888joy Privacy Policy

This Privacy Policy ("Policy") governs the collection, processing, storage, use, and disclosure of personal data by 888joy ("888joy," "the Platform," "we," "us," or "our") in connection with the operation of the 888joy online gaming and sports betting platform accessible at 888joy.cam and all associated subdomains, mobile-optimized pages, and services (collectively, the "Platform").

888joy is committed to safeguarding the privacy and personal data of all registered Members and visitors to the Platform ("you," "your," or "data subject") in full compliance with the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering an account with 888joy, depositing funds, accessing any game or service, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with the 888joy Terms & Conditions, which are incorporated herein by reference.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 888joy is the Personal Information Controller (PIC) in respect of the personal data collected from Members and visitors to the Platform. As Personal Information Controller, 888joy determines the purposes and means by which personal data is processed.

888joy has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection law. The DPO serves as the primary point of contact for all data privacy inquiries, complaints, and data subject rights requests. Contact details for the 888joy DPO are set out in Section 15 of this Policy.

In circumstances where 888joy engages third-party service providers to process personal data on its behalf (for example, KYC verification providers, payment processors, and game platform operators), those third parties act as Personal Information Processors (PIPs) under the supervision of 888joy. 888joy maintains written data processing agreements with all PIPs to ensure adequate data protection standards are upheld.

888joy collects personal data from you directly (information you provide when registering or using the Platform), automatically (data generated by your interaction with the Platform), and in certain cases from third parties (such as KYC verification partners and payment processors). The categories of personal data collected are as follows:

888joy processes personal data only for clearly defined, legitimate, and documented purposes. The specific purposes for which your personal data is used are as follows:

4.1 Account Management and Platform Access

To create and maintain your 888joy account; to verify your identity during login and account recovery; to communicate important account notices and security alerts; and to enable your access to all Platform features, games, and services.

4.2 Payment Processing and Financial Transactions

To process deposits via GCash, Maya, BPI, BDO, Metrobank, GrabPay, InstaPay, QR Ph, and other supported Philippine payment methods; to process withdrawal requests to your verified payment accounts; to maintain transaction records as required by applicable law; and to investigate and resolve payment disputes.

4.3 Identity Verification and KYC Compliance

To fulfill 888joy's Know Your Customer (KYC) obligations under Philippine anti-money laundering legislation, including the Anti-Money Laundering Act (R.A. 9160) and PAGCOR regulatory requirements. KYC processing involves verification of identity documents, age verification (21+ confirmation), address verification, and source-of-funds assessment for high-value transactions.

4.4 Regulatory and Legal Compliance

To comply with PAGCOR licensing requirements, NPC data privacy obligations, AMLC reporting requirements, Bureau of Internal Revenue (BIR) tax obligations, and any other applicable Philippine laws and regulations governing online gaming operators. 888joy may be required by law or by court order to disclose certain personal data to government authorities.

4.5 Responsible Gaming

To monitor gaming activity for indicators of problem gambling behavior; to implement Member-requested responsible gaming tools (deposit limits, self-exclusion, cooling-off periods); and to comply with 888joy's obligations under PAGCOR's responsible gaming framework.

4.6 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, bonus abuse, and other prohibited activities on the Platform. Technical data including IP addresses, device identifiers, and login patterns are used for security monitoring and anomaly detection.

4.7 Service Improvement and Analytics

To analyze aggregated and anonymized usage data to improve Platform performance, game selection, user experience, and customer support quality. 888joy does not use identified personal data for general market research purposes.

4.8 Customer Support

To respond to your support inquiries, resolve account and payment issues, handle complaints, and maintain records of support interactions for quality assurance and dispute resolution purposes.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 888joy processes personal data on the following legal bases:

• Consent: Processing based on your freely given, specific, informed, and unambiguous consent provided at account registration. You may withdraw consent at any time, subject to the qualifications set out in Section 10 of this Policy.
• Contractual Necessity: Processing necessary for the performance of the contract between you and 888joy (the Terms & Conditions), including account management, payment processing, and game delivery.
• Legal Obligation: Processing required for 888joy to comply with applicable Philippine laws, including KYC obligations under AMLA, PAGCOR licensing requirements, NPC reporting obligations, and BIR tax compliance.
• Legitimate Interests: Processing necessary for 888joy's legitimate interests, including fraud prevention, Platform security, and service improvement, provided such interests are not overridden by your rights and interests.

