phil88 Privacy Policy

1. Who We Are (Data Controller)

Phil88 is the operator of the online gaming platform accessible at phil88.asia and acts as the Personal Information Controller (as defined under Republic Act No. 10173, the "Data Privacy Act") in respect of the personal data processed through the Platform. Phil88 operates under PAGCOR authorization and is subject to the regulatory oversight of the National Privacy Commission (NPC) of the Philippines.

All data protection inquiries may be directed to our Data Protection Officer (DPO) at the contact details specified in Section 14 of this Policy.

2. Scope of This Policy

This Privacy Policy applies to all personal data processed by phil88 in connection with:

• Registration and maintenance of a player account on the Platform
• Deposits, withdrawals, and other financial transactions
• Participation in games, promotions, and loyalty programs
• Customer support interactions
• Visits to phil88.asia and any associated subdomains
• KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance processes

This Policy does not apply to third-party websites or services that may be accessible via links on the Platform. Phil88 is not responsible for the privacy practices of third parties.

3. Personal Data We Collect

Phil88 collects the following categories of personal data, depending on how you interact with the Platform:

Phil88 does not intentionally collect sensitive personal information (as defined by RA 10173, such as health information, political or religious affiliation, or biometric data) except where required by PAGCOR regulations (e.g., government ID photographs that may incidentally contain such information).

4. How We Collect Your Data

Phil88 collects personal data through the following means:

• Direct collection — information you provide during account registration, KYC submission, deposit/withdrawal requests, support interactions, and participation in promotions.
• Automated collection — technical and usage data collected automatically via cookies, server logs, and analytics tools when you access the Platform.
• Third-party sources — identity verification data from PAGCOR-approved KYC service providers; fraud and AML screening data from accredited Philippine financial intelligence services; payment transaction data from GCash, PayMaya, BPI, BDO, and other integrated payment providers.

5. Legal Basis for Processing

Phil88 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to open and maintain your Account, process transactions, and deliver gaming services you have requested.
• Legal obligation — processing required to comply with PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations (Republic Act No. 9160, as amended), and other applicable Philippine law.
• Legitimate interests — processing for fraud detection, Platform security, responsible gaming monitoring, and general platform improvement, where such interests are not overridden by your rights.
• Consent — processing for marketing communications, where you have expressly opted in to receive such communications. You may withdraw this consent at any time.

6. How We Use Your Personal Data

Phil88 uses the personal data it collects for the following purposes:

• To create, verify, and maintain your phil88 Account
• To process deposits and withdrawals via GCash, PayMaya, and Philippine bank channels
• To verify your identity for KYC purposes and comply with PAGCOR and AMLA requirements
• To detect, investigate, and prevent fraud, cheating, and unauthorized account access
• To enforce our Terms & Conditions and applicable law
• To administer bonuses, promotions, cashback, and the phil88 VIP loyalty program
• To provide customer support and resolve player disputes
• To monitor for and respond to responsible gaming concerns, including self-exclusion requests
• To send transactional communications (deposit confirmations, withdrawal status, OTPs) — these are not optional as they are required for platform operation
• To send marketing communications about promotions and new features — only where you have consented, and only to the extent permitted by applicable law
• To analyze Platform usage and improve user experience
• To comply with any court order, regulatory directive, or lawful request from Philippine government authorities

7. Data Sharing & Disclosure

7.1 With Whom We Share

Phil88 does not sell your personal data to third parties for commercial purposes. Phil88 may share your personal data with the following categories of recipients:

• PAGCOR — as required for regulatory reporting, audit, and compliance purposes under phil88's operating authorization
• AMLC (Anti-Money Laundering Council) — as required by Republic Act No. 9160 and related legislation
• KYC and identity verification service providers — PAGCOR-accredited third parties engaged to verify identity documents and screen against sanctions lists
• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other integrated Philippine payment channels, to the extent necessary to process transactions
• Game studio providers — limited technical data (session token, game history) shared with PAGCOR-approved game content providers to enable game delivery and RTP auditing
• Legal and regulatory advisors — where required for compliance, dispute resolution, or regulatory proceedings
• Philippine courts and law enforcement — where compelled by valid court order, subpoena, or lawful law enforcement request

7.2 Cross-Border Transfers

Some of phil88's technology infrastructure and game studio partners may be located outside the Philippines. Where personal data is transferred internationally, phil88 ensures that such transfers are subject to appropriate contractual protections consistent with the Data Privacy Act and NPC guidelines, and that recipient entities provide a level of data protection substantially equivalent to Philippine standards.

8. Data Retention

Phil88 retains your personal data for as long as your Account remains active and for a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act's document retention obligations.

Transaction records and KYC documents are retained for the periods specified by applicable law and PAGCOR regulations. Technical and log data may be retained for shorter periods as determined by operational necessity. Where retention is no longer legally required, phil88 will securely delete or anonymize your personal data.

9. Data Security

Phil88 implements technical and organizational security measures appropriate to the risk presented by the processing of your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encrypted storage for passwords (one-way hashing) and sensitive personal data fields
• Access controls — personal data is accessible only to authorized phil88 personnel whose roles require access, on a need-to-know basis
• Multi-factor authentication for administrative access to systems containing personal data
• Regular security assessments including vulnerability scanning and penetration testing
• Incident response procedures — in the event of a personal data breach, phil88 will notify the NPC and affected players within the timeframes required by the Data Privacy Act

No security measure is perfectly impenetrable. Phil88 cannot guarantee absolute security of your personal data. You are encouraged to maintain strong, unique passwords for your phil88 Account and to notify phil88 immediately if you suspect unauthorized access.

10. Cookies & Similar Technologies

Phil88 uses cookies and similar browser-side technologies to operate the Platform, maintain your login session, detect fraud, and analyze platform usage. The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function, including session management and security tokens. These cannot be disabled without breaking Platform functionality.
• Functional cookies — store your preferences such as language settings and last-visited game categories.
• Analytics cookies — collect aggregated, anonymized data on how players use the Platform to enable us to improve it. No individual player is identifiable from analytics data.

Phil88 does not use advertising cookies or share cookie data with advertising networks. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality.

11. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by phil88:

To exercise any of these rights, contact phil88's Data Protection Officer at the address in Section 14. Phil88 will respond to all valid requests within 30 calendar days of receipt. Some requests may be subject to identity verification before processing.

12. Children & Underage Players

The Platform is strictly intended for persons aged 21 years and over, consistent with PAGCOR regulations. Phil88 does not knowingly collect personal data from individuals under the age of 21. If phil88 discovers that personal data has been collected from a player under 21, that account will be immediately suspended, the personal data will be securely deleted (subject to applicable legal retention requirements), and any deposited funds will be returned after identity verification.

Parents and guardians who believe their child may have created a phil88 account are urged to contact phil88 support immediately.

13. Changes to This Privacy Policy

Phil88 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via email or in-platform notification at least 7 days prior to the effective date of the change. The "Effective date" shown at the top of this page indicates when the current version took effect.

Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

14. Contact & Data Protection Officer

For all privacy-related inquiries, access requests, or complaints regarding phil88's handling of your personal data, please contact our Data Protection Officer:

If you are not satisfied with phil88's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent government body responsible for enforcing the Data Privacy Act of 2012.