188ph Privacy
Policy

This Privacy Policy is issued by 188ph, the operator of the online gaming platform accessible at 188ph.cam (the "Platform"). For the purposes of Philippine data privacy law, 188ph acts as the personal information controller in respect of the personal data collected from users of the Platform.

188ph operates under the regulatory supervision of the Philippine Amusement and Gaming Corporation (PAGCOR) and is required to process certain categories of personal data as a condition of its licensing obligations, including for anti-money laundering compliance, player identity verification (KYC), age verification (21+), and responsible gaming enforcement.

This Privacy Policy applies to all personal data collected, processed, stored, or otherwise handled by 188ph in connection with: user registration and account management; financial transactions; gaming activity on the Platform; customer support interactions; marketing communications (where consented to); and all other Platform-related activities.

This Privacy Policy should be read alongside the 188ph Terms & Conditions. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters specifically related to personal data processing, this Privacy Policy shall prevail.

188ph collects personal data across the following categories. The specific data collected in each category depends on the nature of your interaction with the Platform and the features you use:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification document;
• Date of birth and age verification information;
• Residential address (barangay, city/municipality, province);
• Philippine mobile telephone number;
• Email address (where provided);
• Photograph as submitted in KYC selfie verification.

2.2 Identity Verification (KYC) Data

• Government-issued identification document type and number (e.g., Philippine Passport number, SSS/UMID ID number, Driver's License number, PhilHealth ID number, PRC License number, Voter's ID number, PhilSys Reference Number);
• Document expiry date and issuing authority;
• Scanned or photographed copies of identification documents submitted for verification.

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction amounts, dates, times, and reference numbers;
• Payment method type and associated identifiers (e.g., GCash mobile number, Maya account identifier, bank account number suffix);
• Transaction history and account balance records;
• Bonus credits awarded, wagering activity, and promotion participation history.

2.4 Gaming Activity Data

• Games played, bet amounts, game outcomes, and session durations;
• Sports betting market selections and wager history;
• Responsible gaming limit settings and self-exclusion elections;
• Account activity logs including login times, session lengths, and device used.

2.5 Technical and Device Data

• IP address at time of account access;
• Device type, operating system, browser type and version;
• Mobile network operator and general geographic location derived from IP address;
• Cookie identifiers and similar tracking technologies (as further described in Section 11).

2.6 Communications Data

• Records of communications with 188ph customer support (live chat transcripts, email correspondence);
• Feedback, complaints, and dispute submissions;
• Responses to surveys or promotional communications (where you have engaged with them).

188ph collects personal data through the following channels and mechanisms:

3.1 Direct Collection from You

The majority of personal data 188ph holds is provided directly by you during your use of the Platform, including: during account registration (mobile number, email address, password); during KYC verification (identity documents, selfie photograph, address details); during financial transactions (deposit and withdrawal requests submitted through the 188ph cashier); during customer support interactions (information you provide in live chat or email); and during participation in promotions (where additional information is requested as part of the promotion entry).

3.2 Automated Collection

188ph automatically collects certain technical and gaming activity data as part of the normal operation of the Platform. This includes: your IP address each time you log in to your 188ph account; device and browser information transmitted as part of standard HTTP requests; session data including login timestamps, session duration, and pages viewed; and gaming transaction data generated automatically by the Platform when you place bets, receive payouts, or interact with game features.

3.3 Third-Party Sources

In certain circumstances, 188ph may receive personal data from third parties, including: payment service providers (GCash, Maya, BPI, BDO, Metrobank, and other payment partners) who confirm transaction completion and associated payment account details; identity verification service providers engaged to assist with KYC processing; and regulatory authorities including PAGCOR and the Anti-Money Laundering Council (AMLC), which may provide information relevant to player eligibility or regulatory compliance obligations.

188ph processes your personal data for the following specific purposes:

188ph does not process personal data for any purpose beyond those listed above without first obtaining your consent or establishing a separate lawful basis for processing under the Data Privacy Act.

