Privacy Policy

This Privacy Policy ("Policy") is issued by ph588, the operator of the online gaming platform accessible at ph588.app ("ph588," "the Platform," "we," "us," "our"). This Policy applies to all personal data collected, processed, stored, and shared in connection with your use of the ph588 platform, including account registration, deposits, gameplay, withdrawals, promotional participation, customer support interactions, and any other activity conducted through ph588.app or any associated communication channel.

ph588 processes personal data in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines (the "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). ph588 also applies the relevant guidelines issued by the Philippine Amusement and Gaming Corporation ("PAGCOR") in respect of the handling of player data on regulated online gaming platforms.

By registering for a ph588 account or continuing to use the platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you must discontinue use of ph588 and may request account closure through the available support channels.

ph588 collects personal data from you directly when you register, interact with the platform, or contact support, as well as automatically through your use of the platform. The categories of data we collect are detailed below.

ph588 processes your personal data only for specific, legitimate purposes that are directly necessary for the provision of our services or fulfilment of our legal obligations. The primary purposes for which ph588 uses your data are as follows:

• Account Creation and Management: To register your ph588 account, verify your identity and age (21+), maintain your account records, and provide you with access to platform services.
• Transaction Processing: To process deposits via GCash, Maya, BPI, BDO, Metrobank, USDT, and Coins.ph; to execute withdrawal requests; and to maintain accurate financial records for your account.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, anti-money-laundering (AML) obligations under the AMLA (Republic Act No. 9160 as amended), age verification requirements, and any other legal obligations imposed on ph588 by Philippine law or its regulators.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, cheating, bonus abuse, money laundering, and other conduct prohibited under ph588's Terms and Conditions.
• Customer Support: To respond to your enquiries, resolve disputes, process complaints, and communicate with you regarding your account.
• Platform Improvement: To analyse gaming patterns, platform usage, and technical performance in aggregate or anonymised form to improve the ph588 platform for all players.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling behaviour, to enforce player-set limits, and to implement cooling-off or self-exclusion measures when requested or required.
• Marketing Communications: To send you relevant promotional offers, bonus notifications, and platform updates, subject to your communication preferences. You may opt out of marketing communications at any time through your account settings or by contacting support.

ph588 will not use your personal data for any purpose materially different from those listed above without first obtaining your explicit consent or providing advance notice where consent is not the applicable legal basis.

Under the Data Privacy Act of 2012, ph588 must have a lawful basis for processing your personal data. The legal bases ph588 relies on are:

• Contractual Necessity: Processing required to enter into and perform the agreement between you and ph588 — including account registration, transaction processing, and service delivery.
• Legal Obligation: Processing necessary to comply with PAGCOR regulations, AML obligations, tax reporting requirements, and other mandatory legal obligations applicable to ph588 as a licensed operator in the Philippines.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, responsible gaming monitoring, and business analytics, where ph588's legitimate interests do not override your fundamental rights and freedoms.
• Consent: Where ph588 relies on consent — primarily for marketing communications and optional data processing activities — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

ph588 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. ph588 may share your data with the following categories of recipients only to the extent necessary and in accordance with applicable law:

• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government bodies as required by law or regulatory direction.
• Payment Processors: GCash (G-Xchange, Inc.), Maya (Paymaya Philippines, Inc.), BPI, BDO, Metrobank, and other payment service providers necessary to process your deposits and withdrawals. Each processor is bound by their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.
• Game Providers: Licensed game studios (including JILI, PG Soft, Pragmatic Play, Evolution Gaming, and others) may receive your account session data as necessary to deliver game functionality. These providers are contractually bound to data confidentiality obligations and may only use shared data for the purpose of game service delivery.
• Identity Verification Services: Third-party KYC and identity verification service providers used to verify your identity and age in accordance with PAGCOR requirements.
• Professional Advisers: Legal, accounting, audit, and compliance professionals engaged by ph588, bound by professional confidentiality obligations.
• Law Enforcement: Where ph588 is legally required or permitted to disclose data to law enforcement authorities in connection with a criminal investigation or legal proceeding.

ph588 uses cookies and similar tracking technologies on ph588.app to enable core platform functionality, maintain your session, remember your preferences, and analyse how the platform is used so that it can be improved. The main categories of cookies used by ph588 are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your ph588 account during a visit. These cookies cannot be disabled without preventing core platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming limit configurations, and game lobby layout choices.
• Analytical Cookies: Used in aggregate, anonymised form to understand how players interact with ph588 — which games are most popular, where errors occur, and how platform performance can be improved. These cookies do not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent logins, account takeover attempts, and other security threats by associating trusted devices with your ph588 account.

