888phil Privacy Policy

01 Introduction

888phil ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of all users ("you," "your," or "the User") who access and use the 888phil online gaming platform, including its website, mobile application, and any related services (collectively, "the Platform").

This Privacy Policy describes how 888phil collects, uses, stores, shares, and protects your personal data in connection with your use of the Platform. It also outlines the rights available to you under applicable Philippine data protection law, specifically the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

By registering for an account or continuing to use the 888phil Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the Platform and contact us to request account closure.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 888phil acts as the Personal Information Controller in respect of the personal data collected through the Platform.

As Personal Information Controller, 888phil determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data protection law.

If you have any questions, concerns, or requests relating to the processing of your personal data, you may contact our Data Protection Officer at the contact details provided in Section 15 of this policy.

03 Data We Collect

888phil collects the following categories of personal data in connection with your use of the Platform:

We do not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID numbers), it is processed solely for the purposes stated above and is subject to enhanced security measures.

04 How We Collect Your Data

888phil collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies. Please refer to Section 9 for more details on our use of cookies.
• Payment Processors: Transaction confirmation data received from approved payment providers such as GCash, PayMaya, BPI, BDO, and Metrobank when you conduct financial transactions on the Platform.
• Identity Verification Services: Data received from third-party KYC and identity verification service providers engaged by 888phil to assist with regulatory compliance.
• Regulatory Authorities: In certain circumstances, 888phil may receive information from PAGCOR or other Philippine regulatory bodies in connection with licensing compliance or investigations.

05 How We Use Your Data

888phil uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, verify, and manage your 888phil account, including processing your registration and authenticating your identity on login.
• Service Delivery: To provide you with access to the games, features, and services available on the 888phil Platform.
• Financial Transactions: To process deposits, withdrawals, and other financial transactions, and to maintain accurate records of your account balance and transaction history.
• Regulatory Compliance: To comply with our obligations under PAGCOR's licensing framework, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws and regulations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behavior and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the 888phil Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time through your account settings.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with your use of the Platform.

06 Legal Basis for Processing

Under the Data Privacy Act of 2012, 888phil processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 888phil — specifically, to provide you with access to the Platform and its services in accordance with our Terms & Conditions.
• Legal Obligation: Processing is necessary for compliance with legal obligations applicable to 888phil, including PAGCOR licensing requirements, AML obligations, and tax reporting requirements under Philippine law.
• Legitimate Interests: Processing is necessary for the legitimate interests of 888phil, including fraud prevention, platform security, and improvement of our services, provided that such interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as the sending of direct marketing communications and the use of non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Data Sharing and Disclosure

888phil does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment processors, for the purpose of processing your financial transactions.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged to assist with regulatory compliance and fraud prevention.
• Technology and Infrastructure Providers: Cloud hosting, data storage, and platform technology providers who process data on our behalf under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or in response to a lawful request.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by 888phil in connection with the operation of the Platform, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 888phil's business, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

08 Data Retention

888phil retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and applicable AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act and related regulations.
• KYC and Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process.
• Customer Support Records: Retained for a period of three (3) years from the date of the last interaction, or longer where required for the resolution of an ongoing dispute.
• Marketing Consent Records: Retained for as long as you remain a registered user and for a reasonable period thereafter to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with 888phil's data disposal procedures.

09 Cookies and Tracking Technologies

888phil uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session security, and gather analytical data. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, authentication, and security. These cookies cannot be disabled without affecting core Platform functionality.
• Functional Cookies: Used to remember your preferences and settings, such as language preferences and display options, to provide a more personalized experience.
• Analytical Cookies: Used to collect aggregated, anonymized data about how users interact with the Platform, helping us identify areas for improvement. This data does not identify you personally.
• Marketing Cookies: Used to deliver relevant promotional content and track the effectiveness of our marketing campaigns. These cookies are only placed with your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For strictly necessary cookies, no consent is required as they are essential to the operation of the service you have requested.

10 Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 888phil:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data that 888phil holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by 888phil. You may update certain information directly through your account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 888phil's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that your data protection rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 15. We will respond to all verified requests within thirty (30) days of receipt, in accordance with the DPA's implementing rules.

11 Data Security

888phil implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 888phil Platform.
• Encryption of sensitive data at rest, including financial data and identity verification documents.
• Role-based access controls limiting access to personal data to authorized personnel on a strict need-to-know basis.
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform's infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Staff training on data protection obligations and security best practices.
• Incident response procedures for the detection, containment, and notification of personal data breaches.

While 888phil takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 888phil will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012.

12 Children's Privacy and Age Restriction

The 888phil Platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR's online gaming regulations applicable in the Philippines. 888phil does not knowingly collect personal data from individuals under the age of 21.

If 888phil becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any winnings accrued by an underage user will be forfeited.

13 Third-Party Links

The 888phil Platform may contain links to other internal pages and resources. This Privacy Policy applies solely to personal data collected and processed by 888phil in connection with the Platform. It does not apply to any third-party websites, applications, or services that may be accessible through links on the Platform.

888phil is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party services you access in connection with your use of the Platform.

14 Amendments to This Policy

888phil reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered users through one or more of the following methods: a prominent notice on the Platform, an email to your registered address, or a notification within your account dashboard.

The date of the most recent revision is always displayed at the top of this page. Your continued use of the 888phil Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the amended policy, you must cease using the Platform and may request account closure by contacting our support team.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 888phil, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that your data protection rights have been violated. Information about how to contact the NPC is available through official Philippine government channels.

For general support inquiries, please visit our FAQ page. For information about responsible gaming tools and self-exclusion, please visit our Responsible Gaming page.