88piso Privacy Policy

1. Introduction and Scope

This Privacy Policy applies to all personal information collected, processed, and stored by 88piso ("Company," "we," "us," or "our") through our website, mobile applications, and related services (collectively, the "Platform"). By registering for an account, accessing the Platform, or using any of our services, you ("User," "you," or "your") acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy.

We recognize the importance of maintaining the confidentiality and security of your personal data. This policy outlines our commitment to transparency in how we handle your information and explains the rights you have regarding your personal data under Philippine law. If you do not agree with the terms of this Privacy Policy, you must immediately cease using the Platform and refrain from providing any personal information.

2. Information We Collect

To provide you with a secure, personalized, and compliant gaming experience, we collect various types of information when you interact with the 88piso Platform. The information we collect falls into the following categories:

2.1 Information You Provide Directly

When you register for an account, verify your identity, make transactions, or communicate with our customer support team, you voluntarily provide us with personal information, including but not limited to:

• Account Registration Information: Full name, date of birth, email address, mobile phone number, username, password, and security questions;
• Identity Verification (KYC) Documents: Government-issued identification (passport, driver's license, PhilID, Voter's ID, SSS ID), proof of address (utility bills, bank statements, government correspondence), and payment method verification documents;
• Financial and Payment Information: Bank account details, e-wallet account information (GCash, Maya), credit/debit card numbers, cryptocurrency wallet addresses, transaction history, deposit and withdrawal records;
• Communication Data: Correspondence with customer support, feedback, survey responses, complaints, inquiries, and any other messages you send to us;
• Marketing Preferences: Your consent to receive promotional communications, newsletters, and marketing materials, along with your communication channel preferences.

2.2 Information Collected Automatically

When you access or use the 88piso Platform, we automatically collect certain technical and usage data through cookies, web beacons, and similar tracking technologies. This information includes:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address, advertising ID), mobile network information;
• Log and Usage Data: IP address, geolocation data (country, city, region), access times and dates, pages visited, links clicked, time spent on pages, referring URLs, search queries;
• Gaming Activity Data: Games played, betting patterns, wager amounts, win/loss records, game session durations, bonus usage, tournament participation;
• Cookie and Tracking Data: Session cookies, persistent cookies, authentication tokens, preference settings, analytics data collected through Google Analytics, Firebase, and similar services.

2.3 Information from Third Parties

We may receive information about you from third-party sources to verify your identity, prevent fraud, comply with regulatory obligations, or enhance our services. These sources include:

• Payment Processors: Transaction verification, payment status updates, fraud detection alerts from GCash, Maya, PayMaya, banks, and cryptocurrency exchanges;
• Identity Verification Services: Age verification, address confirmation, sanctions screening, and identity authentication results from third-party KYC providers;
• Regulatory and Law Enforcement Agencies: Information required for compliance with anti-money laundering (AML), counter-terrorist financing (CTF), and responsible gaming regulations;
• Marketing Partners: Referral data, affiliate tracking information, and campaign performance metrics from authorized marketing partners.

3. How We Use Your Information

We process your personal information for specific, legitimate purposes that are necessary to provide, improve, and protect our services. The legal bases for processing your data include contractual necessity, legal compliance, legitimate interests, and your explicit consent. We use your information for the following purposes:

3.1 Account Management and Service Delivery

• Create, maintain, and manage your 88piso account;
• Authenticate your identity and verify your age and eligibility to use gaming services;
• Process deposits, withdrawals, and other financial transactions;
• Enable you to participate in games, place bets, claim bonuses, and access all Platform features;
• Maintain accurate records of your gaming activity and transaction history;
• Provide personalized gaming experiences, recommendations, and promotions based on your preferences.

3.2 Compliance and Legal Obligations

• Comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and other applicable Philippine laws;
• Fulfill obligations under PAGCOR regulations and licensing requirements;
• Conduct Know Your Customer (KYC) verification and anti-money laundering (AML) checks;
• Detect, prevent, and investigate fraud, money laundering, underage gambling, and other illegal activities;
• Respond to lawful requests from law enforcement, regulatory authorities, and courts;
• Enforce our Terms and Conditions, resolve disputes, and protect our legal rights.

