Privacy Policy
This Privacy Policy explains how 988ph collects, uses, stores, and protects the personal data of our players and website visitors. It is written in compliance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and its implementing rules.
privacy_meta.json
{ "document": "Privacy Policy", "brand": "988ph", "version": "v3.2", "effective": "2026-01-01", "law": "RA 10173", "regulator": "NPC + PAGCOR", "dpo_email": "[email protected]", "sections": 12 }
How 988ph Protects Your Data
Six plain-language commitments that summarize how 988ph handles your personal information. The complete legal text is available in full below.
Collected Only What Is Necessary
988ph collects only the personal data required to operate your account, process transactions, verify your identity under KYC, comply with PAGCOR obligations, and deliver the Services. We do not collect data speculatively or sell it to third-party marketers.
Secured with Bank-Grade Encryption
All personal data transmitted to and stored by 988ph is protected by 256-bit SSL/TLS encryption. Access to player data within 988ph's systems is restricted to authorized personnel on a strict need-to-know basis, governed by internal access control policies.
Your Rights Are Enforceable
Under the Philippine Data Privacy Act, you hold enforceable rights over your personal data — including the right to access, correct, object to, and in certain circumstances erase your data. 988ph has a designated Data Protection Officer (DPO) who processes all such requests within thirty (30) calendar days.
Limited and Lawful Data Sharing
988ph shares your personal data only with: (1) KYC and payment processing partners directly required to operate your account; (2) PAGCOR and Philippine regulatory or law enforcement authorities as required by law; and (3) service providers under strict data processing agreements. Your data is never sold.
Defined Retention Periods
988ph retains player personal data for no longer than is necessary for the purposes for which it was collected. Account records, KYC documents, and transaction logs are retained for a minimum of five (5) years post-account closure to satisfy PAGCOR and Anti-Money Laundering Act requirements.
Breach Notification Commitment
In the event of a personal data breach that poses a real risk of serious harm to affected players, 988ph will notify the National Privacy Commission (NPC) within 72 hours of discovery and will notify affected players as soon as practicable, in accordance with NPC Circular 16-03.
This Privacy Policy forms part of the 988ph Terms & Conditions and applies to all registered players, prospective players who browse the 988ph platform, and any person who contacts 988ph's support team. By using the 988ph platform, you consent to the data practices described herein. If you do not accept this Policy, you must not use the 988ph platform or submit any personal information to us.
Introduction & Scope
1.1 988ph ("we," "us," or "our") is committed to protecting the personal data of every Filipino player and website visitor who interacts with our platform. This Privacy Policy ("Policy") describes the types of personal information 988ph collects, the purposes for which it is used, the conditions under which it may be shared, and the measures we take to keep it secure.
1.2 This Policy applies to all personal data processed by 988ph in connection with: (a) the registration and maintenance of player accounts; (b) the use of any game, service, or feature available on the 988ph platform; (c) financial transactions, including deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and USDT; (d) participation in promotions and loyalty programs; and (e) interactions with 988ph's customer support team via live chat or any other channel.
1.3 This Policy does not apply to third-party websites that may be referenced in 988ph content. 988ph is not responsible for the privacy practices of third parties.
1.4 This Policy is governed by Republic Act No. 10173 (the Data Privacy Act of 2012), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines.
Data Controller
2.1 For the purposes of the Data Privacy Act of 2012, 988ph is the Personal Information Controller (PIC) in respect of all personal data collected through the 988ph platform.
2.2 Data Protection Officer (DPO). 988ph has appointed a Data Protection Officer responsible for overseeing compliance with this Policy and with the Data Privacy Act. The DPO can be contacted at:
Data Protection Officer — 988ph
[email protected]
Response time: within 30 calendar days
2.3 The DPO is registered with the National Privacy Commission in accordance with NPC Advisory Opinion requirements applicable to personal information controllers of 988ph's scale.
