pb88 Privacy Policy

Introduction

pb88 (referred to in this document as "pb88", "we", "us", or "our") is committed to protecting the privacy and personal data of every individual who interacts with the pb88 online gaming platform available at pb88.bio ("Platform"). This Privacy Policy is issued in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission of the Philippines ("NPC").

This Privacy Policy applies to all personal information collected, processed, stored, and shared by pb88 in connection with the registration, operation, and management of player accounts on the pb88 Platform. It covers all channels through which pb88 collects personal data, including the website, mobile browser access, customer support interactions, and payment processing activities.

By accessing the Platform or creating a pb88 account, you confirm that you have read, understood, and agree to the processing of your personal information as described in this Privacy Policy. If you do not agree with any portion of this Policy, you should not use the pb88 Platform and should contact our support team to arrange account closure.

Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, pb88 is the Personal Information Controller ("PIC") responsible for determining the purposes and means of processing your personal data in connection with the pb88 Platform.

pb88 may engage third-party Personal Information Processors ("PIPs") — such as KYC verification providers, payment gateway operators, and customer support platform vendors — to process personal data on pb88's behalf and strictly in accordance with pb88's instructions and applicable data protection law. These third parties are contractually prohibited from using your personal information for their own independent purposes.

Personal Data We Collect

pb88 collects personal data from you through several means: information you provide voluntarily during registration and account use, information collected automatically when you use the Platform, and information obtained from third-party verification providers during the KYC process. The categories of personal data pb88 collects are described in the table below.

pb88 does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless such information is incidentally contained in a document provided for KYC purposes, in which case only the minimum necessary details are processed.

Purposes of Processing

pb88 processes your personal data only for specified, explicit, and legitimate purposes. The purposes for which pb88 processes personal data are set out below, together with the category of data used for each purpose:

• Account Registration and Management: To create and maintain your pb88 account, including verifying the accuracy of registration information and enabling account access. Uses: Identity Data, Contact Data.
• Identity Verification (KYC/AML Compliance): To comply with obligations under applicable anti-money laundering and know-your-customer regulations, including verification of age (21+ requirement) and source of funds for high-value transactions. Uses: Identity Data, KYC Documents, Financial Data.
• Payment Processing: To facilitate deposits to and withdrawals from your pb88 account via GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven Cliqq, USDT TRC20, and Coins.ph. Uses: Financial Data, Identity Data.
• Gameplay and Platform Operation: To provide access to live casino games, slots, bingo, jackpot games, and WL live games; to record and display your game history; and to resolve game disputes. Uses: Gaming Activity Data, Technical Data.
• Fraud Prevention and Security: To detect, investigate, and prevent unauthorized account access, fraudulent transactions, bonus abuse, and multi-accounting. Uses: Technical Data, Financial Data, Gaming Activity Data.
• Responsible Gaming: To monitor gaming patterns, enforce player-set deposit limits and self-exclusion requests, and comply with responsible gaming obligations. Uses: Gaming Activity Data, Financial Data.
• Customer Support: To respond to your queries, complaints, and account assistance requests submitted via live chat, email, or any other support channel. Uses: Communications Data, Identity Data, Account Data.
• Legal and Regulatory Compliance: To fulfill pb88's obligations under Philippine law, including responding to lawful requests from regulatory authorities and law enforcement agencies. Uses: All categories as required.
• Service Improvement: To analyze aggregated, anonymized usage data in order to improve Platform performance, game selection, and user experience. Uses: Technical Data, Gaming Activity Data (anonymized and aggregated only).

Legal Basis for Processing

pb88 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Consent: Where you have given free, specific, informed, and explicit consent to the processing of your personal data — for example, for optional marketing communications or for the use of facial recognition during enhanced KYC verification.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and pb88 — including account creation, game access, payment processing, and withdrawal fulfillment.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to pb88 as a controller — including KYC/AML obligations under Republic Act No. 9160 and PAGCOR's regulatory requirements.
• Legitimate Interests: Where processing is necessary for pb88's legitimate interests — such as fraud detection, account security monitoring, responsible gaming analysis, and Platform improvement — provided these interests are not overridden by your rights and freedoms.

Data Sharing and Third-Party Disclosure

pb88 does not sell, rent, or lease your personal data to any third party. pb88 may share your personal data with third parties only in the following circumstances:

• KYC and Identity Verification Providers: Third-party service providers that assist pb88 in verifying the identity and age of registered users. These providers receive only the minimum data necessary to complete the verification process and are contractually prohibited from using it for any other purpose.
• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven (Cliqq), and cryptocurrency network processors receive transaction-level data necessary to execute deposits and withdrawals. Each processor operates under its own applicable privacy and data security standards.
• Game Content Providers: Licensed third-party game studios (including live dealer operators) may receive a pseudonymous player identifier and session token to facilitate your access to their game content. Full personal identity data is not transmitted to game providers.
• Customer Support Platforms: pb88 may use third-party live chat and ticketing platforms to deliver customer support. Communications data processed through these platforms is subject to contractual data protection obligations.
• Regulatory Authorities and Law Enforcement: pb88 will disclose personal data to competent Philippine government authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement agencies — where required by law, court order, or other lawful process.
• Fraud Prevention and Security Networks: pb88 may share minimal identification data with industry fraud prevention databases to identify and prevent multi-accounting, bonus abuse, and financial fraud.

