million88 Privacy Policy

million88 ("we," "us," or "our") operates the online casino platform accessible at https://million88.vip (the "Platform"). We are committed to protecting the personal data of every player who registers and plays on the million88 platform.

This Privacy Policy applies to all personal data collected through the million88 Platform, including data collected during account registration, identity verification, gameplay, financial transactions, customer support interactions, and any other use of our services.

By creating a million88 account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the million88 Platform.

This Privacy Policy should be read together with the million88 Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

2.1 For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, million88 acts as the Personal Information Controller in respect of the personal data collected through the Platform.

2.2 As Personal Information Controller, million88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

2.3 Where million88 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and customer support platforms — those third parties act as Personal Information Processors and are contractually bound to process data only in accordance with million88's instructions and applicable Philippine law.

3.1 million88 collects the following categories of personal data from players:

3.2 million88 does not collect sensitive personal information as defined under the Data Privacy Act — such as health data, political opinions, or religious beliefs — unless specifically required by law or with your explicit consent.

4.1 million88 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including IP addresses, device identifiers, browser information, and session data via cookies and similar tracking technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money-laundering screening services; and payment data from GCash, PayMaya, and banking partners, where necessary to process your transactions.

4.2 All data collected by million88 is obtained through lawful means. We do not purchase personal data from data brokers or other third-party data aggregators.

5.1 million88 processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account registration and management — to create and maintain your million88 account, verify your identity, and provide access to the Platform. Legal basis: Performance of contract.
• Payment processing — to process deposits and withdrawals via GCash, PayMaya, and bank transfer. Legal basis: Performance of contract.
• KYC and identity verification — to verify your age (21+), identity, and payment method ownership in compliance with PAGCOR requirements and anti-money-laundering regulations. Legal basis: Legal obligation.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform. Legal basis: Legitimate interest / Legal obligation.
• Responsible gaming compliance — to monitor gameplay patterns, enforce deposit limits, and implement self-exclusion requests in accordance with PAGCOR responsible gaming guidelines. Legal basis: Legal obligation / Legitimate interest.
• Customer support — to respond to your enquiries, complaints, and support requests. Legal basis: Performance of contract / Legitimate interest.
• Marketing and promotions — to send you information about million88 promotions, bonuses, and new games, where you have consented to receive such communications. Legal basis: Consent.
• Platform improvement — to analyse usage patterns and improve the million88 Platform, game library, and user experience. Legal basis: Legitimate interest.
• Legal and regulatory compliance — to comply with applicable Philippine laws, PAGCOR regulations, and court orders. Legal basis: Legal obligation.

5.2 Where million88 relies on your consent as the legal basis for processing — particularly for marketing communications — you have the right to withdraw that consent at any time by contacting us or updating your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6.1 million88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

• Payment processors: GCash, PayMaya / Maya, and participating Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the financial data necessary to process your transactions;
• KYC and identity verification providers: Third-party identity verification services receive the documents and data necessary to complete your KYC verification;
• Fraud prevention and AML screening services: Anti-money-laundering and fraud detection providers receive transaction and identity data as required by Philippine law;
• Game software providers: Game providers may receive anonymised or pseudonymised gameplay data for the purpose of game performance monitoring and RNG auditing;
• Customer support platforms: Our customer support tools may process your contact and communications data to facilitate support interactions;
• Regulatory authorities: PAGCOR and other Philippine government agencies may receive data as required by law, court order, or regulatory directive;
• Law enforcement: Philippine law enforcement agencies may receive data where required by a valid legal process or where disclosure is necessary to prevent or investigate criminal activity.

6.2 All third-party processors engaged by million88 are contractually required to maintain the confidentiality and security of your personal data and to process it only for the purposes specified by million88.

7.1 million88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

7.2 The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money-laundering record-keeping requirements;
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction, as required by Philippine AML regulations;
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Gameplay data: Retained for the duration of your account and for up to three (3) years following account closure for dispute resolution and regulatory compliance purposes;
• Customer support communications: Retained for up to three (3) years following the resolution of the relevant support interaction;
• Marketing consent records: Retained for the duration of your consent and for up to two (2) years following withdrawal of consent.

7.3 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with million88's data disposal procedures.

8.1 million88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the million88 Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Two-factor authentication (2FA) options for player accounts;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the Platform infrastructure;
• Secure data centres with physical access controls and environmental safeguards.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, million88 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

8.3 While million88 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your million88 account credentials and for notifying us immediately if you suspect unauthorised access to your account.

9.1 million88 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support security functions. A cookie is a small text file placed on your device when you visit the Platform.

9.2 million88 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality;
• Functional cookies: Remember your preferences such as language settings, display options, and login state to provide a more personalised experience;
• Analytics cookies: Collect anonymised data about how players use the Platform — such as pages visited, session duration, and navigation paths — to help us improve the Platform;
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats on the Platform.

9.3 You may manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the million88 Platform, including logging in to your account.

9.4 million88 does not use third-party advertising cookies or cross-site tracking technologies that share your data with external advertising networks.

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by million88:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy;
• Right of access: You have the right to request a copy of the personal data million88 holds about you, along with information about how it is being processed;
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest;
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

10.2 To exercise any of the above rights, please contact the million88 Data Privacy Officer at [email protected]. We will respond to all verified data privacy requests within fifteen (15) business days. We may require you to verify your identity before processing your request.

10.3 Please note that certain rights are subject to limitations. For example, we may be unable to delete data that we are legally required to retain under Philippine AML regulations or PAGCOR requirements. Where we are unable to fulfil a request in full, we will explain the reason in our response.

11.1 The million88 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. million88 does not knowingly collect personal data from individuals under the age of 21.

11.2 As part of the account registration and KYC verification process, million88 requires all players to confirm their date of birth and to provide a valid government-issued identification document. Accounts found to belong to individuals under 21 years of age will be immediately suspended and all associated personal data will be handled in accordance with applicable law.

11.3 If you believe that a minor has registered an account on the million88 Platform or that we have inadvertently collected personal data from a minor, please contact us immediately at [email protected] so that we can take prompt corrective action.

12.1 In the course of operating the million88 Platform, your personal data may be transferred to and processed in countries outside the Philippines — for example, where our technology infrastructure, game software providers, or KYC verification partners are located in other jurisdictions.

12.2 Where personal data is transferred outside the Philippines, million88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include contractual data protection clauses, adequacy assessments, or other mechanisms recognised by the National Privacy Commission.

12.3 By using the million88 Platform, you consent to the transfer of your personal data to other countries as described in this section, subject to the safeguards described above.

13.1 million88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements.

13.2 Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how we process your personal data — million88 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

13.3 The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Continued use of the million88 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

14.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the way million88 handles your personal data, please contact our Data Privacy Officer:

14.2 If you are not satisfied with million88's response to your data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.

14.3 This Privacy Policy was last reviewed and updated on January 1, 2026. All previous versions of the million88 Privacy Policy are superseded by this document.