eh88 Privacy Policy

1. Introduction

eh88 ("eh88," "we," "us," or "our") operates the online gaming platform accessible at eh88.net and any associated mobile applications (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all users who access or use our Platform.

This Privacy Policy ("Policy") describes how eh88 collects, uses, stores, shares, and protects your personal data when you visit our website, register an account, make deposits or withdrawals, participate in games, contact our support team, or otherwise interact with the Platform.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable PAGCOR regulations governing licensed online gaming operators in the Philippines.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, eh88 acts as the Personal Information Controller in respect of the personal data you provide when using the Platform. This means eh88 determines the purposes and means of processing your personal data.

Where eh88 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, and cloud hosting services), those parties act as Personal Information Processors and are contractually bound to process your data only in accordance with eh88's instructions and this Policy.

eh88 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

eh88 collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — you must be 21 or older)
• Gender
• Nationality and country of residence
• Government-issued identification numbers (e.g., SSS, GSIS, PhilHealth, UMID, passport number)
• Username and encrypted password

3.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (including barangay, city/municipality, province)

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (GCash account number, PayMaya account, bank account details for BPI, BDO, Metrobank, or card details for Visa/Mastercard)
• Account balance history
• Bonus and promotion redemption records

3.4 Gaming Activity Data

• Game session logs (games played, duration, wager amounts, outcomes)
• Betting history across all game categories (slots, live casino, sports betting, sabong, bingo, fishing games)
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies (see Section 8)

3.6 Communications Data

• Records of your communications with eh88 customer support (live chat transcripts, email correspondence)
• Survey responses and feedback you voluntarily provide
• Marketing preferences and communication opt-in/opt-out records

4. How We Collect Your Data

eh88 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs (see Section 8).
• Third-party sources: Identity verification data from licensed KYC/AML service providers; fraud prevention data from security partners; payment verification data from payment processors such as GCash, PayMaya, BPI, BDO, and Visa.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

5. How We Use Your Personal Data

eh88 uses your personal data for the following purposes:

Purpose	Description
Account Management	Creating and managing your player account, verifying your identity, and maintaining your account security.
Service Delivery	Providing access to games, processing deposits and withdrawals, crediting bonuses, and delivering customer support.
Regulatory Compliance	Fulfilling obligations under PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act of 2012, including KYC verification and suspicious transaction reporting to AMLC.
Fraud Prevention & Security	Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
Responsible Gaming	Monitoring gaming activity to identify signs of problem gambling, enforcing responsible gaming tools (deposit limits, self-exclusion), and complying with PAGCOR responsible gaming requirements.
Marketing & Promotions	Sending you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may opt out at any time.
Platform Improvement	Analyzing aggregated usage data to improve game offerings, platform performance, and user experience.
Legal Claims	Establishing, exercising, or defending legal claims in connection with your use of the Platform.

6. Legal Basis for Processing

eh88 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given clear, informed consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
• Contractual Necessity: Where processing is necessary to perform the contract between you and eh88 — specifically, to operate your player account, process transactions, and deliver gaming services.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to eh88, including PAGCOR licensing conditions, AMLC reporting requirements, and the Data Privacy Act itself.
• Legitimate Interests: Where processing is necessary for eh88's legitimate interests, such as fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and interests.

Where eh88 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, please contact our Data Protection Officer using the details in Section 15.

7. Data Sharing & Disclosure

eh88 does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Licensed KYC and AML service providers engaged to verify your identity and screen against sanctions and watchlists.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government authorities where disclosure is required by law or regulatory obligation.
• Technology & Hosting Providers: Cloud infrastructure and software service providers who host and operate the Platform on eh88's behalf, subject to strict data processing agreements.
• Game Providers: Third-party game software providers whose games are available on the Platform, to the extent necessary to deliver those games and resolve disputes.
• Professional Advisers: Lawyers, auditors, and accountants engaged by eh88 in connection with legal, compliance, or financial matters, subject to professional confidentiality obligations.
• Law Enforcement: Police, courts, or other law enforcement authorities where disclosure is required by a valid legal order or where eh88 reasonably believes disclosure is necessary to prevent or report a crime.

8. Cookies & Tracking Technologies

eh88 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences to personalize your experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform, which pages are visited most frequently, and where errors occur. This data helps us improve the Platform.
• Security & Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.

eh88 does not use third-party advertising or retargeting cookies.

9. Data Retention

eh88 retains your personal data for the following periods:

Data Category	Retention Period	Basis
Account & Identity Data	Duration of account + 5 years after closure	PAGCOR licensing requirements; AMLC obligations
Financial & Transaction Records	10 years from transaction date	Anti-Money Laundering Act (RA 9160, as amended)
Gaming Activity Logs	5 years from date of activity	PAGCOR regulatory requirements
Customer Support Records	3 years from last interaction	Legitimate interests; legal claims
Marketing Preferences	Until consent withdrawn or account closed	Consent
Technical & Device Logs	12 months from collection	Security and fraud prevention

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data must be retained for longer periods due to an ongoing legal dispute, regulatory investigation, or court order, it will be retained until the matter is fully resolved.

10. Data Security

eh88 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Sensitive data at rest, including financial information and government ID numbers, is encrypted using AES-256.
• Access Controls: Access to personal data is restricted to authorized eh88 personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: eh88 supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security.
• Regular Security Audits: eh88 conducts regular penetration testing, vulnerability assessments, and security audits of the Platform and its underlying infrastructure.
• Incident Response: eh88 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, eh88 will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, as required by RA 10173.

11. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by eh88:

• Right to be Informed: The right to be informed about how your personal data is collected and processed — which this Policy fulfills.
• Right of Access: The right to request a copy of the personal data eh88 holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to eh88's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe eh88 has processed your personal data in violation of RA 10173.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 15. eh88 will respond to all valid requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

Please note that certain rights are subject to limitations. For example, eh88 cannot delete data that it is legally required to retain under PAGCOR regulations or the Anti-Money Laundering Act.

12. Children's Privacy

The eh88 Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine law and PAGCOR regulations governing online gambling. eh88 does not knowingly collect personal data from individuals under the age of 21.

If eh88 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and take appropriate action in accordance with our Terms and Conditions and applicable law.

13. International Data Transfers

eh88 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where eh88 uses cloud infrastructure providers or game software providers with servers in other countries.

Where personal data is transferred outside the Philippines, eh88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173. These safeguards may include contractual clauses approved by the National Privacy Commission, binding corporate rules, or transfers to countries recognized as providing an adequate level of data protection.

By using the Platform and providing your personal data, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

14. Updates to This Privacy Policy

eh88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When we make material changes to this Policy, we will notify registered players by email and by posting a prominent notice on the Platform.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how eh88 protects your personal data. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.

If you have any concerns about changes to this Policy, please contact our Data Protection Officer before continuing to use the Platform.

15. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or eh88's data processing practices, please contact our Data Protection Officer:

If you are not satisfied with eh88's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC's contact details are publicly available through official Philippine government channels.

For regulatory matters, eh88 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).

This Privacy Policy was last reviewed and updated on January 1, 2026. All previous versions of this Policy are superseded by this version.