php88 Privacy Policy

php88 is committed to protecting the privacy and personal data of all players across the Philippines — from Manila and Quezon City to Cebu, Davao, and every province in between. We recognise that trusting us with your personal information is a significant matter, and we take that responsibility seriously.

This Policy applies to all personal data processed in connection with: account registration and management; deposits and withdrawal transactions; participation in casino games, sports betting, bingo, live dealer games, sabong, and other platform services; customer support interactions; promotional and marketing communications; and any other interaction you have with the php88 platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, php88 acts as the personal information controller with respect to the personal data of its players and users. php88 determines the purposes and means of processing personal data collected through the php88 platform.

Where php88 engages third-party service providers — such as payment processors, game software providers, identity verification services, and analytics platforms — those parties act as personal information processors on behalf of php88 and are subject to appropriate data processing agreements that impose obligations consistent with this Policy.

For all data privacy-related inquiries, correction requests, or complaints, players may contact the php88 Data Privacy Officer at: [email protected]

php88 collects the following categories of personal data from players and users of the platform:

php88 collects personal data through the following means:

• Direct Collection: Information you provide when registering a php88 account, completing identity verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated Collection: Technical data collected automatically as you use the php88 platform, including through cookies, web beacons, server logs, and similar technologies. See Section 6 for details.
• Third-Party Sources: Information received from identity verification service providers, payment processors (including GCash, Maya, BPI, BDO, and other payment partners), and fraud detection services for the purpose of verifying your identity and preventing financial crime.
• Public Sources: Publicly available information used where necessary for compliance, fraud prevention, or due diligence purposes.

php88 processes your personal data on the following legal bases and for the following purposes:

php88 uses cookies and similar tracking technologies to operate and improve the platform, maintain your session state, remember your preferences, and analyse how the platform is used. The categories of cookies used include:

• Strictly Necessary Cookies: Essential for the operation of the php88 platform, including maintaining your login session and enabling secure transactions. These cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymised information about how players interact with the php88 platform — such as pages visited, session duration, and error events. This data helps us improve platform performance.
• Functional Cookies: Allow php88 to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Marketing Cookies: Used with your consent to deliver relevant promotional communications and measure the effectiveness of marketing campaigns. These are only set where you have provided consent.

Most browsers allow you to manage cookie settings, including blocking or deleting cookies. Note that disabling strictly necessary cookies may affect your ability to use the php88 platform. For more information on managing cookies, refer to your browser's help documentation.

php88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared with third parties only in the following circumstances:

• Payment Processors: Financial data is shared with payment service providers (including GCash, Maya, BPI, BDO, Metrobank, Visa, Mastercard, and others) strictly to process your deposits and withdrawal requests.
• Identity Verification Providers: Identity and document data may be shared with KYC service providers to verify your identity and age in accordance with regulatory requirements.
• Game Software Providers: Game activity data is shared with licensed game studio partners to the extent necessary to deliver and record game outcomes.
• Fraud Prevention & AML Services: Transaction and identity data may be shared with fraud detection and anti-money laundering compliance service providers.
• Customer Support Platforms: Communications data is processed through customer support platform providers operating under data processing agreements with php88.
• Regulatory & Law Enforcement Authorities: php88 will disclose personal data to Philippine regulatory bodies, law enforcement agencies, or courts where required to do so by applicable law or valid legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of php88's assets, personal data held by php88 may be transferred to the successor entity, subject to equivalent privacy protections.

php88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required or permitted by applicable law. The following general retention principles apply:

• Active Account Data: Personal and financial data is retained for the duration of your active player relationship with php88, plus any additional retention period required by regulatory or legal obligations.
• Closed Account Data: Following closure of a php88 account, personal data is typically retained for a minimum period of five (5) years to satisfy AML record-keeping obligations and to enable the resolution of any subsequent disputes or regulatory inquiries.
• Financial Transaction Records: Transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction in compliance with Philippine financial record-keeping requirements.
• Support Communications: Customer support records are typically retained for a period of two (2) years from the date of the interaction.
• Marketing Data: Marketing preference data is retained until you withdraw consent or request deletion, subject to any overriding legal retention requirements.

Once personal data is no longer required for any of the purposes described in this Policy and no overriding legal retention obligation applies, php88 will securely delete or anonymise the data.

php88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Security measures applied to the php88 platform and its data processing activities include:

• SSL/TLS Encryption: All data transmitted between your device and the php88 platform is protected using SSL/TLS encryption, ensuring that your personal and financial information is secured in transit.
• Password Security: Player passwords are stored using industry-standard cryptographic hashing. Passwords are never stored in plain text and are not accessible to php88 staff.
• Access Controls: Access to personal data within php88's systems is restricted on a need-to-know basis. Staff with access to player data are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication: php88 supports SMS-based two-factor authentication for player accounts to provide an additional layer of protection against unauthorised access.
• System Monitoring: php88's systems are monitored for unusual access patterns, login anomalies, and potential security threats. Suspected security incidents are investigated promptly.
• Secure Data Storage: Personal data is stored on secure servers with access controls, intrusion detection systems, and regular security assessments.

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in relation to your personal data held by php88. To exercise any of these rights, please contact the php88 Data Privacy Officer at [email protected]:

php88 will respond to data subject requests within a reasonable timeframe as required by applicable law. We may require identity verification before processing requests to ensure the security of your personal data.

The php88 platform is strictly intended for adults aged 21 years and older. php88 does not knowingly collect personal data from individuals under the age of 21. This age restriction is enforced during registration through age declaration and is verified through KYC processes prior to withdrawal processing.

If php88 becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, all data associated with the account will be deleted or rendered anonymous to the extent permitted by law, and any funds deposited will be returned to the depositing payment method after due verification.

If you are a parent or guardian and believe that a minor may have registered or used the php88 platform, please contact us immediately at [email protected].

php88 primarily processes and stores personal data within secure server environments. Where personal data is transferred to or processed by service providers located outside the Philippines — for example, internationally operating game software providers or fraud prevention services — such transfers are carried out only where:

• The recipient country has been determined to provide an adequate level of data protection; or
• Appropriate safeguards have been implemented through contractual obligations, such as standard contractual clauses, that impose data protection obligations on the recipient consistent with the requirements of the Data Privacy Act of 2012; or
• The transfer is necessary for the performance of the player account agreement (for example, to process payments through an international payment network).

Where international data transfers occur, php88 takes steps to ensure that your personal data continues to receive an equivalent level of protection to that afforded under Philippine law.

php88 may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, our data processing practices, or the services offered on the platform. The effective date and last updated date at the top of this Policy will be revised accordingly upon any update.

Where changes to this Policy are material, php88 will take reasonable steps to notify registered players — for example, through a notice on the platform or via your registered contact information — before the changes take effect. Your continued use of the php88 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how php88 is protecting your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by php88, please contact our Data Privacy Officer using the details below. php88 is committed to responding to all data privacy inquiries in a timely and professional manner.

If you are not satisfied with the response you receive from php88, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the regulatory body responsible for enforcing the Data Privacy Act of 2012.