Scope and Controller

Sgcasino collects, stores, uses and discloses personal data in accordance with applicable data protection laws. The data controller responsible for your personal data is Sgcasino. You may contact us at [email protected] for matters relating to your data and privacy rights.

What Personal Data We Collect

• Identity and contact details: name, username, email address, phone number.
• Account data: login credentials, account activity, transactions, deposits and withdrawals.
• Identity verification data: documents provided for Know Your Customer (KYC) checks (e.g., government-issued IDs, proof of address).
• Technical and usage data: device identifiers, IP address, browser type, language, pages visited, and interaction history with our services.
• Payment data: information necessary to process payments, including payment instrument details and related identifiers.
• Communications data: records of correspondence with our support channels and responses to surveys or promotions.

How We Collect Personal Data

• Directly from you when you register, update your profile, or communicate with us.
• Automatically as you interact with our services, via cookies and similar technologies.
• From payment providers and identity verification services as part of processing transactions and verifying your identity.
• From third parties where permitted by law, such as affiliates or service providers who support our platform.

How We Use Personal Data

• To provide, operate and improve our services, including account management and payment processing.
• To verify identity, assess age and detect potential fraud or other unlawful activity in compliance with legal obligations.
• To communicate with you about your account, transactions, and changes to our terms or services.
• To conduct responsible gaming measures, including monitoring for signs of gambling-related harm and offering assistance where indicated by our assessments.
• To personalise experiences and, with your consent, deliver targeted marketing communications.

Legal Bases for Processing

• Compliance with legal obligations (e.g., anti-money laundering, licensing requirements).
• Performance of a contract (to provide our services).
• Legitimate interests, including security, fraud prevention and service improvement, provided these do not override your rights.
• Consent where required for marketing or certain analytics activities; you may withdraw consent at any time.

Recipients and Third-Party Sharing

• Service providers who perform essential functions on our behalf (payment processors, identity verification, fraud prevention, customer support).
• Regulators, law enforcement or other authorities as required by law or to protect our rights and safety.
• Marketing partners, where you have opted in to receive communications, subject to your preferences and applicable law.
• Other parties in connection with legal proceedings, mergers, or corporate reorganisations, to the extent permitted by law.

International Transfers and Safeguards

Where personal data is transferred to jurisdictions outside your country, we implement appropriate safeguards designed to protect your data in line with applicable laws, including contractual measures and recognised transfer mechanisms.

Cookies and Tracking Technologies

We and our trusted partners use cookies and similar technologies to operate the site, remember preferences, and analyse usage. Cookies are categorized as strictly necessary, preferences, and analytics/advertising. You may adjust cookie settings and opt out of non-essential cookies. If you disable cookies, some features of our site may not function properly.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, to comply with legal obligations, resolve disputes, and enforce our agreements. When retention is no longer needed, we will securely delete or anonymise the data, or place it in a secure backup with access restricted and limited to the minimum period required by law.

Security

We employ industry-standard security measures, including encryption, access controls, and secure storage, to protect personal data from unauthorized access, loss or alteration. Our facilities maintain appropriate physical and technical safeguards, and we conduct periodic security reviews.

Data Subject Rights

You may exercise rights under applicable data protection laws, including:

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure where lawful.
• Right to restrict processing and to object to processing, including for marketing.
• Right to data portability where applicable.
• Right to withdraw consent where consent is the basis for processing.
• Right to lodge a complaint with a supervisory authority.

Requests should be directed to [email protected]. We will respond within the timeframes required by applicable law, typically within 30 days, with extensions possible for complex or numerous requests.

Rights Related to Marketing and Communications

You may opt out of marketing communications at any time by using the opt-out mechanism in the message or by contacting [email protected]. It may take up to 30 days to implement your opt-out across all channels.

Responsible Gaming and Automated Processing

We monitor activity to identify risks of problem gambling and to provide assistance. Some measures may be automated, but final actions affecting a user’s account or interactions are reviewed by our staff before implementation.

Minors

Our services are not intended for individuals under the age of 18. We take steps to verify age and purge any information relating to a minor if detected.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the platform where feasible. Continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

Privacy inquiries may be directed to [email protected]. For concerns about data privacy practices, you may also contact our designated data protection contact through the same address.