188ph processes personal data only where a lawful basis exists under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. The applicable legal bases for 188ph's processing activities are:

• Performance of a Contract: Processing that is necessary to provide you with access to the 188ph Platform and gaming services, including account registration, transaction processing, and game delivery, is carried out on the basis that it is necessary for performance of the contract between you and 188ph constituted by these Terms & Conditions.
• Compliance with a Legal Obligation: Processing carried out to fulfill 188ph's obligations under Philippine law — including KYC/age verification under PAGCOR requirements, anti-money laundering compliance under Republic Act No. 9160 (as amended), and tax compliance — is carried out on the basis of legal obligation.
• Consent: Where 188ph processes personal data for purposes not covered by the above legal bases (including optional marketing communications and the use of non-essential cookies), such processing is carried out on the basis of your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time through your Account Settings or by contacting 188ph's Data Protection Officer.
• Legitimate Interests: 188ph may process certain technical and security data on the basis of its legitimate interests in protecting the integrity and security of the Platform and preventing fraud, to the extent that such processing does not override your fundamental rights and freedoms.

188ph does not sell, rent, or commercially exploit your personal data to third parties. Personal data is shared only in the following circumstances and only to the extent necessary for the specified purpose:

6.1 Regulatory and Government Authorities

188ph is required to share certain personal data with Philippine government authorities as mandated by law, including: PAGCOR (as 188ph's licensing and regulatory authority), the Anti-Money Laundering Council (AMLC) in respect of transaction reports required under Republic Act No. 9160, the National Privacy Commission in connection with data breach notifications or regulatory inquiries, and law enforcement authorities acting under valid legal authority such as a court order or subpoena.

6.2 Payment Service Providers

To process deposits and withdrawals, 188ph shares necessary payment information with the relevant payment service providers selected by you, including GCash (Mynt — Globe Fintech Innovations, Inc.), Maya (Voyager Innovations, Inc.), BPI, BDO, Metrobank, and other authorized payment processors. Data shared is limited to what is necessary to process the specific transaction.

6.3 KYC and Identity Verification Providers

188ph may engage third-party identity verification service providers to assist with the processing and authentication of KYC documents. Such providers act as personal information processors under contract with 188ph and are required to process personal data only in accordance with 188ph's instructions and applicable Philippine data privacy law.

6.4 Game Technology Providers

Third-party game providers whose games are available on the 188ph Platform (including live dealer studios and slot game providers) may receive limited gameplay data necessary to deliver the game services and resolve any technical disputes regarding game outcomes. Such providers are bound by data processing agreements that restrict the use of any personal data shared.

6.5 Professional Advisers

188ph may share personal data with its legal counsel, auditors, accountants, and other professional advisers where access to such data is reasonably necessary for the performance of their professional services, subject to applicable professional confidentiality obligations.

The 188ph Platform serves the Philippine market and is primarily operated with data infrastructure located within or serving the Philippine market. However, certain third-party service providers engaged by 188ph — including game technology providers, cloud infrastructure providers, and identity verification platforms — may process data from servers or facilities located outside the Philippines.

Where personal data is transferred outside the Philippines, 188ph ensures that appropriate safeguards are in place to protect the data in a manner consistent with the requirements of the Data Privacy Act of 2012. Such safeguards may include: contractual data processing agreements incorporating the standard data protection clauses required under Philippine law; transfers to jurisdictions recognized as providing an adequate level of data protection by the National Privacy Commission; and consent-based transfers where adequate safeguards cannot be established through other means.

Users who wish to obtain further information about international transfers of their personal data, including details of the specific safeguards applied, may contact 188ph's Data Protection Officer using the contact details provided in Section 14 of this Privacy Policy.

