Privacy Policy – pgh888 Online Gaming Platform

1 Introduction

pgh888 ("we", "us", "our", "the Company") operates the online gaming platform available at pgh888.net, providing Filipino players with access to slots, live casino games, sports betting, bingo, sabong, arcade games, and related promotional services. As part of delivering these services, pgh888 collects and processes certain personal data about you.

This Privacy Policy ("Policy") applies to all personal data collected by pgh888 through the pgh888.net website, its mobile-optimised platform, and any associated player communications — including email, live chat, and SMS notifications sent to Philippine mobile numbers. It governs how we collect, use, store, protect, and share your personal data in connection with the pgh888 platform.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines. pgh888 also operates in accordance with the data handling obligations established by the Philippine Amusement and Gaming Corporation (PAGCOR) as a condition of its licensing.

By registering a pgh888 account, using the pgh888 platform, or submitting any personal information to pgh888, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Data We Collect

pgh888 collects personal data through multiple touchpoints during your interaction with the platform. The categories of data we collect, and the contexts in which we collect them, are set out in the table below:

pgh888 does not collect or store full payment card numbers. All payment card transactions, where applicable, are processed exclusively through PCI-DSS compliant third-party payment processors, and only tokenised or masked payment references are retained by pgh888.

3 How We Use Your Data

pgh888 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your additional consent:

• Account Creation and Management: To register your pgh888 account, verify your identity, maintain accurate account records, and enable you to log in securely to the platform.
• Identity Verification (KYC/AML): To comply with PAGCOR licensing requirements and Philippine Anti-Money Laundering Act (AMLA) obligations by verifying your identity before processing withdrawals and monitoring account activity for suspicious patterns.
• Transaction Processing: To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, and USDT, and to process withdrawal requests back to your verified payment method.
• Platform Delivery and Game Access: To provide you with access to slots, live casino, bingo, sports betting, sabong, and arcade games on the pgh888 platform.
• Bonus and Promotion Management: To determine your eligibility for welcome bonuses, reload offers, and seasonal promotions — such as pgh888's fiesta-season and holiday campaigns — and to track wagering requirement completion.
• Responsible Gaming Enforcement: To monitor your gameplay patterns for signs of problem gambling, enforce the self-exclusion, deposit limit, and session time alert tools you configure, and to flag accounts that may need responsible gaming intervention.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and maintain support records for quality assurance purposes.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, collusion, and any other conduct prohibited under pgh888's Terms & Conditions.
• Legal and Regulatory Compliance: To meet our obligations under Philippine law, including reporting requirements to PAGCOR and the Anti-Money Laundering Council (AMLC) where applicable.
• Platform Improvement: To analyse anonymised usage patterns and technical performance data in order to improve the pgh888 platform's features, speed, and overall player experience.
• Marketing Communications: To send you promotional emails and SMS notifications about pgh888 bonuses and game launches — but only where you have opted in to receive such communications. You may opt out at any time via your account notification settings.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), pgh888 processes your personal data on the following lawful bases:

• Contractual Necessity: Processing your identity data, contact data, and financial data is necessary to enter into and perform the contract established when you register a pgh888 account — without this data, pgh888 cannot provide its gaming services to you.
• Legal Obligation: Processing for KYC/AML verification, PAGCOR regulatory reporting, and AMLC transaction monitoring is required by Philippine law and is not conditional on your consent.
• Legitimate Interests: pgh888 processes technical data and gameplay data on the basis of its legitimate interests in operating a secure, fair, and compliant gaming platform — including fraud prevention, platform security, and responsible gaming monitoring. These interests do not override your fundamental privacy rights.
• Consent: Where pgh888 sends you direct marketing communications via email or SMS, this processing is based on your explicit consent given at the time of opt-in. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

pgh888 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your personal data only in the following limited circumstances:

• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and USDT network processors receive the financial data necessary to complete your deposit and withdrawal transactions. These processors operate under their own privacy policies and applicable Philippine financial regulations.
• Game Content Providers: Third-party game studios and live dealer platform providers receive anonymised session identifiers necessary to deliver their games within the pgh888 platform. These providers do not receive your full identity or financial data.
• PAGCOR and Regulatory Bodies: pgh888 is required to share player account data, transaction records, and gameplay logs with PAGCOR and the AMLC upon formal request, in compliance with its licensing obligations and Philippine law.
• Law Enforcement: pgh888 will disclose personal data to Philippine National Police (PNP), National Bureau of Investigation (NBI), or other competent Philippine authorities where required by a valid court order, subpoena, or legal process.
• Responsible Gaming Databases: Where a player is subject to a self-exclusion order, pgh888 may share exclusion status data with industry-wide responsible gaming registries as required by PAGCOR guidelines.
• Professional Advisers: pgh888's legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis subject to professional confidentiality obligations.

6 Cookies & Tracking Technologies

The pgh888 platform uses cookies and similar tracking technologies to provide a functional, personalised, and secure gaming experience. The types of cookies we use are described below:

• Strictly Necessary Cookies: Required for the pgh888 platform to function. These include session authentication cookies that keep you logged in securely, security cookies that detect unusual access patterns, and load-balancing cookies. You cannot opt out of strictly necessary cookies while using the platform.
• Functional Cookies: Store your preferences — such as language settings, responsible gaming tool configurations, and game lobby filters — so you do not need to re-enter them on each visit.
• Analytics Cookies: Collect anonymised data about how players navigate the pgh888 platform — which game categories are most visited, average session durations, and platform performance metrics. This data helps pgh888 improve the platform experience. Analytics cookies do not identify you personally.
• Marketing Cookies: Used only where you have opted in to marketing communications. These help pgh888 understand which promotions are most relevant to Filipino players and deliver personalised bonus offers through the platform dashboard.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the pgh888 platform, including the ability to maintain a logged-in session.

7 Data Retention

pgh888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, and compliance obligations. Our standard data retention periods are as follows:

• Account and Identity Data: Retained for the lifetime of your active pgh888 account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act (Republic Act No. 9160, as amended).
• Gameplay Logs: Retained for two (2) years from the date of each session, used for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of closure of the relevant support interaction.
• Marketing Consent Records: Retained for the duration of your active marketing opt-in status and for one (1) year following any opt-out, to demonstrate prior consent compliance.
• Technical and Device Data: Retained in anonymised form for platform analytics for up to twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with NPC-recommended data disposal standards.

8 Your Rights Under RA 10173

As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173), you hold the following rights in respect of the personal data pgh888 holds about you. To exercise any of these rights, please contact pgh888's Data Protection Officer using the details in Section 13:

• Right to Be Informed: You have the right to be informed whether pgh888 holds any personal data about you, what data is held, and the purpose for which it is being processed — which is the primary purpose of this Privacy Policy.
• Right to Access: You have the right to request a copy of the personal data pgh888 holds about you. Requests will be processed within fifteen (15) business days of receipt and identity verification.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held by pgh888. Identity data corrections require supporting documentation (e.g., updated government-issued ID).
• Right to Erasure (Right to Be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (for consent-based processing only), or where processing is unlawful. Note that this right is subject to pgh888's legal retention obligations under PAGCOR and AML requirements — we cannot delete data we are legally required to retain.
• Right to Data Portability: You have the right to receive a copy of the personal data you provided to pgh888 in a structured, commonly used, and machine-readable format, and to request that pgh888 transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to processing of your personal data based on pgh888's legitimate interests, and to object to direct marketing processing at any time. Marketing objections are acted on immediately upon receipt.
• Right to Lodge a Complaint: If you believe pgh888 has handled your personal data in a manner inconsistent with RA 10173, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines.

