01 Introduction
PHL888 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all individuals who access or use the PHL888 website, mobile application, and associated gaming services (collectively, the "Services"). This Privacy Policy ("Policy") describes our practices with respect to the collection, use, storage, disclosure, and protection of your personal information.
This Policy applies to all registered players, visitors, and any other individuals whose personal data PHL888 processes in connection with the provision of its Services. By accessing the PHL888 platform or creating an account, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein.
PHL888 processes personal data in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC"). Where applicable, we also observe internationally recognized data protection principles.
Data Controller: PHL888 acts as the data controller for all personal information collected through the platform. If you have any questions about how your data is handled, please refer to Section 14 of this Policy for contact details.
02 Personal Data We Collect
PHL888 collects personal data that is necessary for the provision of our Services, compliance with legal obligations, and the protection of the platform's integrity. The categories of personal data we collect include the following:
| Category |
Examples |
Purpose |
| Identity Data |
Full legal name, date of birth, government-issued ID number |
Account registration, age verification, KYC compliance |
| Contact Data |
Email address, mobile number, residential address |
Account communication, support, notifications |
| Financial Data |
GCash number, bank account details, transaction history |
Processing deposits and withdrawals, AML compliance |
| Technical Data |
IP address, device type, browser type, operating system |
Platform security, fraud detection, service optimization |
| Usage Data |
Pages visited, games played, session duration, bet history |
Service improvement, responsible gaming monitoring |
| Verification Data |
Copies of government ID, selfie photos, proof of address |
Identity verification, regulatory compliance |
| Communications Data |
Support chat logs, email correspondence, feedback submissions |
Customer support, dispute resolution, quality assurance |
We collect only the minimum personal data necessary for the stated purposes. We do not collect sensitive personal information such as racial or ethnic origin, political opinions, or religious beliefs unless specifically required by law or regulatory obligation.
03 How We Collect Your Data
PHL888 collects personal data through the following channels and methods:
- Direct Submission: Information you provide when registering an account, completing identity verification, making a deposit or withdrawal request, contacting customer support, or participating in promotions.
- Automated Technologies: Data collected automatically when you access the platform, including cookies, web beacons, pixel tags, log files, and similar tracking technologies that record your device information, IP address, and browsing behavior on the PHL888 platform.
- Payment Processors: Transaction-related data received from payment service providers such as GCash, PayMaya, BPI, BDO, and Metrobank when you initiate deposits or withdrawals.
- Identity Verification Services: Data received from third-party KYC and identity verification providers engaged by PHL888 to validate the authenticity of documents and confirm player identity.
- Fraud Prevention Services: Risk signals and behavioral data received from fraud detection and anti-money laundering service providers used to protect the integrity of the platform.
- Publicly Available Sources: In limited circumstances, PHL888 may supplement your profile with information from publicly available sources, such as government registries, where permitted by applicable law and necessary for compliance purposes.
Note: PHL888 does not purchase personal data from data brokers or third-party marketing lists. All personal data we hold is collected directly in connection with your use of the PHL888 platform or through service providers acting on our behalf.
04 How We Use Your Personal Data
PHL888 uses the personal data we collect for the following specific purposes:
- Account Management: To create, maintain, and administer your PHL888 player account, including processing your registration, verifying your identity, and managing your account settings and preferences.
- Service Delivery: To provide you with access to PHL888's gaming services, process your deposits and withdrawals, credit bonuses and promotions, and deliver the features of the platform you have requested.
- Legal and Regulatory Compliance: To fulfill our obligations under applicable Philippine law, including the Data Privacy Act of 2012, anti-money laundering regulations, PAGCOR licensing requirements, and any other applicable regulatory frameworks. This includes conducting KYC verification, filing mandatory reports, and responding to lawful requests from government authorities.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the platform.
- Responsible Gaming: To monitor gaming activity for signs of problem gambling behavior, enforce self-exclusion requests, apply deposit and session limits, and provide responsible gaming interventions where appropriate.
- Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance.
- Communications: To send you transactional notifications, account alerts, security updates, and — where you have provided consent — promotional communications about PHL888 offers and new games.
- Platform Improvement: To analyze usage patterns, conduct internal research, and improve the functionality, performance, and user experience of the PHL888 platform.
- Legal Claims: To establish, exercise, or defend legal claims in connection with disputes involving PHL888 or its players.
05 Legal Basis for Processing
PHL888 processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012 and applicable regulations. The legal bases we rely upon are as follows:
- Contractual Necessity: Processing is necessary for the performance of the contract between you and PHL888 — specifically, the Terms and Conditions you agreed to upon registration. This covers account creation, game access, payment processing, and customer support.
- Legal Obligation: Processing is required to comply with a legal obligation to which PHL888 is subject, including KYC verification, AML reporting, and regulatory record-keeping requirements.
- Legitimate Interests: Processing is necessary for the legitimate interests of PHL888, provided those interests are not overridden by your rights and interests. This includes fraud prevention, platform security, and service improvement activities.
- Consent: Where processing is not covered by the above bases — for example, sending you marketing communications or using non-essential cookies — PHL888 will seek your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Withdrawing Consent: If you have provided consent for a specific processing activity, you may withdraw it at any time by contacting PHL888 customer support or adjusting your account communication preferences. Withdrawal of consent does not affect your ability to use the core PHL888 gaming services.
