php888 Privacy Policy

Effective Date: June 2026  |  Data Controller: php888  |  Governing Law: Republic Act No. 10173 (Data Privacy Act of 2012), Philippines

1. Data Controller

php888 ("php888," "we," "us," or "our") is the data controller responsible for the personal data collected through the php888 platform, including its website at php888.asia and associated mobile applications. php888 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is registered with the National Privacy Commission (NPC) as required under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA").

By creating an account or otherwise using the php888 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

2. Personal Data We Collect

2.1 Identity & Account Data

When you register for a php888 account, we collect the following categories of personal data: your legal full name, date of birth, gender, nationality, residential address in the Philippines, email address, and Philippine mobile number. This data is required to create and maintain your account and to verify your identity in compliance with PAGCOR's Know Your Customer (KYC) requirements.

2.2 Identity Verification Documents

To process withdrawals and to comply with the Anti-Money Laundering Act of 2001 (AMLA) and its amendments, php888 requires copies of government-issued identification documents. Acceptable documents include, but are not limited to: Philippine passport, Unified Multi-Purpose ID (UMID), driver's license, SSS ID, PhilHealth ID, Postal ID, and National ID (PhilSys). php888 may also collect a selfie or liveness check for biometric verification purposes.

2.3 Financial & Transaction Data

php888 records all financial transactions associated with your account, including deposit amounts and methods (GCash, Maya, BPI, BDO, Metrobank, GrabPay, 7-Eleven CLiQQ, Coins.ph, USDT TRC20), withdrawal requests and amounts, bonus credits, wagering activity, and account balance history. This data is necessary for the operation of our services and for compliance with Philippine financial reporting obligations.

2.4 Gaming & Behavioural Data

php888 collects data about your gaming activity on the Platform, including game sessions, betting history, game preferences, session durations, and responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods). This data is used to deliver personalised game recommendations, to enforce responsible gaming obligations, and to detect irregular or fraudulent activity.

2.5 Technical & Device Data

When you access php888, we automatically collect certain technical information: your IP address, device type, operating system, browser type and version, screen resolution, unique device identifiers, mobile network information (Globe, Smart, DITO), and geolocation data (where permitted by your device settings). This data is used for security monitoring, fraud prevention, and platform optimisation.

2.6 Communications Data

Records of your communications with php888's customer support team — including live chat transcripts, support ticket content, and any supporting documents you submit — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Collect Your Data

php888 collects personal data through the following means:

• Directly from you: when you register, complete KYC verification, make transactions, use gaming features, communicate with support, or respond to surveys and promotions.
• Automatically: through cookies, web beacons, server logs, and similar tracking technologies when you access the php888 Platform (see Section 10 for details).
• From third parties: from identity verification service providers, payment processors, fraud prevention partners, and marketing analytics tools engaged by php888 under contractual data processing agreements.
• From PAGCOR or other regulatory bodies: php888 may receive information from PAGCOR or law enforcement agencies in connection with regulatory inquiries or investigations.

4. Purposes & Legal Bases for Processing

php888 processes your personal data for the following purposes and on the following legal bases under the DPA:

• Account creation and service delivery — necessary for the performance of our contract with you as a registered player.
• Identity verification (KYC) and AML compliance — required by law under PAGCOR regulations and the AMLA, as amended.
• Payment processing — necessary for the performance of the contract and for compliance with financial regulations.
• Responsible gaming enforcement — required by PAGCOR's responsible gaming directives and in the legitimate interest of protecting players from problem gambling harm.
• Fraud detection and security — based on legitimate interest in maintaining the integrity and security of the php888 Platform.
• Marketing communications — based on your consent, which you may withdraw at any time by updating your communication preferences in your account settings or contacting php888 Support.
• Legal and regulatory compliance — as required by applicable Philippine laws, PAGCOR regulations, NPC directives, and court orders.

