pb88 Privacy Policy

1.1 This Policy applies to all personal data processed by pb88 in connection with the operation of pb88.biz and all related services, including account registration, identity verification, payment processing, customer support, promotional communications, and regulatory compliance activities.

1.2 This Policy applies to all current and former registered players of pb88, as well as to visitors to pb88.biz who have not registered but whose data may be collected through the use of cookies and similar tracking technologies as described in Section 7.

1.3 This Policy does not apply to third-party websites, payment processors, or gaming software providers that may be accessible through or in connection with the pb88 platform. pb88 is not responsible for the privacy practices of such third parties and encourages players to review their respective privacy policies independently.

1.4 This Policy is incorporated by reference into pb88's Terms & Conditions. By agreeing to pb88's Terms & Conditions, you also agree to this Privacy Policy. The current version of this Policy is always available at pb88.biz/privacy-policy.

2.1 For the purposes of the Data Privacy Act of 2012 and this Policy, pb88 is the Personal Information Controller with respect to the personal data of its players and website visitors. pb88 determines the purposes and means of processing player personal data.

2.2 pb88 has designated a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. The DPO is responsible for overseeing pb88's data protection compliance, handling data subject requests, and serving as the point of contact with the National Privacy Commission. Contact details for the DPO are provided in Section 14 of this Policy.

2.3 pb88 operates under the regulatory jurisdiction of the Philippine Amusement and Gaming Corporation (PAGCOR). Certain personal data processing activities are carried out to fulfil pb88's mandatory obligations under PAGCOR licensing conditions, which take precedence over this Policy where they impose more stringent requirements.

3.1 pb88 collects the following categories of personal data from its players and website visitors:

• Full legal name as it appears on a Philippine government-issued ID
• Date of birth (for age verification — players must be 21 years of age or older)
• Gender (where provided)
• Philippine residential address
• Email address and mobile phone number
• Username and encrypted password

• Copy of government-issued Philippine ID (PhilSys, UMID, Passport, Driver's License)
• Selfie photograph submitted for identity matching
• Proof of address documentation where required
• Source of funds declaration for high-value accounts as required by AMLA

• GCash, PayMaya, BPI, BDO, and Metrobank account references (not full account numbers)
• Deposit and withdrawal transaction records in Philippine Peso
• Bonus and promotion usage records
• Wagering history and game session records

• IP address and general geolocation data
• Device type, operating system, and browser information
• Session duration, login times, and platform navigation patterns
• Cookie identifiers and similar tracking data (see Section 7)

4.1 pb88 collects personal data through the following channels and mechanisms:

• Directly from you: Through the registration form at pb88.biz, KYC document submissions, customer support communications, and any information you voluntarily provide when contacting pb88.
• Automatically: Through cookies, server logs, and analytics tools when you access pb88.biz (see Section 7).
• From payment processors: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners when you make deposits or withdrawals.
• From regulatory bodies: PAGCOR or AMLC may provide or request data relevant to compliance obligations under Philippine law.
• From identity verification services: Third-party KYC service providers may return verification status data after processing the documents you submit to pb88.

5.1 pb88 processes personal data only where a legitimate legal basis exists under the Data Privacy Act of 2012. The table below sets out the primary purposes for which pb88 processes your data and the corresponding legal basis:

5.2 Where pb88 relies on consent as the legal basis for any processing activity (primarily marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6.1 pb88 does not sell, rent, or trade player personal data to any third party for commercial or marketing purposes. Disclosure of your personal data is limited to the following categories of recipients, and only to the extent necessary for the stated purpose:

pb88 is required by Philippine law to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent Philippine government agencies upon lawful request or as required by mandatory reporting obligations. pb88 will comply with such requests without prior notice to the player where required by law or where notification would prejudice the relevant investigation.

pb88 engages third-party service providers to support platform operations, including cloud hosting providers, KYC identity verification services, payment gateway operators (including GCash/PayMaya technical processors), cybersecurity service providers, and customer support platforms. These providers are contractually bound to process pb88 player data solely for the purposes instructed by pb88 and in accordance with applicable Philippine data protection law.

Third-party game content providers (live dealer studios, RNG game developers) receive minimal technical session data required for game delivery. These providers do not receive personally identifiable player information beyond what is technically necessary for game API integration. All such providers are contractually bound by data processing agreements.

7.1 pb88.biz uses cookies and similar tracking technologies to ensure proper platform functionality, maintain secure login sessions, remember player preferences, detect fraud, and analyze how the platform is used by Filipino players in aggregate.

