p8888 Privacy Policy

For the purposes of this Privacy Policy, the following terms have the meanings assigned below:

• "Personal Data" means any information, whether recorded in a material form or not, from which the identity of an individual can reasonably and directly be ascertained, or when put together with other information would directly and certainly identify an individual.
• "Processing" refers to any operation or set of operations performed upon personal data, including collection, recording, organisation, storage, updating, retrieval, use, consolidation, blocking, erasure, or destruction.
• "Data Controller" means the Operator — the entity that determines the purposes and means of the processing of your personal data.
• "Data Subject" means you — the individual whose personal data is being processed.
• "Platform" or "p8888" refers to the online gaming website at https://p8888.co and all related interfaces and services.
• "DPA" refers to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
• "NPC" means the National Privacy Commission of the Republic of the Philippines.
• "PAGCOR" means the Philippine Amusement and Gaming Corporation.
• "KYC" means Know Your Customer — the identity and age verification process required by PAGCOR's licensing conditions.

p8888 is a PAGCOR-compliant online gaming platform serving Filipino players across the Philippines. The Platform offers live casino games, slot machines, bingo, sports betting, and specialty games, accessed at https://p8888.co.

The Operator acts as the Data Controller in respect of all personal data collected through the Platform. As Data Controller, the Operator is responsible for determining why and how your personal data is processed and for ensuring that such processing complies with the DPA, PAGCOR's data handling requirements, and all other applicable Philippine laws.

p8888 collects personal data across several categories depending on how you interact with the Platform. The table below summarises the categories, specific data types, and the stage at which each is typically collected:

p8888 does not intentionally collect sensitive personal information as defined under the DPA (such as health, racial, or religious data) except where expressly required for responsible gaming assessments or as required by PAGCOR regulations. Where sensitive data must be collected, additional consent will be sought.

p8888 collects personal data through the following means:

4.1 Direct Collection. You provide data directly when you: register an Account on the Platform; complete KYC verification by submitting identity documents; make a deposit or request a withdrawal; contact the support team via live chat or email; update your Account profile or responsible gaming settings; or respond to a survey or promotion offered through the Platform.

4.2 Automated Collection. When you access the Platform, our servers and analytics systems automatically record certain technical data including your IP address, device identifiers, browser characteristics, and session activity. This automated collection is necessary for security monitoring, fraud prevention, and service delivery.

4.3 Cookies and Tracking Technologies. The Platform uses cookies and similar technologies to maintain your login session, remember your preferences, and analyse Platform usage patterns. A full description of the cookies used by p8888 is provided in Section 10.

4.4 Third-Party Sources. p8888 may receive supplementary identity or verification data from authorised third-party KYC verification providers engaged to assist with PAGCOR-mandated identity checks. Data from such sources is used solely for verification purposes and is subject to the same protections as directly collected data.

p8888 processes your personal data only where a lawful basis exists under the DPA. The following table sets out the primary processing purposes, the data used, and the applicable legal basis for each:

p8888 does not sell or rent your personal data to any third party. Data is shared only in the following defined circumstances:

6.1 Service Providers. p8888 engages third-party service providers to deliver specific operational functions, including: payment processors (GCash, Maya, BancNet-connected banks); KYC verification providers; cloud hosting and data storage providers; customer support platform providers; and cybersecurity and fraud detection services. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose beyond the service they are providing to p8888.

6.2 Game Content Providers. Certain technical data (including session identifiers and wager data) is necessarily shared with licensed game content providers (such as Evolution, Pragmatic Play, and Jili) to facilitate real-time game delivery. These providers are certified by gaming regulators and bound by their own data handling obligations.

6.3 Regulatory Disclosure. p8888 is legally required to disclose personal and financial data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities upon lawful request or as required by applicable regulations. Such disclosures are made without further notice to the Account holder where legally required.

6.4 Law Enforcement. Where p8888 reasonably believes that disclosure is necessary to prevent crime, protect the safety of individuals, or comply with a valid legal process issued by a Philippine court or competent authority, personal data may be disclosed to law enforcement agencies.

