slatgo Privacy Policy

1 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, mobile number, email address, government identification number, financial account details, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, alteration, retrieval, use, disclosure, transfer, or deletion.
• "Data Controller" means slatgo, being the entity that determines the purposes and means of processing personal data collected through the slatgo.vip platform.
• "Data Subject" means the individual whose personal data is being processed — in most cases, a registered slatgo player or prospective player.
• "DPA 2012" means Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations.
• "NPC" means the National Privacy Commission of the Philippines, the independent body mandated to administer and implement DPA 2012.
• "PAGCOR" means the Philippine Amusement and Gaming Corporation.
• "Sensitive Personal Information" has the meaning assigned to it under Section 3(l) of DPA 2012, and includes government-issued identification numbers, financial account details, and health data.

2 Data Controller Identity

2.1 The Data Controller for personal data processed through the slatgo.vip platform is slatgo, operating as a PAGCOR-regulated online casino and gaming platform accessible at https://slatgo.vip.

2.2 slatgo has designated a Data Protection Officer (DPO) responsible for overseeing compliance with DPA 2012 and this Privacy Policy. The DPO may be contacted at the email address provided in Section 15 of this Policy.

2.3 slatgo is registered with the National Privacy Commission of the Philippines as a personal information controller in accordance with NPC registration requirements.

3 Categories of Personal Data We Collect

3.1 Registration Data

When you create a slatgo account, we collect: your Philippine mobile number, chosen username, date of birth (for age verification purposes), and a hashed version of your chosen password. You must be 21 years or older to register.

3.2 Identity Verification Data (KYC)

To comply with PAGCOR's anti-money laundering requirements and DPA 2012's legitimate purpose doctrine, slatgo collects government-issued identification documents prior to processing your first withdrawal. Accepted documents include copies of your PhilSys national ID, driver's license, passport, or SSS/UMID card. This category constitutes Sensitive Personal Information under DPA 2012 and is subject to heightened protection.

3.3 Financial Data

slatgo records deposit and withdrawal transaction history, GCash account references, bank account names (for bank transfer verification), and transaction identifiers. Full payment card numbers and full bank account numbers are never stored on slatgo's servers — these are processed directly by our PCI-DSS compliant payment processors.

3.4 Gameplay and Activity Data

We record your session history, game rounds played, bet amounts, wins, losses, bonus usage, and responsible gaming limit settings. This data is used to deliver the service, resolve disputes, and comply with PAGCOR's player activity record-keeping requirements.

3.5 Technical and Device Data

slatgo automatically collects IP address, browser type and version, device type and operating system, referring URLs, and session timestamps. This data is used for security monitoring, fraud prevention, and platform performance optimisation.

3.6 Communications Data

If you contact slatgo's player support team, we retain records of your communications, including chat transcripts, to enable consistent support, quality assurance, and compliance with regulatory record-keeping obligations.

3.7 Marketing Preferences

Where you have consented to receive promotional communications from slatgo, we record your marketing preferences and the contact channel you have authorised (mobile number or, where provided, email address).

4 Legal Bases for Processing

4.1 slatgo processes personal data on the following legal bases under DPA 2012:

• Contractual Necessity: Processing is necessary to fulfil the contract between slatgo and the Player — specifically, to provide gaming services, process payments, and manage the Player's account.
• Legal Obligation: Processing is required to comply with PAGCOR's licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act of 2012, and other applicable Philippine laws.
• Legitimate Interest: Processing is necessary for slatgo's legitimate interests in fraud prevention, security monitoring, platform maintenance, and business analytics, provided these interests are not overridden by the rights and interests of the Data Subject.
• Consent: Where processing is not covered by the above bases — primarily direct marketing communications — slatgo relies on the Data Subject's freely given, specific, and informed consent. Consent may be withdrawn at any time.

