di888 Privacy Policy

1. Overview

di888 ("we", "us", "our") operates the online gaming platform accessible at di888.app. As a data controller, di888 is responsible for the personal information it collects from users ("you", "your") in connection with the use of our Platform. This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

This policy covers all personal data collected from players registered in the Philippines, including those accessing di888 from Metro Manila, Cebu, Davao, Quezon City, Makati, and other regions across the archipelago. If you are accessing di888 from outside the Philippines, please be aware that your data may be processed in the Philippines and subject to Philippine law.

We encourage you to read this Privacy Policy in full. If you have questions, our Data Protection Officer (DPO) is available at the contact details provided in Section 13.

2. Data We Collect

2.1 Information You Provide Directly

When you register for a di888 account, complete identity verification, make a deposit, or contact our support team, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, government-issued ID number (e.g., Philippine passport, driver's license, SSS/UMID/PhilSys ID)
• Contact Data: Email address, mobile number, residential address (including city and province)
• Financial Data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records
• Verification Data: Copies of government-issued identification documents, selfies or photos submitted for KYC verification, proof of address documents
• Communications Data: Records of your interactions with di888 customer support via live chat, email, or other channels

2.2 Information Collected Automatically

When you access the di888 Platform, we automatically collect certain technical data, including:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Pages visited, time spent on each page, and navigation paths
• Game session data, including games played, bets placed, and session duration
• Cookies and similar tracking technologies (see Section 6)

2.3 Information from Third Parties

di888 may receive personal data about you from third-party sources, including payment processors (e.g., GCash, PayMaya), identity verification service providers, fraud prevention agencies, and publicly available sources where permitted by law.

3. How We Use Your Data

di888 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your di888 account, including processing deposits and withdrawals.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine anti-money laundering laws.
• Service Delivery: To provide access to games, process bets, calculate winnings, and deliver the full di888 gaming experience.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Regulatory Compliance: To comply with applicable Philippine laws, PAGCOR requirements, and NPC regulations, including mandatory reporting obligations.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming activity and enforce responsible gaming tools such as deposit limits and self-exclusion.
• Marketing & Promotions: To send you information about di888 promotions, bonuses, and new games — but only where you have given your consent or where we have a legitimate interest to do so. You may opt out at any time.
• Platform Improvement: To analyze usage patterns and improve the di888 Platform, user interface, and game selection.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, di888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to operate your di888 account and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR licensing requirements, and NPC directives.
• Legitimate Interests: Processing is necessary for di888's legitimate interests, including fraud prevention, platform security, and business analytics, provided these interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

di888 does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist with identity verification and fraud detection.
• Game Providers: Licensed game software providers who supply the games available on di888. These providers may receive anonymized session data for technical purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where required by law.
• Professional Advisers: Lawyers, auditors, and accountants who provide professional services to di888 under strict confidentiality obligations.
• IT & Infrastructure Providers: Cloud hosting, cybersecurity, and technical support providers who process data on our behalf under data processing agreements.

All third parties with whom di888 shares personal data are required to maintain appropriate technical and organizational security measures and to process data only in accordance with di888's instructions and applicable law.

6. Cookies & Tracking Technologies

di888 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device when you visit di888. We use the following types of cookies:

• Essential Cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and game history, to personalize your experience.
• Analytics Cookies: Collect anonymized data about how users interact with di888 to help us improve the Platform. We use this data in aggregate form only.
• Marketing Cookies: Used to deliver relevant promotions and offers. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the di888 Platform.

7. Data Retention

di888 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering regulations.
• KYC verification documents are retained for the duration of your account and for five (5) years after closure.
• Customer support communications are retained for three (3) years.
• Marketing consent records are retained until you withdraw consent and for one (1) year thereafter.

When personal data is no longer required, di888 will securely delete or anonymize it in accordance with our data retention schedule.

8. Data Security

di888 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and di888's servers
• Encryption of sensitive data at rest, including financial information and identity documents
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• Multi-factor authentication for administrative access to di888's systems
• Incident response procedures for detecting and responding to data breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, di888 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay.

9.1 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by di888:

• Right to Be Informed: You have the right to be informed of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right to Access: You may request a copy of the personal data di888 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to di888's legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances warrant it.
• Right to Data Portability: You may request that di888 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe di888 has processed your personal data in violation of the Data Privacy Act.

9.2 How to Exercise Your Rights

To exercise any of the rights listed above, please contact di888's Data Protection Officer using the details in Section 13. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request to protect the security of your account.

10. Minors & Age Restriction

di888 does not knowingly collect personal data from individuals under the age of 21. The di888 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing casino-style gambling.

If di888 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and return any deposits to the original payment method following identity verification. Parents and guardians who believe their child may have registered on di888 are encouraged to contact our support team immediately.

11. Third-Party Links & Services

The di888 Platform may contain references to third-party payment services such as GCash and PayMaya. When you interact with these services, you are subject to their respective privacy policies. di888 is not responsible for the privacy practices of third-party service providers and encourages you to review their policies before providing any personal information directly to them.

di888 does not embed third-party advertising networks or social media tracking pixels on the Platform without your prior consent.

12. Changes to This Privacy Policy

di888 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered account holders via email or in-platform notification.

Your continued use of the di888 Platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed of how di888 protects your personal data.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or di888's data processing practices, please contact our Data Protection Officer (DPO):