Personal Data We Collect
3.1 988ph collects the following categories of personal data, depending on the nature of your interaction with the platform:
| Category | Specific Data Points | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID (PhilSys, passport, driver's license, UMID), selfie photograph for KYC | Mandatory |
| Contact Data | Philippine mobile number (09XX or +639XX format), email address | Mandatory |
| Financial Data | GCash number, Maya number, bank account details (for BPI, BDO, Metrobank withdrawals), transaction history, deposit and withdrawal amounts | Mandatory |
| Account & Gaming Data | Username, encrypted password, login timestamps, session durations, game activity logs, betting history, bonus participation, loyalty tier status | Mandatory |
| Technical Data | IP address, device type and model, operating system version, browser type, mobile network, geolocation (city-level only), session tokens | Automatic |
| Communications Data | Live chat transcripts, support ticket content, survey responses, promotional communication preferences | Optional |
3.2 988ph does not collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act (e.g., health records, political or religious beliefs, genetic data) unless you voluntarily provide it in the context of a responsible gaming self-exclusion or support request, in which case it is processed solely for that purpose and retained only as long as necessary.
How We Collect Your Data
4.1 988ph collects personal data through the following means:
- Direct Submission: When you register a 988ph account, complete KYC verification, make a deposit or withdrawal, participate in a promotion, or contact our support team, you provide data directly to us.
- Automated Collection: When you access the 988ph platform, our systems automatically record technical data including your IP address, device information, and session activity logs. This data is collected via server logs and first-party cookies (see Section 7).
- Payment Processors: When you transact via GCash, Maya, BPI, BDO, or Metrobank, our payment processing partners confirm the status of your transaction and provide us with transaction reference data. We do not store full payment card numbers or e-wallet PINs.
- Identity Verification Providers: During KYC verification, 988ph may use third-party identity verification service providers that process your government ID and selfie photograph on our behalf to confirm your identity.
Purpose & Legal Basis for Processing
5.1 988ph processes your personal data for the following purposes, each supported by a lawful processing criterion under Section 12 or Section 13 of the Data Privacy Act:
| Purpose | Legal Basis |
|---|---|
| Account registration, authentication, and management | Performance of contract (Terms & Conditions) |
| KYC identity verification | Legal obligation (PAGCOR guidelines, AMLA) |
| Deposit and withdrawal processing | Performance of contract |
| Fraud prevention and anti-money laundering monitoring | Legal obligation (AMLA, PAGCOR); legitimate interest |
| Responsible gaming monitoring and enforcement | Legal obligation (PAGCOR Responsible Gaming framework) |
| Customer support and dispute resolution | Performance of contract; legitimate interest |
| Service improvement and platform analytics | Legitimate interest (anonymized / aggregated data) |
| Marketing and promotional communications | Consent (opt-in; withdrawable at any time) |
| Legal and regulatory reporting | Legal obligation |
5.2 Where 988ph relies on consent as the lawful basis for processing — specifically for marketing communications — you may withdraw your consent at any time by updating your communication preferences in your Account settings or by contacting the DPO. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Data Sharing & Disclosure
6.1 We do not sell your personal data. 988ph does not sell, rent, or commercially share your personal data with any third party for that third party's own marketing purposes.
6.2 988ph shares personal data only in the following circumstances and with the following categories of recipients:
- Payment Processing Partners: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), BPI, BDO, and Metrobank — solely for the purpose of processing deposits and withdrawals.
- KYC and Identity Verification Providers: Third-party providers engaged to perform identity document verification, fraud screening, and anti-money laundering checks on behalf of 988ph.
- PAGCOR: As our regulatory authority, PAGCOR may require 988ph to disclose player account data, transaction records, and responsible gaming compliance information in the exercise of its supervisory functions.
- Philippine Anti-Money Laundering Council (AMLC): 988ph is subject to Anti-Money Laundering Act reporting obligations. Suspicious transactions may be reported to the AMLC as required by law, without prior notice to the affected player.