You may manage or disable non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair or prevent your ability to use the ph588 platform. ph588 does not use third-party advertising or retargeting cookies.

ph588 retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. Specific retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active ph588 account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML obligations under Philippine law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA regulations and BSP guidelines applicable to payment processors.
• Gaming Activity Records: Retained for the duration of your active account and for up to five (5) years post-closure for regulatory audit purposes.
• Customer Support Records: Retained for up to three (3) years from the date of the last interaction, or longer if the records are relevant to an unresolved dispute or legal proceeding.
• Marketing Preference Data: Retained until you withdraw consent or request deletion, subject to any applicable legal retention requirements.

Upon expiry of applicable retention periods, ph588 will securely delete or anonymise personal data so that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for analytical purposes.

ph588 implements technical and organisational security measures appropriate to the sensitivity of the data processed and the risks involved, including but not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and ph588 servers, equivalent to the standard used by Philippine commercial banks.
• Encryption of sensitive data fields (including financial data and identity documents) at rest in ph588's data storage systems.
• Role-based access controls limiting employee access to personal data to those with a demonstrated operational need.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified third-party security professionals.
• Multi-factor authentication requirements for administrative access to ph588's internal systems.
• Incident response procedures with defined timelines for breach notification to the National Privacy Commission and affected players where required under the DPA.

As a data subject under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you hold the following rights with respect to your personal data processed by ph588. These rights are subject to applicable legal limitations, including retention obligations imposed by PAGCOR regulations and AML law.

The ph588 platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. ph588 does not knowingly collect personal data from any person under 21 years of age.

If ph588 discovers that personal data has been collected from an individual under the age of 21, ph588 will immediately suspend the relevant account, delete the personal data collected (subject to any mandatory reporting obligations to PAGCOR), and refund any deposits made, net of any bonus amounts credited to the account.

If you believe that a person under 21 has registered a ph588 account or that ph588 holds personal data relating to a minor, please report this immediately via the live chat support facility so that the matter can be investigated and resolved promptly.

ph588 may transfer your personal data to service providers or systems located outside the Republic of the Philippines in connection with the delivery of platform services — for example, where a game provider's servers or a payment processing system is hosted in another jurisdiction. Such transfers occur only where ph588 has implemented appropriate safeguards to ensure that your personal data continues to be protected to a standard equivalent to that required under the Data Privacy Act of 2012.

Appropriate safeguards for cross-border transfers may include contractual clauses approved by the National Privacy Commission, compliance with the recipient country's equivalent data protection framework, or explicit consent obtained from you prior to the transfer where required.

ph588 maintains a record of all cross-border data transfers and the safeguards applied, which is available to the NPC upon request in connection with any compliance review.

ph588 reserves the right to update or modify this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, or regulatory requirements. Where changes are material, ph588 will provide advance notice by updating this page and, where appropriate, notifying registered players via their registered email address or an in-platform notification.

The "Last updated" date at the top of this page reflects the date of the most recent revision. ph588 recommends that registered players review this Policy periodically. Continued use of ph588 following the effective date of any material update constitutes your acknowledgement of the revised Policy.

For any enquiries, requests, or complaints regarding this Privacy Policy or ph588's handling of your personal data, you may contact ph588's Data Protection Officer through the following channels. Email addresses are displayed as plain text only and are not clickable links.

• Live Chat: Available 24/7 on ph588.app — fastest response channel
• Email: [email protected]

ph588 aims to resolve all data privacy enquiries and complaints within 30 calendar days. If you are not satisfied with ph588's response to a complaint regarding the handling of your personal data, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC): The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines. Complaints may be filed through the NPC's official government channels.