p898 Privacy Policy

1 Introduction

p898 ("p898," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who access and use the p898 online gaming platform, including our website at p898.app, mobile applications, and all associated services (collectively, the "Platform").

This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by p898. This Policy applies to all users of the Platform, including registered players, visitors, and prospective players based in the Philippines and elsewhere.

p898 processes personal data in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). Where applicable, p898 also observes internationally recognized data protection principles.

By accessing the Platform or registering a p898 account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, p898 acts as the Personal Information Controller in respect of the personal data collected through the Platform.

p898 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with applicable data protection laws and this Policy. You may contact the p898 DPO using the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

p898 collects the following categories of personal data from players and Platform users:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth and age verification information
• Residential address (including city, province, and postal code)
• Philippine mobile number
• Email address
• Government-issued ID type and number (e.g., PhilSys ID, passport, driver's licence, UMID)

3.2 Financial Data

• GCash or PayMaya mobile wallet number
• Bank account details (BPI, BDO, Metrobank, UnionBank) where provided for withdrawal purposes
• Transaction history, including deposit amounts, withdrawal requests, and payment method used
• Source of funds documentation where required for AML compliance

3.3 Gaming & Account Data

• p898 username and account ID
• Gaming history, including games played, wagers placed, wins, and losses
• Bonus and promotion usage history
• Responsible gaming settings, including deposit limits and self-exclusion records
• Customer support communications and complaint records

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, login timestamps, and Platform navigation data
• Cookie identifiers and similar tracking technologies (see Section 8)

4 How We Collect Your Data

p898 collects personal data through the following means:

• Direct collection: Information you provide when registering a p898 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from licensed KYC service providers; fraud prevention data from anti-fraud partners; payment transaction data from GCash, PayMaya, and banking partners.
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies in connection with our legal compliance obligations.

5 How We Use Your Personal Data

p898 uses the personal data we collect for the following purposes:

p898 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

6 Legal Basis for Processing

p898 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the p898 Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with Philippine legal and regulatory obligations, including AML reporting, KYC verification, and PAGCOR licensing requirements.
• Legitimate interests: Processing necessary for p898's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent, such as for direct marketing communications. You may withdraw consent at any time by contacting p898 support.

7 Data Sharing & Disclosure

p898 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Licensed third-party providers that assist p898 in verifying player identities and documents.
• Fraud prevention and security partners: Service providers that help p898 detect and prevent fraudulent activity on the Platform.
• Game software providers: Third-party game studios and platform providers whose games are offered on p898, to the extent necessary for game operation and dispute resolution.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants engaged by p898 under obligations of professional confidentiality.

All third-party service providers engaged by p898 are required to process personal data only on p898's instructions and in accordance with applicable data protection laws. p898 does not authorize any third party to use your personal data for their own independent purposes.

8 Cookies & Tracking Technologies

p898 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and analyze Platform usage. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming configurations.
• Analytics cookies: Collect anonymized data about how players navigate the Platform to help p898 improve user experience. No personally identifiable information is included in analytics data.
• Security cookies: Used to detect and prevent fraudulent login attempts and unauthorized account access.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the p898 Platform, including your ability to log in and play games.

p898 does not use third-party advertising cookies or cross-site tracking technologies that share your data with external advertising networks.

9 Data Retention

p898 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active p898 account, plus a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act of 2001 (as amended).
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session for dispute resolution and regulatory audit purposes.
• Customer support records: Retained for three (3) years from the date of resolution of each support interaction.
• Technical and usage data: Retained in anonymized or aggregated form for up to two (2) years for analytics purposes.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded players, as required by responsible gaming obligations.

Upon expiry of the applicable retention period, p898 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

10 Data Security

p898 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and p898 servers.
• Encryption of sensitive data fields (including financial data and government ID numbers) at rest in p898 databases.
• Role-based access controls ensuring that p898 staff can only access personal data necessary for their specific job functions.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security specialists.
• Two-factor authentication (2FA) for player accounts and all p898 internal systems.
• Incident response procedures to detect, investigate, and notify affected players and the NPC of any personal data breach within the timeframes required by the DPA.

While p898 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your p898 account credentials.

11 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by p898:

• Right to be informed: The right to know what personal data p898 collects about you and how it is processed.
• Right of access: The right to request a copy of the personal data p898 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to p898's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe p898 has violated your data privacy rights.

To exercise any of the above rights, please contact the p898 Data Protection Officer using the details in Section 15. p898 will respond to all verified data subject requests within fifteen (15) business days of receipt, as required by the DPA.

Please note that certain rights may be limited where p898 is required to retain or process your data to comply with legal obligations, including AML and PAGCOR regulatory requirements.

12 Children's Privacy

The p898 Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. p898 does not knowingly collect personal data from individuals under the age of 21.

If p898 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and return any deposited funds in accordance with applicable regulations.

If you believe that a minor has registered a p898 account, please contact our support team immediately so that we can take appropriate action.

13 International Data Transfers

p898 primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines, including game software providers and technical infrastructure partners.

Where personal data is transferred outside the Philippines, p898 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual data processing agreements incorporating the NPC's standard contractual clauses, or transfers to jurisdictions recognized by the NPC as providing adequate data protection.

By using the p898 Platform, you consent to the transfer of your personal data outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

14 Changes to This Privacy Policy

p898 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, p898 will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the p898 Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how p898 protects your personal data.

15 Contact Us & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by p898, please contact our Data Protection Officer:

• Live Chat: Available 24/7 through the p898 Platform
• Email (DPO): [email protected]
• General Support: [email protected]

p898 will acknowledge all privacy-related enquiries within three (3) business days and endeavor to resolve them within fifteen (15) business days.

If you are not satisfied with p898's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.