At phl88, the privacy and security of your personal data are treated with the same seriousness as the security of your account balance. This Privacy Policy explains what personal information phl88 collects, why we collect it, how we use and protect it, who we may share it with, and what rights you hold as a data subject under Philippine law. This policy applies to all users of the phl88 Platform, including registered account holders and visitors.
Plain-language summary of our key privacy commitments; full legal text follows below
phl88's data practices comply with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations. The National Privacy Commission (NPC) has jurisdiction over your data rights, and phl88 cooperates fully with NPC processes.
phl88 does not sell, rent, or trade your personal information to third-party marketers or data brokers under any circumstances. Your data is shared with third parties only where strictly necessary for platform operations, regulatory compliance, or with your explicit consent.
All personal data transmitted between your device and phl88's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine banks for online transactions. Data at rest in phl88's systems is encrypted using AES-256 standards.
Under the Data Privacy Act of 2012, you hold specific rights including the right to access your data, correct inaccurate information, object to processing, request erasure, and receive data portability. phl88 provides processes to exercise each of these rights.
phl88 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by PAGCOR regulations and Philippine law. Anti-money laundering obligations require transaction records to be kept for a minimum of five (5) years.
In the event of a personal data breach that could harm your rights, phl88 will notify affected individuals and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and applicable regulations.
This Privacy Policy ("Policy") describes the personal data practices of phl88, a PAGCOR-regulated online gaming platform operating in the Philippines ("phl88", "we", "us", "our"). This Policy applies to all individuals who interact with phl88 through any channel, including but not limited to: the phl88 website, mobile browser interface, customer support channels, and any other service or communication operated by phl88.
By accessing or using the phl88 Platform, creating a phl88 account, or submitting personal information to phl88 through any channel, you ("Data Subject", "Player", "You") acknowledge that you have read this Policy and consent to the collection, use, and processing of your personal data as described herein.
phl88 operates as a PAGCOR-regulated gaming platform, which means that certain data collection and processing activities are mandatory under Philippine gaming law and PAGCOR's regulatory directives. Where processing is required for regulatory compliance, phl88 is legally obligated to conduct such processing regardless of individual consent preferences.
phl88's data processing practices are shaped by two parallel frameworks: the Data Privacy Act of 2012 (RA 10173) governing general personal data protection in the Philippines, and PAGCOR's regulatory requirements governing data collection and retention for licensed online gaming operators. Where these frameworks impose different or additional requirements, the more protective standard applies.
For the purposes of the Data Privacy Act of 2012 and its Implementing Rules, phl88 acts as the Personal Information Controller ("PIC") with respect to the personal data of its registered players, account applicants, and website visitors collected through the phl88 Platform.
As Personal Information Controller, phl88 determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing complies with RA 10173 and applicable NPC regulations. Where phl88 engages third-party service providers to process data on its behalf (such as payment processors and KYC verification services), those providers act as Personal Information Processors under written data processing agreements that bind them to appropriate data protection standards.
phl88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for the phl88 DPO are provided in Section 16 of this Policy.
phl88 collects the following categories of personal data from players and platform users. The specific data collected depends on the type of interaction and the services accessed:
3.1 Identity and Registration Data
3.2 Financial and Transaction Data
3.3 Technical and Usage Data
3.4 Communication Data
Certain data phl88 collects — including government ID numbers and biometric data used for KYC verification — constitutes "sensitive personal information" under RA 10173. Such data is processed under heightened security controls and is retained only for the minimum period required by applicable law.
phl88 collects personal data through the following channels and methods:
Under the Data Privacy Act of 2012, phl88's processing of your personal data is based on one or more of the following lawful grounds, depending on the specific processing activity:
| Legal Basis | Processing Activities Covered |
|---|---|
| Contractual necessity | Account registration, identity verification, processing deposits and withdrawals, maintaining the gaming account, providing customer support |
| Legal obligation | PAGCOR regulatory reporting, Anti-Money Laundering Act (AMLA) compliance, age verification, responsible gaming record-keeping, tax reporting obligations |
| Legitimate interests | Fraud prevention, security monitoring, platform performance optimization, game integrity monitoring |
| Consent | Marketing communications (email, SMS), optional analytics participation, personalization features beyond operational necessity |
phl88 uses your personal data for the following purposes:
phl88 does not sell, rent, or trade your personal information. Your data is shared with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:
phl88 will never sell your personal data to advertisers, data brokers, or marketing companies. phl88 will never share your data with another online gaming operator without your explicit consent. phl88 will never disclose your financial information to unauthorized parties.
phl88 uses cookies and similar tracking technologies to support platform functionality, security, and performance analysis. The following categories of cookies are used:
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to use the phl88 Platform. phl88 does not use cookies to serve third-party advertising on its Platform.
