At phl88, your privacy is treated as a genuine commitment — not a compliance checkbox. This Privacy Policy explains exactly what personal information phl88 collects, why we collect it, how it is used, who it may be shared with, and what rights you hold over your own data under Philippine law.
phl88 processes all personal data in accordance with Republic Act No. 10173 — the Data Privacy Act of 2012. Your rights as a data subject under Philippine law are fully recognized and upheld, including the right to access, correct, and delete your personal information.
All personal data transmitted between your device and the phl88 platform is protected by 256-bit TLS encryption — the same standard used by major Philippine banks including BPI and BDO. Your login credentials, financial details, and personal information are never transmitted in plain text.
Philippine law grants you specific rights over your personal data held by phl88 — including the right to access, correct, object to processing, data portability, and erasure (subject to legal retention obligations). These rights can be exercised by contacting the phl88 Data Protection Officer via the 24/7 support channel.
phl88 collects only the personal data that is strictly necessary for account registration, KYC verification, transaction processing, regulatory compliance, and service delivery. We do not collect data speculatively or for purposes beyond those disclosed in this policy.
phl88 does not sell, rent, or trade your personal data to third-party marketers or data brokers. Disclosure to third parties is strictly limited to service delivery partners, payment processors, and regulatory authorities — and only to the minimum extent necessary for each specific purpose.
phl88 is required by PAGCOR to maintain player transaction records and identity verification data for a minimum statutory period. Disclosures to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies are made strictly in accordance with applicable law — not at phl88's discretion.
Summary for players: phl88 collects personal data to operate your account, process deposits and withdrawals, verify your identity as required by law, and comply with PAGCOR and AMLC obligations. We do not sell your data. We protect it with industry-standard encryption. You have legal rights over your data under Philippine law, and you can exercise them through our support team. Read on for the full details.
1.1 This Privacy Policy ("Policy") is issued by phl88 ("phl88," "we," "us," "our") and governs the collection, use, storage, disclosure, and protection of personal information provided by or collected about users ("you," "Player," "Data Subject") in connection with your registration and use of the phl88 online gaming platform accessible at phl88.org.
1.2 This Policy applies to all personal data processed by phl88, whether provided by you directly at account registration, generated through your use of the platform, collected automatically through technical means, or provided by third parties in connection with identity verification and payment processing.
1.3 By registering a phl88 account and using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. Consent for mandatory processing activities (such as KYC verification required by PAGCOR) forms part of the binding agreement between you and phl88.
1.4 This Policy is to be read in conjunction with the phl88 Terms & Conditions. In the event of any conflict regarding data protection matters, this Privacy Policy governs.
2.1 For the purposes of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, phl88 acts as the Personal Information Controller (PIC) in respect of your personal data processed through the phl88 platform.
2.2 phl88 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable Philippine data privacy law. The DPO can be contacted through the phl88 24/7 live chat or via email at [email protected] with the subject line "Data Privacy — DPO Enquiry."
2.3 phl88 is registered with the National Privacy Commission (NPC) of the Philippines in accordance with its obligations under RA 10173 and NPC Circular No. 17-01.
phl88 collects personal data across several categories. The following table summarizes the categories of data collected, with examples of the specific data points in each category.
| Category | Data Collected | Mandatory / Optional |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, gender | Mandatory (KYC) |
| Contact Data | Philippine mobile number (login ID), email address (if provided) | Mandatory |
| Verification Documents | Government-issued ID (PhilSys, passport, UMID, driver's license), selfie or biometric verification photo | Mandatory before withdrawal |
| Financial Data | GCash account number, bank account details (BPI, BDO, Metrobank), payment card data (last 4 digits, expiry), transaction history | Mandatory for transactions |
| Account Data | Username, account tier, wallet balance, bonus history, game preferences, responsible gaming settings | Mandatory |
| Technical Data | IP address, device type, browser type and version, operating system, session logs, login timestamps | Automatic |
| Usage Data | Games played, bet amounts, session duration, feature usage patterns, pages visited on phl88.org | Automatic |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with phl88 | When initiated by player |
Note on payment card data: phl88 does not store full payment card numbers on its own servers. Card transactions are processed through PCI-DSS compliant payment gateways. phl88 retains only masked card data (last 4 digits and card type) for reference purposes.
phl88 collects personal data directly from you when you register an account, complete identity verification, make deposits or withdrawals, contact support, participate in promotions, or update your account settings. The accuracy of this information is your responsibility, and you are required to keep it current.