- National Privacy Commission (NPC): As required by the Data Privacy Act, including breach notifications and responses to NPC investigations.
- Law Enforcement and Courts: Where required by valid legal process (e.g., court order, search warrant, or subpoena issued by a Philippine court or competent authority).
- Cloud Infrastructure Providers: 988ph uses cloud hosting services to operate the platform. These providers process data on 988ph's behalf under strict data processing agreements that prohibit independent use of player data.
6.3 All third-party service providers who process personal data on behalf of 988ph are subject to contractual obligations that require them to handle such data securely, in accordance with this Policy and applicable Philippine law, and for no purpose other than the service they provide to 988ph.
988ph prioritizes storing player data on servers located within the Philippines or within jurisdictions that the NPC has recognized as providing adequate data protection. Where data is transferred to a jurisdiction not recognized as adequate, 988ph ensures appropriate safeguards — such as standard contractual clauses — are in place before any transfer occurs.
Cookies & Tracking Technologies
7.1 988ph uses cookies and similar tracking technologies to operate and improve the platform. A "cookie" is a small text file placed on your device by our web server when you visit the 988ph platform. Cookies do not contain executable code and cannot access or modify other data stored on your device.
7.2 988ph uses the following categories of cookies:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in, security cookies that detect unusual login behavior, and load-balancing cookies. These cannot be disabled.
- Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations. Disabling these may affect platform functionality.
- Analytics Cookies: Used to understand how players interact with the platform — which games are most popular, where players encounter difficulties, and how the mobile experience compares to desktop. This data is aggregated and anonymized. We use first-party analytics and do not use Google Analytics or similar third-party analytics tools that transmit data outside 988ph's control.
- Security & Fraud Detection Cookies: Assist in identifying automated bot activity, multi-account behavior, and other patterns associated with prohibited conduct under the Terms & Conditions.
7.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and accessing the 988ph platform. Most mobile browsers provide equivalent cookie management options in their settings menus.
Data Retention
8.1 988ph retains personal data for no longer than is necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods imposed by applicable law:
- Account Registration Data and KYC Documents: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later. This retention period is required by PAGCOR guidelines and the Anti-Money Laundering Act.
- Transaction Records (Deposits, Withdrawals, Bets): Retained for a minimum of five (5) years from the date of each transaction.
- Communications Data (Live Chat Transcripts, Support Tickets): Retained for three (3) years from the date of the interaction, unless retained longer as part of an active dispute or legal proceeding.
- Technical and Session Logs: Retained for twelve (12) months from the date of collection, after which they are anonymized or deleted.
- Marketing Consent Records: Retained for the duration of your account plus two (2) years following account closure, to demonstrate consent where required.
8.2 At the end of the applicable retention period, personal data is either securely deleted from 988ph's systems or irreversibly anonymized so that it can no longer be associated with any identifiable individual. Physical documents containing personal data (e.g., printed KYC submissions) are shredded in accordance with 988ph's data destruction policy.
8.3 Where data is subject to an active legal hold — for example, due to ongoing litigation, a regulatory investigation, or a player dispute — the normal retention period is suspended until the hold is lifted.
Data Security
9.1 988ph implements technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key measures include:
- Encryption in Transit: All data transmitted between your device and the 988ph platform is encrypted using TLS 1.2 or higher (256-bit encryption), the same standard used by Philippine commercial banks for their online banking portals.
- Encryption at Rest: Sensitive data fields — including government ID scans and financial account references — are encrypted at the database level using AES-256 encryption.
- Access Controls: Strict role-based access controls govern which 988ph personnel can access player data, with access granted solely on a need-to-know basis. All internal access to player account data is logged and auditable.
- Password Security: Passwords are stored using industry-standard one-way cryptographic hashing. 988ph staff cannot retrieve or view your plaintext password under any circumstance.
- Two-Factor Authentication: 988ph offers optional SMS-based 2FA for player accounts and requires 2FA for all internal administrative access to player data systems.
