phil88 Privacy Policy

1Introduction

Phil88 ("we," "our," "us," or "the Company") operates the online gaming platform accessible at phil88.win ("the Platform"), licensed by the Philippine Amusement and Gaming Corporation (PAGCOR). As a data controller subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), we are committed to protecting the personal information of every player and visitor who interacts with the Platform.

This Privacy Policy explains in clear terms what personal information we collect from you, why and how we process it, with whom we share it, and what rights you have under Philippine law. We encourage every phil88 player — whether you're logging in from Makati, Cebu IT Park, or anywhere in the Philippines — to read this document carefully.

2Data Controller Identity

Phil88 is the data controller for personal information collected through the Platform. As data controller, we determine the purposes and means by which your personal information is processed. Our designated Data Protection Officer (DPO) can be contacted at the email address provided in Section 13 of this Policy.

Phil88 operates under a valid PAGCOR license. All data processing activities are conducted in accordance with PAGCOR's operational and compliance requirements, as well as the National Privacy Commission (NPC) guidelines issued under RA 10173.

3Personal Information We Collect

Phil88 collects the following categories of personal information, depending on the nature of your interaction with the Platform:

3.1 Registration & Account Information

• Full legal name as it appears on a government-issued ID
• Date of birth (to verify you are at least 21 years of age)
• Email address and mobile phone number
• Username and encrypted password (passwords are never stored in plaintext)
• Residential address in the Philippines
• Nationality and government ID number (collected at KYC stage)

3.2 Payment & Financial Information

• GCash mobile number, PayMaya account reference, or bank account details used for deposits and withdrawals
• Transaction history including deposit amounts, withdrawal requests, and bonus transactions
• Source of funds information where required by anti-money laundering regulations

3.3 KYC Verification Documents

• Copy of government-issued Philippine ID (e.g., PhilSys, passport, UMID, SSS, driver's license, or PRC ID)
• Selfie photograph taken during the verification process
• Proof of address where required (e.g., utility bill, bank statement)

3.4 Technical & Usage Data

• IP address and geolocation data (country/region level)
• Device type, operating system, and browser type
• Session start and end times, pages visited, and actions taken on the Platform
• Game history, wager amounts, win/loss data, and RTP exposure

3.5 Communications Data

• Content of support chat transcripts and email correspondence
• Feedback, survey responses, and complaint records

4How We Use Your Personal Information

Phil88 processes your personal information for the following specific purposes:

1. Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your account settings.
2. Age verification and KYC compliance: To confirm you meet the minimum age requirement of 21 years and to comply with PAGCOR's player verification obligations.
3. Processing deposits and withdrawals: To facilitate payments to and from your GCash, PayMaya, or bank account, and to maintain accurate transaction records.
4. Game provision and platform operation: To deliver gaming services, calculate and credit winnings, manage bonus balances, and maintain game history records.
5. Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct, including sharing data with PAGCOR and law enforcement authorities where required.
6. Responsible gaming compliance: To monitor gaming patterns, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of problem gambling as required under PAGCOR responsible gaming standards.
7. Customer support: To respond to your inquiries, resolve disputes, and maintain records of communications for quality assurance.
8. Legal and regulatory compliance: To fulfil reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities.
9. Service communications: To send you transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional offers from phil88.

Phil88 does not use your personal information for any purpose that is incompatible with those listed above without first obtaining your consent or establishing a new lawful basis for processing.

5Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phil88 processes your personal information on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you as a registered player, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLC reporting obligations, tax regulations, and other applicable Philippine law.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and interests.
• Consent: Processing for optional purposes such as promotional email communications, where we have obtained your explicit consent at the time of registration or subsequently. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Data Sharing & Disclosure

Phil88 does not sell, rent, or trade your personal information to third parties for commercial or advertising purposes. We share your information only in the following circumstances:

6.1 Regulatory Authorities

Phil88 is obligated to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies where required by law, court order, or valid regulatory directive.

6.2 Service Providers

Phil88 engages third-party service providers who process personal information on our behalf as data processors, including: payment gateway providers processing GCash and bank transactions; KYC identity verification partners; game software providers who receive game activity data for technical purposes; and cloud infrastructure providers on whose servers the Platform operates. All data processors are contractually required to protect personal information in accordance with RA 10173 and to process data only on phil88's documented instructions.

