phi888 Privacy Policy —
How We Handle Your Personal Data

1 Overview & Scope of This Policy

This Privacy Policy describes how phi888 collects, uses, stores, shares, and protects the personal information of players and visitors who use phi888.net and its associated services — including sports betting on PBA and PVSL, casino games, Color Game, fishing games, bingo, and the Refer a Friend programme.

phi888 is operated under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as the directives of the National Privacy Commission of the Philippines (NPC).

This policy applies to all personal data processed by phi888, whether provided during account registration, during the use of our gaming services, through customer support interactions, or through your device and browsing behaviour on phi888.net.

phi888 acts as the data controller for all personal information collected through phi888.net. This means phi888 determines the purposes and means by which your personal data is processed. Third-party service providers that process data on phi888's behalf act as data processors and are bound by contractual obligations to handle your data in accordance with this policy and applicable Philippine law.

2 Personal Data We Collect

phi888 collects only the personal data necessary to operate a safe, regulated, and high-quality online gaming service for Filipino players. The categories of personal data phi888 may collect are:

Account & Identity Data

• Full legal name
• Date of birth
• Gender
• Registered mobile number
• Email address
• Username and encrypted password
• Government-issued ID details (PhilSys ID, passport, driver's licence, voter's ID) — collected during identity verification
• Selfie or photo verification image, where required for identity confirmation

Financial & Transaction Data

• GCash or Maya mobile wallet number (linked for deposits and withdrawals)
• Bank account details (BDO, BPI, UnionBank) where used for withdrawal via InstaPay or PESONet
• Visa or Mastercard card details processed through our PCI-DSS compliant payment gateway — phi888 does not store full card numbers
• Deposit history, withdrawal history, and transaction timestamps
• Bet history, game session records, and account balance history

Technical & Device Data

• IP address and approximate geolocation (used to verify that you are accessing phi888 from within the Philippines)
• Device type, operating system, and browser version
• Session duration and activity logs
• Cookies and similar tracking technologies (see Section 8)

Communications Data

• Records of your interactions with phi888 customer support, including chat transcripts and email correspondence
• Feedback, complaints, or queries submitted to phi888
• Opt-in preferences for marketing communications

3 How We Collect Your Data

phi888 collects personal data through the following channels:

• Direct registration: When you create a phi888 account, you provide your name, mobile number, email address, date of birth, and password directly.
• Identity verification: When phi888 requests KYC (Know Your Customer) verification before processing a withdrawal, you upload government-issued ID documents.
• Payment processing: When you make a deposit or request a withdrawal, phi888 collects payment details. Card data is processed through our payment gateway and is not stored on phi888 servers.
• Platform usage: phi888's systems automatically log your activity on phi888.net — including pages visited, bets placed, games played, and session timestamps — as part of normal platform operation.
• Customer support: When you contact phi888 support via live chat or email, we retain records of those interactions to resolve your query and improve our service.
• Cookies and analytics: phi888.net uses cookies and similar technologies to understand how players use the platform. See Section 8 for details.
• Referral programme: If you join phi888 through the Refer a Friend programme, phi888 records the referral relationship for the purpose of crediting referral bonuses.

4 Why We Use Your Personal Data

phi888 uses the personal data it collects for the following specific purposes:

phi888 does not use your personal data for purposes beyond those listed above without first obtaining your consent or being required to do so by law.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phi888 processes your personal data on the following legal grounds:

• Contractual necessity: Processing your name, contact details, and payment information is necessary to provide the phi888 gaming services you have signed up for. Without this data, phi888 cannot operate your account.
• Legal obligation: phi888 is required by PAGCOR licence conditions and Philippine anti-money laundering laws to collect, verify, and retain certain personal data — including identity documents, transaction records, and gaming activity logs. This processing is mandatory, not optional.
• Legitimate interest: phi888 processes usage data, device data, and session logs to protect the security of the platform, detect fraudulent activity, and improve the gaming experience for all players. These interests are balanced against your privacy rights and do not override them.
• Consent: Where phi888 sends you marketing communications — including promotions, bonus offers, and news about new games — this is done only where you have given explicit opt-in consent. You can withdraw consent for marketing communications at any time by updating your notification preferences in your phi888 account settings or by contacting phi888 support.

6 Who We Share Your Data With

phi888 does not sell, rent, or otherwise trade your personal data to any third party for their own commercial purposes. phi888 shares personal data only in the following circumstances and only with the categories of recipient listed below:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and card payment gateway providers receive the payment-specific data necessary to complete your deposits and withdrawals. These providers operate under their own privacy policies and security standards.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers process your identity documents for verification purposes. These providers are contracted to process data solely on phi888's instructions and are not permitted to use your data for any other purpose.
• IT infrastructure and security providers: Cloud hosting, server management, and cybersecurity service providers who maintain the technical infrastructure on which phi888 operates. All such providers are subject to data processing agreements with phi888.
• PAGCOR and regulatory bodies: phi888 is required to report certain player data and gaming activity to PAGCOR as a condition of its operating licence. phi888 may also be required to disclose data to other Philippine government authorities — such as the Anti-Money Laundering Council (AMLC) — where required by law.
• Law enforcement: phi888 may disclose personal data to Philippine law enforcement authorities where required by a valid legal order, court order, or warrant.
• Business transfers: If phi888 is involved in a merger, acquisition, or sale of business assets, your personal data may be transferred as part of that transaction. phi888 will notify affected players in advance of any such transfer.

