Sending a promotional SMS is easy. Knowing whether you can send it to a particular customer – and whether you have the right consent to do so – is where things get more complicated.
For businesses in Singapore, SMS marketing must take into account requirements under the Personal Data Protection Act (PDPA), the Do Not Call (DNC) Registry, and rules around consent and marketing communications.
Whether you are promoting a new product, sending a limited-time offer or re-engaging an existing customer, you need to consider who you are contacting, what you are sending and whether the recipient has consented to receive promotional messages.
The good news is that compliance does not have to mean giving up on SMS marketing. The key is building consent, customer preferences and messaging controls into your SMS workflow from the start.
In this guide, we’ll look at the key PDPA SMS and promotional SMS rules in Singapore, including when the DNC Registry applies, what counts as marketing, how consent works and how you can run SMS campaigns more responsibly.
What are the Rules for Promotional SMS or Telemarketing Messages in Singapore?
Before sending an SMS marketing message in Singapore, you need to establish whether the message is actually promotional.
A promotional SMS is generally a message intended to promote or offer goods, services, business opportunities or other commercial activity. This could include:
- “Enjoy 20% off your next purchase.”
- “Upgrade your broadband plan and receive one month of free service.”
- “New season arrivals are now available.”
- “Get S$50 off your next hotel booking.”
- “Refer a friend and receive a reward.”
The distinction matters because not every SMS a business sends to a customer is a marketing message.
The DNC provisions cover certain types of communications that are not considered unsolicited marketing messages, including service-related messages, market research, charitable or religious causes, and messages directed at businesses rather than individuals.
Consider the difference between these two messages:
“Your appointment at ABC Clinic is tomorrow at 10 am.”
and:
“Your appointment is tomorrow. Book another treatment this month and receive 20% off.”
The first is a service reminder. It relates directly to an existing appointment and does not introduce a promotional offer.
The second goes further by promoting another service and offering a discount. That promotional element means you should assess the message under the applicable telemarketing and consent requirements.
This is why you should look at the purpose and content of the message, rather than assuming that every SMS sent to an existing customer is automatically exempt from marketing rules.
A customer relationship does not, by itself, mean you can send any type of promotional SMS. Before launching a campaign, consider what you are sending, who you are sending it to and whether you have the appropriate consent to contact them for marketing purposes.
What Are the PDPA and DNC Rules for Promotional SMS in Singapore?
When you send promotional SMS in Singapore, you may need to consider both the Personal Data Protection Act 2012 (PDPA) and the Do Not Call (DNC) Registry. They are related, but they address different aspects of your marketing activity.
The PDPA is Singapore’s broader data protection law. It governs how organisations collect, use and disclose personal data and generally requires organisations to obtain consent for these activities unless an exception applies. It also gives individuals the ability to withdraw consent, subject to reasonable notice and applicable requirements.
The DNC, on the other hand, focuses specifically on telemarketing communications sent to Singapore telephone numbers. Individuals can register their numbers if they do not wish to receive unsolicited telemarketing messages. The Registry has separate registers covering voice calls, text messages such as SMS and MMS, and fax messages.
So, when you are planning an SMS marketing campaign, it is important not to treat PDPA compliance and DNC compliance as the same thing.
A simple way to think about the distinction is:
- PDPA: How are you collecting, using and managing the customer’s personal data?
- DNC: Are you permitted to send this type of telemarketing message to this Singapore telephone number?
Depending on your campaign and how you obtained and use customer data, both frameworks may be relevant. This is why having a customer’s phone number does not automatically mean you can send them promotional SMS.
Before you send a campaign, you should consider the source of the number, the consent obtained, the purpose of the message, and whether the recipient’s number is subject to the applicable DNC requirements.
How Does the PDPA Apply to Promotional SMS Marketing in Singapore?
The PDPA sets out Singapore’s general framework for how organisations collect, use and disclose personal data. For SMS marketing, this matters because a customer’s mobile number can be personal data when it can be associated with an identifiable individual.
The PDPA generally requires you to obtain consent before collecting, using, or disclosing personal data for a particular purpose. You should also let customers know why you are collecting, using or disclosing their data, and avoid using it for purposes they were not informed about.
For SMS marketing in Singapore, it helps to think about the entire customer data journey:
Collection → Notification → Consent → Marketing use → Opt-out → Suppression
For example, a retailer might ask for a customer’s mobile number when they create an account. Having the number does not automatically mean you can use it for every future marketing purpose.
You need to consider what the customer was told when their number was collected, what consent they provided and whether that consent covers the promotional communications you intend to send.
