phl88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how phl88 ("phl88," "we," "us," or "our"), the operator of the online gaming platform at phl88.vip, collects, processes, stores, shares, and protects the personal data of individuals who visit, register with, or use the phl88 platform ("you," "your," or "the Player").

phl88 is committed to respecting the privacy of every Filipino player and to handling personal information responsibly, lawfully, and transparently — consistent with the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC").

By registering an account with phl88, depositing funds, or otherwise using the platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, please do not use the phl88 platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection law, phl88's operator acts as the data controller for the personal information collected through the phl88 platform. As data controller, phl88 determines the purposes and means by which personal data is processed.

All data processing activities carried out by phl88 are consistent with the principles of transparency, legitimate purpose, and proportionality as required under the DPA 2012. Where phl88 engages third-party service providers to process personal data on its behalf, those parties act as data processors and are contractually bound to process data only on phl88's instructions and in accordance with applicable data protection law.

If you have any questions about this Policy or wish to exercise any of your data subject rights, please contact our Data Protection Officer using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

phl88 collects personal data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we collect are set out below:

4. How We Collect Your Data

phl88 collects personal data through the following means:

4.1 Direct Collection

You provide personal data directly to phl88 when you: register an account; complete the KYC verification process; make a deposit or request a withdrawal; contact our support team; participate in promotions; or configure your account preferences and responsible gaming settings.

4.2 Automated Collection

When you access the phl88 platform — whether from a mobile browser in Metro Manila, Cebu, Davao, or anywhere else in the Philippines — certain technical data is collected automatically through cookies, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser type, and interaction patterns with the platform interface. See Section 11 for details on our cookies and tracking practices.

4.3 Third-Party Sources

phl88 may receive or verify personal data from third-party sources in limited circumstances, including:

• Payment service providers (e.g. GCash, PayMaya, BPI, BDO, Metrobank, UnionBank) to confirm transaction details and prevent fraud
• Identity verification services engaged to perform KYC checks
• Fraud detection and anti-money laundering screening services
• Publicly available records or databases where necessary for compliance purposes

5. How We Use Your Personal Data

phl88 uses the personal data we collect only for purposes that are specified, legitimate, and proportionate. The primary purposes for which we process personal data are as follows:

• Account administration: Creating and maintaining your phl88 account, verifying your identity and age (21+), and managing your account settings and preferences.
• Platform delivery: Providing access to Games, processing deposits and withdrawals, crediting bonuses, and delivering all platform features for which you have registered.
• Payment processing: Facilitating deposits and withdrawals through GCash, PayMaya, and Philippine bank transfers, and maintaining complete transaction records for audit purposes.
• KYC and compliance: Verifying player identity and age in accordance with regulatory requirements, conducting anti-money laundering (AML) screening, and maintaining compliance records as required by applicable gaming and financial regulations.
• Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling behaviour, enforcing deposit limits and self-exclusion restrictions, and complying with responsible gaming obligations.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, chargeback abuse, and other misconduct on the platform.
• Customer support: Responding to your enquiries, resolving disputes, processing complaints, and improving the quality of our support services.
• Platform improvement: Analysing aggregated and anonymised usage data to improve platform features, game selection, and user experience.
• Legal and regulatory compliance: Meeting our obligations under applicable Philippine law, responding to lawful requests from regulatory authorities, and maintaining records as required by law.
• Direct marketing: Sending promotional offers, bonus notifications, and platform updates to registered players — subject to your communication preferences and the right to opt out at any time.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, phl88 is required to identify a lawful basis for processing personal data. The legal grounds on which phl88 relies for its various processing activities are as follows:

• Contractual necessity: Processing required to create and maintain your account, deliver platform services, and process payments is necessary for the performance of the contract between you and phl88 (governed by our Terms & Conditions).
• Legal obligation: Processing required to comply with KYC, AML, age verification, and gaming regulatory obligations is necessary for phl88 to meet its legal duties under applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics is carried out on the basis of phl88's legitimate interests, provided those interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing purposes is based on your consent, given at the time of account registration or subsequently. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

phl88 does not sell, rent, or trade your personal data. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

7.1 Service Providers

phl88 engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), KYC and identity verification providers, IT infrastructure and hosting providers, customer support technology providers, fraud detection services, and game providers whose software is integrated into the phl88 platform.

7.2 Regulatory and Law Enforcement Authorities

phl88 may disclose personal data to PAGCOR or other competent Philippine regulatory authorities, law enforcement agencies, or courts of law where required to do so by law, court order, or regulatory direction, or where phl88 reasonably believes disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of phl88's business, personal data held by phl88 may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer via the contact details registered to your account, and the transferred data will remain subject to the protections described in this Policy.

7.4 Professional Advisers

phl88 may share personal data with legal advisers, auditors, accountants, or other professional consultants where necessary for the conduct of legal proceedings, regulatory investigations, or the provision of professional advice, subject to applicable duties of confidentiality.

8. International Data Transfers

Some of phl88's service providers — including game software providers and technical infrastructure partners — may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, phl88 takes steps to ensure that the transfer is lawful and that the data continues to be protected to a standard consistent with the DPA 2012.

