plus888 Privacy Policy

About This Policy

This Privacy Policy ("Policy") describes how plus888 ("plus888", "we", "us", "our") collects, uses, stores, shares, and protects the personal information of players and visitors ("you", "your") who access or use the plus888 online casino platform and website at plus888.one (the "Platform").

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal data collected through the Platform, our customer support channels, and any other interactions you have with plus888.

This Policy should be read together with the plus888 Terms & Conditions, which govern your use of the Platform. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

Data Controller

plus888 is the personal information controller responsible for the personal data collected through the Platform. As the personal information controller, plus888 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data privacy laws.

plus888 has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection compliance within the organisation. Contact details for the DPO are provided in Section 15 of this Policy.

Personal Data We Collect

plus888 collects the following categories of personal data from players and Platform visitors:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., passport number, driver's licence number, SSS/UMID number).
• Contact data: Philippine mobile number, email address, and residential address.
• Financial data: GCash or Maya account details, bank account information (for bank transfer transactions), transaction history, deposit and withdrawal records.
• Account data: Username, encrypted password, account preferences, responsible gaming settings, and communication preferences.
• Gaming data: Game history, betting records, session duration, wagering activity, and bonus usage.
• Technical data: IP address, device type, browser type and version, operating system, and session logs collected automatically when you access the Platform.
• Verification data: Copies of government-issued identification documents and proof of address submitted during the KYC (Know Your Customer) verification process.
• Communications data: Records of your interactions with plus888 customer support, including live chat transcripts and email correspondence.

plus888 does not collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for identity verification or legal compliance purposes, and only with your explicit consent where required.

How We Collect Your Data

plus888 collects personal data through the following means:

• Direct collection: Information you provide when registering for a plus888 account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically through cookies, web beacons, and server logs when you access or use the Platform. See Section 9 for more information on cookies.
• Third-party sources: Identity verification data from third-party KYC service providers; fraud prevention data from anti-fraud and anti-money laundering screening services; payment data from GCash, Maya, and banking partners in connection with your transactions.

How We Use Your Personal Data

plus888 uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your plus888 player account, including processing your registration, verifying your identity, and managing your account settings.
• Service delivery: To provide you with access to the games, features, and services available on the Platform, including processing deposits and withdrawals in Philippine Peso.
• Legal and regulatory compliance: To comply with our obligations under Philippine gaming regulations, anti-money laundering (AML) laws, the Data Privacy Act, and any other applicable laws or regulatory requirements, including PAGCOR-related compliance obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer support: To respond to your inquiries, complaints, and support requests.
• Marketing and promotions: To send you information about plus888 promotions, bonuses, and new features, where you have consented to receive such communications. You may withdraw your consent at any time by updating your communication preferences in your account settings.
• Platform improvement: To analyse usage patterns and improve the functionality, performance, and user experience of the Platform.

Legal Basis for Processing

plus888 processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing necessary for the performance of the contract between you and plus888 (i.e., the Terms & Conditions), including account management, service delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, gaming regulations, and tax reporting requirements.
• Legitimate interests: Processing necessary for the legitimate interests of plus888, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Sharing Your Personal Data

plus888 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, and banking partners, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening service providers engaged to assist with identity verification and fraud prevention.
• Game providers: Third-party game software providers whose games are available on the Platform, to the extent necessary for game delivery and dispute resolution.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where required by law or regulation.
• Professional advisers: Legal, accounting, and auditing firms engaged by plus888, subject to professional confidentiality obligations.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers engaged to support the operation of the Platform.

All third parties with whom plus888 shares personal data are required to handle such data in accordance with applicable Philippine data privacy laws and are prohibited from using your data for any purpose other than those specified by plus888.

Data Retention

plus888 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account data: Retained for the duration of your active plus888 account, and for a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and related regulations.
• Identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer support records: Retained for three (3) years from the date of the relevant interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and log data: Retained for up to twelve (12) months from the date of collection, unless required for longer periods for security investigations.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, plus888 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

Cookies and Tracking Technologies

plus888 uses cookies and similar tracking technologies on the Platform to enhance your user experience, analyse Platform usage, and support security functions. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of the Platform, including maintaining your login session and enabling core security features. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits, to personalise your experience on the Platform.
• Analytical cookies: Used to collect aggregated, anonymised data about how players use the Platform, helping plus888 identify areas for improvement. No personally identifiable information is collected through analytical cookies.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats to the Platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. plus888 does not use cookies to serve third-party advertising or to track your activity on other websites.

Data Security

plus888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption of data in transit using Transport Layer Security (TLS) protocols.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting access to personal data to authorised personnel only.
• Regular security assessments, vulnerability scanning, and penetration testing of Platform infrastructure.
• Staff training on data privacy obligations and secure data handling practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, plus888 will notify the National Privacy Commission and affected data subjects in accordance with the timeframes and procedures prescribed under the Data Privacy Act and NPC regulations.

Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by plus888:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as described in this Policy.
• Right of access: The right to request a copy of the personal data plus888 holds about you, along with information about how it is being used.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by plus888.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to plus888's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that plus888 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact plus888's Data Protection Officer using the contact details provided in Section 15. plus888 will respond to all data subject requests within thirty (30) days of receipt, or within such other period as may be prescribed by the NPC.

Please note that certain rights are subject to limitations under applicable law. For example, plus888 may be required to retain certain data for regulatory compliance purposes even where a deletion request is received.

Children's Privacy

The plus888 Platform is strictly intended for individuals who are at least 21 years of age. plus888 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register for or use the Platform.

If plus888 becomes aware that personal data has been collected from an individual under the age of 21, it will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately using the details in Section 15.

Cross-Border Data Transfers

In some cases, plus888 may transfer your personal data to service providers or partners located outside the Philippines, for example in connection with cloud hosting infrastructure or third-party game providers. Any such cross-border transfer of personal data will only be carried out where:

• The recipient country has been assessed as providing an adequate level of data protection; or
• Appropriate safeguards are in place, such as contractual clauses approved by the NPC or equivalent data protection agreements; or
• The transfer is necessary for the performance of your contract with plus888 or for the implementation of pre-contractual measures taken at your request.

plus888 will not transfer your personal data to any jurisdiction that does not provide adequate protections consistent with the Philippine Data Privacy Act.

Changes to This Privacy Policy

plus888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or Platform features. When material changes are made, plus888 will notify registered players via the email address associated with their account and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the Platform following the publication of any amendments constitutes your acknowledgement of the revised Policy. We encourage you to review this Policy periodically to stay informed about how plus888 protects your personal data.

Contact and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by plus888, please contact our Data Protection Officer:

For complaints that cannot be resolved directly with plus888, you have the right to lodge a complaint with the National Privacy Commission of the Philippines: