88bon Privacy Policy

1.1  This Privacy Policy applies to all personal data collected by 88bon through: the 88bon website at 88bon.org; any mobile-optimized interfaces or applications operated by 88bon; customer support communications via live chat, email, or telephone; and any other interaction between you and 88bon through which personal data is provided or collected.

1.2  This Policy does not apply to third-party websites or services that may be referenced from within the 88bon platform. 88bon is not responsible for the privacy practices of third-party game providers, payment processors, or other external services, each of which operates under its own privacy policy.

1.3  For the avoidance of doubt, this Privacy Policy applies to all natural persons who interact with the 88bon platform, including persons who browse the site without registering an account, persons who have submitted a registration application but have not completed KYC verification, and fully verified registered players.

1.4  88bon is committed to collecting only the personal data that is necessary, relevant, and proportionate to the purposes described in this Policy — a principle known as data minimization — consistent with the requirements of the Data Privacy Act of 2012.

2.1  The data controller responsible for your personal data is 88bon, the licensed operator of the 88bon Casino platform under PAGCOR regulation.

2.2  88bon has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act and NPC Circular 17-01. The DPO is responsible for ensuring 88bon's compliance with Philippine data protection law and is the primary point of contact for all data privacy matters raised by players.

2.3  All data privacy requests, complaints, and inquiries should be directed to the 88bon DPO via the contact channels specified in Section 14 of this Policy.

88bon collects personal data from you through several channels. The categories of data collected, and the context in which each category is obtained, are described in the table below:

3.1  Sensitive Personal Information. Copies of government-issued identification documents submitted for KYC purposes constitute sensitive personal information as defined under Section 3(l) of the Data Privacy Act. 88bon applies heightened security measures to all sensitive personal information in its custody and processes such information only to the extent required by PAGCOR's KYC and anti-money laundering obligations.

3.2  Data from Third Parties. 88bon may receive personal data about you from third parties including: payment processors (GCash, Maya, BPI, BDO, Metrobank) in the course of processing your transactions; identity verification service providers engaged to assist with KYC compliance; and PAGCOR where that body shares information in the exercise of its regulatory functions.

88bon processes your personal data for the following purposes:

• Account registration and management — creating, verifying, maintaining, and, where necessary, closing your 88bon player account.
• Identity and age verification (KYC) — confirming that you are who you say you are and that you are 21 years of age or older, as required by PAGCOR and Philippine gaming law.
• Payment processing — facilitating deposits and withdrawals through GCash, Maya, BPI, BDO, Metrobank, and other accepted Philippine payment channels.
• Anti-Money Laundering (AML) compliance — monitoring transactions and account activity for suspicious patterns as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and subsequent amendments, and reporting to the AMLC where required by law.
• Platform operation and game delivery — providing, maintaining, improving, and personalizing your experience on the 88bon platform.
• Responsible gaming — monitoring gaming patterns and intervening where necessary to protect players showing signs of problem gambling behavior, in compliance with PAGCOR's responsible gaming framework.
• Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, account abuse, and security breaches on the 88bon platform.
• Customer support — responding to your queries, complaints, and account requests through live chat, email, and other support channels.
• Marketing communications — sending you promotional offers, bonus notifications, and platform updates where you have given consent or where 88bon has a legitimate interest in doing so, with the option to opt out at any time.
• Legal and regulatory compliance — fulfilling 88bon's obligations to PAGCOR, the NPC, the AMLC, the Bureau of Internal Revenue (BIR), and other Philippine regulatory bodies.
• Analytics and platform improvement — analyzing aggregated and anonymized usage data to improve the functionality, performance, and user experience of the 88bon platform.

Under the Data Privacy Act of 2012, 88bon processes your personal data on the following legal bases:

• Contractual necessity — processing necessary for the performance of the player account agreement between you and 88bon, including account registration, KYC verification, payment processing, and game access.
• Legal obligation — processing required to comply with 88bon's obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act itself, the National Internal Revenue Code, and other applicable Philippine law.
• Legitimate interests — processing carried out for 88bon's legitimate interests including fraud prevention, platform security, responsible gaming monitoring, and platform improvement, provided that such interests are not overridden by your fundamental rights.
• Consent — processing for purposes such as direct marketing communications and the use of non-essential cookies, where you have provided freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

6.1  Service Providers (Data Processors). 88bon engages trusted third-party service providers who process personal data on 88bon's behalf and under 88bon's documented instructions. These include: payment processors (GCash, Maya, BPI, BDO, Metrobank, and similar Philippine payment service providers); identity verification and KYC service providers; cloud hosting and data storage providers; game software providers whose titles appear in the 88bon lobby; customer support platform providers; and IT security service providers. All third-party processors are required to sign data processing agreements that impose binding confidentiality and security obligations consistent with the Data Privacy Act.

6.2  Regulatory Authorities. 88bon is required by law to share certain personal data with Philippine regulatory and law enforcement bodies including: PAGCOR, in the exercise of its licensing and supervisory functions; the Anti-Money Laundering Council (AMLC), upon receipt of a covered transaction report or suspicious transaction report trigger; the National Privacy Commission (NPC); the Bureau of Internal Revenue (BIR); and any competent Philippine court or law enforcement agency acting pursuant to a lawful order.

6.3  Corporate Transactions. In the event of a merger, acquisition, or sale of 88bon's assets, your personal data may be transferred to a successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer and your continued use of the platform will constitute acceptance of the updated privacy terms.

6.4  With Your Consent. 88bon may share your data with third parties not listed above where you have provided explicit informed consent for such sharing. You may withdraw consent at any time by contacting the DPO.

