Privacy Policy — ph288 Online Casino Philippines

1. Data Controller

ph288 ("the Platform", "we", "us", "our") is the data controller responsible for the personal data of players who register accounts and use the ph288 platform accessible at ph288.vip. As data controller, ph288 determines the purposes and means of processing personal data collected through the platform. ph288 operates in compliance with applicable Philippine data privacy law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. Any questions regarding ph288's data processing activities may be directed to our support team at [email protected] (plain text — not a clickable link).

2. Personal Data We Collect

2.1 Registration Data

When a player creates a ph288 account, we collect the information provided during the registration process, which includes:

• Full legal name as it appears on a government-issued identification document
• Date of birth (for age verification — ph288 requires all players to be 21 years of age or older)
• Philippine mobile number (used as the primary account identifier and for OTP-based two-factor authentication)
• Email address, where voluntarily provided
• Residential address in the Philippines

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations under anti-money laundering regulations, ph288 may collect copies of:

• Government-issued photo identification (Philippine national ID, passport, driver's license, SSS card, UMID, or equivalent)
• Proof of address documents (utility bills, bank statements, or official government correspondence)
• Selfie photographs for identity confirmation
• Source of funds declarations for accounts with high-value transaction activity

2.3 Financial Data

ph288 collects transaction records relating to deposits and withdrawals processed through the platform, including the payment method used (e.g., GCash account number, Maya account reference, bank account details), transaction amounts in Philippine Peso (₱), and timestamps. ph288 does not store full card numbers or complete banking credentials — only references sufficient to process and verify transactions.

2.4 Gaming Activity Data

ph288 automatically records gaming activity data for all registered accounts, including game history, wager amounts, game outcomes, session start and end times, and any bonus or promotional credits applied. This data is used to operate the platform, verify the integrity of transactions, calculate VIP tier progression, and fulfil responsible gaming monitoring obligations.

2.5 Technical & Device Data

When a player accesses ph288, we automatically collect certain technical information, including IP address, device type and operating system, browser type and version, session timestamps, and referring URL. This data is used for security monitoring, fraud detection, and platform performance optimisation.

2.6 Communications Data

When a player contacts ph288's customer support team via live chat, the content of that communication is recorded and retained for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Collect Personal Data

ph288 collects personal data through the following channels:

• Directly from you — through the account registration process, KYC document submission, deposit and withdrawal forms, and live chat communications
• Automatically — through cookies, server logs, and session tracking technologies when you access the ph288 platform
• From third parties — from payment processors (e.g., GCash, Maya, BPI, BDO, Metrobank) to verify transaction details, and from identity verification service providers engaged to fulfil KYC obligations

4. Legal Basis for Processing

ph288 processes personal data on one or more of the following legal bases as applicable under Philippine data privacy law:

• Contractual necessity — processing required to perform the contract between ph288 and the player (i.e., operating the account, processing deposits and withdrawals, and providing gaming services)
• Legal obligation — processing required to comply with applicable law, including anti-money laundering regulations, age verification requirements, and tax reporting obligations
• Legitimate interests — processing for fraud prevention, security monitoring, responsible gaming compliance, and platform improvement, where those interests are not overridden by the player's privacy rights
• Consent — where ph288 has obtained the player's explicit consent for a specific processing activity, such as the receipt of marketing communications

5. How We Use Your Personal Data

ph288 uses the personal data we collect for the following purposes:

• Creating and managing player accounts, including login authentication via OTP
• Processing deposits and withdrawals via GCash, Maya, and other supported Philippine payment methods
• Verifying player identity and age as required by applicable regulation (21+ minimum age enforcement)
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited conduct
• Providing 24/7 customer support in Filipino and English
• Administering bonuses, VIP rewards, and promotional programmes
• Monitoring gaming activity to fulfil responsible gaming obligations and identify at-risk behaviour
• Sending account-related transactional communications (e.g., deposit confirmations, OTPs, security alerts)
• Sending promotional communications where the player has opted in to receive them — players may opt out at any time
• Complying with legal, regulatory, and reporting obligations
• Improving the ph288 platform through aggregated, anonymised analytics

6. Disclosure of Personal Data to Third Parties

ph288 does not sell, rent, or trade personal data to third parties for their own marketing purposes. ph288 may share personal data with the following categories of third parties strictly as necessary to operate the platform and fulfil legal obligations:

• Payment processors — GCash, Maya, BPI, BDO, Metrobank, and other integrated payment providers to process financial transactions
• Identity verification providers — third-party KYC service providers engaged to verify player identity and age
• Game content providers — licensed game studios whose titles are hosted on ph288, to the extent technically necessary for game operation
• Regulatory authorities — including PAGCOR and Philippine law enforcement agencies, where disclosure is required by law or regulatory directive
• IT and infrastructure service providers — cloud hosting and security vendors under contractual data processing agreements that prohibit independent use of personal data

All third parties with whom ph288 shares personal data are required to handle that data in accordance with applicable privacy law and ph288's data protection standards.

