888joy Privacy Policy

1 Introduction

888joy ("888joy," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the 888joy online gaming platform, accessible at 888joy.org. This Privacy Policy ("Policy") describes how 888joy collects, uses, stores, shares, and protects personal information in connection with your use of our website, games, and related services.

This Policy applies to all registered players, visitors, and any other individuals whose personal data is processed by 888joy in the course of operating the platform. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 888joy acts as the Personal Information Controller in respect of the personal data collected through the 888joy platform.

888joy has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO at any time using the contact details provided in Section 15 of this Policy.

3 Data We Collect

888joy collects personal data from you in the following categories, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city, province, and postal code)
• Email address
• Mobile number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Proof of address documents (e.g., utility bills, bank statements)
• Proof of payment method ownership (e.g., GCash account screenshot, bank statement)
• Selfie or facial image for liveness verification, where required

3.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method details (e.g., GCash mobile number, BPI/BDO account reference, card last four digits)
• Transaction history and account balance records

3.4 Gaming Activity Data

• Games played, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Platform access logs and timestamps

3.6 Communications Data

• Records of your communications with 888joy customer support (live chat transcripts, email correspondence)
• Survey responses and feedback submissions

4 How We Use Your Data

888joy uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Registration & Identity Data
Age and identity verification (KYC)	KYC Data, Registration Data
Processing deposits and withdrawals	Financial & Transaction Data
Delivering gaming services and personalising your experience	Gaming Activity Data, Technical Data
Fraud prevention and security monitoring	All categories
Anti-money laundering (AML) compliance	Financial Data, KYC Data, Transaction Data
Responsible gaming monitoring and intervention	Gaming Activity Data, Registration Data
Customer support and dispute resolution	Communications Data, Account Data
Platform analytics and performance improvement	Technical Data, Gaming Activity Data
Marketing communications (where consent is given)	Registration Data, Gaming Activity Data

888joy will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by applicable law.

5 Legal Basis for Processing

888joy processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration (e.g., account management, payment processing, game delivery).
• Legal obligation: Processing required to comply with applicable Philippine laws, including KYC/AML obligations, gaming regulations, and tax reporting requirements.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent at any time by contacting [email protected].

6 Data Sharing & Disclosure

888joy does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, InstaPay, and PESONet partners, solely to process your financial transactions.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with regulatory obligations.
• Game software providers: Licensed game studios whose titles are available on the 888joy platform, to the extent required to deliver gameplay and resolve disputes.
• IT and hosting providers: Cloud infrastructure and security service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine government agencies, including the National Privacy Commission (NPC) and relevant gaming regulators, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where necessary for legal or compliance purposes.

All third-party service providers who process personal data on behalf of 888joy are required to implement appropriate technical and organisational security measures and to process data only in accordance with 888joy's documented instructions.

7 International Data Transfers

Some of 888joy's service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection, 888joy will implement appropriate safeguards — such as standard contractual clauses approved by the National Privacy Commission — to ensure that your data remains protected to the standard required by Philippine law.

By using the 888joy platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines in accordance with this Policy.

8 Data Retention

888joy retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for three (3) years from the date of each session.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 888joy's data disposal procedures.

9 Cookies & Tracking Technologies

888joy uses cookies and similar tracking technologies (such as web beacons and local storage) on the 888joy.org platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players use the platform to help us improve performance and user experience.
• Marketing cookies: Used only where you have provided explicit consent, to deliver relevant promotional content within the 888joy platform.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 888joy platform.

10 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 888joy:

• Right to be informed: The right to know what personal data 888joy collects and how it is used — as set out in this Policy.
• Right of access: The right to request a copy of the personal data 888joy holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to 888joy's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact 888joy's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond within fifteen (15) business days of receiving your request.

11 Children's Privacy

The 888joy platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. 888joy does not knowingly collect personal data from individuals under the age of 21.

If 888joy becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 888joy platform, please notify us immediately at [email protected].

12 Security Measures

888joy implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• SSL/TLS encryption for all data in transit between your device and 888joy's servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records.
• Multi-factor authentication (MFA) options for player accounts.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments.
• 24/7 intrusion detection and monitoring systems.

Despite these measures, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 888joy will notify the National Privacy Commission and affected players in accordance with the timelines prescribed by Philippine law.

13 Third-Party Links

The 888joy platform may contain links to third-party websites or services (for example, payment provider portals). This Privacy Policy applies solely to the 888joy platform. 888joy is not responsible for the privacy practices of any third-party websites and encourages you to review the privacy policies of any external sites you visit.

14 Changes to This Policy

888joy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, 888joy will notify registered players by email or via a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the 888joy platform following any amendment constitutes your acceptance of the revised Policy.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or 888joy's data practices, please contact our Data Protection Officer:

• Email: [email protected] (subject: "Data Privacy Request")
• Live Chat: Available 8:00 AM – 12:00 MN PST via the 888joy platform
• Chatbot: Available 24/7 for general inquiries

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.