Privacy Policy – ph.888 Philippines Gaming Platform

1. About This Privacy Policy

1.1 This Privacy Policy ("Policy") describes how ph.888 ("Platform," "we," "us," "our"), the operator of the online gaming platform accessible at ph888.lat, collects, uses, stores, discloses, and otherwise processes personal information relating to registered players and visitors to the Platform ("you," "Data Subject").

1.2 This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC").

1.3 This Policy must be read together with the ph.888 Terms & Conditions, which govern your use of the Platform. By accessing ph.888 or registering an account, you acknowledge that you have read, understood, and agree to this Policy.

2. Personal Data We Collect

ph.888 collects the following categories of personal data depending on your interaction with the Platform:

ph.888 does not collect sensitive personal information as defined under the DPA (e.g., health records, religious beliefs, political affiliation) except where required by applicable Philippine gaming regulations for responsible gaming assessments.

3. How We Collect Personal Data

ph.888 collects personal data through the following channels:

• Directly from you — during account registration, KYC submission, deposit and withdrawal requests, customer support interactions, and promotional opt-ins;
• Automatically — through cookies, web analytics, and server logs when you access the ph.888 Platform;
• From payment processors — GCash, PayMaya, BPI Online, BDO Online, and other integrated payment channels transmit transaction confirmation data to ph.888 upon processing of deposits and withdrawals;
• From identity verification services — third-party KYC and fraud detection providers may return identity verification results to ph.888 in connection with account opening or enhanced due diligence procedures.

4. Purposes of Processing

ph.888 processes personal data for the following purposes:

• Registration, management, and authentication of player accounts on ph.888;
• Processing deposits, withdrawals, and account balance transactions;
• Identity verification and KYC compliance, including age verification to enforce the 21+ requirement;
• Detection, investigation, and prevention of fraud, money laundering, and other prohibited conduct;
• Compliance with Anti-Money Laundering Act (AMLA) reporting obligations and PAGCOR regulatory requirements applicable to ph.888;
• Administration of responsible gaming tools, including deposit limits, self-exclusion, and problem gambling monitoring;
• Customer support and dispute resolution;
• Sending account-related service communications (e.g., transaction confirmations, security alerts);
• Sending promotional communications, where the player has opted in to receive them;
• Platform security, performance monitoring, and technical maintenance;
• Statistical and analytical purposes to improve the ph.888 platform and player experience.

5. Legal Bases for Processing

Under the DPA, ph.888 processes personal data on the following legal grounds:

• Contractual necessity — processing required to perform the agreement between ph.888 and the player (account operation, payment processing);
• Legal obligation — processing required to comply with applicable Philippine law, including AMLA, PAGCOR regulations, and NPC directives;
• Legitimate interests — fraud prevention, platform security, and aggregate analytics, balanced against players' privacy rights;
• Consent — for optional promotional communications and for any processing activities for which ph.888 has obtained your specific, informed consent.

6. Data Sharing and Disclosure

6.1 ph.888 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes.

6.2 ph.888 may share personal data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:

• Payment processors (GCash, PayMaya, partner banks) — for deposit and withdrawal processing;
• KYC and fraud detection providers — for identity verification and anti-fraud screening;
• Cloud infrastructure and IT service providers — for secure hosting and platform operations, under data processing agreements that bind them to confidentiality and DPA-compliant data handling;
• PAGCOR and other Philippine regulatory authorities — where required by law, regulation, court order, or lawful government request;
• Law enforcement agencies — where ph.888 is legally obligated to disclose data in connection with an investigation into suspected criminal conduct, including money laundering.

6.3 Any third-party service provider that processes personal data on behalf of ph.888 does so under a written data processing agreement that requires them to implement appropriate technical and organizational security measures and to process data only on ph.888's instructions.

7. Cookies and Tracking Technologies

7.1 ph.888 uses cookies and similar technologies (pixels, local storage) to operate core platform functions, maintain login sessions, prevent fraud, and collect aggregated analytics data on platform usage.

7.2 Essential cookies are required for the ph.888 platform to function and cannot be disabled. These include session authentication cookies, security tokens, and platform-state cookies.

