Privacy Policy

million88 is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its implementing rules and regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

This policy describes: (a) what categories of personal data million88 collects from you; (b) the purposes for which that data is used; (c) the legal basis for each processing activity; (d) with whom your data may be shared; (e) how long your data is retained; (f) the security measures in place to protect your data; and (g) the rights you have over your personal data and how to exercise them.

By registering an account with million88 or by continuing to use the million88 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the practices described in this policy, please discontinue your use of the platform and contact our support team to close your account.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for the personal information of million88 players and users is the operator of the million88 platform ("million88," "we," "us," or "our"). As the data controller, million88 determines the purposes for which personal data is collected and the means by which it is processed.

million88 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. The DPO can be contacted through the support channel detailed in Section 14.

Where million88 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or cloud hosting services — those providers act as data processors under written data processing agreements that impose obligations consistent with the Data Privacy Act.

million88 collects personal data across the following categories. The specific data collected depends on how you interact with the platform:

Sensitive Personal Information

Identity document data (including copies of government IDs) is classified as sensitive personal information under the Data Privacy Act. Such data is collected only for the purposes of KYC identity verification and regulatory compliance, is subject to heightened security controls, and is retained only for the period required by applicable law.

million88 does not collect sensitive personal information relating to health, sexual orientation, political opinion, religious beliefs, or criminal records unless required to do so by a specific legal obligation.

million88 uses personal data collected from players and users for the following purposes:

• Account Management: To create, maintain, and administer your million88 account, including processing login authentication, managing account settings, and communicating service updates.
• Identity Verification (KYC): To verify your identity and confirm that you meet the eligibility requirements to use the platform, including the minimum age of 21 years as required by PAGCOR regulations.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, bank transfer, USDT, and other supported payment methods, and to maintain accurate financial records.
• Game Operation and Integrity: To provide casino games, maintain accurate game records, resolve game disputes, and ensure the integrity of all game outcomes.
• Regulatory Compliance: To comply with Anti-Money Laundering (AML) obligations under Republic Act No. 9160, PAGCOR licensing requirements, BSP financial regulations, and other applicable Philippine laws.
• Fraud and Security: To detect, prevent, and investigate fraudulent activity, account compromise, money laundering, collusion, and other prohibited conduct.
• Responsible Gaming: To monitor gaming behavior, administer responsible gaming tools (deposit limits, self-exclusion), and identify signs of problem gambling behavior that may require intervention.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance.
• Marketing: To send you promotional offers, bonus notifications, and information about platform updates — only where you have opted in to receive such communications, or where we have a legitimate interest to do so subject to your right to opt out.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the platform experience for all Filipino players.

Under the Data Privacy Act of 2012, every processing activity conducted by million88 is based on at least one of the following lawful grounds:

• Contractual Necessity: Processing required to enter into and perform the contract between you and million88, including account operation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with obligations under Philippine law, including AML, KYC, PAGCOR, and BSP regulatory requirements.
• Legitimate Interest: Processing necessary for million88's legitimate business interests, such as fraud prevention, security monitoring, and platform improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing activities where you have given specific, informed consent — primarily marketing communications. You may withdraw consent at any time.
• Vital Interest: In exceptional circumstances where processing is necessary to protect your vital interests or those of another person.

million88 does not sell, rent, or trade your personal data to third parties. We share personal data only in the circumstances described below and only to the extent necessary for the stated purpose:

Service Providers (Data Processors)

We engage third-party service providers to help deliver the platform. These include KYC and identity verification providers, payment processors (GCash, PayMaya, bank partners), cloud infrastructure providers, game studios, fraud detection services, and customer support software vendors. All service providers operate under data processing agreements that prohibit them from using your data for their own purposes.

Regulatory and Law Enforcement Authorities

million88 is required by Philippine law to share certain data with PAGCOR (for gaming licensing oversight), the Anti-Money Laundering Council (AMLC), the Bangko Sentral ng Pilipinas (BSP), the National Privacy Commission (NPC), and other competent authorities upon lawful request or as mandated by applicable regulation. Such disclosures are made in compliance with data minimization principles.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of the million88 business, personal data held may be transferred to the acquiring entity, provided that the acquirer is bound by a privacy policy offering protections equivalent to this one. Players will be notified of any such transfer and provided the opportunity to close their accounts if they do not wish their data to be transferred.

