Philippines at [email protected] or visit their website at www.privacy.gov.ph for additional guidance and complaint procedures.