7 Data Storage & Security

phi888 stores all player personal data on secure servers located within data centre facilities that meet ISO 27001 information security standards. phi888 implements technical and organisational security measures proportionate to the sensitivity of the data held, including:

• SSL/TLS encryption for all data transmitted between your device and phi888.net
• Encryption of sensitive data at rest, including identity document images and financial records
• Role-based access controls limiting employee access to personal data to only those with a legitimate business need
• Multi-factor authentication requirements for phi888 staff accessing internal systems containing player data
• Regular security audits and vulnerability assessments of phi888's technical infrastructure
• Incident response procedures to detect, contain, and notify affected players and the NPC in the event of a personal data breach, in accordance with the Data Privacy Act's breach notification requirements

No online system is entirely immune from security risks. While phi888 takes every reasonable precaution to protect your data, phi888 cannot guarantee the absolute security of information transmitted over the internet. Players are encouraged to use strong, unique passwords for their phi888 account and to enable any additional security features available in account settings.

8 Cookies & Tracking Technologies

phi888.net uses cookies and similar technologies — including local storage and session tokens — to operate the platform, improve the player experience, and understand how Filipino players use the site. Here is a plain-language breakdown of what each category of cookie does:

• Essential cookies: Required for phi888.net to function. These include session authentication tokens that keep you logged in, security cookies that prevent cross-site request forgery, and cookies that remember your language and odds format preferences. You cannot opt out of essential cookies without stopping using phi888.
• Analytics cookies: phi888 uses anonymised analytics to understand aggregate player behaviour on the platform — which pages are visited most, how long sessions last, and where players navigate from. This helps phi888 improve the site. No personally identifiable data is shared with analytics providers for their own use.
• Functional cookies: These cookies remember your preferences — such as your preferred odds display format (decimal, fractional, or moneyline), notification settings, and the last sport or game section you visited — so phi888 can personalise your experience on return visits.
• Marketing cookies: phi888 may use cookies to track whether you arrived at phi888.net through a referral link or an advertising campaign, for the purpose of attributing referral bonuses and measuring campaign effectiveness. phi888 does not use advertising cookies to serve you ads on third-party websites.

You can manage cookie preferences through your browser settings. Blocking essential cookies will prevent phi888.net from functioning correctly. Blocking non-essential cookies will not affect your ability to use phi888's core gaming services.

9 Your Data Rights Under Philippine Law

Under the Philippine Data Privacy Act of 2012, all Filipino data subjects have the following rights with respect to their personal data. phi888 fully respects and facilitates these rights:

To exercise any of these rights, contact the phi888 Data Privacy Officer at support@phi888.net with the subject line "Data Privacy Request." phi888 will acknowledge your request within three business days and aim to respond substantively within fifteen business days, consistent with NPC guidelines.

10 Children's Privacy

phi888 is strictly an 18+ platform. phi888 does not knowingly collect, process, or store personal data from anyone under 18 years of age. All phi888 accounts are subject to age verification as part of the registration and KYC process.

If phi888 discovers that personal data belonging to a person under 18 has been collected — whether due to misrepresentation at registration or any other reason — phi888 will close the account immediately, void any balance, and securely delete all associated personal data, except where retention is required for legal compliance.

If you are a parent or guardian and believe your child has created a phi888 account, please contact phi888 support immediately at support@phi888.net so phi888 can take prompt action.

11 Third-Party Links

phi888.net does not contain links to external third-party websites for browsing or informational purposes. All navigation on phi888.net stays within the phi888 domain. Payment processing pages — while hosted by third-party payment providers such as GCash or Maya — are accessed through secure redirect flows where phi888 passes only the minimum necessary transaction data.

phi888 is not responsible for the privacy practices of third-party payment providers, identity verification services, or any other third-party service providers whose interfaces you may interact with as part of the phi888 account or payment process. Players are encouraged to review the privacy policies of any third-party service they interact with separately from phi888.

12 Data Retention Period

phi888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable Philippine legal and regulatory requirements. Specific retention periods are:

• Active account data: Retained for the duration of your phi888 account and for a minimum of five (5) years after account closure, consistent with PAGCOR licence requirements and the Anti-Money Laundering Act retention obligations.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML and gaming regulations.
• Identity verification documents: Retained for a minimum of five (5) years after the last transaction associated with the verified account.
• Customer support records: Retained for three (3) years from the date of the interaction, or longer if the matter is subject to ongoing legal proceedings.
• Marketing consent records: Retained for as long as you hold an active phi888 account, or for three (3) years after your last interaction with phi888 if your account is closed.

After the applicable retention period expires and there is no legal basis for further retention, phi888 will securely delete or anonymise your personal data in accordance with its internal data disposal procedures.

13 Changes to This Privacy Policy

phi888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or PAGCOR regulatory requirements. When phi888 makes changes to this policy, the revised version will be published on phi888.net/privacy-policy with an updated "Last updated" date.

Where changes are material — meaning they significantly affect how phi888 uses your personal data or your rights under this policy — phi888 will make reasonable efforts to notify registered players via in-account notification or email before the changes take effect.

Continued use of phi888 after a policy update is published constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with the changes, you may request account closure by contacting phi888 support.

14 Contact & Privacy Complaints

phi888 takes its obligations under the Philippine Data Privacy Act seriously. If you have questions about this Privacy Policy, want to exercise your data rights, or believe phi888 has mishandled your personal data, please contact us through the following channels:

• Email: support@phi888.net (subject line: "Data Privacy Request" or "Privacy Complaint")
• Live chat: Available 24/7 inside your phi888 account dashboard — in Filipino and English

phi888 will acknowledge your query within three business days. If your concern relates to a personal data breach or a possible violation of your data privacy rights, phi888 will escalate your query to our Data Privacy Officer immediately and aim to respond substantively within fifteen business days.

If you are not satisfied with phi888's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC), the independent government authority responsible for enforcing the Data Privacy Act. Information on how to file a complaint with the NPC is available on the NPC's official website.