188php Privacy Policy

1. Overview & Controller Identity

188php operates as the personal information controller (PIC) in respect of personal data collected through the Platform. As PIC, 188php is responsible for determining the purposes and means of processing your personal data, and for ensuring that processing is carried out lawfully, fairly, and transparently in accordance with the DPA.

This Policy applies to all registered players, visitors, and any person whose personal data is collected or processed in connection with their use of the 188php Platform. It covers data collected online through the website and mobile browser interface, through our customer support channels, and through the payment and identity verification processes required to operate a compliant online gaming platform in the Philippines.

This Policy should be read together with 188php's Terms & Conditions and Responsible Gaming Policy. Capitalized terms not defined in this Policy have the meaning given to them in the Terms & Conditions.

2. Personal Data We Collect

188php collects the following categories of personal data in connection with the operation of the Platform:

188php does not knowingly collect sensitive personal information beyond what is strictly necessary for KYC identity verification, AML compliance, and PAGCOR reporting obligations. We do not collect racial or ethnic origin, political opinions, religious beliefs, or health data except where directly relevant to a responsible gaming self-exclusion request.

3. How We Collect Your Data

188php collects your personal data through the following channels:

• Direct provision: Information you enter when registering an account, submitting KYC documents, making deposits or withdrawals, contacting customer support, or completing any form on the Platform;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs — see Section 9 (Cookies & Tracking) for details;
• Third-party providers: Identity verification data from KYC service providers; payment confirmation data from GCash, Maya, banks, and other payment processors; fraud and AML screening data from compliance service providers;
• Regulatory sources: Data received from PAGCOR or law enforcement in connection with compliance, investigation, or enforcement activities.

4. Purposes of Processing

188php processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your 188php account, including authentication and security;
• KYC & age verification: To verify your identity and confirm that you are at least 21 years of age, as required by PAGCOR regulations;
• Payment processing: To process deposits and withdrawals in Philippine Peso via GCash, Maya, and other supported payment methods;
• Regulatory compliance: To fulfil obligations under the DPA, PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Fraud prevention & security: To detect, investigate, and prevent fraudulent activity, cheating, multi-accounting, and other prohibited conduct;
• Platform operation & improvement: To deliver, maintain, and improve the features, performance, and user experience of the 188php Platform;
• Customer support: To respond to your inquiries, complaints, and support requests;
• Responsible gaming: To enforce deposit limits, self-exclusion requests, and other responsible gaming measures elected by you or required by regulation;
• Marketing communications: To send you promotional offers, bonuses, and platform updates where you have consented or where we have a legitimate interest — you may opt out at any time;
• Legal proceedings: To establish, exercise, or defend legal claims involving 188php.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 188php processes personal data on the following legal bases:

• Consent: Where you have provided explicit consent, including consent to receive marketing communications and consent to the processing of sensitive personal information for KYC purposes;
• Contractual necessity: Processing required to perform the contract between you and 188php — i.e., the Terms & Conditions — including account creation, game access, and payment processing;
• Legal obligation: Processing required to comply with 188php's legal obligations under the DPA, PAGCOR regulations, AMLA, and other applicable Philippine law;
• Legitimate interests: Processing necessary for 188php's legitimate interests in platform security, fraud prevention, and business operations, where such interests are not overridden by your fundamental rights and freedoms.

6. Sharing Your Personal Data

188php does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Game providers: Limited technical and session data shared with third-party game providers (JILI, Evolution, Pragmatic Play, etc.) to deliver game services. These providers are contractually bound to process data only for this purpose;
• Payment processors: Financial and identity data shared with GCash, Maya, BPI, BDO, Metrobank, and other payment processors to facilitate deposits and withdrawals;
• KYC & compliance vendors: Identity documents and biometric data shared with licensed KYC and AML screening service providers for verification purposes;
• PAGCOR and regulatory bodies: Player data disclosed to PAGCOR and other Philippine regulatory authorities as required by our licensing conditions or by applicable law;
• Law enforcement: Data disclosed to the Philippine National Police, National Bureau of Investigation, Anti-Money Laundering Council (AMLC), or other law enforcement agencies pursuant to a valid legal order or our AML obligations;
• Professional advisers: Legal, accounting, and auditing professionals bound by confidentiality obligations, to the extent necessary for the provision of professional services to 188php;
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of 188php's assets, player data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom 188php shares personal data are required to implement appropriate technical and organizational security measures, and to process personal data only for the purposes for which it was shared.

