888phil Privacy Policy

1 Introduction

888phil ("we," "us," "our") is committed to protecting the privacy and personal data of all individuals who use the 888phil platform. This Privacy Policy describes how we collect, use, store, share, and protect your personal information in connection with your use of the 888phil website at https://888phil.app and all associated services.

This policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It is also consistent with the data protection requirements imposed by the Philippine Amusement and Gaming Corporation (PAGCOR) on licensed online gaming operators.

We encourage you to read this Privacy Policy carefully and in full. If you have any questions about how we handle your personal data, please contact our Data Protection Officer using the details provided in Section 15.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, 888phil acts as the personal information controller in respect of all personal data collected through the 888phil platform.

As the personal information controller, 888phil determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine law.

3 Personal Data We Collect

3.1 Registration and Identity Data

When you create an 888phil account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, province, and postal code)
• Username and encrypted password
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and anti-money laundering requirements, we collect:

• Copies of government-issued photo identification (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, PRC ID, or voter's ID)
• Proof of address documents (e.g., utility bills, bank statements, or barangay certificates)
• Selfie or live photo for identity matching purposes
• Proof of payment method ownership where required

3.3 Financial and Transaction Data

In connection with deposits, withdrawals, and gaming activity, we collect:

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash account name, bank account name and last four digits)
• Gaming history, wager amounts, and account balance records
• Bonus and promotional credit records

3.4 Technical and Usage Data

When you access the 888phil platform, we automatically collect certain technical information:

• IP address and approximate geolocation
• Device type, operating system, and browser type and version
• Pages visited, features used, and session duration
• Referring URL and exit pages
• Cookie identifiers and similar tracking technologies (see Section 8)

3.5 Communications Data

If you contact our customer support team or communicate with us through any channel, we collect records of those communications, including the content of messages, timestamps, and any attachments you provide.

3.6 Responsible Gaming Data

Where you use our responsible gaming tools — such as deposit limits, loss limits, or self-exclusion — we record your preferences and the dates on which those tools were activated or modified. This data is used solely to enforce your responsible gaming choices and is treated with the highest level of confidentiality.

4 How We Collect Your Data

888phil collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or use any feature of the platform that requires you to provide information.
• Automatically — through cookies, web beacons, server logs, and similar technologies when you access and navigate the 888phil platform (see Section 8 for details on our cookie practices).
• From third-party service providers — including identity verification providers, payment processors (such as GCash, Maya, and partner banks), fraud detection services, and analytics providers, where such sharing is necessary for the operation of the platform.
• From regulatory authorities — where PAGCOR or other competent Philippine authorities share information with us in connection with our regulatory obligations.

5 How We Use Your Personal Data

888phil uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your 888phil account, including verifying your identity and age (21+), processing your registration, and managing your account settings.
• Service delivery: To provide you with access to the games, features, and services available on the 888phil platform, including processing deposits, withdrawals, and bonus credits.
• Regulatory compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations under Republic Act No. 9160 (as amended), and other applicable Philippine laws and regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal or prohibited conduct on the platform.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To enforce responsible gaming tools you have activated, including deposit limits, loss limits, and self-exclusion orders.
• Marketing communications: To send you promotional offers, bonuses, and news about 888phil — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the 888phil platform.
• Legal proceedings: To establish, exercise, or defend legal claims in connection with the 888phil platform or your account.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, 888phil processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and 888phil — specifically, to provide you with access to the platform and its services.
• Legal obligation: Processing is required to comply with PAGCOR regulations, AML laws, tax reporting obligations, and other applicable Philippine legal requirements.
• Legitimate interests: Processing is necessary for 888phil's legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, processing is based on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing and Disclosure

888phil does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Service Providers

We engage trusted third-party service providers to assist in operating the 888phil platform, including identity verification providers, payment processors (GCash, Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), cloud hosting providers, fraud detection services, and customer support platforms. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities

888phil may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or other competent Philippine authorities where required by law, court order, or regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 888phil's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer in advance where required by law.

7.4 With Your Consent

We may share your data with other third parties where you have given your explicit consent to such sharing.

8 Cookies and Tracking Technologies

888phil uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the 888phil website.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies: Help us understand how Players use the platform so we can improve performance and user experience. Analytics data is aggregated and anonymized where possible.
• Marketing cookies: Used to deliver relevant promotional content. These are only activated with your consent.

8.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the 888phil platform. For marketing and analytics cookies, you may also update your preferences through your account settings at any time.

9 Data Security

888phil implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored at rest
• Multi-factor authentication options for account access
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Intrusion detection and prevention systems
• Secure data centers with physical access controls
• Staff training on data privacy and security obligations

While 888phil takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 888phil will notify the National Privacy Commission and affected data subjects in accordance with the timelines prescribed by the Data Privacy Act of 2012 and NPC regulations.

10 Data Retention

888phil retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and AML obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AML and tax reporting requirements.
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship, or longer if required by a regulatory authority.
• Customer support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and usage data: Retained for up to twelve (12) months, after which it is aggregated or anonymized.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal, as evidence of consent management.

When personal data is no longer required, it is securely deleted, anonymized, or destroyed in accordance with 888phil's data disposal procedures.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 888phil:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Privacy Policy.
• Right of access: You may request a copy of the personal data 888phil holds about you, along with information about how it is being processed.
• Right to rectification: You may request that inaccurate or incomplete personal data be corrected or updated.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our overriding legal obligations.
• Right to data portability: You may request that your personal data be provided to you in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 15. 888phil will respond to all data subject requests within thirty (30) days of receipt, or within such other period as may be prescribed by the NPC.

12 Children's Privacy and Age Restriction

The 888phil platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law governing casino-style online gaming. 888phil does not knowingly collect personal data from individuals under the age of 21.

If 888phil discovers or is notified that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, all associated data will be deleted to the extent permitted by law, and the matter may be reported to the relevant authorities.

If you are a parent or guardian and believe that your child has registered an account on the 888phil platform, please contact our Data Protection Officer immediately at the details provided in Section 15.

13 Cross-Border Data Transfers

888phil primarily processes and stores personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where we use internationally hosted cloud infrastructure or engage global service providers for fraud detection or analytics.

Where such cross-border transfers occur, 888phil ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers. 888phil will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without your consent or without implementing appropriate safeguards.

14 Changes to This Privacy Policy

888phil reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered Players by email or through a prominent notice on the 888phil platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this document indicates when the most recent revision was made. The current version of this Privacy Policy will always be available at https://888phil.app/privacy-policy. Your continued use of the 888phil platform after the effective date of any amendment constitutes your acknowledgment of the revised policy.

If you do not agree with any changes to this Privacy Policy, you should cease using the platform and may close your account in accordance with the Terms and Conditions.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 888phil, please contact our designated Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that 888phil has not handled your personal data in accordance with the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available on the NPC's official website.

This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. By continuing to use the 888phil platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.