Your data and the PHP security alert

Over the past two days, governments and security agencies worldwide have issued a critical alert about two serious vulnerabilities in PHP, a programming language used by a large share of websites. Several organisations have taken sites offline while they apply the fix.

What this means for players

The SSPL website is not built on PHP, so this alert does not affect it. We have checked the site and found no PHP in it. No action is needed from you.

How your data is looked after

• Built and supported by WerkDone

  SSPL is built, hosted and supported by WerkDone, a Singapore company that builds software for the community care sector, where protecting personal data is part of everyday work.

• Stored in Singapore

  Player records are stored in a Singapore-hosted database and processed on Singapore servers.

• Collected with care

  We handle personal data in line with Singapore’s Personal Data Protection Act (PDPA). Players give consent when they register, and we collect only what the league needs. We do not collect NRIC numbers.

• Ongoing hardening

  We keep the software behind the site up to date and review who can access player information on an ongoing basis.

• Prompt communication

  If a vulnerability ever affects the site, we will tell you what happened, what we did about it, and what, if anything, you need to do.

If you have any questions, write to [email protected].