The same principle applies when you collect customer data through purchases, registrations, events or other touchpoints. Your SMS marketing workflow should reflect the permission the customer actually gave you – not simply the data you happen to have.
And when a customer withdraws their consent or opts out, your processes should ensure that they are no longer included in future marketing communications where required.
This makes consent management more than a one-time checkbox. It is an ongoing part of how you collect, use and manage customer data throughout the marketing journey.
What does the PDPA mean for a Singapore business sending promotional SMS?
If you are sending promotional SMS, you should be able to answer a few basic questions about every customer you contact:
- Where did you get the customer’s mobile number?
- Why was the number collected?
- What was the customer told the number would be used for?
- Did the customer consent to receiving marketing communications?
- What channels does that consent cover, such as SMS or voice calls?
- How can the customer withdraw their consent?
- How do you record and apply withdrawal requests to future campaigns?
These questions become particularly important when your SMS campaigns are connected to a CRM, marketing automation platform or customer database.
You may have the same customer’s mobile number stored across several systems. If that customer opts out of marketing, removing the number from just one campaign list may not be enough. Your opt-out and suppression processes need to work across the relevant systems to prevent the customer from being included in future promotional campaigns.
How Does the Do Not Call (DNC) Registry Affect SMS Marketing in Singapore?
The Do Not Call (DNC) Registry allows individuals to opt out of unsolicited telemarketing messages sent to their Singapore telephone numbers. It has separate registers for voice calls, text messages including SMS/MMS, and fax messages.
For businesses, the practical question is simple: is the SMS you are sending a telemarketing message, and do you have a valid basis for sending it without a DNC check?
When does a business need to check the DNC Registry?
The first step is to look at what the message is actually trying to achieve.
For example:
Promotional SMS:
“Weekend sale! Enjoy 20% off all shoes. Shop now: [link]”
Service message:
“Your order #12345 has been dispatched and will arrive tomorrow.”
The first message promotes a commercial offering and should be assessed under the applicable DNC requirements. The second relates directly to an existing transaction and is not automatically treated as telemarketing simply because it is sent to a customer’s mobile number.
The distinction becomes less clear when you combine service information with a promotion:
“Your order is arriving tomorrow. While you’re waiting, enjoy 20% off your next purchase.”
The first sentence is operational. The second introduces a promotional purpose.
Adding promotional content to a transactional notification does not automatically make the communication transactional. If the message is partly intended to promote a product, service or commercial opportunity, you should assess the message based on its overall purpose and content.
This is particularly important when designing automated SMS workflows. A message that starts as a legitimate service notification can take on a marketing purpose if promotional content is added later in the workflow.
Does the DNC Registry apply to every type of SMS in Singapore?
The DNC provisions apply specifically to telemarketing messages, not every SMS a business sends.
Certain types of messages fall outside the DNC provisions, including some market research, charitable or religious, employment-related and government communications. Messages relating to products or services a customer has already purchased, such as warranty, recall, safety or delivery information, may also fall outside the definition of telemarketing.
This distinction matters when your business uses SMS for different parts of the customer journey. A single messaging programme might include:
- Transaction confirmations
- Delivery updates
- Appointment reminders
- Account notifications
- Authentication messages
- Promotional campaigns
These messages may serve very different purposes, so you should not apply a blanket rule to every SMS in your database. Each use case should be assessed based on what the message is intended to achieve and whether it falls within the scope of telemarketing.
There is also a timing consideration when you perform DNC checks.
Under the current PDPC guidance, DNC Registry results received from 1 February 2021 onwards are valid for 21 days. If your organisation continues telemarketing after that period, you should perform another check.
This is particularly important for recurring or ongoing SMS campaigns. A business cannot necessarily check its database once and assume that the results remain valid indefinitely. If your campaign continues beyond the validity period, your DNC-checking process needs to account for that.
What Consent and Opt-Out Conditions Are Required for Promotional SMS?
For promotional SMS in Singapore, businesses should make sure recipients have either clear and unambiguous consent to receive the relevant marketing messages or that another applicable DNC exception applies.
Where clear consent has been obtained, organisations generally do not need to check the DNC Registry for those specified messages. However, the consent should be properly documented so the business can demonstrate what the individual agreed to receive and when that consent was obtained.
In practice, consent should make the marketing purpose clear. For example, a sign-up form stating:
“I agree to receive promotional offers and updates from ABC by SMS.”
is more explicit than simply collecting a customer’s mobile number during checkout.
The distinction matters because having a customer’s mobile number is not the same as having consent to use it for marketing. Businesses should retain appropriate records showing when and how consent was obtained, what the individual was told, and what types of communications they agreed to receive.
