Privacy Policy – phi888 Casino

1. Introduction and Scope

This Privacy Policy (the "Policy") applies to all users of phi888 services, including visitors to the phi888 website (https://phi888.cam), registered account holders, mobile application users, and participants in promotional campaigns. By accessing or using phi888 services, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

phi888 operates as a data controller under the Data Privacy Act of 2012 and is responsible for determining the purposes and means of processing your personal information. We are committed to transparency in our data handling practices and will only collect, process, and store personal data that is necessary for providing our services, complying with legal obligations, and protecting the security and integrity of our platform.

This Policy should be read in conjunction with our Terms and Conditions, Responsible Gaming Policy, and Cookie Policy. If you have any questions or concerns about how phi888 handles your personal information, please contact our Data Protection Officer using the contact details provided at the end of this document.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a phi888 account, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name (first name, middle name, last name), date of birth, gender, nationality, and government-issued identification numbers (as required for KYC/AML compliance)
• Contact Information: Email address, mobile phone number (with Philippine country code), residential address (street, barangay, city/municipality, province, postal code)
• Account Credentials: Username, password (stored in encrypted form), security questions and answers, and two-factor authentication settings
• Financial Information: Payment method details (GCash account number, PayMaya account, bank account information), transaction history, deposit and withdrawal records, and wagering activity
• Verification Documents: Scanned or photographed copies of government-issued photo identification (Philippine passport, driver's license, UMID, national ID, voter's ID), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes
• Communication Records: Content of messages sent to customer support via live chat, email, or phone, including inquiries, complaints, and feedback

2.2 Information Collected Automatically

When you access phi888 services, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (smartphone, tablet, desktop), operating system (iOS, Android, Windows, macOS), browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID)
• Connection Data: IP address, geographic location (country, region, city), internet service provider, connection type (WiFi, mobile data), and network quality
• Usage Data: Pages visited, games played, bet amounts and outcomes, session duration, click patterns, navigation paths, referral sources, and timestamp information
• Performance Metrics: Page load times, error logs, crash reports, and API response times

2.3 Information from Third-Party Sources

phi888 may receive information about you from third-party services, including:

• Payment Processors: Transaction verification data from GCash, PayMaya, banks, and payment gateway providers
• Identity Verification Services: Enhanced due diligence information from KYC/AML screening providers, including politically exposed person (PEP) checks, sanctions list screening, and adverse media searches
• Fraud Prevention Services: Risk scores, fraud indicators, and device fingerprinting data from third-party security vendors
• Marketing Partners: Anonymized demographic and behavioral data (with your consent) from advertising platforms for targeted marketing purposes

3. How We Use Your Information

phi888 processes your personal information for the following lawful purposes:

3.1 Account Management and Service Provision

• Creating, maintaining, and authenticating your phi888 account
• Processing deposits, withdrawals, and payment transactions
• Enabling gameplay across casino games, sports betting, and other gaming products
• Tracking wagering activity, game outcomes, and account balances in real-time
• Maintaining game history, transaction records, and account statements
• Providing customer support and responding to inquiries, complaints, and technical issues

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) in compliance with Philippine gaming regulations
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA) of 2001
• Detecting, preventing, and investigating fraud, money laundering, terrorist financing, and other illegal activities
• Complying with legal obligations, court orders, subpoenas, and requests from law enforcement or regulatory authorities
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) when required by law
• Maintaining records for audit purposes as mandated by PAGCOR and the National Privacy Commission (NPC)

3.3 Security and Fraud Prevention

• Monitoring account activity for unauthorized access, suspicious betting patterns, and fraudulent behavior
• Implementing and maintaining security measures to protect against cyberattacks, data breaches, and unauthorized disclosure
• Enforcing our Terms and Conditions, including detecting and preventing bonus abuse, multi-accounting, and collusion
• Conducting investigations into suspected violations of platform rules or Philippine law

3.4 Marketing and Communications

• Sending promotional emails, SMS messages, and push notifications about bonuses, tournaments, and special offers (with your consent, which can be withdrawn at any time)
• Personalizing marketing content based on your gaming preferences, betting history, and engagement patterns
• Conducting market research, surveys, and focus groups to improve our services
• Administering loyalty programs, VIP rewards, and cashback schemes

