slatgo Privacy Policy

1.1 slatgo takes the privacy of its Players seriously. As a PAGCOR-regulated online casino and sports betting platform serving Filipino players across the Philippines — from Metro Manila and Cebu to Davao and beyond — slatgo handles a significant volume of personal data on a daily basis. We are committed to handling that data responsibly, transparently, and in accordance with all applicable Philippine privacy laws.

1.2 This Policy applies to all personal data processed by slatgo in connection with: registration and account maintenance; KYC identity verification; financial transactions including GCash, Maya, and bank deposits and withdrawals; gameplay activity; customer support interactions; marketing communications; and all other interactions between you and the slatgo platform.

1.3 This Policy should be read together with slatgo's Terms and Conditions, which are available at slatgo.net/terms-conditions, and our Responsible Gaming Policy, available at slatgo.net/responsible-gaming. In the event of any inconsistency between this Policy and the Terms and Conditions on matters relating to data privacy, this Policy shall prevail.

1.4 slatgo has appointed a Data Protection Officer ("DPO") as required under the Philippine Data Privacy Act. Contact details for the DPO are set out in Section 16 of this Policy.

2.1 The data controller responsible for the personal data of slatgo Players is slatgo Casino, operating the platform accessible at slatgo.net under a license issued by PAGCOR, the Philippine Amusement and Gaming Corporation.

2.2 As the data controller, slatgo determines the purposes for which personal data is processed and the means by which such processing is carried out. slatgo is accountable for ensuring that all processing activities comply with the Philippine Data Privacy Act of 2012 and applicable PAGCOR data governance requirements.

2.3 Where slatgo engages third-party processors to handle personal data on its behalf — for example, payment processors, game software providers, or cloud infrastructure providers — those processors operate under data processing agreements that impose binding obligations consistent with this Policy and applicable Philippine privacy law.

3.1 slatgo collects the following categories of personal data about Players:

• Full legal name as it appears on a Philippine government-issued identification document
• Date of birth and age (to confirm 21+ eligibility under PAGCOR requirements)
• Philippine mobile telephone number
• Email address
• Physical address in the Philippines
• Username and account credentials (passwords stored as irreversible cryptographic hashes — never in plaintext)

• Copies of government-issued photo identification (UMID, PhilSys National ID, driver's license, passport)
• Selfie photographs taken for liveness verification
• Proof of address documentation
• Source-of-funds documentation where required by PAGCOR AML compliance procedures

• GCash account number (mobile number) used for deposits and withdrawals
• Maya account details where applicable
• Bank account name and number where bank transfers are used
• Deposit and withdrawal transaction amounts, timestamps, and reference numbers
• Account balance history

• Games played, bet amounts, results, and session durations
• Sports bets placed, selections, odds, and outcomes
• Bonus claims and wagering requirement progress
• VIP points and tier progression

• IP address at the time of login and transaction
• Device type, operating system, and browser type
• Session identifiers and authentication tokens
• Cookies and similar tracking technologies as described in Section 10
• Geolocation data (country/region level) to verify Philippine residency and regulatory compliance

• Records of live chat conversations with slatgo support agents
• Email correspondence with slatgo, including support requests and complaints
• Records of responsible gaming tool activations and requests

3.2 slatgo does not collect sensitive personal information as defined under the Philippine Data Privacy Act — such as health data, religious beliefs, or political affiliations — unless such information is voluntarily provided by the Player in the context of a responsible gaming referral or support interaction, in which case it is handled with heightened confidentiality.

4.1 slatgo collects personal data through the following channels and methods:

1. Direct submission by the Player — during account registration, KYC document upload, payment setup, support contact, and voluntary communications.
2. Automated technical collection — through cookies, session trackers, server logs, and device fingerprinting technologies when you access and use the slatgo platform.
3. Payment processors — GCash, Maya, and Philippine bank partners transmit transaction confirmation data to slatgo upon processing of deposits and withdrawals.
4. KYC verification partners — where slatgo engages a third-party identity verification service to assist with document review and liveness checks, that service transmits verification outcome data back to slatgo.
5. Game providers — JILI, Pragmatic Play, PG Soft, and other integrated game providers transmit gameplay session data, bet outcomes, and RTP records to slatgo in accordance with their provider agreements.
6. PAGCOR and regulatory reporting — in certain circumstances, PAGCOR may share data about Players with slatgo, for example in connection with self-exclusion registers or regulatory investigations.