7.3 Analytics cookies help ph.888 understand how players use the platform in aggregate — which game categories are most popular, where players encounter friction in the deposit flow, and similar operational insights. These cookies do not identify individual players for marketing profiling purposes.

7.4 You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of portions of the ph.888 platform.

8. Data Retention

8.1 ph.888 retains personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, and regulatory obligations.

8.2 Active player account data is retained for the duration of the account relationship. Upon account closure, ph.888 retains account and transaction records for a minimum of five (5) years to comply with AMLA record-keeping requirements applicable to gaming operators in the Philippines.

8.3 Customer support communications are retained for a minimum of two (2) years from the date of last interaction. KYC documents are retained for the period required by applicable regulatory guidance from PAGCOR and the Anti-Money Laundering Council (AMLC).

8.4 Data held solely on the basis of consent (e.g., promotional email opt-ins) is deleted promptly upon withdrawal of consent, subject to any overriding legal retention obligations.

9. Data Security

9.1 ph.888 implements technical and organizational security measures appropriate to the risk of the processing activities, including:

• 256-bit SSL/TLS encryption for all data transmitted between the player's device and the ph.888 platform;
• Encrypted storage of passwords and financial data at rest;
• Access controls and role-based permissions restricting employee access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of the ph.888 platform;
• Incident response procedures for detecting, containing, and notifying affected players and the NPC of personal data breaches, within the timeframes prescribed by the DPA.

9.2 No system is impenetrable. While ph.888 employs industry-standard security measures, we cannot guarantee absolute security. Players are responsible for maintaining the confidentiality of their own ph.888 login credentials.

10. Your Data Subject Rights

Under the DPA and its IRR, registered players and data subjects have the following rights with respect to their personal data held by ph.888:

• Right to be Informed — to be notified of how your personal data is collected and processed, as described in this Policy;
• Right of Access — to request a copy of the personal data ph.888 holds about you;
• Right to Rectification — to request correction of inaccurate or incomplete personal data;
• Right to Erasure or Blocking — to request deletion or blocking of data that is incomplete, outdated, false, unlawfully obtained, or no longer necessary for the purposes for which it was collected, subject to applicable legal retention obligations;
• Right to Object — to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Data Portability — to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Damages — to seek compensation for damages sustained as a result of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, in accordance with the DPA.

To exercise any of these rights, contact ph.888 via the official support channel. ph.888 will respond to verified requests within thirty (30) days as required by the DPA IRR.

11. Minors

11.1 ph.888 strictly does not knowingly collect personal data from individuals under 21 years of age. The ph.888 platform is operated exclusively for adults who meet the minimum age requirement set by Philippine gaming regulations.

11.2 If ph.888 discovers or has reason to believe that personal data of a person under 21 years of age has been collected through the platform, the associated account will be immediately suspended and all such data will be deleted, and any balances forfeited, consistent with the ph.888 Terms & Conditions on underage gambling.

12. Cross-Border Data Transfers

12.1 ph.888 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers located outside the Philippines (for example, certain cloud infrastructure providers), ph.888 ensures that appropriate contractual safeguards and data processing agreements are in place to maintain a level of data protection equivalent to that required under the DPA.

12.2 ph.888 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards as required by the NPC.

13. Changes to This Privacy Policy

13.1 ph.888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform functionality. Material changes will be communicated to registered players via the Platform notice board or via the mobile number or email registered to the player's ph.888 account, with at least seven (7) days' notice before the revised Policy takes effect.

13.2 Continued use of ph.888 after the effective date of any revision constitutes acceptance of the updated Privacy Policy. If you do not agree with the changes, please close your ph.888 account before the effective date.

14. Contact & Data Protection Officer

14.1 ph.888 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Privacy Policy. The ph.888 DPO may be contacted through the official ph.888 support channel.

14.2 For general privacy enquiries, data subject rights requests, or to report a suspected privacy concern, contact: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line of your enquiry.

14.3 If you believe ph.888 has not adequately addressed your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Details of how to contact the NPC are available on the NPC's official website.