188php Privacy Policy

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information from which a natural person can be identified directly or indirectly, including names, identification numbers, location data, online identifiers, and any factors relating to the physical, economic, cultural, or social identity of the individual, as defined under the Data Privacy Act of 2012 (RA 10173).
• "Sensitive Personal Data" means personal data about a data subject's race, ethnic origin, marital status, age, colour, and religious, philosophical or political affiliations; health, education, genetic or sexual life; or any proceeding for any offence committed or alleged to have been committed by such person.
• "Processing" means any operation performed on personal data, including collection, recording, organisation, storage, updating, alteration, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Controller" refers to 188php, which determines the purposes and means of the processing of personal data collected through the platform.
• "Data Subject" means you — the individual whose personal data is collected, held, and processed by 188php.
• "NPC" means the National Privacy Commission of the Philippines, the regulatory authority responsible for administering and enforcing the Data Privacy Act.
• "Platform" refers to the 188php online gaming website and all associated digital services accessible through 188php.org.
• "KYC Data" means personal data collected for Know Your Customer verification purposes, including government-issued identification documents and proof of address.

188php acts as the Data Controller for all personal data collected through the platform. As Data Controller, 188php is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with the Data Privacy Act of 2012 and applicable PAGCOR regulatory requirements.

188php has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with data protection obligations, handling data subject requests, and serving as the primary point of contact with the National Privacy Commission. Contact details for the DPO are provided in Section 16 of this policy.

188php collects only the personal data that is necessary for the purposes described in Section 5 of this policy. The categories of personal data we collect include:

188php does not collect Sensitive Personal Data as defined under RA 10173 except where strictly required by law — for example, where a government-issued identification document contains information about ethnic origin or religion.

188php collects personal data through the following channels:

• Account Registration. When you create a 188php account, you directly provide identity data, contact data, and authentication credentials.
• KYC Verification. When you complete identity verification before your first withdrawal, you submit copies of government-issued identification documents and supporting materials.
• Financial Transactions. Deposit and withdrawal requests generate financial transaction data that is automatically recorded in our systems.
• Platform Usage. Your gameplay activity, session data, and interaction with platform features are automatically recorded as you use the 188php platform.
• Customer Support. Communications through live chat, email, and other support channels create communications data.
• Cookies and Tracking Technologies. Technical data is collected automatically through cookies and server logs when you visit the platform. See Section 10 for details.
• Third-Party Payment Providers. Confirmation data from payment processors (e.g., GCash transaction reference numbers) is shared with 188php to verify the completion of deposits and withdrawals.

188php processes your personal data only for specified, legitimate purposes. The table below sets out the purposes for which we use your data and the legal basis for each:

188php will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required, obtaining your separate consent.

188php does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients where necessary and lawful:

• Payment Processors. GCash (Mynt), PayMaya (Maya Bank), BDO Unibank, BPI, Metrobank, and cryptocurrency processing partners receive only the transaction data necessary to execute deposit and withdrawal requests.
• Identity Verification Providers. Third-party KYC service providers may process your identity document data for the purpose of verifying your identity on behalf of 188php.
• Game Content Providers. Game studios and platform operators (e.g., Evolution Gaming, Pragmatic Play, JILI, PG Soft) receive gaming session data necessary for game operation and dispute resolution. These providers operate under data processing agreements with 188php.
• Regulatory Authorities. 188php is legally required to disclose certain data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies as required by law.
• Law Enforcement. 188php may disclose personal data to law enforcement agencies where legally compelled to do so or where necessary to prevent or detect crime.
• Professional Advisors. Legal, accounting, and auditing professionals engaged by 188php may access personal data subject to professional confidentiality obligations.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 188php:

1. Right to Access. You may request a copy of the personal data 188php holds about you and information about how it is being processed.
2. Right to Rectification. You may request the correction of inaccurate or incomplete personal data. Certain data corrections (e.g., name changes) require supporting documentary evidence.
3. Right to Erasure ("Right to be Forgotten"). You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and no other legal basis applies. Note that 188php is required to retain certain data for regulatory compliance purposes even after account closure — see Section 8.
4. Right to Object. You may object to the processing of your personal data where 188php relies on legitimate interests as the legal basis, unless 188php can demonstrate compelling legitimate grounds that override your interests.
5. Right to Block. You may request that 188php suspend processing of your personal data pending resolution of a dispute about accuracy or lawfulness.
6. Right to Data Portability. You may request a copy of personal data you have provided to 188php in a structured, commonly used, and machine-readable format.
7. Right to Complain. You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 188php has violated your data privacy rights.
8. Right to Damages. You may seek compensation for material or non-material damage suffered as a result of a violation of the Data Privacy Act by 188php.