6.5 Corporate Restructuring. In the event of a merger, acquisition, or transfer of business assets involving the Operator, personal data may be transferred to the successor entity. Affected Users will be notified in advance where practicable, and the successor entity will be bound by this Privacy Policy or a policy providing equivalent protections.

p8888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by applicable law or regulation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the Account relationship and for a minimum of five (5) years following Account closure, in compliance with PAGCOR licence conditions and AMLA record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (as amended) and BSP regulations.
• Gaming Activity Data: Retained for a minimum of three (3) years following the session date for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Support and Communications Data: Retained for two (2) years from the date of the interaction, or longer where a dispute remains unresolved.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring, fraud detection, and platform optimisation.
• Marketing Preference Data: Retained until you withdraw consent or close your Account, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

p8888 implements technical and organisational security measures proportionate to the risk associated with processing your personal data. These measures include, but are not limited to:

• Encryption: AES-256 encryption for data at rest; TLS 1.2 or higher for all data in transit between your device and p8888's servers.
• Access Controls: Role-based access control (RBAC) ensures that only authorised personnel can access personal data, on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication: Administrative and operational systems used to process personal data require multi-factor authentication for all access.
• Network Security: Firewalls, intrusion detection systems (IDS), and distributed denial-of-service (DDoS) protection are deployed to protect the Platform infrastructure.
• Penetration Testing: Regular independent security assessments and penetration tests are conducted to identify and remediate vulnerabilities.
• Incident Response: p8888 maintains a documented personal data breach response procedure, including NPC notification obligations as required under DPA Section 20(f) and NPC Circular 16-03.

Notwithstanding these measures, no internet-based system is completely immune to security risks. Users are responsible for maintaining the security of their own Account credentials and for notifying p8888 immediately upon suspecting unauthorised Account access.

Under the Philippine Data Privacy Act and its Implementing Rules, you have the following rights with respect to your personal data held by p8888:

To exercise any of the above rights, submit a written request to the p8888 Data Protection Officer at the contact details provided in Section 14. We will acknowledge your request within three (3) business days and respond fully within fifteen (15) business days. Where a request is complex or numerous, this period may be extended by up to an additional fifteen (15) business days, with notice.

Note that certain rights are subject to limitations under the DPA — for example, the right to erasure does not override p8888's obligation to retain records as required by PAGCOR licence conditions or AMLA regulations. Where a limitation applies, we will explain the reason clearly in our response to your request.

The p8888 Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. The following categories of cookies are in use:

10.1 Strictly Necessary Cookies. These cookies are essential for the Platform to function. They maintain your login session, enable secure authentication, and support basic security features such as session token validation and CSRF protection. These cookies cannot be disabled without significantly impairing Platform functionality.

10.2 Functional Cookies. These cookies remember your preferences — such as your preferred game category, display language, and responsible gaming settings — so that you do not need to re-enter them on each visit.

10.3 Performance and Analytics Cookies. These cookies collect anonymised data about how users navigate the Platform, which pages are visited most frequently, and where technical errors occur. This data helps p8888 improve the Platform's performance and user experience. Data collected through analytics cookies does not identify individual users.

10.4 Cookie Management. You may manage or disable non-essential cookies through your browser settings. Please note that disabling functional cookies may affect your experience on the Platform. Strictly necessary cookies cannot be disabled through browser settings without logging out of your session.

The p8888 Platform is strictly prohibited to persons under the age of twenty-one (21) years. p8888 does not knowingly collect personal data from individuals under 21. All Account registrations are subject to mandatory age verification through KYC document submission, and accounts found to have been created by persons under 21 are immediately suspended and permanently closed.

The DPA provides enhanced protections for personal data of minors. In the event that p8888 inadvertently collects data from a person under 21, such data will be deleted as soon as it is identified, and the incident will be reported to the NPC if required under applicable regulations.

The p8888 Platform may contain references or links to payment providers and game content providers whose own privacy policies govern the data they collect and process. p8888 has no control over the privacy practices of these third parties and accepts no responsibility for them.

Before providing personal data to any third-party service — including GCash, PayMaya, BDO, BPI, or Metrobank — in connection with transactions on the Platform, you are advised to review their respective privacy policies. Your relationship with those payment providers is governed directly by their own terms and policies.

p8888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The updated Policy will be published on the Platform with a revised effective date.

Where an amendment is material — meaning it significantly affects your rights or how your data is processed — p8888 will notify registered Users by email or in-platform notification at least seven (7) days prior to the amendment taking effect. Your continued use of the Platform following the effective date of any amendment constitutes acceptance of the updated Policy.

We encourage you to review this Policy periodically. The effective date and last revision date are displayed at the top of this document for your reference.

p8888 has designated a Data Protection Officer (DPO) in compliance with Section 21 of the DPA and its Implementing Rules. The DPO is responsible for overseeing compliance with the DPA and this Privacy Policy, and serves as the primary point of contact for data subject rights requests and privacy-related inquiries.

Data Subject Rights Requests: Submit written requests to the Data Protection Officer at [email protected]. Include "Data Subject Rights Request" in the subject line, state your full name and registered Account mobile number, and specify the right you wish to exercise.

General Privacy Inquiries: Contact our support team via 24/7 in-app live chat from your logged-in Account dashboard, or by email at [email protected].

NPC Complaints: If you are not satisfied with p8888's response to a data subject rights request or believe that your rights under the DPA have been violated, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines at www.privacy.gov.ph.