7.1  The 88bon platform uses cookies and similar tracking technologies to enhance functionality, improve performance, and support security on the platform. The categories of cookies 88bon uses are as follows:

• Strictly Necessary Cookies — essential for the operation of the 88bon platform, including login session management, security, and fraud prevention. These cookies cannot be disabled without affecting platform functionality.
• Performance Cookies — collect aggregated, anonymized data about how players use the 88bon platform (pages visited, error messages encountered, session duration) to help 88bon improve the platform experience.
• Functionality Cookies — remember your preferences (language, display settings, game lobby filters) to provide a more personalized experience on return visits.
• Marketing Cookies — used to deliver relevant promotional messages and to track the effectiveness of 88bon marketing campaigns. These cookies are set only where you have provided consent.

7.2  You can manage your cookie preferences through your browser settings. Please note that disabling certain cookie categories may affect your experience on the 88bon platform. Standard browser cookie controls are compatible with all cookies used by 88bon.

8.1  88bon implements organizational, technical, and administrative security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit AES encryption at rest for all stored personal data;
• TLS 1.3 encryption in transit for all data exchanged between your device and 88bon servers;
• Multi-factor authentication requirements for all 88bon staff who access personal data systems;
• Role-based access controls limiting personal data access to staff members with a legitimate need-to-know;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Comprehensive staff training on data privacy and cybersecurity obligations;
• Physical security controls at 88bon data processing facilities;
• Incident response procedures aligned with NPC Circular 16-03 breach notification requirements.

8.2  Notwithstanding these measures, no digital transmission or storage system can be guaranteed to be completely secure. 88bon cannot warrant the absolute security of personal data and shall not be liable for losses arising from security breaches that occur despite 88bon's reasonable implementation of the above controls.

8.3  In the event of a personal data breach that creates a real risk of serious harm to affected players, 88bon will notify the National Privacy Commission and affected individuals within 72 hours of confirmed discovery, in accordance with NPC Circular 16-03.

9.1  88bon retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by applicable Philippine law or regulation. The key retention periods are as follows:

• Account and KYC records — retained for a minimum of five (5) years following account closure, as required by PAGCOR and the Anti-Money Laundering Act.
• Financial transaction records — retained for a minimum of five (5) years in accordance with the Anti-Money Laundering Act and BIR record-keeping requirements.
• Gaming activity logs — retained for a minimum of three (3) years following account closure for PAGCOR audit and responsible gaming monitoring purposes.
• Customer support communications — retained for two (2) years following resolution of the relevant issue.
• Marketing consent records — retained for the period during which the consent is active, plus three (3) years following withdrawal.

9.2  Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with 88bon's data disposal procedures. Anonymized data (which can no longer identify you) may be retained indefinitely for statistical and platform improvement purposes.

Under the Data Privacy Act of 2012 and NPC implementing rules, you have the following rights with respect to your personal data held by 88bon:

10.1  To exercise any of the rights listed above, please submit a written request to the 88bon Data Protection Officer using the contact details in Section 14. 88bon will respond to all valid data rights requests within fifteen (15) business days of receipt. Where requests are complex or numerous, 88bon may extend this period by a further thirty (30) business days with written notice to you.

10.2  88bon may be required to verify your identity before processing a data rights request to protect against fraudulent requests. You may be asked to provide your registered mobile number, email address, and a copy of your government-issued ID as part of this verification.

11.1  The 88bon platform is strictly intended for adults aged 21 years and above, as required by Philippine gaming law and PAGCOR regulations. 88bon does not knowingly collect personal data from any person under the age of 21.

11.2  If 88bon discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended and the personal data will be deleted — except where retention is required by law for the purpose of reporting the violation to PAGCOR and, where applicable, relevant law enforcement authorities.

11.3  If you are a parent or guardian and believe that your dependent under the age of 21 has registered an account on 88bon, please contact the DPO immediately using the details in Section 14.

12.1  Some of 88bon's third-party service providers — including cloud hosting providers and game software developers — may process personal data outside the Philippines. Where such international transfers occur, 88bon ensures that they are protected by appropriate safeguards consistent with the requirements of Section 21 of the Data Privacy Act and NPC issuances on cross-border data transfers.

12.2  Appropriate safeguards for international transfers may include: contractual clauses based on NPC-approved standard contractual clauses; the recipient country's recognition as providing an adequate level of data protection under Philippine NPC standards; binding corporate rules applicable to 88bon's group of companies; or your explicit informed consent to the specific transfer.

12.3  You may request further information about the specific safeguards applicable to any international transfer of your personal data by contacting the 88bon DPO.

13.1  88bon reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidelines, or 88bon's own data processing practices. Material changes — particularly those that affect your rights or the way 88bon uses your personal data in ways you would not reasonably expect — will be communicated to you via email to your registered address or via an in-platform notification at least fourteen (14) days before the changes take effect.

13.2  The most current version of this Privacy Policy is always available at 88bon.org/privacy-policy and will bear the "Last Updated" date shown at the top of this document. The date of the last update is displayed prominently to enable you to identify whether changes have been made since you last reviewed the Policy.

13.3  Your continued use of the 88bon platform following the effective date of any amendment to this Privacy Policy constitutes your acknowledgment of the amended Policy. If you do not accept the amended Policy, you may request account closure and your personal data will be handled in accordance with the applicable retention obligations described in Section 9.

If you wish to exercise your data protection rights, ask a question about this Privacy Policy, raise a data privacy concern, or submit a complaint, please contact the 88bon Data Protection Officer using the following details:

88bon commits to acknowledging all DPO contact requests within two (2) business days and resolving data privacy matters within the timeframes prescribed by the Data Privacy Act and NPC implementing rules.