To exercise any of the above rights, please contact 188php's Data Protection Officer using the details in Section 16. We will respond to all verified requests within fifteen (15) business days.

188php retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with recognised data destruction standards.

188php implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport Encryption. All data transmitted between your browser or device and the 188php platform is encrypted using TLS 1.3 with 256-bit AES encryption.
• Password Security. Account passwords are stored using industry-standard bcrypt hashing — 188php never stores passwords in plain text and support staff cannot view your password.
• Access Controls. Internal access to personal data is restricted on a need-to-know basis. All staff who access personal data are subject to confidentiality obligations and regular privacy training.
• Network Security. The 188php platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular third-party penetration testing.
• Fraud Detection Systems. Automated systems monitor account activity for signs of unauthorised access, account takeover attempts, and suspicious transaction patterns.
• Secure Data Storage. Personal data is stored on servers located in PAGCOR-compliant facilities with physical access controls and environmental protections.

188php uses cookies and similar tracking technologies to operate the platform and improve your experience. The types of cookies we use are:

• Strictly Necessary Cookies. Required for core platform functions including session authentication, login state management, and security token validation. These cannot be disabled without breaking platform functionality.
• Functional Cookies. Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics Cookies. Collect aggregated, anonymised data about how players use the platform to help 188php identify areas for improvement. These cookies do not identify you personally.
• Security Cookies. Used by fraud detection and bot prevention systems to distinguish legitimate player activity from automated access attempts.

188php does not use third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from using the platform.

The 188php platform is strictly for persons who are at least 21 years of age. 188php does not knowingly collect personal data from individuals under 21 years of age. Our registration process includes age verification steps, and we conduct ongoing verification through KYC procedures.

If 188php discovers or is notified that personal data has been collected from an individual under 21 years of age, we will immediately suspend the relevant account, delete the personal data to the extent permitted by law (subject to mandatory retention under AMLA and PAGCOR requirements), and return any funds as required by applicable regulations.

Some of 188php's third-party service providers — including game content providers and certain technology infrastructure vendors — may be located outside the Republic of the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, 188php will ensure appropriate safeguards are in place, including:

• Binding data processing agreements incorporating standard contractual clauses approved under Philippine data protection law;
• Requirements for the recipient to implement security measures equivalent to those described in Section 9 of this policy;
• Restrictions on the recipient's ability to use or further transfer your data beyond the specified purpose.

You may request information about the specific safeguards in place for international transfers of your personal data by contacting our Data Protection Officer using the details in Section 16.

188php may send you promotional communications about new games, bonuses, promotions, and platform features where you have provided explicit consent to receive such communications during the account registration process or subsequently through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Adjusting your communication preferences in your 188php account settings;
• Contacting 188php support via live chat and requesting removal from marketing communications.

Withdrawal of consent to receive marketing communications will not affect your ability to receive service communications related to your account (e.g., transaction confirmations, security alerts, withdrawal notifications), which are sent on the basis of contractual necessity and legitimate interest.

188php does not share your contact information with third-party marketers. All promotional communications sent by 188php are generated and distributed internally.

The 188php platform integrates with third-party services necessary for platform operation, including payment processors, game content providers, and KYC verification services. These third parties operate under their own privacy policies, which govern their handling of any data they collect independently.

188php is not responsible for the privacy practices of third parties that operate their own independent services. Where data is shared with third parties for processing purposes on 188php's behalf, those third parties are contractually required to process the data only as directed by 188php and in accordance with this Privacy Policy.

188php does not embed third-party advertising networks, social media tracking pixels, or behavioural analytics services on the platform. Your gaming activity and personal data are not used to build advertising profiles.

188php reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will:

• Update the "Effective Date" at the top of the policy;
• Display a notification within the 188php platform for a minimum of 14 days following the change;
• Where the change materially affects your rights, send a notification to your registered contact details at least 7 days before the change takes effect.

Your continued use of the 188php platform following the effective date of any revised Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the changes, you may close your account in accordance with the account closure procedure in the Terms & Conditions.

For all data privacy inquiries, subject access requests, or complaints regarding 188php's handling of your personal data, please contact our Data Protection Officer through the following channels:

188php is committed to resolving all data privacy concerns in good faith. We aim to respond to all verified data subject requests within fifteen (15) business days. Complex requests may require additional time, in which case we will notify you of the expected resolution timeline.