Data Privacy & Protection

PHPlay88 Privacy Policy — Your Data, Protected and Transparent

PHPlay88 takes the privacy of every Filipino member seriously. This Privacy Policy explains clearly — without the usual legal maze — exactly what personal information phplay88 collects when you use the platform, why it's collected, how it's used, who it's shared with, and what rights you have over your own data under Philippine law.

Last Updated: January 2025
Law: RA 10173 — Data Privacy Act of 2012
Jurisdiction: Philippines
What This Policy Covers
  • What data we collect and why
  • How your data is stored and secured
  • Who we share your data with
  • Cookies and tracking technologies
  • Your rights as a data subject
  • How to contact our Data Protection Officer
phplay88

PHPlay88's Six Privacy Commitments to Filipino Members

Before you read the full policy, here's the plain-language version of how phplay88 handles your personal data.

We Collect Only What We Need

PHPlay88 collects personal data strictly for the purposes of running your account, processing transactions, verifying your identity, and complying with Philippine regulations. We don't collect data for the sake of it and we don't ask for more than what the specific purpose requires.

Your Data Is Encrypted and Secured

All personal data stored by phplay88 is protected using industry-standard encryption. Financial data — including payment method details — is handled through certified payment processors and is never stored in plain text on phplay88 servers. Access to member data is restricted to authorised personnel only.

We Do Not Sell Your Data

PHPlay88 does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Full stop. Data is shared only with regulated service providers who support the operation of phplay88 — payment processors, KYC verification services, and game content providers — and only under strict confidentiality agreements.

You Control Your Marketing Preferences

PHPlay88 may send promotional emails or platform notifications about new games, promotions, and offers — but only with your consent. You can opt out of marketing communications at any time from your phplay88 account settings or by contacting support. Opting out of marketing does not affect your ability to use the platform.

You Have Full Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, object to, erase, and port your personal data. PHPlay88 provides clear channels to exercise all of these rights and aims to respond to data subject requests within 15 working days of receipt.

We Notify You of Data Breaches

In the unlikely event of a personal data breach affecting your information, phplay88 will notify affected members within 72 hours of confirming the breach, in accordance with our obligations under the Data Privacy Act. We will also notify the National Privacy Commission (NPC) as required by applicable regulations.

1. Who We Are — The Data Controller

PHPlay88 is the operator of the online gaming platform accessible at phplay88.app. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173), phplay88 is the Personal Information Controller (PIC) responsible for the personal data of all registered members.

As a Personal Information Controller, phplay88 determines the purposes for which your personal data is processed and is accountable for ensuring that processing activities comply with applicable Philippine data privacy regulations. PHPlay88 has appointed a Data Protection Officer (DPO) who can be reached through the contact details in Section 14 of this policy.

This Privacy Policy applies to all personal data collected through the phplay88 platform, including data collected during registration, account verification, deposits and withdrawals, gaming and betting activity, VIP Club participation, promotions, and customer support interactions.

Scope: This policy covers all phplay88 members who are Filipino residents. If you access phplay88 from outside the Philippines, your data may be subject to additional regulations applicable in your location, but phplay88 maintains Philippine Data Privacy Act compliance as its baseline standard.

2. Personal Data We Collect

PHPlay88 collects the following categories of personal data from members, depending on the nature of your activity on the platform.

2.1 Account Registration Data

  • Full legal name
  • Date of birth (for age verification purposes)
  • Email address
  • Philippine mobile phone number
  • Username and password (password stored in encrypted form only)
  • Residential address

2.2 Identity Verification (KYC) Data

  • Government-issued photo ID (Philippine Passport, Driver's License, PhilSys ID, UMID, or equivalent)
  • Proof of address documentation (utility bill, bank statement, or equivalent dated within 3 months)
  • Facial biometric data where selfie-based verification is used
  • Source of funds documentation for high-volume accounts

2.3 Financial Transaction Data

  • GCash number, Maya account, GrabPay account, or bank account details used for deposits and withdrawals
  • Transaction amounts, dates, and references for all deposits and withdrawals
  • Payment method verification records

2.4 Gaming and Betting Activity Data

  • Game session history — games played, bets placed, amounts wagered, and outcomes
  • Sports betting history — events wagered on, markets selected, odds accepted, and settlement outcomes
  • VIP Points earned and tier progression records
  • Bonus and promotion usage history

2.5 Technical and Device Data

  • IP address and approximate geographic location at time of login and activity
  • Device type, operating system, and browser type
  • Session timestamps and duration
  • Cookies and similar tracking data (see Section 9)

2.6 Customer Support Data

  • Records of all live chat conversations, emails, and support ticket exchanges between you and the phplay88 support team
  • Any personal data you voluntarily provide in the course of a support interaction