06 Data Sharing and Disclosure
PHL888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following limited circumstances:
- Service Providers: We engage trusted third-party service providers to assist in operating the PHL888 platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting services, customer support platforms, and fraud detection services. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.
- Regulatory and Law Enforcement Authorities: We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other government bodies where required by law, court order, or regulatory directive.
- Business Transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of PHL888's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms.
- Professional Advisors: We may share your data with our legal counsel, auditors, and other professional advisors where necessary for the conduct of their professional services, subject to appropriate confidentiality obligations.
- With Your Consent: We may share your data with third parties where you have given us explicit consent to do so.
International Transfers: Where personal data is transferred to service providers located outside the Philippines, PHL888 ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and NPC guidelines.
07 Cookies & Tracking Technologies
PHL888 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data that helps us improve our services. A cookie is a small text file placed on your device when you visit the PHL888 platform.
We use the following categories of cookies:
- Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as user authentication, session management, and security controls. These cookies cannot be disabled without affecting platform functionality.
- Performance and Analytics Cookies: These cookies collect anonymized information about how players use the PHL888 platform — such as which pages are visited most frequently and whether error messages are received. This data helps us improve platform performance and user experience.
- Functional Cookies: These cookies allow the platform to remember your preferences, such as your preferred language, display settings, and recently played games, to provide a more personalized experience.
- Marketing Cookies: With your consent, we may use cookies to deliver relevant promotional content about PHL888 games and offers. You may opt out of marketing cookies at any time through your browser settings or account preferences.
You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the PHL888 platform. For detailed information on managing cookies in your specific browser, refer to your browser's help documentation.
08 Data Retention
PHL888 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
- Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements and PAGCOR regulations.
- Transaction and Financial Data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and related regulations.
- Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer where records are relevant to an ongoing dispute or legal proceeding.
- Technical and Usage Data: Retained for up to twelve (12) months from collection, unless required for longer periods for security investigation or legal purposes.
- Marketing Consent Records: Retained for the duration of your consent and for three (3) years thereafter as evidence of consent.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with PHL888's data disposal procedures. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until deletion is possible.
09 Data Security
PHL888 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:
- Encryption: All data transmitted between your device and the PHL888 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. PHL888 employees and service providers are granted access only to the data necessary for their specific role, and all access is logged and audited.
- Two-Factor Authentication: PHL888 supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
- Regular Security Audits: PHL888 conducts regular internal and third-party security assessments, penetration testing, and vulnerability scans to identify and remediate potential security weaknesses.
- Incident Response: PHL888 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act of 2012.
Your Role in Security: While PHL888 takes extensive measures to protect your data, the security of your account also depends on you. Use a strong, unique password for your PHL888 account, enable two-factor authentication, and never share your login credentials with anyone. PHL888 will never ask for your password.
10 Your Data Rights
Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by PHL888. To exercise any of these rights, please contact us using the details in Section 14.
- Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
- Right of Access: You have the right to request a copy of the personal data PHL888 holds about you, along with information about how it is being processed.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly through your account settings.
- Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
- Right to Object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
- Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that PHL888 has processed your personal data in violation of the Data Privacy Act of 2012.
PHL888 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified of the extension and the reason for it.
Identity Verification for Rights Requests: To protect your data, PHL888 will verify your identity before processing any data rights request. You may be asked to provide a copy of a government-issued ID and confirm account details before your request is actioned.
11 Children's Privacy
The PHL888 platform is strictly intended for adults aged twenty-one (21) years and above, in accordance with Philippine gaming regulations. PHL888 does not knowingly collect, process, or retain personal data from individuals under the age of 21.
If PHL888 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be handled in accordance with applicable regulatory requirements.
If you are a parent or guardian and believe that your child has registered on the PHL888 platform, please contact us immediately using the details in Section 14 so that we can take appropriate action.
12 Third-Party Links
The PHL888 platform may contain links to third-party websites or services, such as payment provider portals or app store listings. This Privacy Policy applies solely to the PHL888 platform and does not extend to any third-party websites or services that you may access via links on our platform.
PHL888 has no control over the content, privacy practices, or data handling of third-party websites and accepts no responsibility or liability for their privacy policies or practices. We encourage you to review the privacy policy of any third-party website you visit before providing any personal information.
13 Changes to This Privacy Policy
PHL888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The date of the most recent revision is displayed at the top of this page.
Where changes are material — meaning they significantly affect your rights or how your data is processed — PHL888 will provide advance notice to registered players via email or a prominent notice on the platform prior to the changes taking effect. For minor or administrative updates, the revised Policy will be posted on this page with an updated effective date.
Your continued use of the PHL888 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should cease using the platform and may request account closure in accordance with the Terms and Conditions.
14 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way PHL888 handles your personal data, please contact our Data Protection Officer using the details below. We are committed to addressing all privacy-related inquiries promptly and transparently.
Data Protection Officer — PHL888
Email (plain text): [email protected]
All privacy-related correspondence should be directed to the email address above with the subject line "Privacy Request – [Your Account Username]." PHL888 will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) days.
For complaints that remain unresolved after engaging with PHL888, you may escalate your concern to the National Privacy Commission of the Philippines.