smsm.ph Privacy Policy

1. Introduction

smsm.ph ("smsm.ph," "we," "us," "our") is the operator of the online casino and sports betting platform accessible at smsmph.net. We are committed to protecting the personal information of every Filipino player who uses our platform, in full compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) and its implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

As a PAGCOR-regulated platform, smsm.ph also processes personal data in accordance with the Anti-Money Laundering Act (AMLA), PAGCOR licensing conditions, and any applicable Bangko Sentral ng Pilipinas (BSP) regulations applicable to our payment processing activities.

This Privacy Policy applies to all personal data collected through smsmph.net, the smsm.ph mobile browser experience, customer support interactions, and any other channel through which you interact with smsm.ph.

2. Data Controller

For purposes of the Data Privacy Act of 2012, smsm.ph is the Personal Information Controller (PIC) in respect of the personal data collected through this platform. We determine the purposes and means by which your personal data is processed.

Our Data Protection Officer (DPO) is responsible for overseeing smsm.ph's compliance with the DPA and this Privacy Policy. You may contact our DPO via the details provided in Section 14 of this Policy.

3. Information We Collect

smsm.ph collects personal data in the following categories:

smsm.ph does not collect sensitive personal information as defined under the DPA (e.g., health records, political affiliations, religious beliefs) except where strictly required by PAGCOR responsible gaming obligations — for example, where a player self-discloses a problem gambling history in connection with a self-exclusion request.

4. How We Use Your Personal Data

smsm.ph processes personal data for the following purposes:

• Account Management: Creating and administering your smsm.ph account, verifying your identity, and managing your login credentials;
• KYC & Age Verification: Confirming that you meet the PAGCOR-mandated minimum age of 21 years and verifying your identity in compliance with AML obligations;
• Payment Processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank in Philippine Peso;
• Game Delivery: Providing access to casino games, sports betting, sabong, bingo, and all other platform features;
• Regulatory Compliance: Meeting PAGCOR licensing requirements, Anti-Money Laundering Act obligations, and NPC data privacy compliance;
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and administering player-set limits and self-exclusion;
• Customer Support: Responding to enquiries, resolving disputes, and processing complaints;
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, and platform abuse;
• Platform Improvement: Analysing aggregated usage data to improve smsm.ph's features, performance, and user experience;
• Marketing Communications: Sending promotional offers, bonus notifications, and game announcements — only where you have provided consent and subject to your communication preferences.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, smsm.ph processes personal data on the following lawful bases:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms and Conditions you accepted — including account creation, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA, NPC regulations, and other applicable Philippine law;
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregated analytics — where these interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications — you may withdraw consent at any time by updating your communication preferences in your smsm.ph account settings.

6. Sharing Your Personal Data

smsm.ph does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

• Payment Processors: GCash (GXI), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank — for processing deposits and withdrawals. These providers are bound by their own data privacy and BSP compliance obligations;
• Game Providers: JILI Gaming, Pragmatic Play, PG Soft, and other certified game studios — limited technical data shared solely for game delivery and RNG audit purposes;
• KYC / Identity Verification: Third-party identity verification services used to fulfil PAGCOR KYC requirements;
• PAGCOR & Regulatory Authorities: Player data disclosed to PAGCOR, the NPC, AMLC (Anti-Money Laundering Council), or other Philippine government authorities when required by law or regulatory direction;
• Law Enforcement: Disclosure to Philippine law enforcement agencies pursuant to a valid court order, warrant, or statutory obligation;
• Professional Advisers: Lawyers, auditors, and compliance consultants bound by confidentiality obligations, solely for legal, audit, or compliance purposes.

7. Cookies & Tracking Technologies

smsm.ph uses cookies and similar tracking technologies on smsmph.net to deliver and improve the platform experience. Cookies are small data files stored on your browser or device when you visit smsm.ph.

We use the following types of cookies:

• Strictly Necessary Cookies: Required for the platform to function — including maintaining your login session, securing your account, and processing financial transactions. These cannot be disabled without impairing platform functionality;
• Analytical / Performance Cookies: Help us understand how players navigate smsm.ph — including which games are most popular and where errors occur. Data is aggregated and anonymised where possible;
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming configurations;
• Marketing Cookies: Used only with your consent to deliver relevant promotional content about smsm.ph within the platform. smsm.ph does not use third-party advertising network cookies.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to or using smsm.ph.

8. Data Retention

smsm.ph retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC Records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years following the transaction date, in compliance with AMLA record-keeping requirements;
• Gameplay Records: Retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes;
• Support Communications: Retained for two (2) years from the date of last interaction;
• Marketing Consent Records: Retained for the duration of your consent, plus one (1) year following withdrawal;
• Technical / Log Data: Retained for ninety (90) days unless retained longer due to an active security investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with smsm.ph's data disposal procedures.

9. Data Security

smsm.ph implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and smsm.ph servers;
• Encrypted storage of sensitive personal data including identity documents and payment account references;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Two-factor authentication (2FA) available for player accounts and mandatory for staff systems;
• Regular security penetration testing and vulnerability assessments;
• Intrusion detection and automated alerting systems;
• Staff data privacy training in compliance with NPC requirements.

In the event of a personal data breach that is likely to result in harm to affected individuals, smsm.ph will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with Section 20(f) of the Data Privacy Act of 2012.

10. Your Rights Under the Data Privacy Act

As a data subject under the Republic Act No. 10173, you have the following rights in respect of your personal data held by smsm.ph:

• Right to be Informed: You have the right to know what personal data smsm.ph collects, how it is used, and to whom it may be disclosed — as detailed in this Privacy Policy;
• Right of Access: You may request a copy of the personal data smsm.ph holds about you. smsm.ph will respond to access requests within thirty (30) days;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data. For account data, you can update many details directly in your smsm.ph account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations under PAGCOR and AMLA requirements;
• Right to Object: You may object to processing based on legitimate interests, including direct marketing. Objection to marketing can be effected immediately via account settings;
• Right to Data Portability: You may request your personal data in a structured, commonly used format for transfer to another data controller;
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, contact smsm.ph's Data Protection Officer using the details in Section 14. smsm.ph may require identity verification before processing rights requests.

11. Children's Privacy

12. Cross-Border Data Transfers

Some of smsm.ph's third-party service providers — including certified game studios such as JILI Gaming, Pragmatic Play, and PG Soft — may process data on servers located outside the Philippines. Where personal data is transferred internationally, smsm.ph ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012, including contractual data processing agreements that impose obligations on recipients equivalent to those under Philippine data privacy law.

smsm.ph will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual or technical safeguards.

13. Updates to This Privacy Policy

smsm.ph may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. Material changes will be communicated to registered players via email to their registered address or via an in-platform notification prior to the effective date of the change.

Continued use of smsm.ph following notification of an updated Privacy Policy constitutes your acknowledgement of the revised Policy. The date of the most recent revision is displayed at the top of this page.

14. Contact & Complaints

For any questions about this Privacy Policy, to exercise your data subject rights, or to contact smsm.ph's Data Protection Officer, please use the following channels:

• Data Protection Officer: smsm.ph DPO
• Support Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 from within your smsm.ph account dashboard
• Postal Address: smsm.ph, Philippines

smsm.ph will respond to privacy-related requests and enquiries within fifteen (15) business days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through the NPC's official channels.