7.2 The following categories of cookies are used on pb88.biz:

• Strictly Necessary Cookies: Required for pb88.biz to function. These include session authentication cookies and security tokens. These cannot be disabled without preventing use of the platform.
• Analytics Cookies: Used to collect aggregate, anonymized information about how players navigate pb88.biz. This data is used to improve platform usability and content. These can be disabled via browser settings.
• Preference Cookies: Store your pb88 platform settings such as preferred language, game lobby view, and notification preferences. Disabling these may result in a less personalized experience.
• Security & Fraud Prevention Cookies: Used to detect suspicious login behaviour, bot activity, and fraudulent device patterns. These are essential to pb88's platform security obligations.

7.3 Most modern web browsers allow you to control cookie preferences through the browser settings menu. However, disabling cookies on pb88.biz may impair the functionality of the platform and your ability to maintain an authenticated session.

8.1 pb88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to any applicable regulatory minimum retention periods. The following retention guidelines apply:

8.2 Upon expiry of the applicable retention period, pb88 will securely delete or irreversibly anonymize the relevant personal data, whichever is technically appropriate, unless a new legal basis for continued retention arises (e.g., the commencement of legal proceedings involving that data).

9.1 pb88 implements a multi-layered technical and organizational security framework to protect the personal data of Filipino players from unauthorized access, disclosure, alteration, loss, or destruction.

• TLS/SSL encryption for all data in transit between player devices and pb88 servers
• AES-256 encryption for sensitive data at rest, including KYC documents and financial records
• Bcrypt password hashing — pb88 staff cannot view player passwords in plain text
• Multi-factor authentication on all internal pb88 administrative systems
• Role-based access controls limiting player data access to authorized staff
• Regular penetration testing and vulnerability assessments
• 24/7 security monitoring and intrusion detection systems

9.2 In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected players, pb88 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the Data Privacy Act of 2012 and NPC Circular No. 16-03.

10.1 As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pb88. These rights are subject to applicable legal exceptions and regulatory obligations that may limit pb88's ability to comply in certain circumstances:

• Right to Access: You have the right to request confirmation of whether pb88 processes your personal data and, where it does, to obtain a copy of that data and information about how it is processed.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data held by pb88. Note that corrections to KYC-verified data may require additional documentary evidence.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected. This right is subject to mandatory regulatory retention requirements — pb88 cannot delete data that PAGCOR or AMLA regulations require to be retained.
• Right to Object: You may object to pb88's processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to pb88's ability to demonstrate compelling legitimate grounds.
• Right to Data Portability: You have the right to receive personal data you have provided to pb88 in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Restriction: You may request that pb88 restrict processing of your data in certain circumstances, such as when you contest the accuracy of data or object to processing while pb88 assesses that objection.
• Right to Complain: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe pb88 has not processed your personal data in accordance with the Data Privacy Act of 2012.

10.2 To exercise any of the above rights, please submit a written request to pb88's Data Protection Officer at the contact details provided in Section 14. pb88 will respond to verified data subject requests within thirty (30) days of receipt, or within such shorter period as may be required by law.

11.1 pb88 does not intentionally collect or process personal data from persons under the age of 21. The registration process requires players to declare their date of birth and submit government-issued identification confirming that they meet the 21-year minimum age requirement.

11.2 If pb88 discovers that personal data has been collected from a person under the age of 21, pb88 will immediately suspend the relevant account, delete the collected data to the extent permitted by law, and report the matter to PAGCOR in accordance with its licensing obligations.

11.3 If you are a parent or guardian and believe that a minor has provided personal data to pb88 or created a pb88 account, please contact pb88 support immediately at [email protected]. pb88 will investigate and take appropriate action without undue delay.

12.1 pb88 primarily processes and stores player personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by pb88's third-party service providers located in other countries — for example, cloud infrastructure providers, international game content providers, or KYC verification service providers.

12.2 Where personal data is transferred outside the Philippines, pb88 ensures that adequate safeguards are in place to protect that data in accordance with the standards required by the Data Privacy Act of 2012 and NPC regulations. Safeguards include contractual data processing agreements with receiving parties that impose obligations equivalent to those required by Philippine data protection law.

12.3 pb88 will not transfer personal data to countries or jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual or technical safeguards approved by the National Privacy Commission.

13.1 pb88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or PAGCOR regulatory requirements. The effective date at the top of this document will be updated each time the Policy is revised.

13.2 Where material changes are made to this Policy that significantly affect how pb88 processes your personal data, pb88 will notify registered players via the email address on file before the changes take effect, and will display a notice on pb88.biz.

13.3 Continued use of the pb88 platform following publication of an amended Privacy Policy constitutes acceptance of the revised terms. If you do not accept the amendments, you may request account closure and withdrawal of your remaining balance.

14.1 For all privacy-related inquiries, data subject access requests, complaints, or questions about this Privacy Policy, please contact pb88's Data Protection Officer using the details below. Written requests will receive a substantive response within thirty (30) days.

14.2 You also have the right to lodge a privacy complaint directly with the National Privacy Commission of the Philippines (privacy.gov.ph) if you are unsatisfied with pb88's response to your data subject request.