188ph Privacy Policy

1.1 This Privacy Policy is issued by 188ph, operating the online gaming platform accessible at https://188ph.bet (the "Platform"). References to "188ph", "we", "us", or "our" throughout this document refer to the operator of the 188ph Platform.

1.2 188ph is a PAGCOR-regulated online gaming and sports betting platform serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and other regions. Our Platform offers slots, live casino games, sports betting, sabong, bingo, coin games, mines, and other interactive gaming products.

1.3 188ph acts as the Personal Information Controller (PIC) as defined under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), and its Implementing Rules and Regulations (IRR) issued by the National Privacy Commission (NPC) of the Philippines.

1.4 This Privacy Policy explains how 188ph collects, processes, stores, shares, and protects the personal data of users and registered players on the Platform. By accessing or using the 188ph Platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy.

2.1 188ph collects personal data only to the extent necessary for the lawful operation of our Platform, fulfilment of our regulatory obligations, and delivery of a personalised, secure gaming experience. The categories of personal data we collect are set out in the table below.

2.2 Sensitive Personal Information. Government-issued ID numbers (such as your Philippine National ID or passport number) and financial account details are classified as sensitive personal information under the DPA. 188ph applies heightened security controls to the storage and processing of such data, including restricted staff access and enhanced encryption protocols.

2.3 Data You Choose Not to Provide. Where provision of certain personal data is optional, we will indicate this clearly at the point of collection. However, certain data — particularly identity and financial data — is mandatory for account registration and KYC compliance. Failure to provide mandatory data may result in limitations on account functionality or the inability to register an account.

3.1 188ph collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey or promotion.
• Automated Technologies: Technical data collected automatically when you access the Platform, including your IP address, device identifiers, browser type, and session activity logs. This data is collected via cookies, web beacons, and server log files.
• Third-Party Payment Processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20 network providers when you make deposits or withdrawals.
• Identity Verification Partners: Results of document verification and liveness checks conducted by our KYC service providers in connection with your account registration or periodic re-verification.
• Regulatory Authorities: In limited cases, data may be shared with or received from PAGCOR or the Anti-Money Laundering Council (AMLC) in connection with regulatory compliance obligations.

3.2 188ph does not collect personal data from third-party data brokers or purchase mailing lists for marketing purposes.

4.1 188ph uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, secure, and administer your 188ph player account, including processing deposits and withdrawals, awarding bonuses, and providing access to Platform games.
• Regulatory Compliance: To fulfil our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA) of the Philippines, the DPA, and any other applicable Philippine laws and regulations, including mandatory reporting to the AMLC where required.
• Identity and Age Verification: To verify that you are who you say you are, that you are at least 21 years of age, and that you are legally entitled to participate in online gaming under Philippine law.
• Fraud Prevention and Platform Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other security threats to the Platform and its players.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling behaviour, to enforce player-set limits and self-exclusion requests, and to provide appropriate responsible gaming interventions where necessary.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and deliver an effective support experience via live chat and email.
• Platform Improvement: To analyse aggregated usage data, identify technical issues, and improve the features, performance, and user experience of the 188ph Platform.
• Marketing and Promotions: To send you personalised promotional offers, bonus notifications, and game recommendations — but only where you have explicitly opted in to receive such communications. You may opt out at any time.

5.1 Under the Data Privacy Act of 2012, 188ph must have a lawful basis for each processing activity involving your personal data. The following legal bases apply to our data processing activities:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to perform the contract between you and 188ph — namely, the operation of your player account and the delivery of gaming services as described in the Terms & Conditions.
• Legal Obligation: Certain processing activities — particularly KYC verification, AML monitoring, and regulatory reporting — are required by Philippine law, including the AMLA, PAGCOR regulations, and NPC directives. 188ph cannot waive these obligations.
• Legitimate Interests: 188ph processes technical and gaming activity data on the basis of our legitimate interest in maintaining platform security, preventing fraud, and improving the quality of our services. We conduct balancing tests to ensure that our legitimate interests do not override your fundamental privacy rights.
• Consent: Where we rely on your consent as a legal basis — primarily for marketing communications and the use of non-essential cookies — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5.2 If you wish to understand the specific legal basis applied to any particular processing activity, you may contact our Data Protection Officer (DPO) using the contact details in Section 14.

6.1 188ph does not sell, rent, or trade your personal data to any third party. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: Your financial data is shared with payment service providers (GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, USDT TRC20 processors) solely for the purpose of processing your deposit and withdrawal transactions.
• KYC and Identity Verification Providers: Your identity documents and biometric data may be shared with our licensed KYC verification partners for the purpose of completing identity and age verification as required by PAGCOR and the DPA.
• Game Software Providers: Aggregated and pseudonymised gaming activity data may be shared with our third-party game software providers for technical support and RNG audit purposes. No directly identifiable personal data is shared for this purpose.
• Regulatory and Law Enforcement Authorities: 188ph is legally obligated to share data with PAGCOR, the AMLC, the NPC, and other Philippine government authorities upon receipt of a valid legal request, court order, or regulatory directive.
• Professional Advisors: Data may be shared with our legal, accounting, and audit advisors under strict confidentiality obligations where necessary for compliance or dispute resolution purposes.
• Business Transfers: In the event of a merger, acquisition, or sale of 188ph's business operations, player data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified in advance of any such transfer.

6.2 All third-party service providers who process personal data on behalf of 188ph are bound by data processing agreements that require them to handle your data in accordance with the DPA and to implement appropriate technical and organisational security measures.

7.1 The 188ph Platform uses cookies and similar tracking technologies to support platform functionality, maintain session security, and — where you have consented — to deliver personalised content and analyse usage patterns.