5.1 The table below sets out the purposes for which slatgo processes personal data and the applicable legal basis under the Philippine Data Privacy Act for each processing activity:

6.1 slatgo does not sell, rent, or trade personal data to any third party for their own commercial use. Personal data is shared only in the circumstances described in this Section.

slatgo is required by PAGCOR licensing conditions and applicable Philippine law to share certain data with the following bodies, without requiring individual Player consent:

• PAGCOR — the Philippine Amusement and Gaming Corporation, slatgo's licensing authority, in connection with regulatory reporting, audits, self-exclusion programs, and investigations
• Anti-Money Laundering Council (AMLC) — in connection with transaction reporting obligations under the Anti-Money Laundering Act (RA 9160)
• Philippine National Police / NBI — in response to a valid court order or lawful law enforcement request
• National Privacy Commission — in connection with any formal data breach notification or privacy investigation

slatgo engages the following categories of third-party service providers who process Player data strictly on slatgo's behalf and under data processing agreements:

• Payment processors — GCash (Mynt), Maya (Voyager Innovations), Philippine bank payment gateways
• KYC and identity verification technology providers
• Cloud infrastructure and data hosting providers operating in compliant jurisdictions
• Game software providers — JILI, Pragmatic Play, PG Soft, NetEnt, and others — for game session management
• Customer support platform providers — for live chat infrastructure
• Fraud detection and cybersecurity service providers
• Email and SMS communication platforms for account notifications

In the event of a merger, acquisition, or sale of all or substantially all of slatgo's business assets, personal data held about Players may be transferred as part of that transaction, subject to binding data protection obligations on the receiving party consistent with this Policy. Players will be notified of any such transfer via the registered email address on their account.

7.1 slatgo retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligation. The following retention periods apply:

• Account data (active accounts): Retained for the duration of the account relationship plus five (5) years after account closure, in compliance with PAGCOR record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from account closure or from the date of the last transaction, as required by RA 9160 (Anti-Money Laundering Act) and PAGCOR regulations.
• Transaction records: Retained for a minimum of five (5) years as required by Philippine financial reporting and AML obligations.
• Gameplay records: Retained for five (5) years from the date of each session for regulatory audit and dispute resolution purposes.
• Customer support records: Retained for three (3) years from the date of the last support interaction.
• Marketing consent records: Retained for the duration of consent plus two (2) years after withdrawal of consent or account closure, as evidence of lawful processing.
• Anonymized analytics data: May be retained indefinitely as it does not constitute personal data after anonymization.

7.2 Upon expiry of the applicable retention period, slatgo will securely delete or anonymize personal data in accordance with its internal data disposal procedures.

8.1 slatgo implements the following technical and organizational security measures to protect personal data:

1. Encryption in transit: All data transmitted between your device and the slatgo platform is protected by TLS 1.2 or TLS 1.3 (256-bit SSL) encryption, preventing interception on untrusted networks including Philippine mobile LTE and public Wi-Fi.
2. Encryption at rest: Personal data stored on slatgo servers, including KYC documents and financial records, is encrypted at rest using AES-256 encryption.
3. Password security: Account passwords are stored exclusively as salted bcrypt cryptographic hashes. slatgo never stores plaintext passwords and cannot retrieve your password — only reset it.
4. Access controls: Access to Player personal data within slatgo's systems is restricted on a role-based, need-to-know basis. Access logs are maintained and reviewed regularly.
5. Two-factor authentication: slatgo offers SMS-based two-factor authentication for Player accounts, adding a second verification layer for logins from unrecognized devices.
6. Intrusion detection: slatgo deploys automated systems to detect and respond to unauthorized access attempts, abnormal login patterns, and security events in real time.
7. Staff training: All slatgo personnel with access to personal data are required to complete data privacy training annually, covering the Philippine Data Privacy Act, slatgo's data handling procedures, and security incident response.
8. Security audits: slatgo's security infrastructure is subject to periodic internal review and external assessment to identify and remediate vulnerabilities.

8.2 In the event of a personal data breach that is likely to result in harm to affected Players, slatgo will notify the National Privacy Commission of the Philippines within seventy-two (72) hours of becoming aware of the breach and will notify affected Players without undue delay, in accordance with Section 20 of the Philippine Data Privacy Act.

9.1 As a registered slatgo Player located in the Philippines, you have the following rights under the Philippine Data Privacy Act of 2012 with respect to your personal data held by slatgo:

9.2 To exercise any of the rights described in Section 9.1, contact slatgo's Data Protection Officer at [email protected] with the subject line "Data Privacy Rights Request," including your full name, registered mobile number, and a description of the right you wish to exercise. slatgo will acknowledge your request within three (3) business days and respond substantively within the timeframe prescribed by the Philippine Data Privacy Act.