phl88 retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to the following minimum retention obligations imposed by Philippine law and PAGCOR regulations:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account registration and KYC documents | Duration of account + 5 years post-closure | PAGCOR regulations; AMLA |
| Financial transaction records (deposits, withdrawals, wagers) | Minimum 5 years from transaction date | Anti-Money Laundering Act (RA 9160 as amended) |
| Customer support communications | 3 years from date of communication | Contractual; legitimate interests |
| Session and game activity logs | 2 years from activity date | PAGCOR; responsible gaming compliance |
| Self-exclusion records | Duration of exclusion + 5 years | PAGCOR responsible gaming requirements |
| Marketing consent records | Until consent is withdrawn + 1 year | DPA 2012 consent accountability |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phl88's data disposal procedures. Anonymized data that cannot be re-identified may be retained indefinitely for aggregate analytics purposes.
phl88 implements technical and organizational security measures appropriate to the sensitivity of the personal data it processes. Key security controls include:
While phl88 implements robust technical security, the security of your account also depends on your own practices — using a strong, unique password; enabling 2FA; not sharing credentials; and logging out on shared devices. See our account security guide on the phl88 Login page for practical tips.
Under the Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by phl88. These rights are subject to limitations where processing is required by law or for legitimate legal purposes:
You have the right to obtain confirmation of whether phl88 holds personal data about you, and to receive a copy of that data in a readable format. Submit an access request to the phl88 DPO at the contact details in Section 16.
You have the right to request correction of inaccurate, incomplete, or outdated personal data. Basic profile information (such as contact details) can be updated in Account Settings; corrections to verified identity documents require a formal request to the DPO.
You may request erasure or blocking of personal data that has been unlawfully processed, is no longer necessary, or for which consent has been withdrawn. Note that erasure requests cannot override phl88's legal obligations to retain data under PAGCOR regulations and AMLA.
You may object to the processing of your personal data for specific purposes — particularly direct marketing and profiling. To withdraw consent for marketing communications, update your preferences in Account Settings → Notifications, or contact the DPO.
Where technically feasible, you may request a portable copy of personal data you have provided to phl88 in a structured, commonly used electronic format. Contact the DPO to initiate a portability request.
If you believe phl88 has processed your personal data in violation of RA 10173, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.
To exercise any of the above rights, submit a written request to the phl88 Data Protection Officer using the contact details in Section 16. phl88 will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days, or within such extended period as permitted by the NPC's rules for complex requests.
The phl88 Platform is strictly intended for adults aged twenty-one (21) years and above. phl88 does not knowingly collect personal data from individuals under the age of 21. PAGCOR mandates age verification as a condition of platform access, and phl88 enforces this requirement through its KYC process.
If phl88 discovers or is notified that a registered account belongs to an individual under the age of 21, phl88 will immediately suspend the account, delete any associated personal data to the extent permitted by applicable law, and report the matter to PAGCOR as required. Parents and guardians who are aware of a minor accessing phl88 should contact phl88 support immediately via live chat.
Certain third-party service providers used by phl88 — including cloud infrastructure providers and some KYC technology vendors — may process personal data in jurisdictions outside the Philippines. Where such transfers occur, phl88 ensures that the receiving jurisdiction provides an adequate level of data protection, or that appropriate contractual safeguards (such as NPC-approved standard contractual clauses or equivalent binding arrangements) are in place.
phl88 does not transfer personal data to jurisdictions without adequate data protection frameworks without first implementing appropriate safeguards. Details of cross-border transfer arrangements are available from the phl88 DPO upon request.
phl88 uses automated systems in the following contexts where decisions may have a significant effect on your account:
Where an automated decision has a significant effect on your account (such as a suspension or withdrawal hold), you have the right to request human review of that decision. Contact phl88 support via live chat or the DPO using the contact details in Section 16.
phl88 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before the revised policy takes effect, except where immediate modification is required by applicable law or a regulatory directive.
The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the phl88 Platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you do not accept the revised Policy, you must discontinue use of the Platform and may request account closure.
For questions about this Privacy Policy, to exercise your data subject rights, or to contact the phl88 Data Protection Officer, use the following channels:
Data Protection Officer: phl88 Data Privacy Office
Email: [email protected] (Subject: Data Privacy Request)
Live Chat: Available 24/7 from your phl88 account dashboard
phl88 will acknowledge privacy requests within 5 business days and provide a substantive response within 15 business days.
If your concern is not resolved to your satisfaction by phl88, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint is available at the NPC's official website.
Your data is protected under Philippine law. Your games are PAGCOR-regulated. Your payouts go to GCash. 21+ only.
21+ Only · Play Responsibly · PAGCOR-Regulated · Gambling can be addictive — keep it fun.