Data Retention

pb88 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Following the expiry of the applicable retention period, pb88 will securely delete or anonymize your personal data in a manner that prevents its reconstruction or re-identification.

Security Measures

pb88 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, and unlawful disclosure. The security measures employed by pb88 include, but are not limited to:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and pb88's servers.
• Encryption of stored sensitive data, including KYC documents, financial data, and account credentials, using industry-standard encryption algorithms.
• Role-based access controls limiting personal data access to authorized pb88 personnel whose job functions require such access.
• Two-factor authentication (2FA) available to all registered players as an optional but strongly recommended account security measure.
• Continuous monitoring of login activity and automated alerts for suspicious access patterns, including access from unrecognized devices or locations.
• Regular internal security assessments and periodic third-party security reviews of pb88's data handling infrastructure.
• Contractual data processing agreements with all third-party processors containing security obligations appropriate to the sensitivity of the data shared.

Cookies and Tracking Technologies

pb88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Cookies that are strictly necessary for the operation of the Platform — including session management cookies that keep you logged in during an active gaming session and security cookies that enable fraud detection mechanisms. These cookies cannot be disabled without preventing the Platform from functioning correctly.
• Functional Cookies: Cookies that remember your preferences — such as your preferred language, display settings, and last-used game category — in order to provide a more personalized and efficient user experience across visits.
• Analytics Cookies: Cookies that collect anonymized, aggregated data about how users interact with the Platform — including pages visited, features used, and session duration — used exclusively by pb88 for internal Platform improvement purposes. No individual-level profiling is conducted.

pb88 does not use third-party advertising cookies or behavioral targeting cookies on the Platform. You may manage or delete cookies through your browser settings at any time; however, disabling essential cookies will impair your ability to use the Platform.

Cross-Border Data Transfers

pb88 may transfer your personal data to third-party service providers whose servers or operations are located outside the Philippines, including game content providers, KYC verification platforms, and cloud infrastructure providers. All such cross-border transfers are carried out in compliance with Section 21 of the Data Privacy Act of 2012 and are subject to appropriate safeguards, which may include:

• Standard contractual data protection clauses requiring the recipient to maintain a level of data protection at least equivalent to that provided under the DPA.
• Verification that the recipient country or organization offers adequate data protection standards as determined by pb88 in consultation with its Data Protection Officer.
• Your explicit consent where required for specific transfer scenarios not covered by contractual or legal safeguards.

pb88 maintains a record of all cross-border data transfers as part of its Data Processing Register and makes this information available to the National Privacy Commission upon request.

Minors and Age Restriction

The pb88 Platform is strictly for individuals who are 21 years of age or older. pb88 does not knowingly collect personal data from individuals under the age of 21. The date of birth collected during registration is used to verify that the minimum age requirement is met before account activation.

Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pb88. These rights may be exercised by contacting pb88's Data Protection Officer using the details in Section 15.

pb88 will respond to verified data subject requests within 15 business days of receipt. Requests may be subject to identity verification to confirm that the request is made by the account holder. In some cases, pb88 may be unable to fully satisfy a data erasure request where the data is subject to a mandatory legal retention obligation.

Complaints and Escalation

If you have a concern about how pb88 has handled your personal data, we encourage you to contact our Data Protection Officer in the first instance, using the contact details in Section 15. pb88 will investigate and respond to privacy complaints within 15 business days of receipt.

If you are not satisfied with pb88's response to your complaint, or if you believe that pb88 has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. The NPC is the independent regulatory body responsible for enforcing the DPA in the Philippines.

Changes to This Privacy Policy

pb88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. Material changes to this Privacy Policy — those that significantly affect your rights or the way in which pb88 processes your personal data — will be communicated to registered users via email notification and/or a prominent notice on the Platform at least 14 days before the change takes effect.

Non-material changes, such as corrections of typographical errors, updates to contact details, or clarifications that do not alter the substance of the Policy, may be made without advance notice. The effective date displayed at the top of this Policy reflects the date of the most recent revision.

Your continued use of the pb88 Platform following notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not accept a material change, you should cease using the Platform and contact pb88 support to request account closure before the change takes effect.

Contact — Data Protection Officer

All data privacy inquiries, data subject rights requests, and privacy complaints should be directed to pb88's designated Data Protection Officer. pb88 is committed to handling all privacy-related communications with confidentiality and within the timeframes required by applicable law.

When submitting a data subject rights request to pb88, please include your registered username or account email address, a clear description of your request, and a copy of a valid government-issued ID for identity verification purposes. pb88 will not process requests that cannot be linked to a verified account holder.