php88 Privacy Policy

1 Introduction

php88 ("php88," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy describes how php88 collects, uses, stores, shares, and protects personal data in connection with the operation of the php88 online casino platform (the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines. It also reflects applicable international best practices in data protection.

We encourage you to read this Privacy Policy carefully and in full. If you have any questions about how php88 handles your personal data, please contact our Data Protection Officer using the details provided in Section 14 of this Policy.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, php88 is the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, php88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

php88 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. Contact details for the DPO are provided in Section 14.

3 Personal Data We Collect

php88 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Registration and Identity Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address documents
• Proof of payment method ownership (e.g., screenshot of GCash or Maya account, bank statement)
• Selfie or facial image for identity verification purposes

3.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash mobile number, Maya account reference, bank account details — stored in tokenised or masked form)
• Transaction amounts and timestamps
• Bonus and promotional activity records

3.4 Gaming Activity Data

• Game session records, including games played, wagers placed, and outcomes
• Betting history and account balance history
• Responsible gaming tool usage (e.g., deposit limits set, self-exclusion requests)

3.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session logs and access timestamps
• Cookie identifiers and similar tracking data (see Section 8)

3.6 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback, complaints, and dispute records
• Marketing communication preferences

4 How We Collect Your Data

php88 collects personal data through the following means:

4.1 Directly From You

The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or interact with any feature of the Platform. You are always informed at the point of collection what data is being collected and why.

4.2 Automatically Through the Platform

When you access and use the php88 Platform, certain technical data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device information, browser type, and session activity. This data is used primarily for security monitoring, fraud prevention, and platform performance optimisation.

4.3 From Third-Party Service Providers

In certain circumstances, php88 may receive personal data about you from authorised third-party service providers, including:

• Identity verification and KYC service providers
• Payment processors (GCash, Maya, BDO, BPI, Metrobank, UnionBank, Landbank, PNB, Security Bank)
• Fraud detection and anti-money laundering screening services
• Game software providers, where necessary for the operation of specific games

Any third-party data sharing is conducted under strict data processing agreements that require those parties to handle your data in accordance with applicable Philippine data privacy law.

5 How We Use Your Personal Data

php88 uses your personal data for the following specific purposes:

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, php88 processes your personal data on the following legal bases:

6.1 Contractual Necessity

The processing of your identity data, financial data, and gaming activity data is necessary for the performance of the contract between you and php88 — specifically, to provide you with access to the Platform and its services. Without this processing, php88 cannot operate your account or provide gaming services.

6.2 Legal Obligation

php88 is required by Philippine law to process certain personal data for compliance purposes, including KYC verification under anti-money laundering regulations, age verification under gaming regulations, and transaction reporting obligations. This processing is mandatory and cannot be opted out of.

6.3 Legitimate Interests

php88 processes certain technical and security data on the basis of its legitimate interests in preventing fraud, ensuring platform security, and improving the quality of its services. Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms.

6.4 Consent

Where php88 processes your personal data for marketing communications or optional analytics purposes, we do so on the basis of your freely given, specific, informed, and unambiguous consent. You have the right to withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing and Disclosure

php88 does not sell, rent, or trade your personal data to any third party. We may share your personal data only in the following limited circumstances:

7.1 Service Providers and Processors

php88 engages trusted third-party service providers to assist in operating the Platform. These providers act as Personal Information Processors (PIPs) under the DPA and are contractually bound to process your data only on php88's instructions and in accordance with applicable data privacy law. Categories of processors include:

• Payment processing partners (GCash, Maya, and Philippine banking partners)
• KYC and identity verification providers
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Game software and live dealer studio providers
• Fraud detection and cybersecurity service providers

7.2 Regulatory and Law Enforcement Authorities

php88 may disclose personal data to Philippine government agencies, regulatory bodies, or law enforcement authorities where required to do so by law, court order, or regulatory direction. This includes disclosures to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and relevant gaming regulatory authorities.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of php88's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

8 Cookies and Tracking Technologies

php88 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. Cookies help us recognise your device, maintain your session, and understand how you use the Platform.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalised experience.
• Analytics Cookies: Help us understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content within the Platform. These are not used to track you across third-party websites.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the Platform and may prevent you from accessing certain features. For analytics and marketing cookies, you may update your preferences through your account settings at any time.

9 Data Retention

php88 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, php88 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

10 Data Security

php88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform
• AES-256 encryption for sensitive data stored at rest, including KYC documents and payment details
• Role-based access controls ensuring that only authorised personnel can access personal data
• Multi-factor authentication for all internal systems that process personal data
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• 24/7 security monitoring and intrusion detection systems
• Staff training on data privacy and security obligations

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by php88:

11.1 Right to Be Informed

You have the right to be informed of how your personal data is being collected and processed. This Privacy Policy fulfils that obligation, and php88 will always inform you at the point of data collection of the specific purposes for which your data is being used.

11.2 Right to Access

You have the right to request a copy of the personal data that php88 holds about you, along with information about how it is being processed. Requests will be fulfilled within 15 business days of receipt, subject to identity verification.

11.3 Right to Rectification

If any personal data that php88 holds about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update certain account details directly through your account settings, or contact our support team for assistance with other corrections.

11.4 Right to Erasure

You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing. Please note that php88 may be required to retain certain data for legal compliance purposes even after an erasure request.

11.5 Right to Object

You have the right to object to the processing of your personal data where php88 relies on legitimate interests as its legal basis, or where your data is being processed for direct marketing purposes. Objections to direct marketing will always be honoured immediately.

11.6 Right to Data Portability

Where technically feasible, you have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller.

11.7 Right to Lodge a Complaint

If you believe that php88 has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12 Children's Privacy

The php88 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. php88 does not knowingly collect personal data from individuals under the age of 21.

If php88 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be securely deleted, and any deposits will be returned to the originating payment method pending verification.

13 Updates to This Privacy Policy

php88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services offered on the Platform. The date of the most recent revision is displayed at the top of this Policy.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or the way we process your personal data — php88 will notify you by email to your registered address and/or by a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform following the effective date of any update constitutes your acknowledgment of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how php88 is protecting your information. If you disagree with any changes to this Policy, you should discontinue use of the Platform and may request account closure in accordance with our Terms & Conditions.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way php88 processes your personal data, please contact our Data Protection Officer (DPO) using the details below. All privacy-related inquiries will be handled with strict confidentiality.

For concerns that cannot be resolved directly with php88, you may also file a complaint with the National Privacy Commission through their official channels. php88 fully cooperates with all NPC investigations and inquiries.