3.3 Security and Fraud Prevention

• Monitor account activity for suspicious behavior, unauthorized access, and security threats;
• Implement fraud detection systems, risk assessment algorithms, and behavioral analytics;
• Protect the integrity of our games and prevent cheating, collusion, and exploitation;
• Secure payment processing and protect against payment fraud and chargebacks;
• Respond to security incidents, data breaches, and cyber threats;
• Maintain audit trails and logs for security and compliance purposes.

3.4 Customer Support and Communication

• Respond to your inquiries, complaints, and support requests through live chat, email, and phone;
• Provide technical assistance, troubleshoot issues, and resolve disputes;
• Send transactional messages related to your account, including deposit confirmations, withdrawal notifications, password resets, and security alerts;
• Communicate important updates about Platform changes, policy updates, and regulatory announcements;
• Conduct customer satisfaction surveys and gather feedback to improve our services.

3.5 Marketing and Promotional Activities

With your explicit consent, we may use your information to send you promotional communications, including:

• Newsletters, special offers, bonus promotions, and tournament announcements;
• Personalized marketing messages based on your gaming preferences and activity;
• Invitations to exclusive events, VIP programs, and loyalty rewards;
• Targeted advertising through email, SMS, push notifications, and social media.

You have the right to opt out of marketing communications at any time by adjusting your account preferences or clicking the "unsubscribe" link in our emails. Opting out of marketing will not affect transactional communications necessary for account management.

3.6 Analytics and Service Improvement

• Analyze user behavior, gaming patterns, and Platform usage to improve our services;
• Conduct research, testing, and development of new features and products;
• Optimize website performance, user interface design, and mobile app functionality;
• Generate aggregate statistics and reports for business intelligence and strategic planning;
• Measure the effectiveness of marketing campaigns and promotional activities.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with trusted third parties under the following circumstances:

4.1 Service Providers and Business Partners

We engage reputable third-party service providers to perform functions on our behalf. These providers have access to your personal information only to the extent necessary to perform their services and are contractually obligated to maintain confidentiality and security. Service providers include:

• Payment Processors: GCash, Maya, bank partners, cryptocurrency payment gateways, and other financial institutions that process deposits and withdrawals;
• Identity Verification Services: Third-party KYC providers that verify your age, identity, and address;
• Cloud Hosting and Data Storage: AWS, Google Cloud, and other infrastructure providers that securely store and process data;
• Game Providers and Software Developers: Third-party game studios and software platforms that power our casino games, live dealer tables, and sports betting systems;
• Customer Support Tools: Live chat platforms, helpdesk software, and CRM systems that enable us to provide support services;
• Marketing and Analytics Partners: Email service providers, SMS gateways, analytics platforms (Google Analytics, Firebase), and advertising networks.

4.2 Legal and Regulatory Requirements

We may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or government requests;
• Cooperate with law enforcement investigations, regulatory audits, and compliance reviews;
• Report suspicious activities to PAGCOR, the Anti-Money Laundering Council (AMLC), or other authorities;
• Enforce our Terms and Conditions, investigate violations, and protect our legal rights;
• Prevent fraud, protect the safety of users, and respond to security threats.

4.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring or successor entity. We will notify you via email or prominent notice on the Platform before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you provide explicit consent, such as participating in co-branded promotions, affiliate programs, or third-party integrations.

5. International Data Transfers

Your personal information may be transferred to, stored, and processed in jurisdictions outside the Philippines where our service providers, data centers, and business partners are located. When we transfer data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with Philippine data protection laws.

These safeguards include standard contractual clauses, data processing agreements, and security measures that meet or exceed the requirements of the Data Privacy Act of 2012. By using the 88piso Platform, you consent to the international transfer of your data as described in this Privacy Policy.

6. Data Security Measures

We implement industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

6.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols. Sensitive data at rest is encrypted using AES-256 encryption;
• Firewalls and Intrusion Detection: Advanced firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor and block unauthorized access attempts;
• Secure Authentication: Multi-factor authentication (MFA), strong password policies, and session management controls protect account access;
• Regular Security Audits: Independent security audits, penetration testing, and vulnerability assessments are conducted regularly to identify and remediate security risks.

