Privacy Policy

This Privacy Policy ("Policy") is issued by 8899ph ("the Company," "We," "Us," "Our"), the operator of the online gaming platform accessible at https://8899ph.win and all associated subdomains and mobile applications (collectively, the "Platform").

This Policy applies to all natural persons ("you," "your," "data subject") who interact with the 8899ph Platform in any capacity — including registered players, prospective players who browse without registering, and individuals who contact our customer support team. It governs the collection, storage, processing, use, and disclosure of personal data that we obtain directly from you or through your use of our services.

8899ph operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the regulatory oversight of PAGCOR, the National Privacy Commission (NPC) of the Philippines, and other relevant Philippine government bodies. Our data handling practices are designed to meet the standards these authorities require of licensed gaming operators.

8899ph collects personal data that is necessary, proportionate, and relevant to the provision of our gaming services and our legal obligations as a PAGCOR-licensed operator. The categories of personal data we may collect include:

We do not intentionally collect special categories of sensitive personal data (such as health information, racial or ethnic origin, religious beliefs, or biometric data) unless specifically required by PAGCOR for responsible gaming compliance purposes (e.g., health-related self-exclusion requests).

8899ph collects personal data through the following channels:

• Direct Submission: Information you voluntarily provide during account registration, KYC verification, deposit/withdrawal requests, promotional opt-ins, and communications with our support team.
• Automated Platform Collection: Technical and behavioral data collected automatically through your interaction with the Platform, including via cookies, server logs, and analytics tools embedded in the Platform.
• Payment Processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers when you make deposits or withdrawals.
• Identity Verification Partners: Where required for enhanced KYC, we may receive identity verification results from third-party services that cross-check your submitted documents against government databases.
• Regulatory Bodies: In certain circumstances, PAGCOR or other Philippine government authorities may provide or request data about specific players for compliance, investigation, or player protection purposes.
• Third-Party Game Providers: Aggregated game session data may be received from the game providers whose titles operate within the 8899ph lobby.

Under the Data Privacy Act of 2012 and its Implementing Rules, 8899ph processes personal data only when a lawful basis exists. The legal bases we rely upon are:

• Performance of Contract: Processing that is necessary to create and manage your 8899ph account, process deposits and withdrawals, credit winnings, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, tax regulations, and any other applicable Philippine law or regulatory requirement.
• Legitimate Interest: Processing for fraud detection, platform security, abuse prevention, and improving our services, where such processing does not override your rights and freedoms.
• Consent: Processing for direct marketing communications, analytics profiling, and non-essential cookies — for which we will seek your explicit, informed, and freely given consent and which you may withdraw at any time.
• Vital Interest: In limited circumstances involving player welfare or safety, such as processing health-related data provided in connection with a voluntary self-exclusion request.

8899ph uses the personal data we collect for the following specific purposes:

• Account Administration: Creating, verifying, and managing your 8899ph player account; authenticating your identity at login; processing account closure requests.
• Gaming Services Delivery: Processing bets, crediting winnings, maintaining game history, enabling responsible gaming tools, and providing access to all Platform features.
• Financial Transactions: Processing deposits from GCash, PayMaya, and bank accounts; processing withdrawal requests; maintaining transaction records required by PAGCOR and AMLA regulations.
• KYC & AML Compliance: Verifying your identity and age (21+ requirement), screening against relevant watchlists, monitoring for suspicious transaction patterns, and filing required reports with the Anti-Money Laundering Council (AMLC).
• Responsible Gaming: Monitoring gaming behavior for indicators of problematic gambling; implementing deposit limits, session controls, and self-exclusion measures; complying with PAGCOR player protection requirements.
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of our communications.
• Security & Fraud Prevention: Detecting unauthorized account access, investigating suspicious activity, preventing abuse of promotions, and protecting the integrity of the Platform.
• Platform Improvement: Analyzing aggregated usage data to improve game selection, user interface, payment processing, and overall platform performance.
• Marketing Communications (with consent): Sending promotional offers, bonus notifications, tournament invitations, and news about 8899ph — only where you have explicitly opted in and only via channels you have authorized.
• Legal Compliance: Retaining records as required by law, responding to regulatory inquiries, and cooperating with law enforcement investigations as legally required.

8899ph does not sell your personal data to any third party. We share your personal data only in the following carefully controlled circumstances:

• PAGCOR: As our licensing authority, PAGCOR may require access to player data for audit, compliance verification, or enforcement purposes. We are legally obligated to cooperate with such requests.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports are filed with the AMLC as required by the Anti-Money Laundering Act and its amendments.
• Payment Processors: Your financial data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other authorized payment service providers solely to the extent necessary to process your transactions.
• KYC & Fraud Prevention Providers: Identity verification data may be shared with licensed third-party verification services under strict data processing agreements for the purpose of confirming your identity and screening for fraud.
• Game Providers: Limited technical and session data may be shared with our licensed game providers to enable gameplay, maintain game logs, and resolve disputes about specific game outcomes.
• Law Enforcement & Courts: We may disclose personal data when legally required to do so by a valid court order, subpoena, search warrant, or other lawful legal process issued by Philippine authorities.
• Group Companies: Where 8899ph is part of a corporate group, limited data may be shared with affiliated entities within the group for consolidated AML monitoring or platform administration, under binding internal data processing agreements.