5 How We Use Your Personal Data

5.1 slatgo uses personal data for the following specific purposes:

• Creating and maintaining your slatgo account;
• Verifying your identity and age in compliance with PAGCOR regulations and the 21-year minimum age requirement;
• Processing deposits, withdrawals, and the associated financial reconciliation through GCash, Maya, BDO, BPI, Metrobank, and other approved Philippine payment channels;
• Delivering the games and platform features you request;
• Detecting, investigating, and preventing fraudulent or prohibited activity on the platform;
• Responding to your support queries and resolving disputes;
• Complying with PAGCOR reporting obligations and Anti-Money Laundering Council (AMLC) transaction reporting requirements under RA 9160;
• Personalising your on-platform experience, including recommended games based on your play history;
• Sending promotional communications where you have given consent;
• Conducting analytics to improve platform performance and user experience.

6 Data Sharing and Disclosure

6.1 slatgo shares personal data with the following categories of recipients under appropriate contractual and security safeguards:

• Payment Processors: GCash (Mynt), Maya (PayMaya Philippines), BDO, BPI, Metrobank, and other Philippine payment service providers receive the minimum financial data required to process your transactions.
• Game Technology Providers: Certified game suppliers may receive session identifiers and anonymised gameplay data required to operate and audit their games on the slatgo platform. Full personal identification data is not shared with game providers.
• Identity Verification Services: slatgo may use third-party KYC and identity verification providers to process government ID documents. These providers are bound by DPA 2012-compliant data processing agreements.
• Regulatory Bodies: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities may receive data as required by law or regulatory directive.
• Fraud Prevention and Security Services: slatgo uses third-party fraud detection and cybersecurity services. These providers access technical and device data under strict confidentiality and data minimisation obligations.
• Legal and Compliance Advisers: slatgo's legal, audit, and compliance advisers may access personal data on a strictly need-to-know basis under professional confidentiality obligations.

6.2 In the event of a business transfer, merger, or acquisition involving slatgo, personal data held by slatgo may be transferred to the acquiring entity, subject to the acquiring entity assuming the obligations of this Privacy Policy. Affected Players will be notified in advance of any such transfer where practicable.

7 International Data Transfers

7.1 slatgo's primary data processing infrastructure is located within the Philippines. Where data is transferred to or accessed from systems located outside the Philippines — for example, in connection with certain game technology providers or cloud infrastructure services — slatgo ensures that appropriate safeguards are in place in accordance with NPC's cross-border transfer regulations under DPA 2012.

7.2 Safeguards for international transfers may include: standard contractual clauses approved by the NPC, transfer to countries found by the NPC to provide adequate levels of data protection, or other mechanisms approved by the NPC from time to time.

7.3 Players may request information about specific international transfers of their personal data by contacting slatgo's Data Protection Officer at the contact details provided in Section 15.

8 Data Retention

8.1 slatgo retains personal data for the minimum period necessary to fulfil the purposes described in this Privacy Policy, taking into account applicable legal and regulatory retention obligations. The retention periods in the table in Section 3 of this Policy apply.

8.2 Financial transaction records and KYC documentation are retained for a minimum of seven (7) years following the conclusion of the business relationship, in compliance with Section 9 of the Anti-Money Laundering Act as amended by RA 10167 and RA 10365.

8.3 Upon account closure, slatgo will delete or anonymise personal data that is no longer required for regulatory or legal purposes within a reasonable period following the conclusion of the applicable retention period.

8.4 Technical and device data collected for security and fraud prevention purposes is retained for thirteen (13) months, after which it is aggregated and anonymised for statistical analysis.

9 Cookies and Tracking Technologies

9.1 slatgo uses cookies and similar tracking technologies to maintain your session, deliver platform functionality, remember your preferences, prevent fraud, and analyse platform performance. The categories of cookies used by slatgo are set out below.

9.2 slatgo does not use advertising or tracking cookies to build behavioural profiles for sale to third-party advertisers. No third-party advertising networks have access to data collected through slatgo's cookie systems.

9.3 You can manage cookie preferences through your browser settings. Please note that disabling essential cookies will prevent you from logging into your slatgo account.

