pb88 Privacy Policy

This Policy applies to all personal information processed by pb88 in connection with the operation of the pb88 Platform, including information collected through the website at pb88.bet, the pb88 mobile-optimised interface, Customer Support communications, and all associated services including the pb88 Casino, sports betting, bingo, slot games, wallet, and promotional activities.

pb88 is committed to complying with all applicable Philippine data protection laws, including the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations (IRR), and all relevant issuances of the National Privacy Commission (NPC). pb88 has registered its data processing activities with the NPC as required under the DPA.

This Policy does not apply to the data practices of third-party payment processors (such as GCash, PayMaya, BPI, BDO, or Metrobank), game content providers, or any other external organisations whose privacy practices are governed by their own policies. pb88 is not responsible for the privacy practices of these third parties.

pb88 processes your personal data on the following legal grounds as recognised under the Data Privacy Act of 2012 and its IRR:

• Consent: Where you have provided your express, informed, and freely given consent to the processing of your personal data for a specific purpose. You may withdraw consent at any time, subject to the consequences described in Section 10 of this Policy.
• Contractual Necessity: Processing is necessary for the performance of the contract between you and pb88 (i.e., the Terms and Conditions), including account management, transaction processing, customer support, and service delivery.
• Legal Obligation: Processing is required to comply with applicable Philippine law, including PAGCOR licensing obligations, Anti-Money Laundering Act (RA 9160) requirements, and National Internal Revenue Code obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests pursued by pb88, including fraud prevention, information security, platform optimisation, and responsible gaming programme administration, provided these interests are not overridden by your rights and freedoms.

pb88 collects the following categories of personal data, limited to what is necessary for the purposes described in Section 5:

pb88 collects personal data through the following channels:

• Direct Provision: Information you provide when registering an account, completing KYC verification, updating your profile, requesting a withdrawal, contacting Customer Support, or participating in promotions.
• Automated Technical Collection: Technical data collected automatically when you access the pb88 Platform, including IP address, device identifiers, browser information, and session data through server logs, cookies, and similar tracking technologies (see Section 9).
• Transaction Processing: Financial data generated when you make a deposit or withdrawal via GCash, PayMaya, or Philippine bank transfer. pb88 receives transaction reference data from payment processors but does not store full payment account credentials.
• Third-Party Verification: In limited circumstances where required for KYC compliance, pb88 may obtain identity verification data from accredited third-party verification providers operating under applicable Philippine data protection law.
• Platform Interaction: Gaming activity data generated automatically through your use of Games on the pb88 Platform, including game rounds, bet history, and session information.

pb88 processes your personal data for the following specific, explicit, and legitimate purposes:

1. Account Registration and Management: Creating and maintaining your pb88 Account, authenticating your identity at login, and managing your account preferences and settings.
2. Identity Verification (KYC): Verifying your identity and age (21+) in compliance with PAGCOR licensing requirements and Philippine anti-money laundering regulations under RA 9160.
3. Payment Processing: Processing deposits and withdrawals in Philippine Peso via GCash, PayMaya, BPI, BDO, Metrobank, and USDT, and maintaining transaction records as required by law.
4. Service Delivery: Providing access to pb88 Casino games, sports betting, bingo, slots, and all other Platform features included in your registered account.
5. Customer Support: Responding to your queries, complaints, and support requests through the pb88 live chat and email support channels.
6. Regulatory Compliance: Meeting ongoing PAGCOR licensing obligations, Anti-Money Laundering Act requirements, reporting obligations to the Anti-Money Laundering Council (AMLC), and tax reporting obligations under the National Internal Revenue Code.
7. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct as defined in the pb88 Terms and Conditions.
8. Responsible Gaming: Administering deposit limits, loss limits, self-exclusion programmes, and other responsible gaming tools; identifying players who may be displaying signs of problem gambling in accordance with PAGCOR guidelines.
9. Platform Improvement: Analysing aggregated, anonymised usage data to improve the pb88 Platform, game lobby, payment experience, and customer support quality.
10. Communications: Sending you service-related notifications (including transaction confirmations, security alerts, and account updates) and, where you have provided consent, promotional communications about pb88 bonuses and new games.

pb88 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your personal data may be shared with the following categories of recipients only to the extent necessary and permitted under applicable law:

• PAGCOR: As required under pb88's gaming licence, PAGCOR has regulatory access to player data, transaction records, and compliance documentation. pb88 is legally obligated to provide this information upon request.
• Anti-Money Laundering Council (AMLC): pb88 is required to report suspicious transactions and maintain records in accordance with RA 9160, RA 10365 (AMLA Amendments), and AMLC regulations.
• Bureau of Internal Revenue (BIR): Winnings and financial records may be reported to the BIR as required under the National Internal Revenue Code for applicable withholding tax purposes.
• Payment Processors: Financial transaction data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and USDT processors to the extent necessary to process your deposit and withdrawal requests.
• KYC Verification Providers: Identity document data may be shared with accredited identity verification service providers engaged by pb88 to assist with KYC compliance, who are bound by data processing agreements consistent with the DPA.
• IT and Hosting Providers: Technical data may be accessible to pb88's hosting and infrastructure service providers who provide the servers and cloud services that run the Platform, subject to data processing agreements.
• Law Enforcement Authorities: pb88 will disclose personal data to competent Philippine authorities (NBI, PNP, prosecutors) where legally required by court order, subpoena, or applicable Philippine law.

pb88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

Where retention is based on legal obligation (particularly AMLC and PAGCOR requirements), pb88 cannot accede to deletion requests for the relevant data categories until the mandatory retention period has elapsed.

pb88 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the pb88 Platform is encrypted using 256-bit TLS/SSL protocols.
• Encryption at Rest: Sensitive personal data stored on pb88 servers, including KYC documents and financial data, is encrypted at rest using industry-standard encryption.
• Access Controls: Access to personal data within pb88 is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo data privacy training and are bound by confidentiality obligations.
• Two-Factor Authentication: pb88 offers and encourages two-factor authentication (2FA) for all player accounts to protect against unauthorised access.
• Penetration Testing: pb88's technical infrastructure undergoes regular security assessments and penetration testing by qualified third-party security professionals.
• Segregated Player Funds: Player PHP balances are held in accounts segregated from pb88 operating capital, providing financial protection independent of data security measures.