3.5 Product Improvement and Analytics

• Analyzing user behavior, preferences, and engagement to optimize platform performance, user experience, and game offerings
• Testing new features, conducting A/B experiments, and measuring the effectiveness of promotional campaigns
• Generating anonymized and aggregated statistics for business intelligence and strategic planning
• Identifying technical issues, bugs, and areas for improvement in software and infrastructure

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, phi888 relies on the following legal bases for processing your personal information:

• Consent: You have given explicit consent for specific processing activities, such as receiving marketing communications or sharing data with third-party partners
• Contract Performance: Processing is necessary to fulfill our contractual obligations to provide phi888 services, process transactions, and manage your account
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including PAGCOR licensing requirements, AML/CTF obligations, tax reporting, and data retention mandates
• Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, security, product improvement) provided such interests do not override your fundamental rights and freedoms

5. How We Share Your Information

phi888 does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, banks, and payment gateway providers to facilitate deposits, withdrawals, and transaction processing
• Game Providers: Third-party game developers (Pragmatic Play, Evolution Gaming, Microgaming, NetEnt) who provide casino games and live dealer platforms integrated into phi888
• Identity Verification Services: KYC/AML screening providers who verify your identity, check sanctions lists, and conduct enhanced due diligence
• Cloud Hosting Providers: Infrastructure-as-a-service (IaaS) and platform-as-a-service (PaaS) vendors who host our servers, databases, and application environments
• Customer Support Platforms: Live chat software providers, email service providers, and CRM systems used to manage customer communications
• Marketing and Analytics Partners: Email marketing platforms, SMS gateway providers, advertising networks, and analytics tools (with your consent where required)

5.2 Regulatory and Legal Authorities

• Philippine Amusement and Gaming Corporation (PAGCOR) for licensing compliance and regulatory reporting
• Anti-Money Laundering Council (AMLC) for suspicious transaction reports (STRs) and covered transaction reports (CTRs)
• National Privacy Commission (NPC) for data protection compliance inquiries and breach notifications
• Law enforcement agencies, courts, and government authorities when required by law, court order, subpoena, or in response to lawful requests
• Tax authorities (Bureau of Internal Revenue) for tax reporting and withholding obligations

5.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity or successor organization, subject to the same privacy protections outlined in this Policy.

6. Data Retention

phi888 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus seven (7) years after account closure, as required by PAGCOR regulations and AML/CTF record-keeping obligations
• Transaction Records: Retained for ten (10) years from the date of transaction, in compliance with AMLA and BIR tax record-keeping requirements
• Identity Verification Documents: Retained for seven (7) years after the last transaction or account activity, as mandated by AML/CTF regulations
• Communication Records: Retained for three (3) years for customer service quality assurance and dispute resolution purposes
• Marketing Consent Records: Retained until consent is withdrawn plus two (2) years to demonstrate compliance with consent requirements

After the applicable retention period expires, personal information is securely deleted or anonymized such that it can no longer be associated with an identifiable individual.

7. Data Security

phi888 implements industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmissions between your device and phi888 servers are protected using Transport Layer Security (TLS) 1.2 or higher. Sensitive data at rest, including passwords and payment information, is encrypted using AES-256 encryption
• Access Controls: Personal information is accessible only to authorized phi888 personnel and service providers who require access to perform their duties, subject to strict confidentiality obligations
• Authentication: Multi-factor authentication (MFA) is available and encouraged for all user accounts. Administrative access to phi888 systems requires MFA and role-based access control (RBAC)
• Security Monitoring: Real- time intrusion detection systems (IDS) and security information and event management (SIEM) tools monitor for suspicious activity, unauthorized access attempts, and potential security threats
• Regular Audits: phi888 conducts periodic security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses
• Data Segregation: Production, testing, and development environments are logically separated to prevent unauthorized data exposure
• Incident Response: phi888 maintains a comprehensive data breach response plan in compliance with NPC Circular No. 16-03, including procedures for containment, investigation, notification, and remediation

While phi888 employs robust security measures, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access to your account.

8. Your Rights Under the Data Privacy Act

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

8.1 Right to Be Informed

You have the right to be informed whether personal data pertaining to you is being processed, including the purposes of processing, categories of data collected, recipients of your data, and retention periods. This Privacy Policy serves as our primary means of fulfilling this obligation.

8.2 Right to Access

You have the right to obtain from phi888 confirmation of whether we are processing your personal data, and if so, to access such data and receive copies of your personal information in a commonly used electronic format. Requests can be submitted through customer support.

8.3 Right to Rectification

You have the right to correct inaccurate, incomplete, or outdated personal information. You can update most account information directly through your phi888 account settings. For changes requiring verification (name, date of birth), contact customer support with supporting documentation.

8.4 Right to Erasure or Blocking

You may request deletion or blocking of your personal data when it is no longer necessary for the purposes for which it was collected, when consent is withdrawn, or when processing is unlawful. However, this right is subject to legal exceptions, including when retention is required for compliance with legal obligations, establishment or defense of legal claims, or fulfillment of contractual obligations.

8.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications by clicking the unsubscribe link in emails, replying STOP to SMS messages, or updating your communication preferences in your account settings.

8.6 Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used, and machine-readable format and to transmit such data to another data controller where technically feasible.

8.7 Right to File a Complaint

If you believe phi888 has violated your data privacy rights, you may file a complaint with our Data Protection Officer or with the National Privacy Commission of the Philippines.

9. Cookies and Tracking Technologies

phi888 uses cookies, web beacons, pixels, and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you when you return to the platform.

We use the following types of cookies:

• Essential Cookies: Necessary for platform functionality, including session management, authentication, security, and fraud prevention. These cannot be disabled without impacting core services.
• Performance Cookies: Collect anonymized information about how users interact with phi888, including pages visited, error messages encountered, and time spent on pages. This data helps us improve platform performance.
• Functional Cookies: Remember your preferences, language settings, and customization choices to provide a more personalized experience.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness. These require your consent and can be disabled through cookie preference settings.

You can manage cookie preferences through your browser settings or our cookie consent manager. However, disabling certain cookies may limit platform functionality.

10. International Data Transfers

phi888 primarily stores and processes your personal information within the Philippines. However, some of our service providers (cloud hosting, payment processors, game providers) may be located outside the Philippines, including in jurisdictions that may not provide the same level of data protection as Philippine law.

When we transfer your personal information internationally, we ensure adequate safeguards are in place, including standard contractual clauses, data processing agreements, and compliance with cross-border data transfer requirements under NPC Circular No. 16-03. By using phi888 services, you consent to such international transfers as necessary to provide our services.

11. Children's Privacy

phi888 services are strictly prohibited for individuals under twenty-one (21) years of age. We do not knowingly collect, process, or retain personal information from minors. If we become aware that a user is underage, we will immediately suspend the account, void all transactions, and delete all associated personal information in compliance with the Data Privacy Act's provisions on processing of children's data.

Parents and guardians who believe a minor has provided personal information to phi888 should contact our Data Protection Officer immediately for account closure and data deletion.

12. Changes to This Privacy Policy

phi888 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through email notification, prominent website notice, or in-app notification at least thirty (30) days before taking effect.

Your continued use of phi888 services after the effective date of any changes constitutes acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or phi888's data protection practices, please contact our Data Protection Officer:

• Email: [email protected] / [email protected]
• Customer Support: [email protected]
• Live Chat: Available 24/7 on the phi888 website
• Mailing Address: phi888 Data Protection Officer, Metro Manila, Philippines

For complaints or concerns that cannot be resolved through our internal processes, you may contact the National Privacy Commission:

• National Privacy Commission (NPC)
• 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila 1307
• Email: [email protected]
• Hotline: (+63-2) 8234-2228
• Website: privacy.gov.ph

14. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including Republic Act No. 10173 (Data Privacy Act of 2012), Republic Act No. 9160 (Anti-Money Laundering Act of 2001 as amended), and all applicable PAGCOR regulations. Any disputes arising from this Policy shall be subject to the exclusive jurisdiction of the courts of Metro Manila, Philippines.

Last Updated: January 15, 2024
Version: 3.2
Effective Date: January 15, 2024