pph8 takes the privacy of every Filipino player seriously. This Privacy Policy explains exactly what personal data pph8 collects, why we collect it, how we use and protect it, who we share it with, and what rights you have over your own information under Philippine data protection law.
Six principles that shape how pph8 handles your personal information.
pph8 collects only the personal data needed to operate your account, verify your identity, process payments, and comply with legal obligations. We do not collect data speculatively or for purposes we cannot justify to you directly.
pph8 does not sell, rent, or trade your personal data to third-party marketers or advertising networks. Your data exists to make your pph8 experience work — not to generate revenue for third parties at your expense.
All pph8 data systems use 256-bit SSL/TLS encryption in transit and AES-256 encryption at rest. Access to personal data is restricted to authorised pph8 personnel with a legitimate operational need, under strict internal access controls.
Under the Philippine Data Privacy Act of 2012 (R.A. 10173), you have the right to access, correct, and in certain circumstances erase your personal data. pph8 provides a straightforward process for exercising each of these rights — detailed in Section 10 of this Policy.
pph8 retains personal data only for the period required to fulfil the purposes for which it was collected, or for as long as required by applicable Philippine law, PAGCOR compliance requirements, or financial regulation. After the applicable retention period, data is securely deleted or anonymised.
This Policy is written in plain English. Legal obligations are described accurately but without obscuring language. If any part of this Policy is unclear, pph8 support is available 24/7 via live chat to explain what any section means in practical terms for your account.
This Privacy Policy ("Policy") describes how pph8 ("pph8," "we," "us," "our") — operator of the online gaming platform at pph8.org — collects, uses, discloses, stores, and protects the personal information of users ("Players," "you") who access or use any part of the pph8 platform, including the website, account portal, gaming services, and customer support functions.
This Policy is prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. By registering an account or using the pph8 platform, you acknowledge that you have read and understood this Policy.
This Policy should be read together with the pph8 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
Who and what this Policy covers.
1.1 This Policy applies to all personal data processed by pph8 in connection with the operation of the pph8 online gaming platform accessible at pph8.org, including all game categories, payment functions, customer support interactions, and marketing communications.
1.2 This Policy applies to all registered Players, prospective players who interact with the pph8 platform without completing registration, and individuals who contact pph8 via support channels without holding an account.
1.3 This Policy does not apply to third-party websites, payment service providers, or game software providers linked from or integrated with the pph8 platform. Each of those third parties operates under its own privacy policy, which pph8 does not control and is not responsible for.
The entity responsible for your personal data.
2.1 For the purposes of the Philippine Data Privacy Act of 2012, pph8 is the Personal Information Controller (PIC) of all personal data collected from Players who access the platform at pph8.org.
2.2 pph8 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with applicable data protection law. Queries and requests relating to personal data may be directed to the pph8 DPO via the contact details in Section 14 of this Policy.
What information pph8 collects and how it is gathered.
3.1 pph8 collects personal data through the following channels: account registration forms, KYC verification processes, deposit and withdrawal transactions, gameplay sessions, customer support interactions, and automatic collection via cookies and similar technologies.
| Category | Data Items | Collection Point |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number and type (e.g. Philippine passport, driver's licence, national ID) | Registration & KYC |
| Contact Data | Philippine mobile number, email address, residential address (city, province, region) | Registration & KYC |
| Financial Data | GCash account number (last digits), PayMaya reference, BPI/BDO/Metrobank account name for withdrawal verification, deposit and withdrawal transaction records, account balance history | Payment processing |
| Gaming Activity Data | Game history, bet amounts, win/loss records, session timestamps, game category preferences, RNG outcomes associated with your account | Platform gameplay |
| Technical Data | IP address, device type and OS, browser type and version, screen resolution, login timestamps, session duration, referral URL | Automatic — platform access |
| Communications Data | Live chat transcripts, support ticket content, email correspondence, any documents you submit to support or KYC review | Support interactions |
| Responsible Gaming Data | Deposit and loss limit settings, cool-off and self-exclusion requests, session time alert configurations | Account settings |
3.3 pph8 does not collect sensitive personal data (as defined under R.A. 10173) beyond what is strictly required for identity verification and responsible gaming compliance — specifically: government-issued ID numbers required for KYC, and self-exclusion status required for responsible gaming purposes.
The purposes for which pph8 processes your information.
4.1 pph8 uses your personal data for the following purposes:
The lawful grounds pph8 relies on to process your data.
5.1 Under the Philippine Data Privacy Act of 2012, pph8 processes your personal data on the following lawful bases:
Who receives your data and under what conditions.
pph8 does not sell, rent, or otherwise commercially transfer your personal data to any third party for marketing or commercial purposes. Full stop.
6.1 pph8 may share your personal data with the following categories of third parties, solely for the purposes set out in Section 4:
6.2 All third-party service providers engaged by pph8 who process personal data on pph8's behalf are contractually required to: (a) process data only for the specific purpose authorised by pph8; (b) maintain appropriate technical and organisational security measures; and (c) comply with the Philippine Data Privacy Act of 2012 and applicable NPC regulations.
How pph8 uses cookies and similar technologies on the platform.
7.1 pph8 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the platform. The following categories of cookies are used:
7.2 pph8 does not use third-party advertising or tracking cookies that share your browsing behaviour with external advertising networks.
7.3 You may manage or delete cookies through your browser settings. Note that disabling essential cookies will prevent normal platform operation — you will not be able to log in or play games with essential cookies blocked.
How pph8 protects your personal information.
pph8 maintains technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure.
8.1 Technical security measures implemented by pph8 include: 256-bit SSL/TLS encryption for all data transmitted between your device and pph8 servers; AES-256 encryption for sensitive data stored at rest; role-based access controls limiting data access to authorised personnel with a documented operational need; two-factor authentication on all pph8 internal systems; and continuous monitoring for security threats and anomalous access patterns.