While pb88 employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials as described in the pb88 Terms and Conditions.

pb88 uses cookies and similar technologies (including web beacons and local storage) on the Platform. Cookies are small data files stored on your device that help pb88 deliver a functional and consistent user experience.

The following categories of cookies are used by pb88:

• Strictly Necessary Cookies: Required for the Platform to function correctly. These include session authentication cookies that keep you logged in to your pb88 Account during a browsing session. These cookies cannot be disabled.
• Functional Cookies: Enable pb88 to remember your preferences, such as your preferred language, lobby layout, and game display settings. Disabling these cookies may affect Platform functionality.
• Performance and Analytics Cookies: Collect anonymised, aggregated data about how players use the pb88 Platform — which pages are visited most frequently, where errors occur, and how the lobby is navigated. This data is used solely to improve the Platform. pb88 does not use third-party advertising network cookies.
• Security Cookies: Help pb88 detect and prevent fraud, account takeovers, and suspicious automated access attempts.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your pb88 Account. For guidance on managing cookies in your specific browser, refer to your browser's help documentation.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pb88:

To exercise any of the above rights, submit a written request to the pb88 Data Protection Officer (see Section 16). pb88 will respond within the timeframes prescribed by the Data Privacy Act.

The pb88 Platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing Philippine online gaming operators. pb88 does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted during the KYC process for all registered players. Where pb88 discovers or reasonably believes that personal data has been provided by an individual under the age of 21, pb88 will immediately suspend the associated Account, refund any deposited funds via the original payment method, permanently delete the personal data collected from that individual (to the extent permitted by legal retention requirements), and report the matter to PAGCOR if required.

pb88 primarily stores and processes personal data within the Republic of the Philippines. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game content certification bodies operating in other jurisdictions.

Any cross-border transfer of personal data by pb88 is conducted in compliance with Section 21 of the Data Privacy Act and the NPC's rules on cross-border data transfers. Specifically, pb88 ensures that:

• The receiving country or organisation affords an adequate level of data protection consistent with the DPA; or
• The transfer is covered by a data sharing agreement or contractual clauses providing equivalent protections to those required under Philippine law; or
• The transfer is necessary for the performance of a contract between pb88 and the data subject, such as payment processing via international payment networks.

In the event of a personal data breach that poses a real risk of harm to affected data subjects, pb88 will comply with the breach notification requirements under the Data Privacy Act and NPC Circular 16-03 (Personal Data Breach Management). This includes:

• Notifying the National Privacy Commission within 72 hours of becoming aware of the breach, where feasible.
• Notifying affected data subjects without undue delay when the breach is likely to result in a high risk to the rights and freedoms of those individuals.
• Documenting all breaches in pb88's internal breach register, regardless of whether notification is required.
• Implementing immediate remediation measures to contain the breach and prevent further unauthorised access.

Breach notifications to affected pb88 players will be sent to the email address registered on the Player's Account. Players are encouraged to keep their registered email address current to ensure timely receipt of any such communications.

The pb88 Platform integrates with third-party payment services including GCash, PayMaya, BPI, BDO, and Metrobank to facilitate PHP deposits and withdrawals. When you use any of these payment services, you are subject to the privacy policy and terms of service of the respective provider in addition to this Policy.

pb88 does not store your full GCash PIN, PayMaya credentials, or online banking login details. Payment authentication is handled directly between you and your payment provider through their secure interfaces. pb88 receives only a transaction reference, amount, and status confirmation necessary to update your pb88 Wallet balance.

pb88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR requirements, or pb88's data processing activities. Material changes to this Policy will be communicated to registered Players via email notification to the registered account address and/or a prominent notice on the pb88 Platform at least seven (7) days prior to the effective date of the change.

Non-material changes (such as typographical corrections or clarifications that do not alter the substance of the Policy) may be made without prior notice. The "Effective Date" at the top of this document will always reflect when the most recent substantive revision took effect.

Your continued use of the pb88 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any revised terms, you should discontinue use of the Platform and may request account closure in accordance with the pb88 Terms and Conditions.

pb88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO can be contacted through the following channels for all privacy-related inquiries, data subject rights requests, and complaints:

• Live Chat: Available 24/7 via the pb88 Platform — state that your inquiry is a data privacy matter and ask to be connected to the Data Protection Officer.
• Email: support@pb88.bet — include "Data Privacy Request" in the subject line of your email.
• Response Time: pb88 will acknowledge all DPO inquiries within five (5) business days and provide a substantive response within fifteen (15) business days.

If you are not satisfied with pb88's response to your privacy concern, you may file a complaint with the National Privacy Commission (NPC) of the Philippines through its official complaint filing mechanism.

For responsible gaming support and self-exclusion requests, please visit /responsible-gaming or contact pb88 Customer Support directly.