Privacy Policy – by888 Casino

1 Who We Are

by888 (referred to as "by888", "we", "us", or "our") operates the online casino and sports betting platform accessible at by888.biz. by888 is the data controller responsible for personal data processed through the platform. We operate in compliance with Philippine gaming regulations under PAGCOR guidelines and in accordance with the Data Privacy Act of 2012.

This Privacy Policy applies to all registered Users and visitors of the by888 platform, including those accessing the platform from Manila, Cebu, Davao, Quezon City, and any other location in the Philippines or where permitted by applicable law.

2 Personal Data We Collect

by888 collects the following categories of personal data, depending on your interaction with the platform:

by888 does not collect sensitive personal information such as racial or ethnic origin, religious beliefs, political opinions, or health data, except where required for responsible gaming purposes (e.g., self-exclusion due to problem gambling) with your explicit consent.

3 How We Collect Your Data

by888 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions.
• Automated collection: Data automatically collected when you access the platform, including IP addresses, device identifiers, cookies, session data, and behavioural analytics generated through your use of by888 games and features.
• Third-party sources: Data received from payment providers (GCash, PayMaya, BPI, BDO, Metrobank), identity verification services, fraud prevention services, and game content providers in the context of delivering platform services.

4 Purpose and Legal Basis for Processing

by888 processes your personal data on the following legal bases and for the following purposes:

• Contractual necessity: To register your account, process deposits and withdrawals, enable gameplay, and deliver the services you have requested from by888.
• Legal obligation: To comply with Know Your Customer (KYC) requirements, Anti-Money Laundering (AML) obligations under Philippine law, PAGCOR reporting requirements, and the Data Privacy Act of 2012.
• Legitimate interests: To detect and prevent fraud, ensure platform security, improve our services, analyse gameplay patterns for responsible gaming purposes, and manage business operations.
• Consent: For marketing communications (where you have opted in), use of non-essential cookies, and processing of sensitive personal information for responsible gaming assessments.

5 Data Sharing and Disclosure

by888 does not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners receive the minimum data necessary to process your transactions securely.
• Game providers: Certified game studios (e.g., Pragmatic Play, Evolution Gaming, PG Soft) may receive session and gameplay data necessary to deliver their games through the by888 platform.
• Identity verification providers: Third-party KYC and fraud prevention services receive identity data solely for the purpose of verifying your eligibility to use the platform.
• Regulatory authorities: by888 may disclose your data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts as required by Philippine law or valid legal process.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of by888's assets, your data may be transferred as part of that transaction. You will be notified of any such change that materially affects your privacy rights.

All third-party data processors are bound by data processing agreements requiring them to handle your data in accordance with applicable privacy laws and to use it only for the purposes specified by by888.

6 Data Retention

by888 retains personal data only for as long as necessary for the purposes for which it was collected, subject to the following retention principles:

• Active account data is retained for the duration of your account registration with by888.
• Following account closure, by888 retains identity, financial, and transaction data for a minimum of five (5) years in compliance with AML legal obligations and PAGCOR record-keeping requirements.
• Customer support communications are retained for a minimum of two (2) years from the date of the interaction.
• Marketing consent records are retained for the duration of the consent period and for a reasonable period thereafter to demonstrate compliance.
• Data held solely on the basis of your consent will be deleted or anonymised upon withdrawal of that consent, unless another legal basis for retention applies.

7 Security Measures

by888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and by888 servers.
• Encrypted storage of sensitive data including passwords (stored as salted hashes, never in plain text) and financial account details.
• Access controls restricting internal access to personal data on a strict need-to-know basis, with audit logging of all access events.
• Two-factor authentication (2FA) available to all account holders as an additional account security layer.
• Regular security assessments and penetration testing of platform infrastructure.
• Fraud detection systems monitoring login patterns, transaction behaviour, and gameplay for anomalies indicating account compromise or abuse.

8 Your Rights Under the Data Privacy Act

As a data subject under the Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data processed by by888:

• Right to be Informed: The right to know how your personal data is being collected, processed, and used — as described in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data by888 holds about you.
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated personal data in your account.
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where the processing is unlawful, the data is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent — subject to by888's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for purposes other than those directly required to deliver the by888 service, including direct marketing.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact by888's data protection contact at [email protected] with the subject line "Data Privacy Request". by888 will respond within the timeframe required by applicable law.

9 Cookies and Tracking Technologies

by888 uses cookies and similar tracking technologies to operate the platform, enhance your user experience, and analyse platform usage. The categories of cookies used are:

• Strictly Necessary Cookies: Essential to the operation of the platform. These enable core functions such as secure login sessions, account authentication, and shopping cart functionality. These cookies cannot be disabled without impairing platform functionality.
• Performance / Analytics Cookies: Used to understand how players interact with the platform — which pages are visited most, how long sessions last, and which features are used. This data is aggregated and anonymised.
• Functional Cookies: Remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content based on your activity on by888. These cookies are only activated with your consent.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect your ability to use certain platform features, including the by888 login function.

10 Children's Privacy

by888 is strictly an adult platform. The minimum age for account registration and use of the platform is 21 years, as required by Philippine gaming regulations. by888 does not knowingly collect personal data from individuals below this age.

If by888 becomes aware that personal data has been collected from an individual under 21 years of age, the account will be immediately suspended, the data will be deleted, and any funds will be handled in accordance with applicable regulations. If you believe a minor has registered on the platform, please notify by888 support immediately.

11 Changes to This Privacy Policy

by888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform operations. Material changes will be communicated to registered Users via email to the registered address or through a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of by888 following notification of a material change constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using the platform and contact support to request account closure.

12 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or by888's data handling practices, please contact us:

Players also have the right to escalate unresolved privacy complaints to the National Privacy Commission (NPC) of the Philippines.