7.2 Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They maintain your login session, remember your account preferences, and support security features such as CSRF protection. These cookies cannot be disabled without impairing Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised data about how players use the Platform — which pages are visited most often, where error messages are encountered, and how long sessions last. This data helps us improve the Platform experience. These cookies are only placed with your consent.
• Functional Cookies: These remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations. They improve your experience but are not strictly essential to Platform operation.
• Marketing Cookies: Where you have consented, we may use cookies to track your interaction with promotional content so that we can deliver relevant bonus offers and game recommendations. You may withdraw this consent at any time via your account cookie settings.

7.3 Managing Cookies. You can control non-essential cookies through your account privacy settings or via your browser's built-in cookie management tools. Please note that disabling certain cookies may affect the functionality of the 188ph Platform.

7.4 188ph does not use third-party advertising networks or social media tracking pixels on the Platform.

8.1 188ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

8.2 The following retention periods apply to key data categories:

• Account and Identity Data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and the AMLA.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and Bureau of Internal Revenue (BIR) regulations.
• KYC Documents: Retained for a minimum of five (5) years after account closure, or longer where required by a specific regulatory directive or ongoing investigation.
• Gaming Activity Logs: Retained for three (3) years from the date of activity for dispute resolution and responsible gaming monitoring purposes.
• Marketing Preferences and Consent Records: Retained for the duration of your account plus two (2) years to maintain an auditable record of consent.
• Customer Support Communications: Retained for two (2) years from the date of the last communication in a support thread.

8.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that ensures it can no longer be linked back to an identifiable individual.

9.1 188ph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• Encryption: All data transmitted between your device and the 188ph Platform is encrypted using TLS 1.2 or higher. Sensitive data stored at rest — including financial details and KYC documents — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to 188ph staff and authorised third-party processors who have a legitimate need to process such data in the course of their duties. Access is governed by role-based permissions and is logged and audited regularly.
• Two-Factor Authentication: 188ph strongly encourages all players to enable two-factor authentication (2FA) on their accounts. 2FA is also enforced for internal staff accounts that have access to player data.
• Regular Security Audits: The 188ph Platform undergoes regular penetration testing and security audits conducted by independent third-party security firms to identify and remediate vulnerabilities.
• Incident Response: 188ph maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, 188ph will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

9.2 Your Role in Security. While 188ph takes all reasonable steps to protect your data, you also play an important role in keeping your account secure. Please use a strong, unique password for your 188ph account, enable 2FA, never share your login credentials, and contact support immediately at [email protected] if you suspect any unauthorised access to your account.

10.1 As a data subject under Republic Act No. 10173 (the Data Privacy Act of 2012), you have the following rights with respect to your personal data held by 188ph:

10.2 To exercise any of the rights above, please contact our Data Protection Officer using the details in Section 14. 188ph will respond to all valid data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. In complex cases, this period may be extended by a further fifteen (15) business days, and you will be notified accordingly.

10.3 Please note that certain rights are subject to limitations where 188ph is legally required to retain or process the relevant data — for example, where retention is mandated by PAGCOR, the AMLA, or a court order.

11.1 The 188ph Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming law. We do not knowingly collect, process, or store personal data from individuals under the age of 21.

11.2 If 188ph discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all associated personal data will be deleted as promptly as possible, and any deposits or balances associated with the account will be handled in accordance with PAGCOR's guidelines on underage gambling.

11.3 If you are a parent or guardian and you believe your child or a minor in your care has registered an account on the 188ph Platform, please contact our support team immediately at [email protected] (plain text — not a clickable link) so that we can take appropriate action without delay.

12.1 The 188ph Platform is operated primarily within the Philippines. However, some of our technology infrastructure and third-party service providers — including game software providers and cloud hosting partners — may be located in other jurisdictions, which may result in your personal data being transferred to, processed in, or stored in countries outside the Philippines.

12.2 Where such international transfers occur, 188ph ensures that adequate safeguards are in place to protect your personal data in accordance with the DPA. These safeguards include:

• Contractual clauses that require the overseas recipient to apply data protection standards equivalent to those required under Philippine law.
• Transfers only to countries or entities that have been assessed as providing an adequate level of data protection.
• Where required, notification to and approval from the NPC prior to cross-border data transfers.

12.3 If you would like further information about the specific safeguards applicable to any particular international transfer of your personal data, please contact our Data Protection Officer using the details in Section 14.

13.1 188ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC advisories, or our internal data processing practices.

13.2 When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on the 188ph Platform with a revised "Last Updated" date clearly displayed at the top of the document.
• Send a notification to your registered email address at least fourteen (14) days before the changes take effect, giving you sufficient time to review the updated terms.
• Where required by the NPC or applicable law, obtain fresh consent from you before processing your data under the revised terms.

13.3 Your continued use of the 188ph Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of, and agreement to, the revised terms. If you do not agree with any material change to this Privacy Policy, you should discontinue your use of the Platform and contact our support team to close your account.

13.4 We encourage you to review this Privacy Policy periodically to stay informed about how 188ph is protecting your personal information. Previous versions of this Privacy Policy are available upon request from our Data Protection Officer.

14.1 188ph has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-01. The DPO is responsible for overseeing 188ph's compliance with the DPA and serves as the primary point of contact for all data privacy matters.

14.2 If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 188ph, please contact our DPO using the following details:

14.3 If you are not satisfied with 188ph's response to your data privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines, which is the regulatory authority responsible for enforcing the Data Privacy Act of 2012.

14.4 All data subject requests submitted to 188ph's DPO must include: (a) your full registered name; (b) the email address associated with your 188ph account; (c) a description of your request or concern; and (d) a copy of a valid government-issued ID for identity verification purposes. This requirement is in place to protect you against unauthorised requests being made in your name.