pb888 Privacy Policy

pb888 is a Philippines-focused online gaming and sports betting platform accessible at pb888.bio. The company that operates pb888 (hereinafter the "Company", "we", "us", or "our") acts as the Personal Information Controller (PIC) as defined under Republic Act No. 10173 (the Philippine Data Privacy Act of 2012) for all personal data collected from registered members and website visitors.

As a licensed gaming operator under PAGCOR oversight, pb888 is additionally subject to data governance obligations under PAGCOR regulatory circulars, the Anti-Money Laundering Act (RA 9160 as amended), and Bangko Sentral ng Pilipinas (BSP) guidelines applicable to electronic payment processing.

pb888 collects personal data in the categories described below. Collection is limited to what is proportionate and necessary for the stated processing purpose. We do not collect sensitive personal information — such as health data, political opinions, or religious beliefs — beyond what is strictly required by applicable law or regulatory compliance obligations.

pb888 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, depositing via GCash or PayMaya, requesting withdrawals, completing responsible gaming forms, or contacting our support team.
• Automated collection: Technical data collected automatically via cookies, session logs, server logs, and analytics when you access pb888 from any device. See Section 7 for full cookie details.
• Third-party sources: Identity and verification data received from government ID verification service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud detection partners used to fulfil our KYC and AMLA obligations.
• Publicly available sources: In limited circumstances and only as required for fraud or AMLA compliance — such as cross-referencing names against AMLC or PAGCOR exclusion lists.

Under the Philippine Data Privacy Act (RA 10173), pb888 relies on one or more of the following lawful criteria for each category of data processing:

1. Contractual necessity: Processing required to fulfil our agreement with you as a registered pb888 member — including account creation, deposit processing, game access, and withdrawal settlement.
2. Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), BSP payment regulations, and tax reporting obligations under Philippine law.
3. Legitimate interest: Processing necessary for fraud detection, platform security, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.
4. Consent: Processing for optional activities such as marketing communications and personalized game recommendations. Consent for marketing may be withdrawn at any time without affecting your use of the pb888 platform.

pb888 uses collected personal data for the following specific, declared purposes:

• Account management: Creating and maintaining your pb888 account, processing login requests, and managing account settings and preferences.
• Identity and age verification: Confirming that you are a natural person aged 21 or above, as required by PAGCOR regulations, prior to granting full account access and processing your first withdrawal.
• Payment processing: Processing deposits and withdrawal requests via GCash, PayMaya, and Philippine bank channels; reconciling transactions; and resolving payment disputes.
• Responsible gaming compliance: Monitoring for problem gambling indicators, applying self-exclusion restrictions, and delivering session time and deposit limit alerts you have activated.
• Fraud and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and unauthorized account access. Technical data and gaming activity patterns are analysed for anomalies.
• Regulatory reporting: Filing mandatory reports with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies as required by law.
• Customer support: Responding to queries, processing complaints, and providing service-related communications.
• Service improvement: Analysing aggregated, anonymized platform usage data to improve game offerings, platform performance, and user experience for Filipino players.
• Marketing (with consent only): Sending promotional offers, bonus notifications, and pb888 product updates via SMS, email, or push notification — only where you have opted in and not subsequently withdrawn consent.

pb888 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is shared with external parties only in the following circumstances, and only to the extent necessary for the stated purpose:

• Payment service providers: GCash (G-Xchange, Inc.), PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process deposits and withdrawals. These entities have their own privacy policies and regulatory obligations under BSP oversight.
• Game providers: Pragmatic Play, PG Soft, Evolution Gaming, Jili Games, NetEnt, and other licensed game studios receive technical session data necessary to deliver their games via the pb888 platform. All providers operate under data processing agreements with pb888.
• KYC and identity verification providers: Third-party KYC service providers receive government ID data and selfie images solely for the purpose of identity and age verification. Verification data is not retained by these providers beyond the verification transaction.
• Regulatory authorities: PAGCOR, the AMLC, the National Privacy Commission, the Bureau of Internal Revenue, and other Philippine government agencies may receive data pursuant to lawful requests, regulatory requirements, court orders, or mandatory reporting obligations.
• Professional advisors: Legal counsel, auditors, and compliance consultants under binding professional confidentiality obligations.

pb888 uses cookies and similar tracking technologies to support platform functionality, improve security, and understand how Filipino players interact with the site. The following cookie categories are in use:

• Strictly necessary cookies: Required for basic platform functionality — session authentication, security tokens, load balancing. These cannot be disabled without impairing your ability to use pb888.
• Functional cookies: Remember your preferences such as language settings, preferred game category, and responsible gaming tool configurations across sessions.
• Analytics cookies: Collect anonymized, aggregated data about page visits, session duration, and navigation patterns. Used to improve platform performance. No personally identifiable information is included in analytics data.
• Security cookies: Used for fraud detection and bot prevention. Help distinguish genuine players from automated access attempts.