5. Disclosure of Personal Data

php888 does not sell your personal data. We disclose your data to the following categories of recipients only to the extent necessary for the stated purposes:

• Payment service providers (e.g., GCash, Maya, BPI, BDO, Metrobank, GrabPay, Coins.ph) — for the processing of deposits and withdrawals.
• Game software providers — to the extent necessary to run certified games on the php888 Platform; these providers are contractually prohibited from using player data for any purpose other than service provision.
• Identity verification and KYC partners — for the purpose of verifying player identity documents in compliance with PAGCOR requirements.
• PAGCOR and other government authorities — as required under PAGCOR's licensing conditions, the AMLA, and applicable Philippine law, including requests from the Anti-Money Laundering Council (AMLC) and law enforcement agencies.
• Legal and professional advisers — on a strictly confidential basis where necessary for legal proceedings, audits, or regulatory inquiries.
• IT and cloud infrastructure providers — who host and maintain php888's systems under binding data processing agreements with appropriate technical and organisational safeguards.

6. International Data Transfers

php888 primarily stores and processes data within the Philippines. Where personal data is transferred to or accessed from outside the Philippines — for example, in connection with internationally-hosted cloud services or game provider systems — php888 ensures that such transfers are protected by appropriate safeguards in accordance with NPC guidelines, including contractual clauses equivalent to those required under RA 10173 or adequacy decisions recognised by the NPC.

7. Data Retention

php888 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention requirements:

• Account and transaction records: retained for a minimum of five (5) years from account closure, in compliance with PAGCOR record-keeping requirements and the AMLA.
• KYC documents: retained for five (5) years from the date of the last transaction, in compliance with AMLC record-keeping rules.
• Gaming and behavioural data: retained for three (3) years from collection, unless required for longer by applicable law or active dispute resolution.
• Communication records: retained for two (2) years from the date of communication unless required for longer in connection with ongoing legal proceedings or regulatory investigations.
• Marketing data: retained until consent is withdrawn or for one (1) year of account inactivity, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or pseudonymised in accordance with NPC guidelines.

8. Security Measures

php888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and php888's servers.
• AES-256 encryption for sensitive data stored at rest, including payment information and identity documents.
• Role-based access controls limiting internal access to personal data to authorised personnel only on a need-to-know basis.
• Two-factor authentication (2FA) available for all player accounts and required for internal administrative systems.
• Continuous security monitoring, intrusion detection systems, and periodic penetration testing by independent security firms.
• Documented incident response and breach notification procedures in compliance with NPC Circular 2023-01.

While php888 takes all reasonable precautions to safeguard your data, no system is entirely immune to security risks. You are responsible for maintaining the security of your own login credentials and for reporting any suspected unauthorised access to php888 Support immediately.

9. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by php888:

• Right to be Informed: You have the right to be notified of how your personal data is being collected and processed. This Privacy Policy constitutes that notification.
• Right to Access: You may request a copy of the personal data php888 holds about you, together with information about how it is being processed.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by php888.
• Right to Erasure or Blocking: You may request the deletion or blocking of your personal data where processing is no longer necessary for the purpose for which it was collected, subject to applicable legal retention obligations.
• Right to Object: You may object to the processing of your personal data for marketing purposes at any time. Objections to processing on other grounds will be considered on a case-by-case basis.
• Right to Data Portability: You may request a structured, commonly used, and machine-readable copy of your personal data for the purpose of transmitting it to another data controller.
• Right to Lodge a Complaint: If you believe your data privacy rights have been violated, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, contact php888's Data Protection Officer via the 24/7 live chat on the Platform or by email to the address specified on our contact page.

10. Cookies & Tracking Technologies

php888 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse usage patterns for Platform improvement. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the php888 Platform, including authentication session management. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your preferences, language settings, and responsible gaming limits you have set.
• Analytics Cookies: Used to collect anonymised data about how players use the Platform, helping php888 identify and resolve performance issues and improve user experience.
• Marketing Cookies: Used to deliver relevant php888 promotions on the Platform. These are only deployed with your consent and may be disabled at any time through your browser settings or the Platform's cookie consent manager.

You may control cookie settings through your browser. Disabling strictly necessary cookies will affect your ability to use the php888 Platform. For analytics and marketing cookies, your consent is requested on first visit and can be updated at any time.

11. Amendments & Contact

php888 reserves the right to update this Privacy Policy at any time. Material changes will be notified to registered players via the email address or mobile number on their account at least seven (7) days before the changes take effect. The current version of this Privacy Policy is always available at php888.asia/privacy-policy. Continued use of the Platform after any amendment constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact php888's Data Protection Officer (DPO) through the 24/7 live chat on the Platform. php888 will respond to all verified data rights requests within fifteen (15) business days, in accordance with the DPA and NPC guidelines.