Privacy Policy – How eh88 Protects Your Personal Data

1 Introduction

eh88 takes the privacy of its players seriously. As an online casino platform serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and the wider Philippine archipelago, we handle personal data responsibly and in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable PAGCOR guidelines on player data management.

This Privacy Policy sets out the principles and practices that govern how eh88 collects, processes, stores, and protects your personal information. We are committed to transparency — if you ever have a question about how your data is handled, our Data Privacy Officer is available to assist you.

Throughout this document, "personal data" means any information that can identify you as an individual, directly or in combination with other information. "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, and deletion.

2 Data Controller

eh88 is the data controller responsible for the personal data collected through the Platform. As data controller, eh88 determines the purposes and means by which your personal data is processed. We are accountable for ensuring that all data processing activities comply with the Philippine Data Privacy Act of 2012 and this Privacy Policy.

For all data privacy inquiries, exercise of data subject rights, or complaints, you may contact our Data Privacy Officer at:

3 Personal Data We Collect

eh88 collects personal data through several channels. The categories of data we collect, and the source of each category, are described below.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

4 How We Use Your Personal Data

eh88 processes your personal data for the following purposes:

• Account creation and management — To register your Account, verify your identity, and manage your ongoing relationship with the eh88 Platform;
• Payment processing — To process deposits and withdrawals via GCash, Maya, BDO, BPI, Metrobank, and other supported payment methods, and to maintain accurate financial records;
• Regulatory compliance — To fulfil our obligations under PAGCOR guidelines, Philippine anti-money laundering (AML) laws, and the Data Privacy Act of 2012, including conducting Know Your Customer (KYC) verification;
• Fraud prevention and security — To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal or prohibited conduct on the Platform;
• Responsible gaming — To monitor gaming behaviour and identify potential signs of problem gambling, and to facilitate the operation of deposit limits, session controls, and self-exclusion tools;
• Customer support — To respond to your queries, resolve complaints, and provide technical assistance;
• Platform improvement — To analyse usage patterns, test new features, and improve the overall quality of the eh88 Platform;
• Marketing communications — With your consent, to send promotional offers, bonus notifications, and updates relevant to your Account; you may withdraw consent at any time via Account Settings.

eh88 does not use your personal data for automated decision-making that produces significant legal effects without human oversight, except where such processing is required by applicable law.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, eh88 processes your personal data on the following lawful bases:

• Performance of a contract — Processing necessary to register your Account, facilitate gameplay, and process financial transactions;
• Legal obligation — Processing required to comply with PAGCOR requirements, AML obligations, and other applicable Philippine laws and regulations;
• Legitimate interests — Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms;
• Consent — Processing for marketing communications and optional analytics features, where you have provided explicit, freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6 Data Sharing and Disclosure

eh88 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data in the following limited circumstances:

• Payment processors — Financial data is shared with GCash, Maya, and partner banks (BDO, BPI, Metrobank) strictly as necessary to process your transactions;
• Identity verification providers — Identity data may be shared with third-party KYC service providers solely for the purpose of verifying your identity and age in compliance with PAGCOR requirements;
• Game software providers — Limited technical data (such as session identifiers) is shared with licensed game providers including Playtech to facilitate gameplay on the eh88 Platform;
• Regulatory authorities — eh88 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine government authorities where required by law or court order;
• IT and security service providers — Technical data is processed by trusted IT infrastructure partners subject to strict contractual data protection obligations;
• Professional advisers — Legal, financial, and compliance advisers may access personal data as strictly necessary for the provision of professional services, subject to confidentiality obligations.

All third parties with whom eh88 shares personal data are required to implement adequate technical and organisational security measures and to process such data only for the specified purposes.

7 Cookies and Tracking Technologies

The eh88 Platform uses cookies and similar tracking technologies to operate core platform functions and improve your experience. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies — Required for the Platform to function, including session authentication and security features. These cannot be disabled.
• Functional cookies — Remember your language preferences, game lobby settings, and login status to provide a personalised experience.
• Analytics cookies — Collect anonymised data on how players use the Platform to help us understand user behaviour and improve features. These are enabled with your consent.
• Security cookies — Support fraud detection and prevention systems by identifying anomalous behaviour patterns.

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the eh88 Platform. Most browsers accept cookies by default — refer to your browser's help documentation for instructions on managing cookie settings.

8 Data Retention

eh88 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data — Retained for the duration of your Account's active status, plus a minimum of five (5) years following Account closure, in compliance with Philippine AML and financial recordkeeping obligations;
• Financial transaction records — Retained for a minimum of five (5) years in accordance with the Anti-Money Laundering Act of 2001 (RA 9160, as amended);
• KYC documents — Retained for the active Account period plus five (5) years, or longer if required by regulatory authority;
• Support communications — Retained for three (3) years from the date of the communication;
• Marketing consent records — Retained for the period of your consent and for three (3) years following consent withdrawal, as evidence of compliance.

After applicable retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

9 Data Security

eh88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or unlawful processing. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and our servers;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls ensuring that only authorised personnel can access personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third parties;
• Two-factor authentication available for all player Accounts and mandatory for administrative access;
• Comprehensive incident response procedures with mandatory breach notification in accordance with the Data Privacy Act of 2012.

While eh88 employs industry-standard security practices, no method of data transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your Account credentials and for notifying us promptly if you suspect any unauthorised Account activity.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, you have the following rights regarding your personal data held by eh88:

To exercise any of the above rights, contact our Data Privacy Officer at [email protected] with the subject line "Data Privacy Request". We will respond within fifteen (15) business days of receiving a verifiable request, in accordance with RA 10173.

11 Children's Privacy and Age Restrictions

The eh88 Platform is strictly for adults aged 21 years and older. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated Account.

If you are a parent or guardian and believe that a minor may have accessed the eh88 Platform, please contact us immediately at [email protected]. We take underage access extremely seriously and will cooperate fully with any investigation.

We recommend that parents and guardians use parental control tools to restrict access to online gambling websites on shared or family devices.

12 International Data Transfers

Your personal data is primarily processed and stored on servers located within the Asia-Pacific region. In limited circumstances, personal data may be transferred to third-party service providers located in other jurisdictions in connection with the provision of IT infrastructure, security services, or game software.

Where personal data is transferred outside the Philippines, eh88 ensures that appropriate safeguards are in place to protect such data, including contractual clauses that impose data protection obligations equivalent to those under the Philippine Data Privacy Act of 2012. Such transfers are made only to jurisdictions with adequate data protection laws or to service providers who have committed to appropriate data protection standards.

13 Changes to This Privacy Policy

eh88 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, we will notify registered players via email and display a prominent notice on the Platform no less than seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. We encourage you to review this page periodically to stay informed of how eh88 protects your personal data. Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Privacy Policy.

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or eh88's data processing practices, please contact our Data Privacy Officer using the details below. We are committed to addressing all privacy-related queries promptly, transparently, and in compliance with Philippine law.

For general inquiries, responsible gaming support, or account-related queries, please use the live chat widget on the eh88 Platform or email us at [email protected]. For full details on your rights as a player, see our Terms & Conditions and Responsible Gaming pages.