8.2 Organisational security measures include: mandatory data protection training for all pph8 personnel; written data processing agreements with all third-party processors; regular security audits and vulnerability assessments; and an incident response procedure for data breaches.
8.3 In the event of a personal data breach that is likely to result in harm to your rights and freedoms, pph8 will notify you and the National Privacy Commission (NPC) in accordance with the breach notification obligations under the Data Privacy Act of 2012 and applicable NPC circulars, within 72 hours of becoming aware of the breach where feasible.
8.4 No data transmission or storage system can be guaranteed to be 100% secure. While pph8 takes every reasonable precaution, you transmit data to pph8 at your own risk for the portion of transmission outside pph8's control (e.g., your own device, network, or internet service provider). pph8 strongly recommends that Players use unique, strong passwords and enable two-factor authentication on their pph8 Accounts.
How long pph8 keeps your personal data.
9.1 pph8 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law and regulatory obligation. The following general retention periods apply:
| Data Category | Retention Period | Rationale |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | PAGCOR compliance; AML obligations under Philippine law |
| Financial Transaction Records | 10 years from transaction date | AMLC reporting obligations; BIR tax record requirements |
| KYC Documents | Duration of account + 5 years | Regulatory KYC record-keeping requirements |
| Gaming Activity Data | Duration of account + 3 years | Dispute resolution; responsible gaming monitoring |
| Support Communications | 3 years from last interaction | Complaint resolution; quality review |
| Marketing Preferences | Until opt-out or account closure | Consent management |
9.2 At the end of the applicable retention period, personal data is either securely deleted, anonymised (so that it can no longer be associated with any identifiable individual), or archived in compliance with applicable regulatory requirements. Anonymised aggregate data may be retained indefinitely for analytics purposes.
Rights granted to you under the Philippine Data Privacy Act of 2012.
10.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pph8:
You have the right to be informed of how your personal data is collected, used, stored, shared, and disposed of — which this Policy fulfils.
You have the right to request a copy of all personal data pph8 holds about you, and information about how that data is being processed.
You have the right to request correction of any inaccurate or incomplete personal data pph8 holds about you, subject to identity verification.
You have the right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
You have the right to object to the processing of your personal data for marketing purposes. You may also object to processing based on legitimate interests.
You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.
10.2 To exercise any of the above rights, submit a written request to pph8 via the contact details in Section 14. pph8 will acknowledge your request within five (5) business days and respond substantively within thirty (30) calendar days. Requests to exercise your rights are free of charge unless the request is manifestly unfounded or excessive.
10.3 pph8 may be required to verify your identity before processing certain data rights requests. This is to protect your data from being disclosed to, corrected by, or deleted by unauthorised persons purporting to act on your behalf.
10.4 Certain data rights are subject to limitations — for example, the right to erasure does not apply where pph8 is required by law to retain data (such as financial transaction records retained under AMLC requirements). Where pph8 cannot fully comply with an erasure request due to legal retention obligations, we will inform you of the specific reason and the expected retention period.
pph8 is not available to persons under 21 years of age.
pph8 is strictly for adults aged 21 years and older. PAGCOR mandates a minimum age of 21 for all Philippine-market online gaming platforms. pph8 enforces this through mandatory KYC age verification during account registration.
11.1 pph8 does not knowingly collect personal data from persons under 21 years of age. If pph8 becomes aware that an account has been registered by or on behalf of a minor, that account will be immediately closed, all associated data will be deleted except where retention is required for regulatory reporting, and the matter will be reported to PAGCOR as required.
11.2 If you believe that a person under 21 has registered on pph8, please notify us immediately via the contact details in Section 14.
When and how your data may be transferred outside the Philippines.
12.1 Some pph8 service providers — including cloud infrastructure providers and international game software developers — may process personal data in jurisdictions outside the Philippines. Where personal data is transferred to a third country, pph8 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the requirements of the Philippine Data Privacy Act of 2012.
12.2 Such safeguards include: contractual clauses consistent with NPC-approved model data transfer agreements, processing only with data subject consent where required, and ensuring that recipient organisations are subject to equivalent or stricter data protection laws.
12.3 pph8 will not transfer your personal data to jurisdictions that do not provide adequate legal protection for personal data without first implementing the safeguards described above and notifying you where required by applicable law.
How pph8 communicates updates to this Policy.
13.1 pph8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform operations. The effective date at the top of this Policy will be updated whenever a material change is made.
13.2 Where changes to this Policy are material — meaning they significantly affect how we process your data or your rights as a data subject — pph8 will notify you via the email address registered to your Account at least fourteen (14) days before the changes take effect.
13.3 Your continued use of the pph8 platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the changes, you must close your Account before the effective date of the updated Policy.
How to reach pph8 about data privacy matters.
14.1 For questions, data rights requests, or complaints about how pph8 processes your personal data, please contact the pph8 Data Protection Officer through the following channels:
14.2 If you are not satisfied with pph8's response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC may be contacted through the NPC's official government channels.
14.3 This Privacy Policy was last reviewed and is effective as of 1 January 2026.
pph8 is strictly for adults aged 21 years and older. Gambling involves real financial risk and should be treated as entertainment only. If gambling is negatively affecting your finances, relationships, or mental health, please use the responsible gaming tools available in your pph8 account settings — including deposit limits, loss limits, and self-exclusion.
For more information on responsible gaming tools and support resources, visit the pph8 Responsible Gaming page.
With 256-bit encryption, KYC-verified accounts, and full compliance with Philippine data privacy law, pph8 keeps your personal information protected. Ready to play? For adults 21 and above only.
Explore pph8 Casino