888joy does not sell, rent, or commercially transfer your personal data to third parties. Personal data is shared only in the following circumstances and only to the extent strictly necessary for the relevant purpose:

6.1 Service Providers and PIPs

888joy shares personal data with carefully vetted third-party service providers acting as Personal Information Processors on 888joy's behalf. These include: KYC identity verification providers; payment processors and e-wallet operators (GCash/GXI, Maya/PayMaya, Inc., Bancnet, and participating banks); game software providers; cloud hosting and data centre operators; fraud detection and security analytics providers; and customer support platform providers. All such providers are bound by contractual data processing agreements that restrict their use of personal data to the stated purpose.

6.2 Regulatory and Law Enforcement Authorities

888joy may disclose personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities where required by law, court order, or valid legal process. Such disclosures are made in strict compliance with applicable law and only to the extent required.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or a portion of 888joy's assets, personal data held by 888joy may be transferred to the acquiring entity, subject to that entity assuming the obligations under this Privacy Policy. Members will be notified of any such transfer and of any material changes to privacy practices that may result.

888joy retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, whichever is the longer period. The following retention periods apply:

• Account and Identity Data: For the duration of the active account relationship plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA record-keeping requirements;
• Financial Transaction Records: Minimum of five (5) years from the date of each transaction, in compliance with AMLA and BIR requirements;
• KYC Documents: For the duration of the account relationship plus five (5) years following closure, or such longer period as required by applicable law;
• Gaming and Wagering Records: Minimum of three (3) years, used for dispute resolution, regulatory reporting, and responsible gaming monitoring;
• Technical and Log Data: Typically twelve (12) months for general security logs; up to five (5) years for logs associated with fraud investigation or legal proceedings;
• Marketing Communications Data: Until you unsubscribe or withdraw consent, after which it is deleted within 30 calendar days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 888joy's data deletion procedures. Anonymized aggregate data may be retained indefinitely for analytics and research purposes as it no longer constitutes personal data.

888joy implements and maintains a comprehensive suite of technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

8.1 Technical Safeguards

• 256-bit SSL/TLS encryption for all data transmitted between your device and 888joy's servers — the same standard used by Philippine commercial banks;
• AES-256 encryption for sensitive personal data stored in 888joy's databases, including identity documents and financial credentials;
• Multi-factor authentication for 888joy administrative system access;
• Web Application Firewall (WAF) and DDoS protection on all production systems;
• Regular penetration testing conducted by independent cybersecurity firms;
• Intrusion detection and monitoring systems operating 24/7.

8.2 Organizational Safeguards

• Role-based access controls ensuring staff access only the personal data necessary for their specific function;
• Mandatory data privacy and security training for all 888joy staff with access to personal data;
• Documented data processing procedures reviewed and updated annually;
• Background checks for staff handling sensitive personal data;
• Non-disclosure agreements with all personnel and service providers.

8.3 Breach Response

In the event of a personal data breach, 888joy's Data Protection Officer will assess the breach within 72 hours of discovery. Where the breach is likely to result in a real risk to the rights and freedoms of affected Members, 888joy will notify the National Privacy Commission and affected Members in accordance with NPC Circular 16-03 and applicable data breach notification requirements.

The 888joy Platform uses cookies and similar tracking technologies to operate the Platform, maintain your session, enhance performance, and analyze usage patterns. A cookie is a small text file stored on your device when you visit the Platform.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for Platform operation, including session management, login authentication, and security. These cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to understand how Members navigate and use the Platform, helping 888joy identify and fix issues and improve user experience. Data collected is aggregated and not used to identify individual users.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations, to personalize your experience.
• Security Cookies: Used to detect and prevent fraudulent activity, account takeovers, and other unauthorized access attempts.

