Privacy Policy

1 Introduction

gb888 is committed to protecting the privacy and personal data of all players and visitors to the Platform. We understand that trust is the foundation of any good relationship — and that's especially true when it comes to how we handle your personal information.

This Policy applies to all personal data collected through the gb888 website at gb888.one, any associated mobile-optimised interfaces, and all communications between gb888 and its players, including email, live chat, and support interactions. It covers data collected from players based in the Philippines and from any other jurisdiction where gb888 operates.

gb888 operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. We take our obligations as a personal information controller seriously and have implemented appropriate technical and organisational measures to safeguard your data.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, gb888 acts as the personal information controller in respect of the personal data collected through the Platform. This means gb888 determines the purposes and means of processing your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer (DPO) at:

3 Personal Data We Collect

3.1 Registration Data

When you create a gb888 account, we collect the following information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including city, province, and postal code)
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

To comply with PAGCOR requirements and anti-money laundering (AML) regulations, gb888 may collect:

• Government-issued photo identification (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account)
• Selfie or live photo for identity verification purposes

3.3 Financial Data

When you make deposits or withdrawals, we collect transaction records including payment method details (e.g., GCash mobile number, BPI/BDO account reference), transaction amounts, dates, and transaction IDs. gb888 does not store full card numbers or banking credentials — these are handled directly by our licensed payment processors.

3.4 Gaming Activity Data

We collect records of your gaming activity on the Platform, including games played, bets placed, wagers won or lost, session durations, and bonus usage. This data is used to operate the Platform, resolve disputes, and comply with regulatory reporting requirements.

3.5 Technical & Device Data

When you access the Platform, we automatically collect certain technical information, including your IP address, browser type and version, device type and operating system, referring URL, pages visited, and session timestamps. This data is used for security monitoring, fraud prevention, and Platform optimisation.

3.6 Communications Data

If you contact gb888 via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments, for quality assurance, dispute resolution, and regulatory compliance purposes.

4 How We Collect Your Data

gb888 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or use the Platform.
• From third parties — from identity verification providers, payment processors, fraud prevention services, and regulatory databases, where necessary to verify your identity or comply with legal obligations.

5 How We Use Your Personal Data

gb888 uses your personal data for the following purposes:

• To create and manage your gb888 player account.
• To verify your identity and age (21+) in compliance with PAGCOR regulations.
• To process deposits, withdrawals, and other financial transactions.
• To provide customer support and resolve disputes or complaints.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities.
• To comply with applicable laws, regulations, and PAGCOR licensing requirements.
• To personalise your gaming experience and deliver relevant promotions and offers.
• To send you account-related communications, including transaction confirmations, security alerts, and policy updates.
• To send you marketing communications about gb888 promotions and new games, where you have consented to receive such communications.
• To monitor and improve the performance, security, and functionality of the Platform.
• To enforce our Terms & Conditions and other platform policies.

6 Legal Basis for Processing

gb888 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contract with you (i.e., to operate your gb888 account and provide gaming services).
• Legal obligation — processing required to comply with applicable Philippine laws, PAGCOR regulations, and AML obligations.
• Legitimate interests — processing necessary for gb888's legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your data protection rights.
• Consent — where you have given explicit consent, such as for marketing communications or the use of non-essential cookies.

7 Data Sharing & Disclosure

gb888 does not sell, rent, or trade your personal data. We may share your information with the following categories of third parties only where necessary and lawful:

7.1 Service Providers

gb888 engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO), identity verification providers, cloud hosting services, customer support platforms, and fraud detection services. These providers are contractually bound to process your data only on gb888's instructions and in accordance with applicable data protection laws.

7.2 Regulatory & Law Enforcement Authorities

gb888 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive. gb888 may also report suspicious transactions to the AMLC in compliance with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of gb888's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to this Privacy Policy that may result.

8 Cookies & Tracking Technologies

gb888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following types of cookies:

• Essential cookies — required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Analytics cookies — used to collect anonymised data about how players use the Platform, helping us identify areas for improvement. These are only set with your consent.
• Preference cookies — used to remember your settings and preferences, such as language and display options, to personalise your experience.
• Marketing cookies — used to deliver relevant promotional content within the Platform. These are only set with your explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the Platform. For more information on how to manage cookies, refer to your browser's help documentation.

9 Data Retention

gb888 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Gaming activity logs are retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Customer support communications are retained for two (2) years from the date of the interaction.
• Marketing consent records are retained for the duration of your account and for one (1) year after opt-out.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, gb888 will securely delete or anonymise the data.

10 Data Security

gb888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the gb888 Platform.
• Encrypted storage of sensitive personal data, including passwords (hashed and salted) and identity documents.
• Role-based access controls ensuring that only authorised gb888 personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure.
• 24/7 security monitoring and intrusion detection systems.
• Secure data centres with physical access controls and environmental safeguards.

While gb888 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, gb888 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by gb888:

• Right to be informed — the right to know what personal data gb888 collects about you and how it is used.
• Right of access — the right to request a copy of the personal data gb888 holds about you.
• Right to rectification — the right to request correction of inaccurate or incomplete personal data.
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." gb888 will respond to all verified requests within thirty (30) days of receipt, in accordance with the Data Privacy Act of 2012.

12 Children's Privacy

The gb888 Platform is strictly intended for adults aged 21 years and older, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. gb888 does not knowingly collect personal data from individuals under the age of 21.

If gb888 discovers that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, the data will be deleted, and any funds will be handled in accordance with applicable PAGCOR regulations. If you believe that a minor has registered on the Platform, please contact us immediately at [email protected].

13 International Data Transfers

gb888 primarily processes and stores personal data within the Philippines. In some cases, personal data may be transferred to and processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud detection services.

Where such transfers occur, gb888 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to process your data in accordance with standards equivalent to those required by the Philippine Data Privacy Act of 2012. gb888 will not transfer your personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards.

14 Changes to This Privacy Policy

gb888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, gb888 will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date of the most recent revision will always be displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how gb888 protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by gb888, please contact us through any of the following channels: