Privacy Policy

phl88 is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights under Philippine law.

Last updated: June 2026  |  Governing law: Republic Act No. 10173 (Data Privacy Act of 2012)

Your Data Is Secure

phl88 uses 256-bit SSL encryption for all data in transit and applies strict access controls to personal data at rest. Only authorised personnel with a legitimate need can access your information.

You Control Your Data

Under the Data Privacy Act of 2012, you have the right to access, correct, and request deletion of your personal data held by phl88, subject to legal and regulatory retention requirements.

No Unauthorised Sharing

phl88 does not sell your personal data to third parties. Data is shared only with service providers necessary to operate the platform, and with PAGCOR or law enforcement as required by law.

KYC Data Handled Carefully

Identity documents submitted for KYC verification are stored securely and used solely for verification purposes. They are not used for marketing or shared with non-regulatory third parties.

Cookie Transparency

phl88 uses cookies to maintain your session, remember preferences, and analyse platform usage. You can manage cookie preferences through your browser settings at any time.

Marketing Opt-Out

Promotional communications from phl88 are sent only with your consent. You may withdraw consent and opt out of marketing emails at any time through your Account settings or by contacting support.

Contents
1. About This Policy 2. Data Controller 3. Data We Collect 4. How We Use Your Data 5. Legal Basis for Processing 6. Data Sharing & Disclosure 7. Cookies & Tracking 8. Data Retention 9. Data Security 10. Your Rights 11. Children's Privacy 12. International Transfers 13. Changes to This Policy 14. Contact & Complaints
Section 1

About This Policy

This Privacy Policy ("Policy") describes how phl88 ("phl88," "we," "us," "our") collects, uses, stores, and protects the personal information of users ("you," "Player," "User") of the phl88 online gaming platform accessible at phl88.club.

phl88 is committed to compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. We are also subject to PAGCOR data governance requirements applicable to licensed online gaming operators.

By registering an account with phl88, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should not use the phl88 platform.

Plain language summary: phl88 collects personal information to operate your account, verify your identity, process payments, and keep the platform safe. We protect your data, we don't sell it, and you can ask us to correct or delete it at any time.

Section 2

Data Controller

For the purposes of the Data Privacy Act of 2012, phl88 is the data controller in respect of personal data collected through the phl88 platform. As data controller, phl88 is responsible for determining the purposes and means of processing your personal data.

phl88 has designated a Data Protection Officer (DPO) in accordance with the requirements of the National Privacy Commission (NPC) of the Philippines. Inquiries and data subject requests may be directed to the phl88 DPO via the contact details provided in Section 14 of this Policy.

Section 3

Data We Collect

phl88 collects personal data through your registration, use of the platform, and interactions with our support team. The categories of data we collect include:

Category Examples When Collected
Identity Data Full legal name, date of birth, nationality, government ID type and number Registration & KYC verification
Contact Data Email address, mobile number, residential address Registration
Financial Data GCash account reference, bank account details (name, last digits), transaction amounts in PHP Deposit & withdrawal processing
KYC Documents Copies of government-issued ID, proof of address documents, selfie verification images KYC/AML compliance process
Technical Data IP address, device type, operating system, browser type, session timestamps Automatically on platform access
Usage Data Games played, bet amounts, game duration, features accessed, bonus usage During platform use
Communications Data Records of live chat, email support interactions, complaint records Support interactions
Marketing Preferences Opt-in/opt-out status for promotional communications Registration & account settings

phl88 does not collect sensitive personal information beyond what is necessary for KYC compliance (e.g., nationality for PAGCOR reporting purposes). We do not collect biometric data beyond what is required for facial recognition during enhanced KYC procedures.

Section 4

How We Use Your Data

phl88 uses your personal data for the following purposes:

  • Account management: Creating, maintaining, and administering your phl88 account, including processing login authentication and account security;
  • Identity verification: Conducting KYC verification as required by PAGCOR regulations and Philippine anti-money laundering law (Republic Act No. 9160, as amended);
  • Payment processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other accepted payment channels in PHP;
  • Regulatory compliance: Meeting our obligations under PAGCOR's operating requirements, Philippine tax law, and AML/CFT reporting requirements to the AMLC (Anti-Money Laundering Council);
  • Platform security: Detecting, preventing, and investigating fraud, abuse, collusion, and other prohibited activities;
  • Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and facilitating responsible gaming tools (deposit limits, self-exclusion, etc.);
  • Customer support: Responding to queries, complaints, and support requests through our live chat and email channels;
  • Platform improvement: Analysing anonymised usage data to improve game offerings, platform performance, and user experience;
  • Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only where you have consented to receive such communications.
Section 5

Legal Basis for Processing

Under the Data Privacy Act of 2012, phl88 processes your personal data on the following legal bases:

  • Contractual necessity: Processing required to perform the contract between you and phl88 (i.e., to operate your account, process transactions, and provide gaming services);
  • Legal obligation: Processing required to comply with Philippine laws and PAGCOR regulations, including KYC, AML reporting, and responsible gaming requirements;
  • Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where such interests are not overridden by your fundamental rights;
  • Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw this consent at any time without affecting other processing.
Section 6

Data Sharing & Disclosure

phl88 does not sell, rent, or trade your personal data. We share your data only in the following circumstances:

  • Service providers: Third-party providers who assist in operating the phl88 platform, including payment processors (GCash/GXI, PayMaya/Voyager), gaming software providers, cloud hosting providers, and KYC verification services. All such providers are bound by data processing agreements requiring them to protect your data;
  • PAGCOR: As a condition of our operating licence, phl88 submits required player data reports to PAGCOR in the format and frequency they require;
  • AMLC and law enforcement: phl88 is required by law to report suspicious transactions to the Anti-Money Laundering Council (AMLC) and to cooperate with lawful requests from Philippine law enforcement agencies;
  • National Privacy Commission: phl88 cooperates with NPC investigations and data breach reporting requirements as mandated by the DPA;
  • Business transfers: In the event of a merger, acquisition, or sale of phl88, your data may be transferred to the successor entity, subject to the same privacy protections set out in this Policy;
  • Legal proceedings: Where required by a valid court order or other legally binding process under Philippine law.

Cross-border transfers: Some of phl88's service providers may process data outside the Philippines (e.g., cloud infrastructure). Where this occurs, phl88 ensures appropriate safeguards are in place, including contractual clauses requiring equivalent data protection standards, consistent with NPC guidelines on cross-border data flows.

Section 7

Cookies & Tracking Technologies

phl88 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are:

  • Strictly necessary cookies: Essential for platform operation — maintaining your login session, security tokens, and language preferences. These cannot be disabled without impairing platform functionality;
  • Performance cookies: Anonymised analytics data used to understand how players navigate the platform, which pages are most visited, and where technical errors occur. This data helps us improve phl88;
  • Functionality cookies: Remembering your preferences such as display settings and notification preferences between sessions;
  • Security cookies: Used to detect and prevent fraudulent login attempts and account takeover activity.

phl88 does not use third-party advertising cookies or cross-site tracking cookies that share your data with advertising networks outside the platform.

You can manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to phl88.

Section 8

Data Retention

phl88 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, and in compliance with applicable legal and regulatory retention requirements:

  • Active account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and Philippine AML law;
  • KYC documents: Retained for a minimum of five (5) years from the date of submission, as required by Republic Act No. 9160 (AMLA), as amended;
  • Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLC reporting requirements;
  • Support communications: Retained for three (3) years from the date of the interaction, to allow for complaint follow-up and dispute resolution;
  • Marketing consent records: Retained for the duration of consent and for three (3) years following withdrawal of consent, to demonstrate compliance.

After the applicable retention period expires, personal data is securely deleted or anonymised in accordance with NPC guidelines.

Section 9

Data Security

phl88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

  • 256-bit SSL/TLS encryption for all data in transit between your device and phl88 servers;
  • Encryption of sensitive data at rest, including financial data and KYC document storage;
  • Strict access controls — only personnel with a documented need to access specific categories of personal data are granted access;
  • Multi-factor authentication requirements for internal system access by phl88 staff;
  • Regular security audits and penetration testing by independent security professionals;
  • Incident response procedures in place for data breaches, including mandatory NPC notification within 72 hours of awareness of a breach that poses a real risk of serious harm.

Your responsibility: While phl88 takes all reasonable steps to secure your data, you are also responsible for keeping your phl88 login credentials confidential. Never share your password with anyone — phl88 support will never ask for your password.

Section 10

Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by phl88:

Right to be Informed

The right to know what personal data phl88 holds about you, how it is used, and who it is shared with. This Policy fulfils phl88's primary obligation in this regard.

Right of Access

The right to request a copy of the personal data phl88 holds about you. Requests are processed within 15 business days and provided in a commonly used electronic format.

Right to Rectification

The right to have inaccurate or incomplete personal data corrected. Contact phl88 support or update your account profile directly for basic corrections.

Right to Erasure

The right to request deletion of your personal data, subject to legal and regulatory retention requirements. phl88 cannot delete data required to be retained under PAGCOR or AML regulations.

Right to Object

The right to object to processing of your personal data for direct marketing purposes. Withdrawal of marketing consent does not affect processing for account management or legal compliance.

Right to Data Portability

The right to receive your personal data in a structured, commonly used, machine-readable format to transfer to another service provider, where technically feasible.

Right to Complain

The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phl88 has processed your personal data in violation of the DPA.

To exercise any of these rights, contact our Data Protection Officer using the details in Section 14. phl88 will respond to data subject requests within fifteen (15) business days. We may require verification of your identity before processing requests.

Section 11

Children's Privacy

phl88 is strictly for adults aged 21 years and above. We do not knowingly collect personal data from persons under 21. Age is verified during the KYC process. If phl88 becomes aware that personal data has been collected from a person under 21, the account will be closed immediately and the personal data deleted, except where retention is required by law.

If you believe phl88 has inadvertently collected data from a minor, please contact us immediately at the details in Section 14.

Section 12

International Data Transfers

phl88 primarily processes data within the Philippines. However, some technical infrastructure and service providers may be located outside the Philippines. Where personal data is transferred outside the Philippines, phl88 ensures that:

  • The recipient country provides an adequate level of data protection, or
  • Appropriate safeguards are in place, such as standard contractual clauses, binding corporate rules, or NPC-approved mechanisms, and
  • The transfer is limited to what is strictly necessary for the service being provided.

You may request further information about international data transfers affecting your personal data by contacting our DPO.

Section 13

Changes to This Privacy Policy

phl88 reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, Philippine law, or PAGCOR requirements. Material changes will be notified to registered players via email to the registered address, with at least seven (7) days' notice before the amended Policy takes effect.

The date of the most recent update is displayed at the top of this Policy. Continued use of the phl88 platform after the effective date of any amendment constitutes acceptance of the updated Policy. If you object to any changes, you should contact us to discuss your options or close your account.

Section 14

Contact & Complaints

For any questions, concerns, or data subject requests relating to this Privacy Policy or phl88's processing of your personal data, please contact us through the following channels:

  • Live Chat: 24/7 through the phl88 platform (for general queries and fastest response)
  • Email (DPO): [email protected] — mark your email "Data Privacy Request"
  • Response time: Data subject requests are acknowledged within 3 business days and resolved within 15 business days (Philippine Standard Time, GMT+8)

If you are not satisfied with phl88's response to a data privacy concern, you have the right to lodge a complaint with:

  • National Privacy Commission (NPC) of the Philippines — the national supervisory authority for data protection. NPC complaints procedures and contact information are available through official Philippine government channels.

phl88 takes all data privacy complaints seriously. Our Data Protection Officer reviews every formal complaint personally and is committed to resolving concerns within the timeframes set by the National Privacy Commission.

Play on phl88 — Your Data, Protected

phl88 is committed to keeping your personal information safe under Philippine law. PAGCOR-regulated, SSL-secured, and DPA-compliant — your privacy is not an afterthought, it's built into the platform.

SSL Secured

256-bit encryption

DPA Compliant

RA 10173 & NPC

PAGCOR Regulated

Licensed operator

Have a Privacy Question?

Our Data Protection Officer is available to answer questions about how phl88 handles your personal data. Contact us via live chat 24/7 or email us at:

support@phl88.club

Mark your subject line "Data Privacy Request" for priority routing to our DPO. Response within 3 business days (PST, GMT+8).