Privacy Policy — How ph288 Collects, Uses, and Protects Your Personal Data

1. About This Policy

This Privacy Policy ("Policy") describes how ph288 ("ph288," "we," "us," or "our") collects, uses, processes, stores, and discloses personal data relating to individuals ("you," "Data Subject") who use or interact with the ph288 online gaming platform at ph288.org ("Platform").

This Policy applies to all ph288 account holders, registered players, website visitors, and any other individuals whose personal data is processed by ph288 in connection with the Platform's services. By registering for a ph288 account or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy is issued in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC") of the Philippines. ph288 is registered as a personal information controller with the NPC in accordance with applicable requirements.

2. Personal Data We Collect

ph288 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration & Account Data

• Full legal name (as it appears on a valid Philippine government-issued ID);
• Date of birth (to verify the 21+ age requirement);
• Registered Philippine mobile number;
• Email address;
• Username and encrypted account password;
• Residential address in the Philippines.

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., PhilSys National ID, passport, UMID, SSS ID, PRC ID, driver's licence);
• Proof of address documentation where required;
• Selfie or liveness verification images where required for KYC purposes.

2.3 Financial & Transaction Data

• GCash or Maya wallet reference numbers and masked account identifiers;
• Bank account names and masked account numbers (BPI, BDO, Metrobank, and others);
• Transaction histories, deposit records, withdrawal records, and account balances;
• Information required for AMLC reporting under Republic Act No. 9160, as amended.

2.4 Gaming Activity Data

• Game session logs, bet histories, game outcomes, and timestamps;
• Bonus and promotion usage records;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

2.5 Technical & Device Data

• IP address and general geolocation data;
• Device type, operating system, and browser information;
• Cookie identifiers and session tokens (see Section 6);
• Login timestamps and session activity logs.

2.6 Communications Data

• Records of customer support interactions via live chat;
• Feedback, complaints, and dispute correspondence submitted to ph288.

3. How We Use Your Personal Data

ph288 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register, maintain, and secure your ph288 account;
• Age and identity verification: To verify that you are 21 years of age or older and that your identity matches your account, as required by PAGCOR;
• Payment processing: To process deposits and withdrawals via GCash, Maya, and Philippine banks, and to maintain accurate financial records;
• Game provision: To operate and deliver the casino games, sports betting, bingo, keno, and other services available on the ph288 Platform;
• Regulatory compliance: To satisfy ph288's obligations under PAGCOR's licensing conditions, the AMLA, the DPA, and other applicable Philippine laws;
• Responsible gaming: To administer deposit limits, session controls, cooling-off periods, and self-exclusion requests on your ph288 account;
• Customer support: To investigate and respond to queries, complaints, and disputes;
• Security and fraud prevention: To detect, prevent, and investigate fraudulent activity, money laundering, and unauthorised account access;
• Service improvement: To analyse usage patterns and improve the Platform's performance, user experience, and game catalogue;
• Communications: To send account-related notifications, transaction confirmations, security alerts, and — where you have consented — promotional messages about ph288 offers.

ph288 does not use your personal data for automated decision-making that produces legal effects without human review, except for routine fraud screening that may flag accounts for further manual investigation.

4. Legal Basis for Processing

ph288 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil ph288's obligations to you under the ph288 Terms and Conditions, including account operation, game provision, and payment processing;
• Legal obligation: Processing required to comply with PAGCOR's licensing conditions, AMLA reporting requirements, NPC registration obligations, and other Philippine law;
• Legitimate interest: Processing for fraud prevention, platform security, and service improvement, where ph288's legitimate interests do not override your rights;
• Consent: Processing for optional purposes such as marketing communications, where ph288 has obtained your prior, informed, and freely given consent. You may withdraw consent at any time by contacting ph288 support or adjusting your account notification settings.

5. Data Sharing & Disclosure

ph288 does not sell, rent, or trade your personal data to third-party advertisers or commercial data brokers. ph288 shares personal data only in the following limited circumstances:

5.1 Service Providers

ph288 engages trusted third-party service providers to assist with platform operations, including payment processors (GCash/Maya APIs, InstaPay/PesoNet processors), KYC verification technology providers, game software providers (JILI, Pragmatic Play, PG Soft, and others), and cloud infrastructure providers. These service providers access personal data only to the extent necessary to perform their services for ph288 and are contractually bound to maintain confidentiality and comply with the DPA.