All third parties with whom we share your data are contractually required to process it only for the specified purpose, maintain appropriate security standards, and comply with applicable Philippine data protection laws.

Some of our service providers — particularly game providers, cloud infrastructure operators, and technology partners — may be located outside the Philippines. Where personal data is transferred to recipients in countries outside the Philippines, 8899ph will ensure that such transfers are made in compliance with the Data Privacy Act, including by implementing appropriate safeguards such as:

• Standard contractual clauses approved by the National Privacy Commission
• Data processing agreements that bind the receiving party to DPA-equivalent protection standards
• Transfer to jurisdictions recognized as providing adequate data protection levels

By using the 8899ph Platform, you acknowledge that your personal data may be transferred to and processed in countries other than the Philippines. We take all reasonable steps to ensure your data remains protected regardless of where it is processed.

8899ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our retention schedule is as follows:

• Active Account Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, as required by AMLA and PAGCOR record-keeping obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years from the date of account closure or the date the document was submitted, whichever is later, in compliance with AMLA requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction, consistent with AMLA and BIR record-keeping requirements.
• Gaming Session Logs: Retained for a minimum of 3 years for dispute resolution and audit purposes.
• Customer Support Communications: Retained for 2 years from the date of the last communication in a support thread.
• Marketing Preference Data (consented): Retained until you withdraw your consent or for 2 years from your last marketing interaction, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to you as an individual. Where data cannot be deleted due to ongoing legal proceedings or regulatory investigations, it will be isolated and preserved until resolution.

8899ph implements technical, organizational, and administrative security measures designed to protect your personal data from unauthorized access, disclosure, alteration, destruction, or loss. Key security controls include:

• Transport Encryption: All data transmitted between your device and the 8899ph Platform is encrypted using TLS 1.2 or higher (HTTPS). This ensures that your login credentials, personal information, and financial data cannot be intercepted in transit.
• Database Encryption: Sensitive personal data stored in our databases — including passwords and financial account details — is encrypted at rest using industry-standard encryption algorithms. Passwords are stored as salted cryptographic hashes and are never stored in plain text.
• Access Controls: Access to systems containing personal data is restricted to authorized 8899ph personnel on a need-to-know basis, enforced through role-based access control, multi-factor authentication, and privileged access management.
• Intrusion Detection & Monitoring: Our infrastructure is monitored 24/7 for anomalous activity, potential intrusion attempts, and security incidents.
• Penetration Testing: We conduct regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: We maintain a documented data breach response procedure in compliance with the NPC's mandatory breach notification requirements. In the event of a breach likely to cause serious harm to your rights, we will notify the NPC within 72 hours and affected data subjects without undue delay.
• Staff Training: All 8899ph personnel with access to personal data receive regular data privacy and security training.

As a data subject under the Philippine Data Privacy Act, you are entitled to the following rights in relation to your personal data held by 8899ph:

To exercise any of the above rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." We will verify your identity before processing the request. Responses will be provided within 30 calendar days; complex requests may take up to 60 days, of which we will notify you.

If you believe 8899ph has failed to respect your data privacy rights, you have the right to file a complaint directly with the National Privacy Commission of the Philippines.

The 8899ph Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage. Cookies are small text files stored on your device. We use the following categories of cookies:

You can manage cookie preferences through our cookie preference center, accessible from the footer of every Platform page. You may also control cookies through your browser settings, though disabling strictly necessary cookies may impair your ability to use the Platform. Note that clearing cookies will log you out of your current session.

The 8899ph Platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR's minimum age requirement for online gaming in the Philippines. We do not knowingly collect personal data from any person below the age of 21.

As part of our registration and KYC process, 8899ph requires all players to confirm their date of birth and submit government-issued identification to verify their age. Any account where the age verification process reveals the account holder to be below 21 years of age will be immediately closed, all gameplay and balances voided and forfeited, and the matter reported to PAGCOR.

The 8899ph Platform may, in certain contexts, reference or integrate with third-party services such as game providers, payment gateways (GCash, PayMaya, BPI, BDO, Metrobank), and identity verification tools. These third parties operate under their own privacy policies and data handling practices, which are independent of 8899ph.

We are not responsible for the privacy practices of any third-party service accessed in connection with the Platform. We encourage you to review the privacy policies of any external services before providing them with your personal information. Our inclusion of or reference to a third-party service does not constitute an endorsement of their privacy practices.

8899ph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or improvements to our services. The "Last Updated" date at the top of this Policy will be revised accordingly.

For material changes that significantly affect how we collect or use your personal data, we will notify registered players via email or in-platform notification at least 7 days before the changes take effect, and will request fresh consent where required. For non-material clarifications and minor updates, publication on this page with an updated date constitutes sufficient notice.

Your continued use of the 8899ph Platform following the effective date of any updated Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you may close your account as described in our Terms & Conditions.

8899ph has designated a Data Protection Officer (DPO) in compliance with the Data Privacy Act and NPC regulations. The DPO is responsible for overseeing our data protection program, ensuring compliance with applicable privacy laws, and serving as the primary point of contact for data subjects and the NPC.

For any privacy-related queries, data subject rights requests, or concerns about how 8899ph handles your personal data, please contact us through the following channels:

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC accepts complaints from data subjects whose rights have been violated under the Data Privacy Act.

For questions about our Terms & Conditions, please visit Terms & Conditions. For questions about responsible gaming and player protection, please visit Responsible Gaming.