pb888 does not deploy advertising tracking pixels or retargeting cookies linked to third-party advertising networks. You may manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use pb888.

pb888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Philippine law. The following retention periods apply:

• Account and KYC records: Retained for a minimum of five (5) years from account closure, as required under the Anti-Money Laundering Act (RA 9160) and PAGCOR record-keeping obligations.
• Transaction records: Deposit and withdrawal records retained for five (5) years from transaction date for AMLA and BIR compliance.
• Gaming activity logs: Retained for three (3) years for dispute resolution, fraud prevention, and responsible gaming monitoring purposes.
• Customer support records: Email and chat transcripts retained for two (2) years from the date of the last communication unless a dispute is pending.
• Marketing preference records: Consent records retained for two (2) years following consent withdrawal, to demonstrate compliance with DPA requirements.

Upon expiry of the applicable retention period, personal data is securely destroyed or irreversibly anonymized, except where an ongoing legal obligation or active dispute requires continued retention.

pb888 implements the following technical and organizational security measures to protect your personal data:

• Transport encryption: All data transmitted between your device and pb888 is encrypted using TLS 1.2 or higher (HTTPS). HTTP connections are automatically redirected to HTTPS.
• Data at rest encryption: Sensitive data fields — including government ID references and payment account identifiers — are encrypted at rest using AES-256 encryption.
• Access controls: Personal data is accessible only to pb888 personnel whose roles require it. Role-based access controls and audit logs are maintained.
• Password security: Passwords are stored as salted hashes using industry-standard algorithms. pb888 does not store plaintext passwords.
• Incident response: pb888 maintains a data breach response plan consistent with NPC requirements. In the event of a notifiable personal data breach, affected members and the National Privacy Commission will be notified within seventy-two (72) hours of confirmed breach detection.

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights as a data subject. These rights may be exercised by contacting the pb888 DPO at [email protected] with the subject line "Data Subject Rights Request."

pb888 does not knowingly collect personal data from individuals under the age of twenty-one (21). The platform is strictly intended for adults aged 21 and above as required by Philippine gaming regulations and PAGCOR licensing conditions.

pb888 employs automated age verification checks at account registration and requires KYC documentation confirming date of birth prior to first withdrawal. These checks are in addition to, not instead of, the member's own representation of eligibility at the time of registration.

Some of pb888's technical service providers — including international game studios and cloud infrastructure providers — operate servers located outside the Republic of the Philippines. When personal data is transferred to entities in other jurisdictions, pb888 ensures that appropriate safeguards are in place, including:

• Data processing agreements containing standard contractual clauses consistent with NPC guidance on cross-border data flows.
• Transfers only to recipients who have implemented adequate data protection standards.
• Minimization of the personal data included in cross-border transfers — technical game logs, for example, contain session identifiers rather than full identity data.

pb888 does not transfer financial transaction data, government ID records, or KYC documentation outside of the Philippines except where required to fulfil a specific legal obligation with the approval or direction of a competent Philippine authority.

pb888 reviews and updates this Privacy Policy periodically to reflect changes in Philippine law, NPC guidance, PAGCOR regulatory requirements, and our own data processing practices. The version number and effective date at the top of this document always reflect the current version.

For material changes to this policy — changes that meaningfully affect your rights or the way your data is processed — pb888 will notify you via the email address registered to your account at least seven (7) calendar days before the changes take effect. Non-material changes, such as typographic corrections or clarifications that do not alter your rights, may take effect immediately upon publication.

Your continued use of pb888 following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to material changes, you may close your account before the effective date of the amended policy.

For any question, request, or concern related to this Privacy Policy or the processing of your personal data by pb888, please contact us using the details below. pb888 is committed to responding promptly and transparently to all data privacy inquiries.

• Data Protection Officer (DPO) — General inquiries: Contact [email protected] with the subject line "DPO Inquiry."
• Data Subject Rights Request: Email [email protected] with the subject line "Data Subject Rights Request — [Account Username]." Include a clear description of the right you wish to exercise and, where applicable, attach supporting documentation.
• Data Breach Notification: If you believe you have experienced a security incident involving your pb888 account data, contact [email protected] immediately with the subject line "Security Incident."
• NPC Complaints: If your concern is not resolved to your satisfaction after engaging pb888's DPO, you may escalate to the National Privacy Commission of the Philippines at privacy.gov.ph.

This Privacy Policy is effective as of January 1, 2026 (Version 2.4) and supersedes all prior versions. The governing language of this document is English. In the event of any conflict between an English version and any translated version, the English version shall prevail.