phl88 Privacy Policy

phl88 ("phl88," "we," "us," or "our") operates the online gaming platform accessible at phl88.net, providing bingo, slot games, live casino, virtual casino, and related entertainment services to Filipino players nationwide — from Metro Manila and Cebu to Davao, Quezon City, and beyond.

For the purposes of the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations, phl88 acts as the Personal Information Controller with respect to the personal data of its members and website visitors.

phl88 is committed to processing your personal data in a manner that is consistent with the principles of transparency, legitimate purpose, and proportionality as required under the DPA and the regulations of the National Privacy Commission ("NPC") of the Philippines.

phl88 collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include the following:

• Full legal name as it appears on your government-issued Philippine ID;
• Date of birth (used to verify the 21+ age requirement);
• Philippine mobile number and email address;
• Residential address within the Philippines;
• Government-issued ID details (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID) submitted during KYC verification.

• GCash or PayMaya mobile wallet number;
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where provided for withdrawal purposes;
• Transaction history, including deposit amounts, withdrawal requests, and gaming activity records.

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Pages visited, session duration, and clickstream data on the phl88 Platform;
• Login timestamps and session activity logs.

• Records of your communications with phl88 customer support, including live chat transcripts and support ticket history;
• Feedback, survey responses, and promotional opt-in preferences.

phl88 collects personal data through the following means:

• Direct registration: Information you provide when creating your phl88 account, completing KYC verification, or updating your profile;
• Transactional activity: Data generated when you make deposits, request withdrawals, or participate in games on the Platform;
• Customer support interactions: Information shared when you contact our support team via live chat or other channels;
• Automated technologies: Cookies, web beacons, and similar tracking technologies that collect technical and usage data as you navigate the Platform (see Section 7);
• Third-party sources: Identity verification and fraud prevention service providers, payment processors, and, where permitted by law, publicly available sources.

phl88 uses your personal data for specific, legitimate purposes only. The table below summarizes the primary purposes for which we process your data:

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, phl88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the phl88 Terms and Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering laws, PAGCOR regulations, and the DPA itself;
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent that you may withdraw at any time.

phl88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

Third-party companies that provide services on our behalf, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting services, and customer support platforms. These providers are contractually bound to process your data only on phl88's instructions and in accordance with the DPA.

Where required by Philippine law or a valid legal order, phl88 may disclose your personal data to government agencies, regulatory bodies (including PAGCOR and the Anti-Money Laundering Council), or law enforcement authorities.

In the event of a merger, acquisition, or sale of all or part of phl88's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

phl88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and analyze usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled;
• Functional cookies: Remember your preferences, such as language settings and display options, to personalize your phl88 experience;
• Analytics cookies: Collect anonymized data about how visitors use the Platform, helping us improve performance and content;
• Marketing cookies: Used only with your consent to deliver relevant promotional content about phl88 games and offers.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phl88 Platform.

phl88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. Our general retention periods are as follows:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing preferences: Retained until you withdraw consent or close your account;
• Technical and usage data: Retained for up to twelve (12) months from collection.

Upon expiry of the applicable retention period, phl88 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

phl88 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phl88 Platform;
• Encryption of sensitive data at rest, including financial and identity information;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of our systems;
• Incident response procedures to detect, report, and address personal data breaches in accordance with NPC notification requirements.

While phl88 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your phl88 Login credentials confidential and for notifying us immediately if you suspect any unauthorized access to your account.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phl88:

• Right to be informed: You have the right to know what personal data phl88 collects about you and how it is used;
• Right of access: You may request a copy of the personal data phl88 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. phl88 will respond to all verified requests within thirty (30) days in accordance with NPC guidelines.

The phl88 Platform is strictly intended for individuals aged 21 years and above. phl88 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered on the phl88 Platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

In certain circumstances, phl88 may transfer your personal data to service providers or partners located outside the Philippines. Where such transfers occur, phl88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012, including contractual data protection clauses and, where applicable, NPC-approved transfer mechanisms.

phl88 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or a valid legal basis under the DPA.

phl88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes, we will notify registered members by posting a prominent notice on the Platform or by sending a notification to your registered mobile number.

The "Last updated" date at the top of this page indicates when this Privacy Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how phl88 protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phl88, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that phl88 has not handled your personal data in accordance with the Data Privacy Act of 2012.