ab88 Privacy Policy — How We Protect Your Personal Data

1. Introduction

ab88 ("ab88," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform at ab88.bid. This Privacy Policy ("Policy") describes how ab88 collects, uses, stores, shares, and protects your personal information when you access or use any part of the ab88 platform, including our website, mobile-optimised interface, live casino, sportsbook, and customer support services.

This Policy is drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC"). ab88 also adheres to the data protection requirements imposed by PAGCOR as part of its licensing obligations.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, ab88 is the data controller responsible for your personal information collected through the ab88 platform. ab88 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

ab88 has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at any time using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

ab88 collects the following categories of personal data from players and prospective players:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth and age verification information
• Residential address (including barangay, city, province, and postal code)
• Email address and mobile phone number
• Government-issued ID number (e.g., Philippine passport, driver's licence, SSS/UMID card)
• Selfie or photograph submitted for identity verification purposes

3.2 Financial Data

• GCash or PayMaya mobile wallet number
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where provided for withdrawal purposes
• Credit or debit card details (card number, expiry date — CVV is never stored)
• Transaction history, including deposit amounts, withdrawal amounts, and dates
• Source of funds documentation where required for AML compliance

3.3 Gaming & Behavioural Data

• Betting history, game session data, and wagering patterns
• Bonus and promotion usage history
• Responsible gaming tool usage (deposit limits, self-exclusion requests, session data)
• Customer support interaction records, including chat transcripts and email correspondence

3.4 Technical & Device Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform access logs and timestamps

4. How We Collect Your Data

ab88 collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and device data collected automatically when you access the ab88 platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment data from GCash, PayMaya, and banking partners.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

5. How We Use Your Personal Data

ab88 uses your personal data for the following purposes:

• To create, verify, and manage your ab88 player account
• To process deposits, withdrawals, and other financial transactions
• To verify your identity and age in compliance with PAGCOR KYC requirements
• To detect, prevent, and investigate fraud, money laundering, and other illegal activity
• To comply with our legal and regulatory obligations under Philippine law and PAGCOR licensing conditions
• To provide customer support and respond to your queries and complaints
• To administer bonuses, promotions, and loyalty programmes
• To monitor and enforce responsible gaming commitments, including processing self-exclusion requests and applying deposit limits
• To improve the ab88 platform, personalise your gaming experience, and conduct internal analytics
• To send you service-related communications, including account notifications, security alerts, and policy updates
• To send you marketing communications about ab88 promotions and new features, where you have provided consent to receive such communications

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, ab88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML laws, tax reporting obligations, and other applicable Philippine regulations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

ab88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• PAGCOR and regulatory authorities: As required by our licensing obligations and applicable Philippine law, including for AML reporting and regulatory audits.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and card payment processors, solely for the purpose of processing your transactions.
• KYC and identity verification providers: Third-party services used to verify your identity and age in compliance with PAGCOR requirements.
• Fraud prevention and AML screening services: Compliance technology providers used to detect and prevent financial crime.
• Game content providers: Software providers (such as Pragmatic Play and Evolution Gaming) who supply the games on the ab88 platform may receive limited technical data necessary for game operation.
• IT and platform service providers: Cloud hosting, cybersecurity, and technical support providers who process data on ab88's behalf under strict data processing agreements.
• Law enforcement: Where required by a valid court order, subpoena, or other legal process under Philippine law.

All third parties with whom ab88 shares personal data are required to handle that data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

8. Cookies & Tracking Technologies

ab88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the ab88 website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies: Used to understand how players use the platform, which pages are most visited, and where technical issues occur. This data is aggregated and anonymised where possible.
• Marketing cookies: Used to deliver relevant promotional content about ab88 to you. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ab88 platform. For strictly necessary cookies, no opt-out is available as they are required for the platform to operate.

9. Data Retention

ab88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR licensing conditions and AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act of 2001 (AMLA) and its amendments.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained for the duration of your account and for two (2) years following account closure or withdrawal of consent.
• Technical and device logs: Retained for twelve (12) months from the date of collection, unless required for longer retention in connection with a fraud investigation or legal proceeding.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with ab88's data disposal procedures.

10. Data Security

ab88 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ab88 platform
• Encryption of sensitive data at rest, including financial records and identity documents
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists
• Multi-factor authentication requirements for all ab88 staff accessing systems that contain personal data
• Continuous monitoring of platform systems for suspicious activity and potential data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ab88 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

11. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ab88:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed — which is the purpose of this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data ab88 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that ab88 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact ab88's Data Protection Officer using the contact details in Section 15. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

12. Children's Privacy

The ab88 platform is strictly intended for persons aged 21 years and above. ab88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on the ab88 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

13. International Data Transfers

ab88 primarily processes and stores your personal data within the Philippines. Where it is necessary to transfer your personal data to service providers or partners located outside the Philippines — for example, to international game content providers or cloud infrastructure providers — ab88 will ensure that such transfers are carried out in compliance with the Data Privacy Act of 2012 and that appropriate safeguards are in place to protect your data, including contractual data protection clauses consistent with NPC guidelines.

14. Changes to This Privacy Policy

ab88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Where changes are material, we will notify registered players via email or a prominent notice on the ab88 platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how ab88 protects your personal data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by ab88, please contact our Data Protection Officer:

• Email: [email protected]
• Subject line: Data Privacy Request – [Your Full Name]
• Response time: Within 30 days of receipt of a verified request

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with ab88's response to your data privacy concern.