id8888 Privacy Policy

The data controller responsible for your personal information collected through the id8888 platform is the operator of id8888.asia, a PAGCOR-licensed online gaming company operating in the Republic of the Philippines (hereinafter "id8888," "we," "us," or "our").

id8888 determines the purposes and means of processing personal data collected through the id8888 platform, in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the directives of the National Privacy Commission (NPC) of the Philippines.

For all data-related inquiries, access requests, or complaints, please contact our designated Data Protection Officer (DPO) using the contact details provided in Section 16 of this Policy.

This Privacy Policy applies to all personal information collected, processed, stored, or transmitted by id8888 in connection with:

• Registration of an id8888 player account;
• Use of any game, feature, or service available on the id8888 platform;
• Financial transactions including deposits and withdrawals via GCash, Maya, BPI, BDO, and other approved payment channels;
• KYC identity verification procedures;
• Communications with id8888 customer support;
• Participation in promotions, tournaments, or the VIP programme;
• Visits to id8888.asia, including passive data collection via cookies and analytics tools;
• Engagement with any marketing communications from id8888 where consent has been given.

This Policy does not apply to third-party websites, applications, or services linked from the id8888 platform. Those third parties maintain their own privacy practices, for which id8888 accepts no responsibility.

id8888 collects personal data through three channels: information you provide directly, information generated automatically by your use of the platform, and information obtained from third-party service providers (such as KYC verification agencies and payment processors).

id8888 processes your personal data for the following specific, declared, and legitimate purposes:

1. Account Creation and Management: Creating, authenticating, and administering your id8888 player account, including password recovery and account security monitoring.
2. KYC and Age Verification: Verifying your identity and confirming that you meet the minimum age requirement of 21 years as mandated by PAGCOR and Philippine gambling law.
3. Payment Processing: Processing GCash, Maya, and bank deposits and withdrawals, reconciling transactions, and maintaining accurate financial records for your account.
4. Game and Platform Services: Delivering the gaming services, recording game outcomes, calculating and crediting winnings, and maintaining your transaction history.
5. Anti-Money Laundering (AML) Compliance: Monitoring transactions for patterns consistent with money laundering or terrorist financing, as required under the Philippine Anti-Money Laundering Act (AMLA) and PAGCOR regulations.
6. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, account takeover attempts, bonus abuse, and other prohibited conduct.
7. Responsible Gaming: Monitoring gaming activity for signs of problem gambling behavior, enforcing deposit limits and self-exclusion restrictions, and maintaining records of responsible gaming tool usage.
8. Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance in Tagalog and English.
9. PAGCOR Regulatory Reporting: Providing required reports, data, and documentation to PAGCOR in connection with id8888's licensed operations.
10. Marketing Communications (with consent): Sending promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications.
11. Platform Improvement: Analysing aggregated usage data to improve the id8888 platform, game lobby, and user experience.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, id8888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contractual obligations to you under the id8888 Terms and Conditions — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, the Data Privacy Act itself, and National Privacy Commission directives.
• Legitimate Interests: Processing necessary for id8888's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for direct marketing communications and optional analytics participation. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Vital Interests: In exceptional circumstances, processing may be necessary to protect a vital interest — for example, where a player discloses a personal safety emergency during a support interaction.

id8888 does not sell, rent, or trade your personal information to third parties for their own independent commercial purposes. Personal data is shared only in the following limited circumstances:

• Payment Processors: GCash (Globe Fintech Innovations), Maya Philippines, GrabPay, and partner banks (BPI, BDO, Metrobank) receive the minimum necessary financial information to process deposit and withdrawal transactions.
• KYC Verification Providers: Certified identity verification service providers receive your ID document images and selfie photograph solely for the purpose of completing the KYC process required by PAGCOR.
• Game Software Providers: Software studios and live dealer platform providers (such as Pragmatic Play, Evolution Gaming, and others) receive anonymised or pseudonymised gaming session data to deliver game services. These providers do not receive your personally identifiable information.
• PAGCOR: As id8888's licensing authority, PAGCOR may receive periodic reports, player data extracts, or specific records as required under the terms of our operating licence.
• Law Enforcement and Regulatory Authorities: Where required by Philippine law — including AMLC (Anti-Money Laundering Council) reports, court orders, NBI or PNP requests, or NPC investigations — id8888 will disclose relevant personal data.
• Professional Advisers: Lawyers, auditors, and accountants engaged by id8888 may access personal data on a need-to-know basis, subject to strict professional confidentiality obligations.

id8888 uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device when you visit a website. id8888 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication (keeping you logged in to your id8888 account), load balancing, and security token management. These cookies cannot be disabled without preventing core functionality.
• Functional Cookies: Remember your preferences such as language settings, last-played game category, and display settings. These enhance your experience but are not required for basic platform function.
• Analytics Cookies: Collect aggregated, anonymised data about how visitors use the id8888 platform — which pages are visited most frequently, where users encounter errors, and how long sessions last. This data is used exclusively to improve the platform. Analytics cookies are opt-in.
• Security Cookies: Support fraud detection and bot-prevention systems that protect all id8888 users from malicious activity.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair or prevent access to the id8888 platform. Disabling functional or analytics cookies will not affect your ability to play but may reduce personalisation features.

id8888 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to longer retention where required by law or regulatory obligation:

• Account and Identity Data: Retained for the duration of the active account relationship, plus a minimum of five (5) years following account closure — as required under Philippine AML regulations for record-keeping of customer due diligence.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Philippine Anti-Money Laundering Act and PAGCOR reporting requirements.
• KYC Documentation: Retained for five (5) years following the last transaction on the account, or longer where an AML investigation is ongoing.
• Gaming Activity Records: Retained for three (3) years from the date of each session, for audit and dispute resolution purposes.
• Customer Support Communications: Retained for two (2) years from the date of the interaction, or longer if the communication is relevant to an unresolved dispute.
• Technical and Behavioural Data (Analytics): Retained in anonymised or aggregated form after twelve (12) months; identifiable technical logs are retained for up to six (6) months for security monitoring purposes.
• Marketing Consent Records: Retained for the duration of the consent and for three (3) years thereafter, as evidence of consent obtained.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction procedures. Backup systems are purged on a rolling basis consistent with these retention periods.

id8888 implements a comprehensive set of technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data in transit between your device and id8888 servers is encrypted using TLS 1.3 with AES-256 — the same standard used by Philippine online banking. Sensitive data at rest (including KYC documents and financial records) is encrypted using AES-256 with per-record encryption keys.
• Access Controls: Access to personal data within id8888's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is role-based, logged, and auditable.
• Two-Factor Authentication: All internal id8888 administrative accounts require multi-factor authentication. High-risk player account actions (large withdrawals, contact detail changes) trigger SMS OTP verification.
• Penetration Testing and Vulnerability Scanning: The id8888 platform undergoes regular independent security assessments including penetration testing, OWASP Top 10 vulnerability scanning, and code security reviews.
• Data Pseudonymisation: Where technically feasible, data used for analytics and platform improvement is pseudonymised to reduce privacy risk.
• Staff Training: All id8888 personnel with access to personal data receive regular data privacy training covering their obligations under RA 10173 and id8888's internal data handling procedures.
• Incident Response Plan: id8888 maintains a documented data breach incident response plan, with defined roles, notification timelines, and containment procedures.

As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal information held by id8888:

To exercise any of the above rights, submit a written request to id8888's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." Include your full name, registered account username, and a description of your request. id8888 will respond within fifteen (15) business days. We may require identity verification before processing certain requests to protect against unauthorised access to your data.

id8888 implements mandatory KYC age verification for all accounts. Any account where age verification cannot be completed, or where a player is found to be under 21 years of age, will be immediately closed. All deposits will be returned and all winnings forfeited.

If id8888 discovers that personal data has been inadvertently collected from a person under 21, that data will be immediately deleted and any associated account will be closed. Parents or guardians who believe their child has registered an account on id8888 should contact us immediately at [email protected] to request account closure and data deletion.

With your separate, explicit consent, id8888 may send you direct marketing communications by SMS, email, or in-platform notification. These communications include promotional offers, bonus availability notices, new game announcements, and VIP programme updates.

Your consent to receive marketing communications is entirely voluntary and is not a condition of registering an account or using the id8888 platform. You may withdraw your marketing consent at any time using any of the following methods:

• Account Settings: Navigate to Notification Preferences in your id8888 account settings and toggle off the relevant communication types;
• Unsubscribe Link: Click the unsubscribe link included in the footer of any id8888 marketing email;
• SMS Opt-Out: Reply STOP to any marketing SMS received from id8888;
• Contact Support: Request opt-out via Live Chat or by emailing [email protected].

Opt-out requests are processed within 48 hours. Note that withdrawing marketing consent does not affect your receipt of transactional communications — id8888 will continue to send essential account-related notifications (such as withdrawal confirmations, OTP messages, and security alerts) regardless of marketing preferences.

Some of the third-party service providers used by id8888 — including certain game software providers, cloud infrastructure providers, and KYC technology vendors — may process data on servers located outside the Philippines. Where such cross-border transfers occur, id8888 ensures that:

• The receiving country provides an adequate level of data protection comparable to Philippine standards, or
• Appropriate contractual safeguards are in place — including data processing agreements incorporating standard contractual clauses or equivalent protections — between id8888 and the recipient, and
• The transfer is limited to the minimum data necessary for the specific service being provided.

id8888 does not transfer your personal data to jurisdictions that fail to provide adequate data protection without implementing appropriate supplementary safeguards. All cross-border transfers are documented in id8888's data processing register and are subject to regular review by our Data Protection Officer.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, id8888 will act as follows, in compliance with RA 10173 and NPC Circular 16-03:

• NPC Notification: id8888 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of a breach that is likely to result in harm, providing details of the nature, scope, and likely consequences of the breach.
• Affected Individual Notification: Where the breach is likely to result in a real risk of serious harm to affected data subjects, id8888 will notify those individuals without undue delay using their registered contact details (SMS and/or email).
• Notification Content: Breach notifications to affected individuals will include a plain-language description of what occurred, what data was involved, likely consequences, and the steps id8888 is taking to address the breach and prevent recurrence.
• Containment and Investigation: Upon discovery of a breach, id8888 will immediately activate its incident response plan to contain the breach, preserve evidence, assess scope, and implement remediation measures.

id8888 may update this Privacy Policy from time to time in response to changes in applicable Philippine law, NPC guidance, PAGCOR regulations, business practices, or data processing technology. The "Last Updated" date at the top of this document will be revised whenever material changes are made.

Material changes — those that significantly affect how we collect, use, or share your data, or that modify your privacy rights — will be communicated to registered account holders by SMS and/or email at least seven (7) days before they take effect. Non-material clarifications and formatting updates may be made without separate notification.

Your continued use of the id8888 platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with a revised policy, you must cease using the platform and may close your account in accordance with the process described in our Terms & Conditions.

id8888 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. For any data privacy matters — including access requests, correction requests, withdrawal of consent, or complaints — please contact the DPO using the details below:

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the regulatory authority responsible for enforcing RA 10173. NPC complaint procedures are available on the NPC's official government website.

This Privacy Policy was last reviewed and updated in January 2026 and is effective for all id8888 accounts and platform users as of that date.