5.2 Regulatory & Legal Authorities

ph288 discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Philippine National Police (PNP), and other government authorities when required by law, court order, or PAGCOR directive. ph288 cooperates fully with legitimate regulatory inquiries and law enforcement requests.

5.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of ph288's business, personal data held by ph288 may be transferred to the acquiring entity, subject to the same protections afforded under this Policy and applicable Philippine law.

5.4 With Your Consent

ph288 may share your personal data with third parties not described above if you have provided your express, specific, and informed consent to such sharing.

6. Cookies & Tracking Technologies

ph288 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies used by ph288 include:

• Strictly necessary cookies: Required for the Platform to function — including session authentication tokens, login state maintenance, and security protections. These cannot be disabled without breaking core Platform functionality;
• Functional cookies: Remember your preferences on the ph288 Platform, such as language settings and game lobby filters;
• Analytics cookies: Collect anonymised data about how visitors interact with the ph288 Platform to help us improve performance and user experience. ph288 uses analytics data in aggregate, anonymised form only;
• Security cookies: Used for fraud detection and prevention, including identifying unusual login patterns and suspicious account activity.

ph288 does not use third-party advertising or tracking cookies that share your data with external advertisers. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the ph288 Platform.

7. Data Retention

ph288 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Key retention periods include:

• Account data: Retained for the duration of your ph288 account and for a period of five (5) years following account closure, as required by PAGCOR and AMLA obligations;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the relevant transaction, in compliance with AMLA record-keeping requirements;
• KYC verification documents: Retained for five (5) years following account closure or the completion of the relevant KYC process;
• Game activity logs: Retained for a minimum of two (2) years for regulatory compliance and dispute resolution purposes;
• Customer support communications: Retained for two (2) years from the date of the relevant interaction;
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.

Following the expiry of applicable retention periods, ph288 will securely delete or anonymise your personal data.

8. Security Measures

ph288 implements technical, organisational, and administrative security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph288's servers;
• Encryption of sensitive data fields (including passwords and payment references) at rest;
• Role-based access controls limiting ph288 personnel's access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the ph288 Platform;
• Multi-factor authentication for ph288 account access (optional 2FA for players; mandatory for staff accessing personal data systems);
• Secure, access-controlled data centres for ph288's cloud infrastructure.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph288:

• Right to be informed: You have the right to be informed of the purposes for which your personal data is being processed — which this Policy provides;
• Right to access: You may request a copy of the personal data ph288 holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data in your ph288 account;
• Right to erasure or blocking: You may request deletion or blocking of personal data that is unlawfully processed or no longer necessary for the purposes for which it was collected, subject to ph288's legal retention obligations;
• Right to object: You may object to ph288's processing of your personal data on the basis of legitimate interest, including for direct marketing purposes;
• Right to data portability: You may request a structured, machine-readable copy of the personal data you have provided to ph288;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission if you believe ph288 has violated your data privacy rights.

To exercise any of these rights, please contact ph288's Data Protection Officer (see Section 12). ph288 will respond to all verified data subject requests within 30 calendar days. ph288 may require identity verification before processing any such request.

10. Children's Privacy

11. Changes to This Privacy Policy

ph288 may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law (including NPC guidance), or PAGCOR requirements. The date of the most recent revision is displayed at the top of this page.

Where ph288 makes material changes to this Policy, we will notify registered ph288 account holders via the email address or mobile number on file, and will display a prominent notice on the ph288 Platform. Your continued use of the Platform after any revision constitutes your acceptance of the updated Policy.

ph288 recommends that you review this Privacy Policy periodically to stay informed of how your personal data is being protected.

12. Contact & Data Protection Officer

ph288 has designated a Data Protection Officer ("DPO") as required under the Data Privacy Act of 2012 and its Implementing Rules and Regulations. If you have any questions, concerns, or requests relating to this Privacy Policy or ph288's handling of your personal data, please contact ph288 through the following:

This Privacy Policy was last updated in June 2026. ph288 is regulated by PAGCOR and registered as a personal information controller with the National Privacy Commission of the Philippines.