9.2 Managing Cookies

You may control and delete cookies through your browser settings. Most modern browsers (Chrome, Firefox, Safari, Edge) allow you to view, block, and delete cookies from specific websites. Note that disabling strictly necessary cookies will impair or prevent your ability to use the 888joy Platform, including login and payment functionality. 888joy's Platform does not currently respond to browser Do Not Track (DNT) signals.

9.3 No Third-Party Advertising Trackers

888joy does not embed third-party advertising tracking scripts or behavioral profiling cookies on the Platform. No data from your 888joy gaming sessions is shared with advertising networks or used to serve targeted advertisements on third-party websites.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by 888joy. To exercise any of these rights, please contact the 888joy Data Protection Officer using the contact details in Section 15.

888joy will respond to all verified data subject rights requests within fifteen (15) business days of receipt. For complex requests, 888joy may extend this period by a further 15 days with written notification. Some rights may be limited where their exercise would conflict with 888joy's legal obligations — for example, transaction records required to be kept under AMLA cannot be deleted upon request during their mandatory retention period.

The 888joy Platform is not directed at, and is strictly prohibited for, any person under the age of 21 years. 888joy does not knowingly collect personal data from persons under 21 years of age. Age verification is conducted as part of the account registration and KYC process for every 888joy Member.

If 888joy becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will immediately suspend the associated account, initiate an investigation, and securely delete the personal data in question. Parents or guardians who have reason to believe that a minor has registered on the 888joy Platform are requested to contact the 888joy Data Protection Officer immediately using the contact details in Section 15.

In certain circumstances, personal data collected by 888joy may be transferred to, stored in, or processed in countries other than the Philippines — for example, where 888joy's cloud infrastructure providers or game software partners maintain servers in other jurisdictions. Any such transfer is conducted in strict compliance with Section 21 of the Data Privacy Act of 2012, which requires that the recipient jurisdiction or organization provides an adequate level of protection for personal data, or that appropriate contractual safeguards are in place.

Where personal data is transferred outside the Philippines, 888joy ensures that all such transfers are: (a) made pursuant to a binding contract containing data protection obligations equivalent to those under Philippine law; (b) subject to NPC-mandated cross-border transfer safeguards; and (c) limited to personal data strictly necessary for the relevant processing purpose. 888joy maintains a register of all cross-border data transfers, available for inspection by the NPC upon request.

The 888joy Platform may contain links to third-party websites, services, or resources (for example, payment gateway landing pages operated by GCash, Maya, or participating banks). This Privacy Policy applies only to the 888joy Platform and does not govern the privacy practices of any third-party websites or services to which you may navigate from 888joy.

888joy is not responsible for the privacy practices, data security measures, or content of third-party websites. We encourage you to review the privacy policies of any third-party services you access in connection with your use of 888joy's payment facilities or other integrated services. The inclusion of a link to a third-party service on the 888joy Platform does not constitute an endorsement of that party's privacy practices.

888joy reserves the right to update or revise this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. When material changes are made to this Policy, 888joy will notify registered Members by email to their registered address, with a minimum of fourteen (14) calendar days' notice before the revised Policy takes effect, unless a shorter notice period is required for legal or security reasons.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of the 888joy Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you may close your account by contacting 888joy customer support, subject to 888joy's legal data retention obligations.

For all privacy-related inquiries, data subject rights requests, or concerns regarding 888joy's data processing practices, please contact the 888joy Data Protection Officer through the following channels:

• Email (DPO): [email protected] — please use the subject line "Data Privacy Inquiry" or "Data Subject Rights Request"
• Live Chat: Available 24/7 via the support widget on the 888joy Platform — ask to be connected to the Data Privacy team
• Response Time: 888joy aims to acknowledge all data privacy inquiries within 2 business days and provide a substantive response within 15 business days

If you are not satisfied with 888joy's response to your data privacy concern, or if you believe your rights under the Data Privacy Act of 2012 have been violated, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through the NPC's official channels.