phi88 Privacy Policy

When you create an account on phi88, we collect the personal details you provide during registration, including your full name, date of birth, email address, and mobile number. If you complete identity verification, we may also collect a copy of a government-issued ID and a selfie photograph to confirm your identity as required by Philippine regulations. During normal platform use, we automatically record technical data such as your IP address, device type, browser version, and session timestamps to maintain security and improve service quality. When you make a deposit or withdrawal, your payment method details — such as your GCash-registered mobile number or bank account name — are recorded in connection with the transaction, though full card or account numbers are never stored on our servers. We may also collect information you voluntarily provide when you contact our support team, including the content of your messages and any attachments you send. Usage data such as the games you play, bet history, and session duration is collected to personalise your experience and fulfil responsible gaming obligations. All data collection is limited to what is necessary for the purposes described in this policy, and we do not collect sensitive personal information beyond what is legally required.

phi88 uses your personal data primarily to operate your account, process deposits and withdrawals, and deliver the gaming services you have signed up for. Identity and age verification data is used to comply with Philippine online gaming regulations and to ensure that only eligible adults aged 21 and above are able to access the platform. Technical and usage data helps us detect suspicious activity, prevent fraud, and maintain the integrity of our systems — for example, flagging logins from unexpected locations or devices. If you have opted in to receive promotional communications, we use your email address or mobile number to send you information about relevant offers, bonuses, and platform updates; you can withdraw this consent at any time through your account settings. We also use aggregated, anonymised usage data to analyse platform performance, improve our game offering, and plan future features — this data cannot be used to identify any individual player. Transaction data is retained for the legally required period to support audit, tax, and anti-money laundering obligations under Philippine law. phi88 will never use your data to make automated decisions that significantly affect your account without providing you a way to request human review.

phi88 does not sell, rent, or trade your personal information to any third party for their own independent marketing or commercial purposes — ever. We share data only with service providers who help us operate the platform, including payment processors such as GCash and partner banks, identity verification partners, and cloud infrastructure providers; all of these parties are bound by data processing agreements that restrict how they may use your information. In some cases, we are legally required to disclose player data to regulatory bodies, law enforcement agencies, or the courts in the Philippines when a valid legal request is made — we review all such requests carefully before complying. If phi88 is involved in a corporate restructuring, merger, or acquisition, your data may be transferred to the new entity, and you will be notified in advance with the option to close your account if you do not wish to proceed. Game suppliers who provide live dealer or slot content through our platform may receive limited session data necessary to deliver and certify their games, but they do not receive your full personal profile. All third-party partners are required to implement data security measures consistent with the standards described in this policy. We will always aim to be transparent about any new categories of sharing that arise and will update this policy accordingly.

phi88 uses industry-standard TLS encryption for all data transmitted between your device and our servers, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit. Account passwords are stored using a one-way hashing algorithm, meaning that even phi88 staff cannot retrieve your actual password — only you know it. Access to player data within our organisation is restricted on a strict need-to-know basis; employees who do not require access to personal data in order to perform their role are blocked from viewing it. Our systems are monitored continuously for unusual activity, and automated alerts are triggered whenever access patterns deviate from normal behaviour. We conduct regular internal security reviews and engage independent security professionals to test our infrastructure for vulnerabilities on a periodic basis. In the unlikely event of a data breach that poses a risk to your personal information, phi88 will notify affected players and the relevant Philippine regulatory authority within the timeframe required by law. You can help keep your account secure by using a strong, unique password and enabling any available account authentication features — phi88 will never ask you for your password via email, chat, or phone.

As a registered player based in the Philippines, you have the right to request a copy of the personal data phi88 holds about you at any time, and we will provide it in a clear, readable format within a reasonable timeframe. You may also ask us to correct any inaccurate or incomplete information on your account — simply update your details in the account settings or contact support if a particular field cannot be edited directly. If you believe that phi88 no longer has a legitimate reason to hold certain data about you, you can request its deletion; note that some data must be retained for legal compliance purposes even after an account is closed. You have the right to withdraw your consent for marketing communications at any time without affecting your ability to use the platform. If you have concerns about how phi88 handles your data, you are encouraged to contact us directly first so we can resolve the matter promptly; if you remain unsatisfied, you have the right to raise a complaint with the relevant Philippine data protection authority. Requests relating to your data rights can be submitted by contacting support with the subject line "Data Rights Request" — we aim to respond within 15 business days. phi88 is committed to honouring these rights in full and will never penalise a player for exercising them.

phi88 retains your personal data for as long as your account is active and for a defined period after closure, as required by Philippine anti-money laundering regulations, gaming licence conditions, and tax record-keeping obligations. Transaction records are typically retained for a minimum of five years from the date of the transaction to satisfy these legal requirements. Identity verification documents are retained for the duration of your account and for the legally mandated period thereafter; once that period has elapsed, they are securely deleted or anonymised. Marketing preferences and communication history are retained only for as long as you remain opted in, and are purged within 30 days of an opt-out request being processed. Technical logs such as IP addresses and session data are retained for a shorter period — generally 90 days — after which they are automatically deleted unless they are needed in connection with an ongoing fraud or compliance investigation. If you close your account and no legal hold applies, phi88 will initiate deletion of your identifiable data within the period specified in your account closure confirmation. We review our data retention schedules regularly to ensure they remain proportionate and compliant with applicable law.