Sensitive Data: PHPlay88 does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data except where directly relevant to a responsible gaming intervention. Where biometric data is collected for identity verification, it is handled under heightened protection standards.

phplay88

3. How We Collect Your Data

PHPlay88 collects personal data through the following channels:

  • Directly from you: when you register an account, complete KYC verification, make deposits or withdrawal requests, contact customer support, or participate in promotions.
  • Automatically during platform use: through cookies, log files, and analytics tools that record how you interact with the phplay88 website and games.
  • From third-party verification services: phplay88 works with regulated KYC and anti-fraud service providers who may cross-reference the information you provide against official Philippine records databases for identity verification purposes.
  • From payment processors: transaction confirmation and verification data is received from GCash, Maya, and banking partners when you make a deposit or withdrawal.

4. Why We Use Your Personal Data

PHPlay88 uses the personal data it collects for clearly defined purposes. The table below summarises the main uses of your data and the reason phplay88 needs it.

Purpose Data Used Why It's Necessary
Account creation and management Registration data, device data To create and maintain your phplay88 account and verify your identity
Age and identity verification KYC data, registration data Required by Philippine gaming regulations to verify age (21+) and identity
Processing deposits and withdrawals Financial transaction data To process payments and prevent fraud and money laundering
Providing gaming and betting services Gaming/betting activity data To operate games, settle bets, manage VIP Club, and apply promotions
Customer support Support data, account data To resolve member queries, disputes, and technical issues
Anti-fraud and security monitoring Device data, activity data, IP data To detect and prevent fraudulent activity, bonus abuse, and account takeover
Responsible gaming monitoring Activity data, financial data To identify patterns associated with problem gambling and provide support
Regulatory compliance and reporting All categories as required To comply with Philippine gaming regulations and AMLC requirements
Marketing communications Registration data, activity data To send relevant promotional offers — only with your consent and opt-out available

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phplay88 processes your personal data on the following lawful bases:

  • Contractual necessity: processing is required to fulfil our obligations to you as a phplay88 member — including account management, payment processing, and delivery of gaming services.
  • Legal obligation: processing is necessary to comply with applicable Philippine laws, including gaming regulatory requirements, anti-money laundering obligations under Republic Act 9160 (Anti-Money Laundering Act), and tax reporting obligations.
  • Legitimate interests: processing is carried out for purposes that serve the legitimate operational interests of phplay88 — such as fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your rights and interests as a data subject.
  • Consent: for marketing communications and non-essential cookies, phplay88 processes your data only with your prior consent. You may withdraw consent at any time without affecting your ability to use the platform.

6. Who We Share Your Data With

PHPlay88 shares personal data only where strictly necessary for the operation of the platform or where required by law. We do not sell your data to third parties under any circumstances.

6.1 Regulated Service Providers

PHPlay88 works with the following categories of third-party service providers who process personal data on our behalf under written data processing agreements:

  • Payment processors: GCash (Mynt), Maya (Voyager Innovations), BancNet, and banking partners process transaction data to execute your deposits and withdrawals.
  • KYC and identity verification providers: regulated third-party services that verify government-issued IDs and cross-reference provided information against official Philippine identity records.
  • Game content providers: the software studios that supply the casino games available on phplay88 receive necessary data — such as session identifiers and wallet balances — to operate game rounds and settlements.
  • Anti-fraud and security services: technology providers that help phplay88 detect and prevent account takeover, bonus abuse, and other fraudulent activity.
  • Cloud infrastructure providers: phplay88 uses certified cloud infrastructure for data storage and processing, with providers bound by confidentiality obligations and applicable data protection standards.

6.2 Regulatory and Law Enforcement Disclosure

PHPlay88 may disclose personal data to Philippine government agencies, regulators, and law enforcement — including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) — where we are legally required to do so. In cases of suspected money laundering or criminal activity, phplay88 may make such disclosures without notice to the affected member where doing so would prejudice a lawful investigation.

No Sale of Data: PHPlay88 does not sell, rent, lease, or otherwise commercially exploit your personal data to any third party for marketing, advertising, or commercial purposes. If this policy ever changes, you will be given prior notice and the opportunity to withdraw your data before any such arrangement takes effect.

7. Data Retention

PHPlay88 retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable Philippine laws and regulations.

  • Account data: retained for the duration of your phplay88 account and for a minimum of 5 years after account closure, in accordance with Philippine gaming and anti-money laundering regulatory requirements.
  • KYC and identity documents: retained for a minimum of 5 years from the date of verification completion or account closure, whichever is later.
  • Financial transaction records: retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act (RA 9160).
  • Gaming and betting activity records: retained for a minimum of 3 years from the date of each session or bet, for dispute resolution and regulatory audit purposes.
  • Customer support records: retained for a minimum of 2 years from the date of the last support interaction.
  • Marketing consent records: retained for the duration of your consent and for 1 year after withdrawal of consent, for compliance audit purposes.