Consent is also not necessarily permanent. Individuals can withdraw their consent, and your business will need to provide an appropriate way for them to do so and act on the withdrawal accordingly.
For businesses running ongoing campaigns, keeping consent and communication preferences up to date is just as important as obtaining consent in the first place. Using 8×8 CPaaS’s services to manage SMS campaigns can help centralise campaign operations and reporting, making it easier for your teams to monitor messaging activity and manage customer communication workflows.
How Do PDPA, DNC and Consent Work Together?
The easiest way to understand the three concepts is to treat them as related but separate considerations.
| PDPA | DNC Registry | Consent | |
| What does it address? | Broader personal data protection | Unsolicited telemarketing to Singapore telephone numbers | Whether an individual has agreed to a specified marketing use |
| Does it apply only to SMS? | No | No – also covers voice calls and fax | No |
| Relevant to SMS marketing? | Yes | Yes, where the message is telemarketing | Yes |
| Does DNC registration equal withdrawal of all PDPA consent? | No | DNC is a separate framework | Depends on what consent was withdrawn |
The practical takeaway is that businesses should not treat “PDPA compliant”, “DNC checked” and “customer opted in” as interchangeable statements.
Instead, your SMS marketing workflow should consider all three where relevant – from how the customer’s number was collected, to whether they agreed to receive marketing, to whether the intended message falls within the DNC provisions.
What Should Businesses Check Before Sending Promotional SMS in Singapore?
A practical compliance checklist can help your team catch potential issues before a campaign reaches customers.
1. Identify the message type
Start by determining what the SMS is actually intended to do. Is it:
- Promotional or telemarketing
- Transactional
- A service notification
- An appointment or delivery reminder
- A customer service communication
Do not assume that adding a promotional offer to an otherwise operational message makes the entire SMS transactional. Look at the purpose and content of the message as a whole.
2. Check the consent status
Determine whether the recipient has provided clear and unambiguous consent to receive the relevant marketing communication.
Keep appropriate records showing when and how consent was obtained, what the customer was told and what they agreed to receive.
3. Check the DNC Registry where required
If the message falls within the DNC provisions and no applicable consent or exception applies, check the relevant DNC Registry before sending.
For recurring campaigns, also make sure your process accounts for the validity period of DNC checks, rather than relying indefinitely on an earlier result.
4. Review the message
Before sending, check that the SMS meets the applicable requirements for identifying the organisation and providing the required contact or opt-out information.
This is also a good opportunity to review the message itself. Make sure any promotional content is clear about what is being offered and does not conflict with the customer’s communication preferences.
5. Apply opt-outs
If a customer withdraws consent or otherwise requests not to receive marketing communications, make sure their preference is applied across the relevant campaign and customer lists.
An opt-out should not simply remove someone from one campaign if their number remains active in another marketing workflow.
6. Keep records
Maintain appropriate records of consent, DNC checks, campaign lists and withdrawal requests.
This gives your organisation an auditable process and makes it easier to investigate a customer complaint, review a campaign or demonstrate how your messaging decisions were made.
How Can 8×8 CPaaS Support Effective & Compliant Promotional SMS Marketing in Singapore?
For promotional SMS campaigns in Singapore, having the right infrastructure is only part of the equation. Your campaigns also need to fit into your processes for consent, DNC checks, Sender ID registration and campaign management.
8×8 CPaaS can help you put the right SMS infrastructure and processes in place, from Sender ID support and campaign management to reporting, integrations and dedicated support, so your team has greater visibility and control over how promotional messages are sent.
The 8×8 Connect platform is an intuitive, all-in-one multi-channel communications management portal that brings SMS, voice and messaging apps together in a single dashboard.
- Support for Sender ID requirements: Use a custom Sender ID for your business communications, with support for Singapore’s Sender ID registration requirements.
- Large-scale messaging: Send millions of messages through a single platform, making it suitable for businesses running high-volume customer communications and marketing campaigns.
- Real-time analytics and reporting: Monitor campaign activity and messaging outcomes through real-time reports, giving marketing teams data they can use to evaluate and optimise campaigns.
- Multi-channel communication: Extend campaigns beyond SMS by connecting with voice and supported messaging apps, helping businesses maintain more consistent customer communications across channels.
- SMS API integration: For businesses that need communications embedded into their own systems, 8×8 CPaaS provides SMS APIs, reporting APIs and integration resources.
Talk to our experts to learn how 8×8 CPaaS can help you build a more controlled, scalable and compliant approach to promotional SMS marketing in Singapore.