188ph retains personal data only for as long as is necessary for the purposes for which it was collected, taking into account 188ph's legal and regulatory obligations. The following general retention principles apply:

• Account Data: Personal data associated with an active 188ph account is retained for the duration of the account's active status and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and anti-money laundering obligations under Republic Act No. 9160.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years following the completion of verification, or longer where required by applicable regulations or ongoing legal proceedings.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years in compliance with anti-money laundering and tax compliance requirements under Philippine law.
• Gaming Activity Data: Session and gaming history logs are retained for a minimum of three (3) years to support dispute resolution, responsible gaming monitoring, and regulatory audit obligations.
• Customer Support Communications: Records of support interactions are retained for a minimum of two (2) years following the closure of the relevant support case.
• Marketing Data: Personal data processed solely for marketing communications is deleted or anonymized within ninety (90) days of your withdrawal of consent or opt-out from marketing communications.

Where retention beyond these minimum periods is required by law, court order, or ongoing regulatory inquiry, 188ph will retain the relevant data until the applicable requirement is satisfied. Data that is no longer required for any lawful purpose is securely deleted or anonymized in accordance with 188ph's data disposal procedures.

188ph implements a comprehensive set of technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the 188ph Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. The presence of "https://" in the 188ph.cam URL and the browser padlock indicator confirm that your connection is encrypted.
• Encryption at Rest: Sensitive personal data stored on 188ph's systems — including identity document images and financial identifiers — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within 188ph's organization is restricted on a strict need-to-know basis. Staff with access to personal data are subject to confidentiality obligations and receive regular data privacy training.
• Two-Factor Authentication: Users may enable two-factor authentication (2FA) on their 188ph accounts, adding an additional layer of security beyond the password through SMS OTP verification to the registered Philippine mobile number.
• Intrusion Detection and Monitoring: 188ph's technical infrastructure is monitored continuously for security anomalies, unauthorized access attempts, and suspicious activity patterns.
• Data Breach Response: 188ph maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk of serious harm to affected users, 188ph will notify the National Privacy Commission and affected Users within the timeframes required under the Data Privacy Act and its Implementing Rules.

While 188ph takes all reasonable steps to protect your personal data, no security system is completely impenetrable. Users are reminded that they are also responsible for the security of their own Account credentials and devices used to access the Platform.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, users of the 188ph Platform have the following rights in respect of their personal data held by 188ph:

• Right to be Informed: You have the right to be informed that your personal data is being or has been collected and processed, the purposes of that processing, and the recipients of that data. This Privacy Policy constitutes 188ph's discharge of this obligation.
• Right of Access: You have the right to request a copy of the personal data that 188ph holds about you, together with information about how it is processed. Subject access requests will be fulfilled within thirty (30) days of receipt.
• Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected. You may update certain contact details directly through your Account Settings. Requests to correct KYC or identity data must be submitted to 188ph's support team with supporting documentation.
• Right to Erasure: You have the right to request the deletion of personal data that is no longer necessary for the purpose for which it was collected, or where processing is based on consent that you have withdrawn. This right is subject to 188ph's legal and regulatory retention obligations — data that must be retained for anti-money laundering, PAGCOR compliance, or other legal purposes cannot be deleted prior to the expiry of the applicable retention period.
• Right to Object: You have the right to object to the processing of your personal data on the basis of legitimate interests, including for direct marketing purposes. You may opt out of marketing communications at any time through your Account Settings or by contacting 188ph support.
• Right to Data Portability: You have the right to receive the personal data you have provided to 188ph in a structured, commonly used, machine-readable format, and to have that data transmitted to another personal information controller where technically feasible.
• Right to Restriction: You have the right to request that 188ph restrict its processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or have objected to processing pending verification of legitimate grounds.
• Right to Lodge a Complaint: If you believe that 188ph has not complied with applicable data privacy law in its handling of your personal data, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).

To exercise any of the rights described above, please contact 188ph's Data Protection Officer using the details provided in Section 14. 188ph will respond to all rights requests within thirty (30) days, except where a longer period is permitted by applicable law for complex requests.

188ph uses cookies and similar tracking technologies on the Platform for the purposes described in this section. A cookie is a small text file placed on your device when you visit the Platform. Cookies allow the Platform to recognize your device across sessions and provide a more functional user experience.