6.2 Administrative Safeguards

• Access Controls: Personal information is accessible only to authorized personnel who require it to perform their job functions. Role-based access controls (RBAC) limit data access;
• Employee Training: All employees receive training on data privacy, security best practices, and compliance with the Data Privacy Act;
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements obligating them to protect user data;
• Incident Response Plan: We maintain a comprehensive incident response plan to detect, respond to, and recover from data breaches and security incidents.

6.3 Physical Safeguards

• Data centers are secured with physical access controls, surveillance cameras, and 24/7 monitoring;
• Servers and storage devices are protected in secure, climate-controlled environments;
• Backup systems and disaster recovery plans ensure data availability and business continuity.

Despite our best efforts, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for promptly notifying us of any suspected unauthorized access.

7. Your Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have specific rights regarding your personal information. We are committed to facilitating the exercise of these rights. Your rights include:

7.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your data in a structured, commonly used, and machine-readable format.

7.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most of your information directly through your account settings.

7.3 Right to Erasure

You have the right to request deletion of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected. However, we may retain certain data to comply with legal obligations, resolve disputes, and enforce our agreements.

7.4 Right to Data Portability

You have the right to receive your personal information in a portable format and to request that we transmit it directly to another data controller, where technically feasible.

7.5 Right to Object

You have the right to object to the processing of your personal information for direct marketing purposes or when processing is based on legitimate interests. You can opt out of marketing communications at any time.

7.6 Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing conducted prior to withdrawal.

7.7 How to Exercise Your Rights

To exercise any of these rights, please contact our Data Privacy Officer at [email protected]. We will respond to your request within thirty (30) days. We may require verification of your identity before processing your request to ensure the security of your data.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it is processed:

• Account Information: Retained for the duration of your active account and for a minimum of five (5) years after account closure to comply with PAGCOR regulations and AML/CTF requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction as required by financial regulations and tax laws;
• KYC Documents: Retained for a minimum of five (5) years after account closure or the end of the business relationship to comply with anti-money laundering regulations;
• Marketing Communications: Retained until you withdraw consent or for a maximum of two (2) years after your last interaction with our marketing content;
• Log and Usage Data: Typically retained for twelve (12) months unless longer retention is required for security, fraud prevention, or legal compliance.

After the retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices.

9. Cookies and Tracking Technologies

The 88piso Platform uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, analyze usage patterns, and deliver personalized content. By using the Platform, you consent to the use of these technologies as described in this section.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the Platform to function properly, including session management, authentication, and security features. These cookies cannot be disabled without affecting Platform functionality;
• Performance Cookies: Collect anonymous information about how you use the Platform, such as which pages you visit and whether you encounter errors. This data helps us improve performance and user experience;
• Functionality Cookies: Remember your preferences, settings, and choices (e.g., language, currency, display preferences) to provide a personalized experience;
• Advertising and Marketing Cookies: Track your activity across websites to deliver targeted advertisements and measure campaign effectiveness. These cookies may be set by third-party advertising networks.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect the functionality of the Platform. For more information on managing cookies, visit your browser's help documentation.

10. Third-Party Links and Services

The 88piso Platform may contain links to third-party websites, applications, or services that are not operated or controlled by us. This Privacy Policy does not apply to third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party sites. We encourage you to review the privacy policies of any third-party services you access.

11. Children's Privacy

The 88piso Platform is intended exclusively for individuals aged twenty-one (21) years and older. We do not knowingly collect, process, or store personal information from individuals under the age of twenty-one. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information and close the associated account.

Parents and guardians who believe their child has provided personal information to 88piso should contact us immediately at [email protected] so we can take appropriate action.

12. Changes to This Privacy Policy

We reserve the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. When we make significant changes, we will notify you by posting a prominent notice on the Platform or by sending you an email notification. The "Last Updated" date at the top of this policy indicates when it was last revised.

Your continued use of the Platform after changes to this Privacy Policy constitutes acceptance of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

13. Contact Information and Data Privacy Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, or if you wish to exercise your privacy rights, please contact our Data Privacy Officer:

• Data Privacy Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the Platform
• Mailing Address: 88piso Data Privacy Officer, Philippines

We will respond to all privacy-related inquiries within thirty (30) days. If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.