Technical and usage data is collected automatically when you access and interact with the phl88 platform. This includes your IP address, device identifiers, browser information, session timestamps, and gameplay logs. This data is collected through server logs, cookies, and similar tracking technologies as described in Section 9.
phl88 may receive personal data about you from third-party sources in connection with specific processing activities, including:
phl88 processes your personal data only for specified, explicit, and legitimate purposes. The following table sets out the primary processing purposes and the corresponding legal basis under RA 10173.
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (Terms & Conditions) |
| Identity verification (KYC) and age confirmation | Legal obligation (PAGCOR, RA 9287, RA 10173) |
| Processing deposits and withdrawals | Performance of contract |
| Anti-money laundering (AML) and fraud screening | Legal obligation (RA 9160 — AMLA, PAGCOR) |
| Game provision and platform functionality | Performance of contract |
| Responsible gaming monitoring | Legitimate interest (player protection); Legal obligation (PAGCOR) |
| Regulatory reporting to PAGCOR and AMLC | Legal obligation |
| Customer support and dispute resolution | Performance of contract; Legitimate interest |
| Platform security and fraud prevention | Legitimate interest |
| Promotional communications (with opt-in) | Consent |
| Platform improvement and analytics | Legitimate interest (aggregated/anonymized data) |
Where phl88 relies on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent for mandatory processing activities (e.g., KYC) will prevent phl88 from continuing to provide services and may result in account closure.
phl88 shares personal data with third-party service providers who assist in operating the platform, processing payments, verifying identity, and delivering customer support. These providers are bound by data processing agreements requiring them to process personal data only on phl88's documented instructions and to implement appropriate security measures. Categories of service providers include: payment processors, KYC/identity verification providers, game software providers, cloud hosting providers, and customer support technology vendors.
phl88 is legally required to disclose personal data — including account information, transaction records, and identity documents — to the following Philippine regulatory and law enforcement bodies where required by applicable law:
phl88 does not sell, rent, barter, or otherwise transfer your personal data to third parties for marketing, advertising, or commercial purposes unrelated to the delivery of the phl88 service.
In the event of a merger, acquisition, restructuring, or sale of all or part of phl88's business, personal data held by phl88 may be transferred to the relevant successor entity. Players will be notified of any such transfer and the privacy implications through the contact details registered on their phl88 account.
7.1 phl88 retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law and PAGCOR requirements:
7.2 After applicable retention periods have expired and where no legal obligation requires continued storage, phl88 will securely delete or anonymize personal data in a manner that prevents reconstruction of the original information.
A request for erasure of your personal data cannot be fulfilled while statutory minimum retention periods are in effect. In such cases, phl88 will notify you that retention obligations prevent immediate deletion and will schedule erasure upon expiry of the relevant retention period.
8.1 phl88 implements organizational, technical, and physical security measures appropriate to the sensitivity of the personal data it processes. These measures include but are not limited to:
8.2 Notwithstanding these measures, no online platform can guarantee absolute security against all possible threats. phl88 does not warrant that unauthorized access to your personal data will never occur.
8.3 In the event of a personal data breach that poses a real risk to your rights and freedoms, phl88 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players as required under applicable law.
phl88 uses cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve the platform. These technologies collect information about how you interact with phl88.org and are used for the following purposes:
You may control non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will impair core platform functions including the phl88 login process. Cookie preferences can also be managed through the cookie consent tool on phl88.org where available.
phl88 does not use third-party advertising or retargeting cookies. No advertising network has access to your behavior data through the phl88 platform.