6.3 Legal Proceedings

Phil88 may disclose personal information to law enforcement agencies, courts, or other competent authorities where required to investigate, prevent, or respond to fraud, crime, or other illegal activities, or where such disclosure is required by a valid legal order issued by a Philippine court or authority.

7Data Security

Phil88 implements technical and organisational security measures appropriate to the risk level of the personal information we process. Key security measures include:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data transmitted between your device and phil88 servers
• Encryption at rest for sensitive personal information including ID documents, payment details, and biometric verification data
• Role-based access controls limiting data access to authorised personnel on a need-to-know basis
• Regular penetration testing and vulnerability assessments of the Platform
• Multi-factor authentication requirements for staff accessing production systems containing player data
• Incident response procedures and breach notification protocols consistent with NPC breach reporting requirements

Notwithstanding these measures, no security system is impenetrable. In the event of a personal data breach that poses a real risk to your rights and freedoms, phil88 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players where required by NPC guidelines.

8Data Retention

Phil88 retains personal information only for as long as necessary to fulfil the purposes described in this Policy, or as required by law. The following retention periods apply:

• Active account data (registration details, KYC documents, transaction records): retained for the duration of the account relationship.
• Post-closure retention: Following account closure, phil88 retains transaction records, KYC documents, and compliance-related data for a minimum of five (5) years as required by PAGCOR anti-money laundering regulations and AMLC record-keeping rules.
• Support communications: Chat logs and email correspondence are retained for two (2) years from the date of interaction.
• Technical logs: Server access logs and session data are retained for six (6) months and then securely deleted.
• Self-excluded players: Exclusion records are retained for the duration of the exclusion period plus five (5) years to prevent re-registration in breach of a self-exclusion order.

When personal information is no longer required, it is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

9Cookies & Similar Technologies

Phil88 uses cookies and similar local storage technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly, including maintaining your logged-in session, remembering your language preference, and ensuring security tokens are valid. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Used to remember your game lobby preferences, display settings, and last-visited sections. These improve your experience but are not strictly necessary.
• Analytics cookies: Phil88 uses first-party analytics tools to understand how players use the Platform in aggregate — which pages are visited most, where players encounter issues, and how game categories perform. This data is not linked to identifiable individuals.

Phil88 does not use third-party advertising cookies or tracking pixels. You may clear cookies at any time using your browser settings. Clearing essential cookies will log you out of your current session.

10Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal information held by phil88:

1. Right to be Informed: The right to know how your personal information is collected and processed — which is the purpose of this Privacy Policy.
2. Right of Access: The right to request a copy of the personal information phil88 holds about you.
3. Right to Rectification: The right to request correction of inaccurate or incomplete personal information in your account.
4. Right to Erasure (Right to be Forgotten): The right to request deletion of your personal information, subject to phil88's legal obligations to retain certain data under PAGCOR and AMLC regulations.
5. Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes.
6. Right to Data Portability: The right to receive your personal information in a structured, commonly used format.
7. Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact our Data Protection Officer using the contact details in Section 13. Phil88 will respond to verified data subject requests within thirty (30) calendar days of receipt, or within the period prescribed by NPC guidelines.

11Children's Privacy & Age Restriction

The phil88 Platform is strictly intended for individuals who are at least twenty-one (21) years of age, as required by PAGCOR regulations. Phil88 does not knowingly collect personal information from persons under 21. Registration requires a declaration of age at the time of sign-up, and KYC verification confirms age via government-issued ID before the first withdrawal is processed.

If phil88 becomes aware that personal information has been collected from a person under 21 years of age, the Account will be immediately closed, all balances will be handled in accordance with PAGCOR guidelines, and the personal information will be securely deleted to the extent permitted by applicable law.

Parents and guardians in households where minors may have access to devices used to access phil88 are strongly advised to enable device-level parental controls.

12Changes to This Privacy Policy

Phil88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or PAGCOR requirements. When material changes are made, we will notify registered players via email to their registered address and post a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect, except where immediate changes are required by law.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. We encourage you to review this page periodically.

13Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or phil88's data processing practices, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) if you believe that your rights under RA 10173 have been violated by phil88. Information on how to file an NPC complaint is available on the NPC's official website.