No Third-Party Marketing Sharing

Your personal data is never shared with third parties for their own marketing purposes. million88 sends marketing communications solely on behalf of million88 and does not permit third parties to use your contact details for independent marketing activities.

million88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Specific retention periods are as follows:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following permanent account closure, as required by AML regulations under Republic Act No. 9160.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with BSP and AMLC recordkeeping requirements.
• KYC Documents: Government ID documents and verification records retained for five (5) years following account closure or as required by PAGCOR and AMLC.
• Game History: Detailed game session logs retained for a minimum of two (2) years for dispute resolution and audit purposes.
• Customer Support Records: Support communications retained for two (2) years from the date of last interaction.
• Technical Logs: Server and access logs retained for twelve (12) months for security and fraud prevention purposes.
• Marketing Data: Retained until you withdraw your marketing consent or request deletion, subject to overriding legal retention obligations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original data. Where anonymization is used, the resulting anonymized data may be retained for analytical purposes without time limit.

million88 implements comprehensive technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the million88 platform is encrypted using TLS 1.3 with 256-bit AES encryption — the same standard used by Philippine banks and financial institutions.
• Encryption at Rest: Personal data and financial records stored on million88 servers are encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to million88 staff who require it for their specific job functions. All staff with data access undergo regular privacy and security training. Access is governed by role-based access controls and logged for audit purposes.
• Two-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication. Players are encouraged to enable 2FA on their accounts for additional protection.
• Penetration Testing: million88 conducts regular security assessments and penetration testing by qualified third-party cybersecurity specialists to identify and remediate vulnerabilities.
• Incident Response: million88 maintains a documented data breach response procedure. In the event of a breach affecting personal data, the procedure triggers immediate containment, investigation, and — where legally required — notification to the NPC and affected players within 72 hours.

Under Republic Act No. 10173 (the Philippine Data Privacy Act), you have the following rights with respect to your personal data held by million88. These rights are subject to certain limitations where legal obligations or legitimate interests override them.

To exercise any of these rights, please contact the million88 Data Protection Officer via the support channels in Section 14. We will respond to verified data subject requests within thirty (30) days of receipt, as required by the Data Privacy Act. Where requests are complex or numerous, this period may be extended by a further sixty (60) days with prior notification.

If you believe that million88 has not complied with your data subject rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which can be reached through the NPC's official website.

million88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, analyze platform usage, and detect fraud.

Essential Cookies

These cookies are necessary for the platform to function correctly. They maintain your login session, store your currency and language preferences, and support security features such as CSRF protection. Essential cookies cannot be disabled without impairing your ability to use the platform.

Analytics Cookies

With your consent, million88 uses analytics tools to collect aggregated information about how players use the platform — pages visited, features used, session durations, and navigation patterns. This data helps us improve the platform experience. Analytics cookies do not identify you personally.

Security and Fraud Prevention Cookies

million88 uses cookies and device fingerprinting techniques to detect and prevent fraudulent activity, including the detection of multiple accounts from the same device, automated bot behavior, and unauthorized login attempts. These cookies are necessary for platform security and cannot be disabled.

Managing Cookies

You can manage non-essential cookie preferences through the million88 cookie preference center. You can also control cookies through your browser settings. Note that disabling cookies may affect the functionality of certain platform features.

The million88 platform is strictly intended for adults aged 21 and above, as required by PAGCOR regulations governing online gaming in the Philippines. million88 does not knowingly collect personal data from persons under the age of 21.

If million88 discovers or is notified that personal data has been collected from a person under 21, the relevant account will be immediately suspended, all personal data associated with the account will be deleted (subject to any applicable legal retention obligations), and any funds will be returned to the depositing payment method.

Some of million88's service providers — including cloud infrastructure, game studios, and payment processing partners — may be located outside of the Philippines. Where personal data is transferred to recipients in other countries, million88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the Data Privacy Act of 2012.

Safeguards for international transfers may include: (a) standard contractual clauses approved by the National Privacy Commission; (b) binding corporate rules; or (c) transfers to countries that the NPC has recognized as providing an adequate level of data protection.

You may request information about the specific safeguards applicable to any particular international transfer of your data by contacting the Data Protection Officer through the channels detailed in Section 14.

million88 may update this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable Philippine law, or changes in the platform's features and services. The "Last Updated" date at the top of this policy will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — million88 will notify you by: (a) displaying a prominent notice on the platform; (b) sending a notification to your registered email address; or (c) both. Your continued use of the platform following the effective date of a revised policy constitutes your acknowledgment of the updated terms.

You are encouraged to review this Privacy Policy periodically to stay informed of how million88 protects your personal information.

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by million88, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the chat widget on the million88 platform. For data subject rights requests, please indicate in your message that your query is a data privacy matter.
• Email: [email protected] — please use the subject line "Data Privacy Request" and include your registered username. Do not include sensitive personal information in the email body.

million88 will acknowledge receipt of data subject rights requests within five (5) business days and will provide a substantive response within thirty (30) days, or within ninety (90) days for complex requests with prior notification.