10 Data Security Measures

10.1 slatgo's technical security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and slatgo's servers;
• AES-256 encryption for sensitive personal and financial data stored at rest;
• Multi-factor authentication for access to slatgo's internal systems by authorised personnel;
• Network firewall and intrusion detection systems monitoring for suspicious access patterns;
• Regular vulnerability assessments and penetration testing conducted by independent security specialists;
• Access controls limiting personal data access to authorised personnel on a strict need-to-know basis, with all access logged and audited.

10.2 Data Breach Notification. In the event of a personal data breach that is reasonably believed to have adversely affected the rights and freedoms of Data Subjects, slatgo will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under Section 20(f) of DPA 2012. Affected Players will be notified promptly where the breach is likely to result in high risk to their rights and freedoms.

10.3 While slatgo employs robust security measures, no online platform can guarantee absolute security. Players are encouraged to use a strong, unique password for their slatgo account and to enable two-factor authentication from their account security settings.

11 Your Rights Under the Data Privacy Act of 2012

11.1 As a Data Subject under DPA 2012, you have the following rights in relation to your personal data held by slatgo:

11.2 To exercise any of these rights, submit a written request to slatgo's Data Protection Officer at the contact address in Section 15. slatgo will acknowledge your request within three (3) business days and respond within thirty (30) calendar days, or within such extended period as permitted under NPC regulations for complex requests.

11.3 slatgo may be unable to fulfil erasure or portability requests in full where retention of the relevant data is required by law — for example, AMLA-required financial records and PAGCOR-required gameplay records.

11.4 If you are not satisfied with slatgo's response to a privacy rights request, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Children's Privacy and Age Restriction

12.1 If slatgo becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended and the personal data deleted or returned in accordance with DPA 2012, except to the extent that retention is required for compliance purposes.

12.2 If you believe that slatgo has collected personal data from a person under 21, please notify us immediately at the contact details in Section 15.

13 Marketing Communications

13.1 slatgo will only send you promotional or marketing communications where you have given explicit prior consent during registration or subsequently through your account settings.

13.2 Marketing communications may be sent via SMS to your registered Philippine mobile number. slatgo does not send unsolicited bulk marketing messages (spam).

13.3 You may opt out of marketing communications at any time by updating your preferences in the Notifications section of your slatgo account settings. Opting out of marketing communications does not affect your receipt of transactional messages — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent on a contractual necessity basis and cannot be opted out of while your account is active.

14 Amendments to This Privacy Policy

14.1 slatgo may update this Privacy Policy from time to time to reflect changes in applicable law, NPC guidance, our data practices, or our service offerings. The current version will always be published at slatgo.vip/privacy-policy with the effective date clearly stated at the top of the page.

14.2 Where amendments are material — including any change that significantly affects how we process your personal data or reduces your rights — slatgo will provide registered Players with advance notice via their registered mobile number at least seven (7) days prior to the effective date of the revised Policy.

14.3 Your continued use of slatgo following the effective date of any revised Policy constitutes acceptance of the updated terms. If you do not accept a revised Policy, you may close your account and request return of your withdrawable balance.

15 Contact, DPO Details, and Privacy Complaints

15.1 General Privacy Inquiries. For general questions about how slatgo handles your personal data, you may contact our player support team via the 24/7 live chat function within your account dashboard.

15.2 Data Protection Officer. For formal privacy rights requests, data breach reports, or complaints about slatgo's data processing practices, please contact the slatgo Data Protection Officer directly. Written correspondence may be sent to: [email protected] (plain text — not a clickable link), with the subject line "Data Privacy Request."

15.3 NPC Complaints. If you are not satisfied with slatgo's response to your privacy complaint, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information about the NPC's complaints process is available on the NPC's official Philippine government website.

15.4 Response Timeframes. slatgo will acknowledge all formal privacy correspondence within three (3) Philippine business days. Substantive responses to privacy rights requests will be provided within thirty (30) calendar days or within such extended period as prescribed by NPC regulations.