- Regular Security Audits: 988ph conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
While 988ph takes extensive measures to secure our systems, the security of your account also depends on you. Never share your password or one-time SMS codes with anyone — including persons claiming to be 988ph staff. 988ph will never ask for your password through any channel. If you suspect your account has been compromised, contact our support team via live chat immediately.
Your Data Privacy Rights
10.1 As a data subject under the Data Privacy Act of 2012, you hold the following rights with respect to the personal data 988ph holds about you:
Right to Be Informed
The right to know that your data is being collected and how it will be used — which this Policy fulfills.
Right of Access
Request a copy of the personal data 988ph holds about you and information about how it is processed.
Right to Correction
Request correction of inaccurate or incomplete personal data held in your 988ph account.
Right to Object
Object to specific processing of your data — particularly processing based on legitimate interest or for direct marketing purposes.
Right to Erasure
Request deletion of your personal data where retention is no longer lawfully required — subject to mandatory retention periods under PAGCOR and AMLA obligations.
Right to Data Portability
Request a structured, machine-readable copy of personal data you have provided to 988ph, where technically feasible.
Right to Damages
Entitled to compensation for damages sustained due to inaccurate, incomplete, outdated, or unlawfully obtained personal data.
Right to Complain
File a complaint with the National Privacy Commission if you believe 988ph has violated your rights under the Data Privacy Act.
10.2 How to Exercise Your Rights. To exercise any of the above rights, submit a written request to the 988ph Data Protection Officer at [email protected]. Please include: your full name, your registered 988ph mobile number, a description of the right you wish to exercise, and (for access and erasure requests) a copy of a valid government ID to verify your identity. 988ph will respond within thirty (30) calendar days. Requests that are manifestly unfounded, repetitive, or excessive may be declined with written justification.
If you are unsatisfied with 988ph's handling of your data subject request, you may file a complaint with the National Privacy Commission of the Philippines. The NPC accepts complaints via its official website and handles disputes between data subjects and personal information controllers under the Data Privacy Act of 2012.
Children & Minors
11.1 The 988ph platform is strictly restricted to individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. 988ph does not knowingly collect personal data from individuals under the age of 21.
11.2 If 988ph discovers or is notified that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated personal data will be deleted (except where retention is required by law), and any funds deposited will be returned to the source payment method after identity verification.
If you are a parent or guardian and believe your child (under 21 years of age) has registered a 988ph account or provided personal data to 988ph, please contact the DPO at [email protected] immediately. We will investigate promptly and take appropriate action.
Policy Updates & Contact
12.1 988ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. The effective date at the top of this document indicates when the current version took effect.
12.2 Where changes are material — meaning they substantively affect how we collect, use, or share your personal data — 988ph will notify registered players via their registered mobile number or email address not less than fourteen (14) calendar days before the updated Policy takes effect.
12.3 Non-material updates (such as typographical corrections, clarifications of existing practices, or updates to DPO contact details) may take effect immediately upon publication.
12.4 Continued use of the 988ph platform following notification of any material Policy change constitutes your acceptance of the updated Policy. If you do not accept the updated Policy, you must discontinue use of the platform and may close your account in accordance with the Terms & Conditions.
12.5 Contact. All privacy-related inquiries, data subject requests, and complaints should be directed to:
988ph Data Protection Officer
[email protected]
Live Chat Support: 24/7 (request DPO escalation)
Response SLA: 30 calendar days
This Privacy Policy is version 3.2, effective January 1, 2026. Previous versions are available from the DPO upon written request. The Terms & Conditions, which should be read alongside this Policy, are available at 988ph.cam/terms-conditions.
988ph Handles Your Data the Way It Should Be Handled
Your personal data is never sold, never shared beyond what the law requires, and always protected with bank-grade encryption. Join over 580,000 Filipino players who trust 988ph with their gaming experience. Players must be 21 years or older.