7. Cookies & Tracking Technologies

ph288 uses cookies and similar tracking technologies to operate the platform, maintain login sessions, detect fraud, and improve the player experience. Specifically, ph288 uses:

• Strictly necessary cookies — required for the platform to function (e.g., session management, security tokens). These cannot be disabled without breaking the platform.
• Functional cookies — remember player preferences such as language settings and display options
• Analytics cookies — collect anonymised data about how players interact with the platform to help improve performance. ph288 uses aggregated, non-personally-identifiable analytics only.

Players can manage cookie preferences through their browser settings. Disabling strictly necessary cookies will affect platform functionality. ph288 does not use third-party advertising cookies or behavioural tracking for cross-site advertising purposes.

8. Data Retention

ph288 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including legal, regulatory, and accounting requirements. In practice:

• Active account data is retained for the lifetime of the account plus a minimum of five (5) years following account closure, as required by Philippine AML regulations
• Transaction records are retained for a minimum of five (5) years from the date of the transaction
• KYC identity documents are retained for a minimum of five (5) years following the completion of the business relationship
• Customer support communications are retained for three (3) years for quality assurance and dispute resolution purposes
• Technical log data (IP addresses, session data) is retained for twelve (12) months unless required for ongoing fraud investigation

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ph288's data destruction procedures.

9. Data Security

ph288 implements industry-standard technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between the player's device and ph288's servers
• Bcrypt hashing for stored passwords — ph288 never stores passwords in plain text
• OTP-based two-factor authentication for account login and high-value transactions
• Real-time fraud detection and anomaly monitoring systems
• Role-based access controls restricting internal access to personal data to staff with a legitimate operational need
• Regular security audits and penetration testing of the ph288 platform

Notwithstanding these measures, no online platform can guarantee absolute security. Players are responsible for maintaining the confidentiality of their account credentials and for notifying ph288 immediately if they suspect unauthorised access to their account.

10. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012 and its implementing rules, registered players have the following rights in relation to their personal data held by ph288:

• Right to be informed — the right to know that ph288 is collecting your personal data and the purposes for which it is being processed
• Right of access — the right to request a copy of the personal data ph288 holds about you
• Right to rectification — the right to request correction of inaccurate or incomplete personal data
• Right to erasure — the right to request deletion of your personal data, subject to ph288's legal retention obligations
• Right to object — the right to object to the processing of your personal data for direct marketing purposes
• Right to data portability — the right to receive your personal data in a structured, commonly used format
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated

To exercise any of the above rights, contact ph288's support team via live chat or at [email protected] (plain text). ph288 will respond to data rights requests within 15 business days of receipt.

11. Children & Minors

ph288 does not knowingly collect personal data from individuals under the age of 21. The ph288 platform is strictly intended for adult players of legal gambling age in the Philippines. If ph288 becomes aware that an account has been registered by an individual under 21 years of age, that account will be suspended immediately, all associated data will be deleted or anonymised to the extent permitted by legal retention obligations, and the matter will be escalated in accordance with ph288's child protection procedures. Parents or guardians who believe a minor has registered an account on ph288 should contact our support team immediately.

12. Changes to This Privacy Policy

ph288 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or ph288's data processing practices. Material changes will be communicated to registered players via their registered mobile number or on-platform notification prior to taking effect. The date of the most recent review is noted at the top of this policy. Continued use of ph288 following publication of an updated Privacy Policy constitutes acceptance of the revised terms. Players who do not accept a material change to this Privacy Policy should cease using the platform and may request account closure.

13. Contact & Data Privacy Queries

For any questions, concerns, or requests relating to this Privacy Policy or ph288's data processing practices, please contact us via:

• Live Chat: Available 24/7 inside the ph288 platform — fastest response for urgent privacy matters
• Email: [email protected] (plain text — not a clickable link) — email responses within 24 hours on standard operating days

ph288 is committed to resolving data privacy queries promptly and transparently. Formal data rights requests are acknowledged within 3 business days and fully resolved within 15 business days. If you are not satisfied with ph288's handling of your privacy concern, you may lodge a complaint with the National Privacy Commission of the Philippines.