Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how Sandibet ("Sandibet," "we," "us," or "our") collects, uses, stores, and discloses personal information obtained from users ("you," "Player," or "User") of the Sandibet website located at sandibet.vip and all associated services, mobile applications, and features (collectively, the "Platform").

Sandibet is committed to protecting the privacy and personal data of all registered players and visitors to the Platform. We recognise the trust you place in us when you share your personal information, and we take that responsibility seriously. This Policy is intended to give you a clear and honest account of our data practices so that you can make informed decisions about your use of the Platform.

By accessing or using the Sandibet Platform, registering an account, or making a deposit, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

2 Information We Collect

Sandibet collects personal information from you in several ways — directly when you register or interact with the Platform, automatically as you use our services, and occasionally from third-party sources. The categories of personal information we collect include:

2.1 Information You Provide Directly

• Registration Data: Full legal name, date of birth, gender, nationality, residential address, email address, and mobile number provided when you create a Sandibet account.
• Identity Verification Documents: Government-issued identification (such as a Philippine passport, SSS ID, UMID, or driver's licence), proof of address, and payment method verification documents submitted as part of our Know Your Customer (KYC) process.
• Financial Information: Payment method details, transaction history, deposit and withdrawal records. Note that Sandibet does not store full card numbers; payment processing is handled by our authorised payment partners.
• Communications: Records of your correspondence with Sandibet customer support, including chat transcripts, emails, and support ticket content.
• Responsible Gaming Information: Self-exclusion requests, deposit limit settings, and other responsible gaming preferences you configure on the Platform.

2.2 Information Collected Automatically

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Data: Pages visited, games played, session duration, click patterns, search queries within the Platform, and features accessed.
• Location Data: General geographic location derived from your IP address. Sandibet does not collect precise GPS location data.
• Cookies and Tracking Technologies: Data collected via cookies, web beacons, and similar technologies as described in Section 6 of this Policy.

2.3 Information from Third Parties

• Identity verification and fraud prevention data from authorised third-party KYC and anti-money laundering service providers.
• Payment confirmation and transaction status data from payment processors including GCash, PayMaya, BPI, BDO, and Metrobank.
• Publicly available information used to verify your identity or assess fraud risk where permitted by applicable law.

3 How We Use Your Information

Sandibet uses the personal information we collect for the following purposes:

• Account Management: To create, verify, and maintain your Sandibet account, including processing your registration and managing your profile.
• Service Delivery: To provide you with access to the games, features, and services available on the Sandibet Platform.
• Identity Verification and KYC: To verify your identity, confirm your age (21+), and comply with our anti-money laundering obligations under applicable Philippine regulations.
• Payment Processing: To process deposits and withdrawals via your chosen payment method, including GCash, PayMaya, BPI, BDO, and Metrobank.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Legal Compliance: To comply with applicable laws, regulations, and regulatory requirements, including those imposed by PAGCOR and other competent authorities.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the Sandibet Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about Sandibet services, where you have consented to receive such communications. You may opt out at any time.

4 Legal Basis for Processing

Sandibet processes your personal information on the following legal grounds:

• Contractual Necessity: Processing required to perform our contract with you — including account registration, payment processing, and service delivery — is carried out on the basis that it is necessary for the performance of that contract.
• Legal Obligation: Certain processing activities, including KYC verification, anti-money laundering checks, and regulatory reporting, are carried out to comply with legal obligations applicable to Sandibet under Philippine law.
• Legitimate Interests: Sandibet processes certain data on the basis of its legitimate interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Where Sandibet relies on your consent as the legal basis for processing — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Sharing Your Information

Sandibet does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal information with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other authorised payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Authorised KYC and anti-money laundering service providers engaged to verify your identity and assess fraud risk.
• Technology and Infrastructure Providers: Cloud hosting, data storage, and platform technology providers who process data on our behalf under strict data processing agreements.
• Customer Support Providers: Third-party customer support platforms used to manage and respond to player enquiries, where applicable.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), law enforcement agencies, and other competent authorities, where Sandibet is required by law to disclose information or where disclosure is necessary to protect the rights, property, or safety of Sandibet, its players, or the public.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by Sandibet in connection with the operation of its business, subject to confidentiality obligations.

