ph888one Privacy Policy

1. Introduction

1.1 ph888one is committed to protecting the privacy and security of all personal information entrusted to us by our players and website visitors. We understand that privacy is important to Filipino players, and we take our obligations under Philippine data protection law seriously.

1.2 This Policy applies to all personal data collected through the ph888one website (ph888one.vip), mobile applications, customer support channels, and any other services operated by ph888one.

1.3 This Policy should be read alongside ph888one's Terms & Conditions, which are available at ph888one.vip/terms-conditions. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

1.4 If you have any questions about this Policy or how ph888one handles your personal data, please contact our Data Protection Officer using the details provided in Section 15 of this Policy.

2. Data Controller

2.1 ph888one is the data controller responsible for the personal information collected through the ph888one platform. As data controller, ph888one determines the purposes and means of processing your personal data.

2.2 ph888one has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. The DPO is responsible for overseeing ph888one's data protection strategy and ensuring compliance with applicable data privacy laws.

2.3 Contact details for ph888one's Data Protection Officer are provided in Section 15 of this Policy.

3. Personal Data We Collect

3.1 ph888one collects the following categories of personal data from players and website visitors:

3.2 ph888one does not intentionally collect sensitive personal information (as defined under RA 10173) unless strictly required for regulatory compliance purposes, such as government-issued ID verification for KYC. Where sensitive personal information is collected, ph888one applies heightened security measures and processes such data only with your explicit consent or as required by law.

4. How We Collect Your Data

4.1 ph888one collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the ph888one platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment data from GCash, PayMaya, and Philippine banking partners.
• Regulatory sources: Information received from Philippine regulatory authorities, law enforcement agencies, or financial intelligence units in connection with legal obligations.

5. How We Use Your Personal Data

5.1 ph888one uses your personal data for the following purposes:

• To create and manage your ph888one player account.
• To verify your identity and age (21+ requirement) in compliance with Philippine gaming regulations.
• To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers.
• To provide and improve ph888one's gaming services, including slots, live casino, bingo, Dragon Tiger, and virtual sports.
• To detect, prevent, and investigate fraud, money laundering, and other illegal activity in compliance with the Anti-Money Laundering Act (AMLA) of the Philippines.
• To monitor gaming activity for responsible gaming purposes and to identify players who may be at risk of gambling-related harm.
• To communicate with you about your account, transactions, promotions, and platform updates.
• To respond to customer support enquiries and resolve disputes.
• To comply with applicable Philippine laws and regulations, including reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).
• To personalise your ph888one experience and deliver relevant promotional offers (where you have consented to marketing communications).
• To conduct analytics and improve the performance and security of the ph888one platform.

6. Legal Basis for Processing

6.1 Under the Philippine Data Privacy Act of 2012, ph888one processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and ph888one (i.e., to operate your player account and provide gaming services).
• Legal obligation: Processing required to comply with Philippine laws, including KYC/AML obligations, PAGCOR reporting requirements, and tax regulations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

7.1 ph888one does not sell your personal data to any third party for commercial purposes. ph888one may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash (G-Xchange, Inc.), PayMaya/Maya (Voyager Innovations, Inc.), and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party service providers engaged to verify player identity and age in compliance with Philippine gaming regulations.
• Fraud prevention and security partners: Service providers that assist ph888one in detecting and preventing fraudulent activity, money laundering, and platform abuse.
• Game content providers: Licensed game studios and live dealer operators whose games are available on the ph888one platform, to the extent necessary for game operation and dispute resolution.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants engaged by ph888one, subject to professional confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of ph888one's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

7.2 All third parties with whom ph888one shares personal data are required to handle such data in accordance with applicable Philippine data privacy law and ph888one's data processing standards.

8. Cookies & Tracking Technologies

8.1 ph888one uses cookies and similar tracking technologies (including web beacons and local storage) to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Performance cookies: Collect anonymised data about how players use the ph888one platform (e.g., pages visited, errors encountered) to help us improve performance and user experience.
• Functional cookies: Remember your preferences (e.g., language settings, game lobby layout) to personalise your experience.
• Analytics cookies: Used to understand aggregate usage patterns and improve ph888one's services. Analytics data is processed in anonymised or pseudonymised form where possible.

8.2 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the ph888one platform. ph888one does not use cookies to serve third-party advertising.

8.3 ph888one does not use cross-site tracking technologies to follow your activity on other websites or applications outside of the ph888one platform.

9. Data Security

9.1 ph888one implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ph888one's servers.
• Encryption of sensitive data at rest, including financial information and government ID data.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments of the ph888one platform.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph888one will notify the National Privacy Commission and affected players in accordance with the timelines prescribed by the Data Privacy Act of 2012 and NPC Circular No. 16-03.

9.3 While ph888one takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph888one account credentials and for notifying ph888one immediately of any suspected unauthorised access to your account.

10. Data Retention

10.1 ph888one retains your personal data for the following periods, or longer where required by Philippine law:

• Account and identity data: For the duration of your active account, plus five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Financial transaction data: Five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and Bureau of Internal Revenue regulations.
• Gaming history: Three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer support records: Three (3) years from the date of each interaction.
• Technical and usage data: Thirteen (13) months from collection, after which it is aggregated or deleted.

10.2 Upon expiry of the applicable retention period, ph888one will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

11. Your Data Privacy Rights

11.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph888one:

• Right to be informed: The right to know what personal data ph888one collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data ph888one holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph888one's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph888one has violated your data privacy rights.

11.2 To exercise any of the above rights, please contact ph888one's Data Protection Officer using the details in Section 15. ph888one will respond to all data subject requests within thirty (30) days of receipt, as required by the Data Privacy Act of 2012.

11.3 ph888one may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorised parties.

12. Children's Privacy

12.1 The ph888one platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming law. ph888one does not knowingly collect personal data from individuals under the age of 21.

12.2 If ph888one becomes aware that personal data has been collected from a person under 21 years of age, ph888one will immediately delete such data and close the associated account. If you believe that a minor has registered on ph888one, please contact our support team immediately.

12.3 ph888one employs age verification procedures during account registration and KYC to prevent access by minors. These procedures are a core component of ph888one's responsible gaming framework.

13. Cross-Border Data Transfers

13.1 ph888one primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, international game content providers or cloud infrastructure providers), ph888one ensures that such transfers are conducted in compliance with the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

13.2 ph888one implements appropriate safeguards for cross-border transfers, including contractual data processing agreements that require overseas recipients to apply data protection standards equivalent to those required under Philippine law.

13.3 ph888one will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual or technical safeguards.

14. Changes to This Privacy Policy

14.1 ph888one reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission.

14.2 When material changes are made to this Policy, ph888one will notify registered players via email or a prominent notice on the ph888one platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page.

14.3 Your continued use of the ph888one platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must cease using ph888one and may request account closure in accordance with the Terms & Conditions.

15. Contact & Data Protection Officer

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or ph888one's handling of your personal data, please contact our Data Protection Officer:

15.2 You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.