9.3 slatgo will not charge a fee for exercising your data privacy rights in ordinary circumstances. Where requests are manifestly unfounded, excessive, or repetitive, slatgo reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation.

9.4 If you are not satisfied with slatgo's response to a data privacy rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

10.1 slatgo uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, enable security features, and analyze platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the slatgo platform to function. These cookies manage your login session, security token validation, and account state. They cannot be disabled without preventing access to the platform.
• Functional Cookies: Remember your preferences such as language settings, last-played games, and interface preferences across sessions.
• Analytics Cookies: Collect aggregated, anonymized data about how Players use the slatgo platform — which pages are most visited, session duration, and navigation paths — to improve the platform experience.
• Security Cookies: Used to detect and prevent fraudulent activity, account takeover attempts, and automated bot access to the platform.

10.2 slatgo does not use third-party behavioral advertising cookies or tracking pixels for cross-site advertising targeting. Analytics data collected through cookies on slatgo is used solely for internal platform improvement purposes.

10.3 You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent access to the slatgo platform. Disabling analytics cookies will not affect your ability to use slatgo.

11.1 If you are the parent or guardian of a person under 21 years of age who you believe has registered a slatgo account, please contact slatgo support immediately at [email protected]. slatgo will investigate and take appropriate action, including account closure and data deletion, as promptly as possible.

12.1 Some of slatgo's service providers — including game software providers and cloud infrastructure partners — may process personal data outside the Philippines. Where such cross-border transfers occur, slatgo ensures they are conducted in compliance with Section 21 of the Philippine Data Privacy Act, which permits cross-border transfers to jurisdictions that provide adequate data protection or where the transfer is governed by binding contractual clauses that impose obligations equivalent to those required under Philippine law.

12.2 slatgo maintains a record of all cross-border data transfers and the safeguards in place for each. This record is available to the National Privacy Commission upon request in connection with any investigation or audit.

12.3 slatgo does not transfer KYC documentation or sensitive identity data outside of jurisdictions with adequate data protection standards without explicit contractual safeguards in place.

13.1 slatgo may send promotional communications to Players who have provided consent to receive them, including information about new games, bonus offers, VIP promotions, and platform updates. Consent to receive marketing communications is collected separately from the registration process and is entirely optional.

13.2 You can withdraw your consent to receive marketing communications from slatgo at any time by: clicking "Unsubscribe" in any marketing email; updating your notification preferences in your slatgo account settings; or contacting slatgo support via live chat or email requesting removal from marketing lists.

13.3 Withdrawal of marketing consent does not affect your ability to use the slatgo platform. You will continue to receive transactional and account-related communications — such as deposit confirmations, withdrawal notices, and security alerts — as these are necessary for the performance of your account agreement with slatgo and do not require separate consent.

13.4 slatgo does not send unsolicited promotional SMS messages to Players who have not opted in via their account marketing preferences. Philippine anti-spam standards apply to all slatgo marketing communications.

14.1 The slatgo platform may contain references to payment providers, game providers, and other third-party services. This Privacy Policy applies only to personal data processed by slatgo in connection with the slatgo platform. slatgo is not responsible for the privacy practices of third-party service providers operating their own platforms or interfaces.

14.2 When you conduct a GCash or Maya transaction in connection with your slatgo account, your interaction with the GCash or Maya interface is subject to Mynt's or Voyager Innovations' own privacy policies in addition to this Policy. slatgo only receives transaction confirmation data from these providers — not full GCash or Maya account details.

15.1 slatgo may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, data processing activities, or slatgo's business operations. The effective date at the top of this Policy will be updated whenever material changes are made.

15.2 For material changes to this Policy — those that significantly affect your privacy rights or how slatgo uses your data — slatgo will notify registered Players via the registered email address on file at least fourteen (14) days before the changes take effect.

15.3 Minor clarifications or updates that do not materially affect your rights or slatgo's data processing activities may be published without specific individual notification. The current version of the Privacy Policy will always be accessible at slatgo.net/privacy-policy.

15.4 If you do not agree to the revised Privacy Policy, you must cease using the slatgo platform and request account closure in accordance with the Terms and Conditions. Continued use of the platform after the effective date of a revised Policy constitutes acceptance of the revised terms.

16.1 slatgo has designated a Data Protection Officer ("DPO") as required by the Philippine Data Privacy Act and its Implementing Rules and Regulations. The DPO is responsible for ensuring slatgo's compliance with applicable data privacy laws and serves as the point of contact for Player data privacy inquiries, requests, and complaints.

This Privacy Policy was last updated in January 2026 and is effective from that date. The authoritative version of this Policy is the English language version published at slatgo.net/privacy-policy.