When personal data reaches the end of its retention period and there is no ongoing legal basis for continued storage, phplay88 securely deletes or anonymises the data so it can no longer be linked to you as an individual.

phplay88

8. Data Security

PHPlay88 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

  • Encryption: all data transmitted between your device and phplay88 servers is encrypted using TLS (Transport Layer Security). Sensitive data at rest — including passwords and financial details — is encrypted using industry-standard algorithms.
  • Access controls: phplay88 staff access to member personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo regular privacy and security training.
  • Two-factor authentication: available for all phplay88 accounts and strongly recommended. Members who enable 2FA significantly reduce the risk of unauthorised account access.
  • Intrusion detection and monitoring: phplay88 employs continuous monitoring systems to detect and respond to suspicious access patterns and potential security incidents.
  • Secure payment handling: phplay88 does not store full payment card numbers or full GCash/Maya credentials on its servers. Payment data is handled exclusively by certified payment processors who comply with applicable financial security standards.

Despite these measures, no online system is completely secure against all threats. PHPlay88 cannot guarantee absolute security of data transmitted over the internet. Members are responsible for keeping their own login credentials secure and reporting any suspected compromise to phplay88 support immediately.

9. Cookies and Tracking Technologies

PHPlay88 uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device when you visit a website. Cookies help phplay88 deliver a better, more personalised experience and provide essential platform functionality.

9.1 Types of Cookies Used by PHPlay88

  • Essential cookies: required for the platform to function — including keeping you logged in during a session, maintaining your cart or wallet state, and enabling secure access. These cannot be disabled without breaking core platform functionality.
  • Analytics cookies: help phplay88 understand how the platform is used — which pages are visited most, where members encounter issues, and how the overall gaming and betting experience can be improved. Data collected by analytics cookies is aggregated and anonymised where possible.
  • Preference cookies: remember your platform settings — such as language, notification preferences, and display options — so you don't have to set them again on each visit.
  • Marketing cookies: used only with your consent, to show you relevant phplay88 promotions and track whether promotional communications result in activity on the platform. You can withdraw consent for marketing cookies at any time.

9.2 Managing Your Cookie Preferences

You can manage your cookie preferences through the cookie settings tool available from the phplay88 platform. You can also adjust cookie handling in your browser settings — however, disabling essential cookies will affect your ability to use core platform features including login and payment processing.

10. Your Data Subject Rights

As a Filipino member of phplay88, you are a Data Subject under the Philippine Data Privacy Act of 2012 and have the following rights in relation to your personal data. PHPlay88 is committed to honouring these rights promptly and without unnecessary obstacles.

1
Right to Be Informed

You have the right to be clearly informed about how phplay88 collects and uses your personal data — which is exactly what this Privacy Policy is designed to provide. You can request additional information at any time by contacting our Data Protection Officer.

2
Right to Access

You have the right to request a copy of the personal data phplay88 holds about you. Requests will be processed within 15 working days. You can access much of your own data directly from your phplay88 account — including transaction history, betting records, and KYC documents submitted.

3
Right to Correct (Rectification)

If any personal data phplay88 holds about you is inaccurate or incomplete, you have the right to request a correction. You can update basic account details directly from your phplay88 account settings. For corrections to KYC documents or financial records, contact support with the updated information and supporting documentation.

4
Right to Erasure

You have the right to request deletion of your personal data in certain circumstances — for example, when it is no longer necessary for the purposes for which it was collected and there is no overriding legal obligation requiring its retention. Note that regulatory retention requirements under the Anti-Money Laundering Act and gaming regulations may limit phplay88's ability to fully delete data from closed accounts during mandatory retention periods.

5
Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. You can opt out of marketing communications at any time from your account settings or by emailing privacy@phplay88.app. You may also object to processing based on legitimate interests, though phplay88 may have grounds to continue processing if there are compelling legitimate reasons that override your objection.

6
Right to Data Portability

You have the right to receive a copy of the personal data you have provided to phplay88 in a structured, commonly used, machine-readable format, and to request that this data be transmitted to another service provider where technically feasible. Data portability requests can be submitted to our DPO at privacy@phplay88.app.

7
Right to File a Complaint

If you believe phplay88 has handled your personal data in a way that violates the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. PHPlay88 encourages members to contact our DPO first so that we can attempt to resolve the issue directly — but the right to escalate to the NPC is always available to you.

Response Time: PHPlay88 aims to respond to all data subject rights requests within 15 working days of receipt. Complex requests may take longer, in which case phplay88 will notify you of the extended timeline and the reason for it.