All third parties with whom Sandibet shares personal data are required to handle that data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

6 Cookies and Tracking Technologies

Sandibet uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session continuity, and gather analytics data that helps us improve our services. The following types of cookies are used on the Sandibet Platform:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies enable core features such as user authentication, session management, and security. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as your preferred language, display settings, and responsible gaming configurations.
• Analytics Cookies: Used to collect anonymised data about how players use the Platform, including pages visited, session duration, and navigation paths. This data helps Sandibet understand usage patterns and improve the Platform experience.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These cookies are only placed where you have provided consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Sandibet Platform. For detailed information on managing cookies in your specific browser, refer to your browser's help documentation.

7 Data Retention

Sandibet retains your personal information for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention principles apply:

• Active Accounts: Personal data associated with an active Sandibet account is retained for the duration of the account relationship and for a period thereafter as required by applicable law.
• KYC and AML Records: Identity verification documents and anti-money laundering records are retained for a minimum of five (5) years following the end of the account relationship, in accordance with Philippine AML regulations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the date of the transaction.
• Support Communications: Customer support records are retained for a period sufficient to resolve any related disputes and to comply with applicable legal obligations.
• Closed Accounts: Upon account closure, Sandibet will retain personal data for the minimum period required by applicable law before securely deleting or anonymising it.

Where personal data is no longer required for any lawful purpose, Sandibet will securely delete or anonymise it in accordance with our internal data disposal procedures.

8 Your Rights

As a Sandibet player, you have the following rights in relation to your personal data, subject to applicable law and certain exceptions:

• Right of Access: You have the right to request a copy of the personal data Sandibet holds about you and information about how it is being used.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by Sandibet be corrected or updated.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to Sandibet's legal retention obligations.
• Right to Restrict Processing: You have the right to request that Sandibet restrict the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data where Sandibet relies on legitimate interests as the legal basis for processing.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the Sandibet support team using the contact details provided in Section 12 of this Policy. Sandibet will respond to all valid requests within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before processing your request.

9 Data Security

Sandibet implements a range of technical and organisational security measures designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the Sandibet Platform.
• Encrypted storage of sensitive personal data, including identity documents and financial records.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role.
• Regular security assessments, vulnerability testing, and penetration testing of the Platform infrastructure.
• Incident response procedures to detect, contain, and respond to data security incidents in a timely manner.
• Staff training on data protection obligations and secure data handling practices.

While Sandibet takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data security incident that is likely to result in a risk to your rights and freedoms, Sandibet will notify you and the relevant regulatory authorities as required by applicable law.

You also have a role to play in keeping your data secure. Please ensure that your Sandibet account password is strong and unique, and that you do not share your login credentials with any third party. Contact Sandibet support immediately if you suspect that your account has been compromised.

10 Children and Minors

The Sandibet Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine regulations governing casino-style online gaming. Sandibet does not knowingly collect personal information from individuals under the age of 21.

If Sandibet becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. All funds associated with an underage account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that your child has registered on the Sandibet Platform, please contact our support team immediately so that we can investigate and take appropriate action.

11 Changes to This Policy

Sandibet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players by email or by posting a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how Sandibet is protecting your personal information.

Your continued use of the Sandibet Platform following the posting of any changes to this Policy constitutes your acceptance of those changes. If you do not agree with the revised Policy, you should discontinue use of the Platform and contact our support team to close your account.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or Sandibet's handling of your personal data, please do not hesitate to get in touch with our support team. We are available 24 hours a day, 7 days a week, and our Filipino support agents are ready to assist players from Manila, Cebu, Davao, Quezon City, Makati, and across the Philippines.

You may contact Sandibet's data support team via the following channel:

• Email: [email protected]

Please include your registered account username and a clear description of your query or request when contacting us. For formal data subject access requests or erasure requests, please also include a copy of a valid government-issued ID to enable us to verify your identity before processing your request.

Sandibet aims to acknowledge all privacy-related enquiries within 48 hours and to resolve them within a reasonable timeframe in accordance with applicable Philippine data protection law.