Under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules, you hold the following rights in respect of your personal data processed by phl88. These rights may be exercised by contacting the phl88 Data Protection Officer through the 24/7 live chat or at [email protected].
Request a copy of the personal data phl88 holds about you and information about how it is processed. phl88 will respond within 15 business days of a verified access request.
Request correction of inaccurate, incomplete, or outdated personal data. Certain corrections (e.g., name changes) require supporting documentation for compliance purposes.
Request deletion of your personal data where it is no longer necessary for the purpose collected, where consent is withdrawn, or where processing is unlawful — subject to statutory minimum retention obligations described in Section 7.
Object to processing of your personal data where phl88 relies on legitimate interest as the legal basis, including processing for direct marketing purposes. Objection to processing required by law or for contract performance cannot be upheld.
Request a structured, commonly used, machine-readable copy of personal data you have provided to phl88, where technically feasible. Portability applies to data processed based on consent or contract.
Request that phl88 limit the processing of your personal data in specific circumstances — such as while the accuracy of data is contested or an objection is being evaluated.
If you believe your data privacy rights have been violated by phl88, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. phl88 encourages raising concerns directly with our DPO first, as most issues can be resolved without regulatory escalation.
11.1 The phl88 platform is strictly restricted to individuals aged 21 years and older. phl88 does not knowingly collect personal data from persons under 21 years of age.
11.2 If phl88 becomes aware or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all winnings forfeited, and any remaining balance returned subject to identity verification. The personal data of the underage user will be deleted as expeditiously as possible consistent with legal obligations.
11.3 Parents and guardians who believe their child has registered a phl88 account are encouraged to contact phl88's support team immediately through the 24/7 live chat to request account closure and data deletion.
21+ strictly enforced. phl88 is not directed at persons under 21. If you are under 21 years of age, you must not use or attempt to access the phl88 platform. Underage gambling is illegal in the Philippines.
12.1 phl88's primary data processing occurs within the Philippines. Certain technical services — including cloud infrastructure and game software delivery — may involve processing by service providers whose servers are located outside the Philippines.
12.2 Where personal data is transferred outside the Philippines, phl88 ensures that such transfers comply with Section 21 of RA 10173, which requires that the recipient country or organization provides an adequate level of data protection or that appropriate contractual safeguards are in place (e.g., standard contractual clauses or binding corporate rules).
12.3 phl88 does not transfer personal data to jurisdictions identified by the National Privacy Commission as lacking adequate data protection standards without implementing additional contractual safeguards.
13.1 phl88 may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or the way phl88 processes personal data. All revisions will be published on this page with an updated effective date.
13.2 Where changes to this Policy are material — meaning they substantially affect how your personal data is processed or the rights available to you — phl88 will notify registered players via their registered Philippine mobile number or through a platform notification displayed upon login.
13.3 Continued use of the phl88 platform following the posting of a revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any changes, you may request account closure in accordance with the phl88 Terms & Conditions.
For all data privacy matters — including exercising your rights as a data subject, raising a privacy concern, reporting a suspected data breach, or requesting information about this Policy — please contact the phl88 Data Protection Officer through any of the following channels:
phl88 will acknowledge your request within 3 business days and will respond substantively within 15 business days, in line with NPC guidelines under RA 10173.
Data Controller: phl88.org | Jurisdiction: Republic of the Philippines | Governing law: RA 10173 (Data Privacy Act of 2012) | Regulatory body: National Privacy Commission (NPC) of the Philippines
Over 1,200 games, GCash deposits from ₱100, PAGCOR-compliant operations, and a genuine commitment to player data privacy. For Filipino players aged 21 and above.
21+ only. Gambling can be addictive. Please play responsibly. phl88 operates in accordance with PAGCOR standards and RA 10173.