11.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in to your 188ph Account during your session, security tokens that protect against cross-site request forgery, and load-balancing cookies that ensure your requests are directed to the correct server. No consent is required for strictly necessary cookies as they are required for the legitimate operation of the Platform.

11.2 Functional Cookies

Functional cookies remember your preferences and settings to improve your experience on the Platform — for example, your preferred language, your most recently played game categories, and your session timeout preferences. These cookies do not track your activity outside of the 188ph Platform.

11.3 Analytics Cookies

With your consent, 188ph uses analytics cookies to understand how users interact with the Platform — which pages are visited most frequently, where users encounter errors, and how navigation flows can be improved. Analytics data is aggregated and anonymized to the extent possible and is used only to improve the Platform's design and performance.

11.4 Managing Cookies

You may manage your cookie preferences through the cookie settings interface available on the Platform, or through your browser's built-in cookie management tools. Please note that disabling strictly necessary cookies will prevent you from accessing most features of the Platform, including your Account. Disabling functional or analytics cookies will reduce the personalization of your Platform experience but will not affect your ability to use the Platform's core features.

The 188ph Platform is strictly restricted to persons who are at least twenty-one (21) years of age, in compliance with PAGCOR's mandatory age requirement for all casino gaming activities in the Republic of the Philippines. 188ph does not knowingly collect personal data from individuals who are under 21 years of age.

Age is verified through the mandatory KYC process, which requires submission of a valid Philippine government-issued identification document confirming the user's date of birth. Any account where the KYC process reveals that the account holder is under 21 years of age will be suspended immediately, and any personal data collected in connection with that account will be handled in accordance with applicable law — including notification to relevant regulatory authorities where required.

If 188ph becomes aware that personal data has been collected from a person under 21 years of age without the knowledge that the person was underage, 188ph will take prompt steps to delete that data from its systems, except to the extent that retention is required by applicable regulatory or legal obligations in connection with the unauthorized account.

188ph reserves the right to update, amend, or replace this Privacy Policy at any time. The current version of this Privacy Policy is identified by the "Last Updated" date displayed at the top of this page and at the beginning of each version published at 188ph.cam/privacy-policy.

Where a proposed amendment materially affects the way in which 188ph processes your personal data, or reduces your rights under this Privacy Policy, 188ph will provide advance notice of the change by in-app notification, SMS to your registered Philippine mobile number, or email to your registered email address, at least fourteen (14) days before the amended Privacy Policy takes effect. For changes required by law or by regulatory directive from PAGCOR or the National Privacy Commission, amendments may take effect with shorter or no notice.

Where an amendment requires your consent (for example, a new processing purpose for which consent is the applicable legal basis), 188ph will seek your affirmative consent before commencing processing under the amended purpose. Your continued use of the Platform after the effective date of a Privacy Policy amendment that does not require separate consent constitutes your acknowledgment of the updated Privacy Policy.

188ph recommends that you review this Privacy Policy periodically to stay informed about how your personal data is handled. Previous versions of this Privacy Policy are available upon request from 188ph's Data Protection Officer.

188ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. You may contact the 188ph DPO for any of the following purposes:

• Exercising any of your data subject rights described in Section 10;
• Raising a concern or complaint about 188ph's handling of your personal data;
• Requesting information about international data transfers and safeguards;
• Requesting previous versions of this Privacy Policy;
• Any other data privacy inquiry relating to 188ph's processing of your personal data.

Email: [email protected] — please include "Data Privacy / DPO" in the subject line of your message to ensure prompt routing to the Data Protection Officer.

Live Chat: The 188ph support team is available 24/7 via in-app live chat and can route urgent data privacy matters to the DPO. For formal data subject rights requests, written submission via email is preferred to ensure accurate record-keeping.

188ph aims to respond to all data privacy inquiries within five (5) Philippine Business Days of receipt, and to fulfill data subject rights requests within thirty (30) days. For complex requests, 188ph may extend the response period by a further thirty (30) days where permitted by the Data Privacy Act, and will notify you of any extension within the initial thirty-day period.

If you are not satisfied with 188ph's response to a data privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), which may be contacted through its official website and contact channels.