11. Children's Privacy

PHPlay88 is strictly for adults aged 21 and above. PHPlay88 does not knowingly collect personal data from individuals below the age of 21. If phplay88 discovers that it has inadvertently collected data from an underage individual, that account will be suspended immediately, the data will be securely deleted, and any funds held will be returned through the verified payment method after a compliance review.

If you believe a minor has registered on phplay88, please contact support immediately at support@phplay88.app or use the live chat function. PHPlay88 treats all reports of potential underage access as a priority matter.

12. International Data Transfers

Some of the third-party service providers phplay88 works with — including cloud infrastructure providers and game content studios — may be located outside the Philippines. Where personal data is transferred to a third country, phplay88 ensures that adequate safeguards are in place to protect your data to at least the same standard required by the Philippine Data Privacy Act.

These safeguards may include data transfer agreements with contractual clauses that reflect the protections required under Philippine law, or transfers to countries that have been assessed as providing an adequate level of data protection. PHPlay88's DPO can provide information about specific transfer mechanisms upon request.

13. Updates to This Privacy Policy

PHPlay88 reviews this Privacy Policy regularly and updates it when necessary to reflect changes in how we process personal data, changes in Philippine data privacy law or regulatory guidance, or changes in the phplay88 platform that affect data collection or use.

When material changes are made — meaning changes that significantly affect your rights or how phplay88 uses your data — phplay88 will notify you by account notification and display the updated policy prominently on the platform at least 14 days before the changes take effect. The "Last Updated" date at the top of this policy reflects the date of the most recent revision.

Continued use of phplay88 after the stated effective date of an update constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with any material change, you have the right to request account closure and return of your data in accordance with your data subject rights under Section 10.

14. Contact Us and Data Protection Officer

If you have any questions about this Privacy Policy, want to exercise any of your data subject rights, or have a concern about how phplay88 has handled your personal data, please contact the phplay88 Data Protection Officer through the following channels:

  • Data Protection Officer Email: privacy@phplay88.app
  • General Support Email: support@phplay88.app
  • Live Chat: Available on any page in your logged-in phplay88 account — 24/7

For complaints or concerns that phplay88 is unable to resolve to your satisfaction, you may also contact the National Privacy Commission of the Philippines:

  • National Privacy Commission (NPC): Privacy Complaints and Investigation Division, 5th Floor, Delegation Building, PICC Complex, Pasay City, Philippines

This Privacy Policy was last reviewed and updated in January 2025. By using phplay88, you confirm that you have read and understood this Privacy Policy.

Common Privacy Questions from Filipino Members

Short, plain answers to the most frequent privacy questions phplay88 receives.

Your GCash number is shared only with the payment processor (Mynt/GCash) to execute your deposit and withdrawal transactions. It is not shared with any marketing company, advertised to any other party, or used for any purpose other than processing the financial transactions you initiate. PHPlay88 does not store your full GCash credentials — only the account reference needed for transaction processing.

You have the right to request erasure of your personal data. However, phplay88 is legally required under the Anti-Money Laundering Act and applicable gaming regulations to retain certain records — including KYC documents and financial transaction records — for a minimum of 5 years from account closure. Data that is not subject to these mandatory retention requirements can be deleted upon request. Contact our DPO at privacy@phplay88.app to submit an erasure request and receive a detailed response about which specific data can be deleted immediately.

You can opt out of marketing emails at any time in two ways: click the "Unsubscribe" link at the bottom of any phplay88 promotional email, or go to your account notification settings and turn off marketing communications. Opting out of marketing does not affect your ability to use phplay88 or receive important account-related messages such as transaction confirmations, security alerts, and KYC requests.

Yes. KYC documents submitted to phplay88 are stored in an encrypted form on access-restricted servers. Only authorised compliance staff with a specific operational need can access submitted documents. Documents are retained for the mandatory regulatory period and then securely destroyed. PHPlay88 uses regulated KYC service providers who are contractually bound to handle your documents to the same security standards.

In the event that phplay88 ceases operations, member personal data would be handled in accordance with the requirements of the Philippine Data Privacy Act and applicable gaming regulations. This would include proper data retention for the mandatory regulatory period, secure deletion of data no longer required, and notification to affected members and the National Privacy Commission as required by law. Any funds held in member accounts would be returned through the verified payment method on file.
🔒

Your Privacy Is Safe With PHPlay88

PHPlay88 was built for Filipino players who expect their data to be handled with the same care as their money. Transparent policy, proper Philippine compliance, no selling of your information, and full data subject rights — that's the phplay88 standard. Ready to play with confidence?

21+ only. By registering you confirm you have read and accepted our Privacy Policy and Terms and Conditions.