9 Data Security

pgh888 takes the security of your personal data seriously and implements a comprehensive set of technical and organisational security measures to protect your information against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the pgh888 platform is encrypted using 256-bit SSL/TLS protocol, the same standard used by major Philippine banks including BPI and BDO for their online banking portals.
• Encrypted Data Storage: Personal and financial data stored in pgh888's databases is encrypted at rest. Database access is restricted to authorised personnel only via role-based access controls.
• Two-Factor Authentication (2FA): pgh888 supports two-factor authentication linked to your registered Philippine mobile number, providing an additional layer of account security beyond your password.
• Intrusion Detection and Monitoring: pgh888's infrastructure is monitored 24/7 for suspicious activity, unauthorised access attempts, and anomalous data access patterns.
• Regular Security Audits: pgh888 conducts periodic internal and third-party security assessments of its platform infrastructure and data handling practices.
• Staff Training: All pgh888 staff members with access to personal data undergo mandatory data privacy and security training covering their obligations under RA 10173.

10 Children & Minors

pgh888 implements the following measures to prevent underage access and the collection of personal data from minors:

• Date of birth verification is required at account registration. Any applicant whose stated age is under 21 years is rejected at the registration stage without an account being created.
• During withdrawal KYC verification, pgh888's compliance team reviews identity documents to confirm that the account holder is 21 years of age or older. Any account found to belong to an individual under 21 is immediately suspended and the matter is referred to PAGCOR.
• Any personal data inadvertently collected from an individual subsequently found to be under the age of 21 will be securely deleted from pgh888's systems as soon as the discrepancy is identified.

If you believe a minor is using the pgh888 platform, please report it immediately to our 24/7 live chat support team via the player dashboard. pgh888 takes all such reports seriously and investigates them promptly.

11 Third-Party Services

The pgh888 platform integrates services and content from third-party providers — including game studios, live dealer platform operators, and payment processors — to deliver a complete gaming experience. While pgh888 carefully vets all third-party partners for privacy and security standards, please be aware of the following:

• Third-party game providers integrated into the pgh888 platform operate under their own privacy policies and data processing agreements. pgh888 ensures that all such providers are contractually bound to process only the minimum data necessary to deliver their services and to handle that data in a manner consistent with RA 10173.
• Payment processors — including GCash, PayMaya, BPI, BDO, and Metrobank — operate as independent data controllers in respect of the financial transaction data they process. Their processing of your payment data is governed by their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.
• pgh888 does not host third-party advertising networks on the platform. You will not encounter third-party advertising trackers on pgh888.net beyond the first-party analytics described in Section 6.

pgh888 is not responsible for the privacy practices of any third-party services accessed independently of the pgh888 platform. This Privacy Policy applies solely to data processed by pgh888 in connection with the pgh888.net platform.

12 Changes to This Policy

pgh888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, or updates to NPC or PAGCOR guidelines. The effective date at the top of this page will be updated whenever a material change is made.

Where a proposed change materially affects how pgh888 uses your personal data, we will notify you via email to your registered address and/or via a prominent notice displayed upon your next login to the pgh888 platform, providing you with reasonable opportunity to review the updated policy before the changes take effect.

Your continued use of the pgh888 platform following the publication of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any modification to this policy, you should cease using the pgh888 platform and contact our Data Protection Officer to request account closure and data erasure as applicable.

13 Contact & Data Protection Officer

pgh888 has designated a Data Protection Officer (DPO) responsible for overseeing the Company's compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you wish to exercise any of your data rights, have a privacy concern, or wish to lodge a complaint regarding pgh888's data practices, you may contact the DPO through the following channels:

• Live Chat: Available 24/7 via your pgh888 player dashboard. For DPO matters, please state "Data Privacy Request" at the start of your message and a specialist agent will assist you.
• Email: [email protected] — Please use the subject line "Privacy Policy / Data Rights Request" for DPO-related inquiries. Responses are provided within fifteen (15) business days.
• Regulator: If you are not satisfied with pgh888's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through the NPC's official complaints process.

pgh888 will never initiate unsolicited contact asking for your password, full payment details, or one-time PIN (OTP). If you receive any communication purportedly from pgh888 requesting such information, please treat it as fraudulent and report it to our support team immediately.