These steps may include entering into standard contractual clauses approved by the National Privacy Commission, ensuring the recipient country has been assessed as providing an adequate level of data protection, or relying on the data subject's explicit consent where appropriate and where no other transfer mechanism is available.

If you would like more information about the safeguards phl88 applies to international data transfers, please contact our Data Protection Officer using the details provided in Section 15.

9. Data Retention

phl88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable law. The following general retention periods apply:

• Account data and KYC records: Retained for the duration of your account plus a minimum of five (5) years following account closure, as required for AML and regulatory compliance purposes.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, consistent with Philippine financial record-keeping requirements.
• Gaming activity logs: Retained for a minimum of three (3) years, used for dispute resolution, responsible gaming monitoring, and regulatory audits.
• Customer support communications: Retained for two (2) years from the date of the most recent interaction, or longer where the subject matter involves a live dispute or legal claim.
• Marketing consent records: Retained for the duration of your consent plus two (2) years following its withdrawal, to demonstrate compliance with consent obligations.
• Technical and security logs: Retained for up to twelve (12) months, used for security monitoring, incident investigation, and fraud detection.

At the end of the applicable retention period, personal data is securely deleted or rendered permanently anonymous such that it can no longer be attributed to an identifiable individual.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you hold the following rights in relation to your personal data held by phl88. These rights may be exercised by contacting our support team or Data Protection Officer as described in Section 15:

To exercise any of the above rights, please submit a written request to phl88's support team or Data Protection Officer using the contact details in Section 15. We will acknowledge your request within two (2) business days and respond substantively within fifteen (15) business days. In complex cases, we may extend this period by a further fifteen (15) business days with prior notification to you.

Please note that certain rights are subject to exceptions — for example, the right to erasure cannot override phl88's legal obligation to retain financial and KYC records under applicable Philippine law. Where a right cannot be exercised in full, phl88 will explain the applicable limitation.

11. Cookies & Tracking Technologies

phl88 uses cookies and similar tracking technologies on its platform to ensure core functionality, improve user experience, and gather analytics. A cookie is a small text file placed on your device when you visit a website, which enables certain features and stores certain preferences.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect platform functionality. Most modern browsers — Chrome, Safari, Firefox — allow you to review and clear stored cookies from your settings menu. On mobile devices commonly used by Filipino players, these settings are available within the browser's privacy or site settings section.

12. Security Measures

phl88 implements a layered set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the phl88 platform — the same standard used by Philippine banks including BPI and BDO for online transactions
• Encryption at rest for sensitive personal data, including identity documents and financial data stored on phl88's servers
• Access controls limiting access to personal data to authorised personnel who require it for the performance of their duties, subject to role-based permissions and logging
• Two-factor authentication (2FA) available to all players for account login, and mandatory for internal staff accessing production data systems
• Regular security assessments including penetration testing and vulnerability scans conducted by qualified security professionals
• Incident response procedures enabling phl88 to detect, contain, and respond to data breaches in a timely manner, including notification to affected players and the NPC as required by law
• Staff training on data protection obligations, secure data handling practices, and phishing/social engineering awareness

While phl88 applies robust security measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, phl88 will notify you and the National Privacy Commission in accordance with the notification requirements of the DPA 2012.

13. Children's Privacy & Age Restriction

The phl88 platform is strictly intended for use by individuals aged 21 years and above, consistent with the minimum legal age for gambling under applicable Philippine gaming law and PAGCOR regulations. phl88 does not knowingly collect personal data from individuals under the age of 21.

If phl88 discovers or is notified that personal data has been collected from an individual who does not meet the minimum age requirement, that data will be deleted immediately, the associated account will be closed, and any deposited funds will be returned to the original payment method to the extent technically feasible and legally required.

If you are a parent or guardian and believe that a minor has registered an account with phl88 or provided personal data to the platform, please contact our support team immediately using the contact details in Section 15 so that we can take prompt remedial action.

14. Changes to This Privacy Policy

phl88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to applicable law, or improvements to our platform. When material changes are made, phl88 will notify registered players by sending a notification to the mobile number or email address registered to their account, and by publishing a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date displayed at the top of this Policy reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how phl88 protects your personal data.

Your continued use of the phl88 platform after the effective date of any revised Policy constitutes your acceptance of the changes. If you do not agree with a material change to this Policy, you should cease use of the platform and contact support to request account closure before the changes take effect.

15. Contact, DPO & Complaints

15.1 Data Protection Officer

phl88 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and the DPA 2012. To contact phl88's DPO or to submit a data subject rights request, please use the following channels:

• Email: [email protected] — please include "Data Privacy Request" or "DPO" in the subject line of your correspondence
• Live Chat: Available 24 hours a day, 7 days a week, within the phl88 platform

We will acknowledge all privacy requests within two (2) business days and aim to resolve them within fifteen (15) business days.

15.2 Complaints

If you are dissatisfied with phl88's response to a privacy concern or believe that phl88 has processed your personal data in a manner inconsistent with the DPA 2012, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available through official Philippine government channels.