bingo888 Privacy Policy

01 Data Controller Information

bingo888 is the data controller responsible for your personal information collected through the bingo888 platform. As data controller, bingo888 determines the purposes and means by which your personal data is processed, subject to the requirements of the Data Privacy Act of 2012 and PAGCOR's regulatory framework.

bingo888 has designated a Data Protection Officer (DPO) in compliance with NPC requirements. Contact details for the bingo888 DPO are provided in Section 12 of this Policy. Players may address all data privacy inquiries, complaints, and subject access requests to the DPO.

02 Legal Basis for Processing

bingo888 processes personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contract performance: Processing necessary to provide gaming services, process deposits and withdrawals, manage your bingo888 account, and fulfill our obligations to you as a registered player;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, Know Your Customer (KYC) requirements, and other applicable Philippine legal obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of bingo888 services where these interests do not override your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies where you have provided express, informed, and freely given consent. You may withdraw this consent at any time.

03 Personal Data We Collect

bingo888 collects personal data through the following means: directly from you during registration and account use; automatically through your use of the platform; and from third parties including payment processors and identity verification services where necessary for KYC compliance.

bingo888 does not collect sensitive personal information beyond what is strictly necessary for KYC compliance and PAGCOR requirements. Where sensitive personal information is collected, additional safeguards are applied in accordance with the Data Privacy Act of 2012.

04 How bingo888 Uses Your Personal Data

bingo888 uses your personal data strictly for the following purposes:

1. Account Registration and Management: Creating, maintaining, and administering your bingo888 player account, including authentication, password management, and account settings;
2. Identity Verification (KYC): Verifying your identity and age (21+) as required by PAGCOR and the Anti-Money Laundering Act of the Philippines;
3. Service Delivery: Providing access to bingo888 gaming products including live bingo, online slots, live casino, fishing games, card games, and sports betting, and processing all associated transactions in Philippine Peso;
4. Payment Processing: Processing deposits via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods, and processing withdrawal requests including GCash payouts;
5. Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the bingo888 platform;
6. Responsible Gaming: Monitoring gaming activity to identify indicators of problem gambling and to administer responsible gaming tools including deposit limits, session controls, and self-exclusion as required by PAGCOR;
7. Legal and Regulatory Compliance: Meeting bingo888's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act of 2012, and other applicable Philippine law;
8. Customer Support: Responding to player inquiries, resolving complaints, and administering dispute resolution;
9. Marketing Communications: Sending promotional offers and bonus information to players who have consented to receive such communications. Players may opt out at any time.

bingo888 does not use your personal data for automated decision-making that produces legal effects without human review, except where required by PAGCOR AML compliance processes.

05 Data Sharing and Disclosure

bingo888 does not sell your personal data to third parties. bingo888 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data processing agreements:

• PAGCOR and Philippine regulatory authorities: Disclosure is mandatory where required by PAGCOR licensing conditions, court order, or applicable Philippine law, including for AMLA reporting obligations;
• Identity verification and KYC service providers: Third-party KYC platforms used to verify government-issued Philippine IDs and process identity documents securely;
• Payment processors: GCash (G-Xchange Inc.), PayMaya, and banking partners necessary to process deposits and withdrawals in Philippine Peso;
• Game content providers: Licensed game providers whose titles are available on the bingo888 platform may receive limited technical session data necessary for game operation;
• IT and infrastructure providers: Cloud hosting and platform infrastructure providers operating under data processing agreements with binding data protection obligations;
• Professional advisors: Legal, accounting, and compliance advisors bound by professional confidentiality obligations.

Where bingo888 transfers personal data outside the Philippines, it ensures that appropriate safeguards are in place in accordance with NPC cross-border data transfer requirements and the Data Privacy Act of 2012.

06 Data Retention

bingo888 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine AML regulations;
• Gaming activity logs: Retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes;
• Marketing consent records: Retained for the period of consent plus three (3) years to demonstrate compliance.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures. Players who have closed their bingo888 accounts may request deletion of non-mandatory data subject to statutory retention obligations.

07 Cookies and Tracking Technologies

The bingo888 platform uses cookies and similar tracking technologies to support platform operation, security, and performance measurement. The following categories of cookies are used:

• Strictly necessary cookies: Required for platform operation including session authentication, security token management, and load balancing. These cannot be disabled without impairing platform functionality;
• Functional cookies: Store player preferences such as language settings, game lobby layout, and login persistence where "Remember Me" is selected;
• Analytics cookies: Collect aggregate data about platform usage patterns to help bingo888 improve performance and user experience. Data collected is pseudonymized;
• Marketing cookies: Used only with your express consent to deliver relevant bingo888 promotional content. These may be disabled at any time through your account settings or browser controls.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the bingo888 platform.

08 Data Security

bingo888 implements technical and organizational security measures appropriate to the sensitivity of your personal data and consistent with NPC security guidelines under the Data Privacy Act of 2012. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bingo888 platform — the same standard used by major Philippine banks including BPI, BDO, and Metrobank;
• Encryption of stored sensitive personal data including government ID numbers and financial account references;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Multi-factor authentication for administrative access to systems containing personal data;
• Continuous security monitoring, intrusion detection, and anomalous login activity alerts;
• Regular security assessments and penetration testing of the bingo888 platform.

09 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bingo888:

• Right to be Informed: The right to know how bingo888 collects, uses, and processes your personal data — as set out in this Privacy Policy;
• Right of Access: The right to obtain confirmation of whether bingo888 holds personal data about you and to receive a copy of that data;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected without undue delay;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where processing is no longer necessary or lawful, subject to statutory retention obligations;
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing communications;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where processing is based on consent or contract performance;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe bingo888 has processed your data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, contact the bingo888 Data Protection Officer as described in Section 12. bingo888 will respond to data subject requests within thirty (30) days of receipt. Requests may require identity verification before processing.

10 Children and Minors

Age verification is a mandatory component of the bingo888 KYC process. No real-money gaming activity is permitted until age has been positively verified through a valid Philippine government-issued identification document. Parents or guardians who believe a minor has registered with bingo888 should contact the bingo888 Data Protection Officer immediately.

11 Policy Updates

bingo888 reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or bingo888's data processing practices. The date of the most recent update is displayed at the top of this document.

Material changes to this Privacy Policy will be communicated to registered players via the mobile number or email address on record prior to the effective date of changes. Continued use of the bingo888 platform following notification of a revised Privacy Policy constitutes acknowledgment of the updated terms. Where changes require fresh consent, bingo888 will obtain this before processing personal data under the revised basis.

12 Contact & Data Protection Officer

For all data privacy inquiries, subject access requests, consent withdrawals, data breach reports, or complaints, please contact the bingo888 Data Protection Officer:

bingo888 aims to acknowledge data privacy requests within five (5) business days and resolve within thirty (30) days. Complex requests may require up to sixty (60) days with notice provided to the requesting party. Players who are not satisfied with bingo888's response to a data privacy complaint may escalate to the National Privacy Commission of the Philippines.