7. Data Retention

188php retains personal data only for as long as necessary for the purposes described in this Policy or as required by applicable law. Specific retention periods are as follows:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations;
• KYC documents: Retained for at least five (5) years after the business relationship ends, in compliance with AMLA requirements;
• Financial transaction records: Retained for at least five (5) years after each transaction, as required by AMLA and PAGCOR;
• Customer support records: Retained for three (3) years after the resolution of the relevant inquiry or complaint;
• Technical and log data: Retained for twelve (12) months for security and fraud prevention purposes;
• Marketing consent records: Retained until you withdraw consent plus one (1) year for compliance documentation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 188php's data disposal procedures.

8. Security Measures

188php implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Key security measures include:

• Transport encryption: All data transmitted between your device and 188php's servers is encrypted using TLS 1.2 or higher (SSL/HTTPS);
• Access controls: Personal data is accessible only to 188php personnel and service providers who require access to perform their functions, on a need-to-know basis;
• Two-factor authentication: Players are strongly encouraged to enable 2FA on their accounts. 2FA is available via SMS OTP and authenticator apps;
• Password storage: Account passwords are stored as salted cryptographic hashes — 188php staff cannot view or retrieve your plain-text password;
• Intrusion detection: 188php's infrastructure is monitored for unauthorized access attempts and other security threats on a continuous basis;
• Vendor security: Third-party service providers are assessed for data security standards before engagement and are contractually required to maintain appropriate security measures.

9. Cookies & Tracking Technologies

The 188php Platform uses cookies and similar tracking technologies to operate core platform functions, improve your experience, and understand how the Platform is used. The types of cookies used are:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your login state and authentication tokens. These cannot be disabled without affecting platform functionality;
• Functional cookies: Remember your preferences, such as language settings and responsible gaming configuration, to personalize your experience;
• Analytics cookies: Collect aggregated, anonymized data about how visitors use the Platform, which pages are visited most, and how navigation flows work. This data is used to improve the platform;
• Security cookies: Support fraud detection and prevention functions, including CSRF protection and login anomaly detection.

188php does not use third-party advertising cookies or sell cookie data to advertising networks. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the Platform, including the ability to stay logged in.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 188php:

• Right to be informed: The right to know whether 188php holds personal data about you, and to receive clear information about how it is processed — this Policy fulfils that obligation;
• Right of access: The right to request a copy of the personal data 188php holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where processing is no longer necessary, subject to 188php's legal retention obligations under PAGCOR and AMLA regulations;
• Right to object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to data portability: The right to receive personal data you have provided to 188php in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe 188php has processed your data in violation of the DPA.

To exercise any of the above rights, please contact 188php's Data Protection Officer (DPO) using the contact details in Section 14. 188php will respond to data rights requests within thirty (30) days of receipt, as required by the DPA's Implementing Rules and Regulations.

11. Minors & Age Restriction

The 188php Platform is strictly intended for persons aged 21 years and older, as required by PAGCOR regulations governing online gaming in the Philippines. 188php does not knowingly collect personal data from individuals under 21 years of age.

188php's KYC verification process is designed to confirm that each registered player meets the 21+ age requirement before they can access real-money gaming. Any account found to have been created by a person under 21 will be immediately closed and the associated personal data will be retained only for the minimum period necessary to fulfil our legal and compliance obligations before being securely deleted.

If you are a parent or guardian and believe that a minor under your care has registered for a 188php account, please contact our support team immediately so that the account can be closed without delay.

12. Cross-Border Data Transfers

Some of 188php's third-party service providers — including game providers such as Evolution, Pragmatic Play, and PG Soft, as well as KYC and fraud screening vendors — may process personal data outside the Philippines. Where such transfers occur, 188php ensures that:

• The receiving jurisdiction provides an adequate level of data protection, or
• Appropriate safeguards are in place, such as standard contractual clauses or binding corporate rules, as recognized by the National Privacy Commission, to ensure your data receives equivalent protection to that afforded under the DPA.

By using the 188php Platform, you acknowledge and consent to the transfer of your personal data to third-party processors in other jurisdictions to the extent necessary for the delivery of the Platform's services, subject to the safeguards described above.

13. Changes to This Privacy Policy

188php may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered players via email or via a prominent notice on the Platform at least seven (7) days before taking effect, except where immediate changes are required by law.

The "Last updated" date at the top of this Policy indicates when the most recent version was published. We encourage you to review this Policy periodically. Your continued use of the 188php Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

14. Contact & Data Protection Officer

188php has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. You may contact the DPO and 188php's privacy team using the following details:

If you are not satisfied with 188php's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing the DPA. Information on how to file a complaint with the NPC is available on the NPC's official website.