p288 Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes how p288 ("p288," "we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the p288 online gaming platform available at p288.net (the "Platform").

p288 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as other applicable data protection legislation.

By registering an account on p288 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to request account closure.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

2. Personal Data We Collect

p288 collects personal data that is necessary to provide you with a safe, compliant, and functional gaming experience. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Username and encrypted password
• Residential address (city, province, country)

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS ID, Voter's ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or live photo for identity matching purposes
• Proof of payment method ownership where required

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e-wallet account references, bank account identifiers — we do not store full card numbers)
• Account balance history
• Bonus and promotional activity records

2.4 Gaming Activity Data

• Game session logs (games played, wager amounts, outcomes)
• Betting history and win/loss records
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies

2.6 Communications Data

• Records of live chat conversations with our support team
• Email correspondence with p288
• Feedback, complaints, and dispute records

3. How We Collect Your Data

p288 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions.
• Automatically — through cookies, web beacons, and similar technologies when you browse or interact with the Platform. See Section 7 for more details on our cookie practices.
• From third-party service providers — including identity verification agencies, payment processors (such as GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention services, where necessary to verify your identity or process transactions.
• From publicly available sources — where permitted by law, for the purposes of fraud prevention, anti-money laundering compliance, or regulatory obligations.

4. How We Use Your Personal Data

p288 uses your personal data only for legitimate, specified purposes. The table below summarises the primary purposes for which we process your data:

p288 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or with your explicit consent.

5. Legal Basis for Processing

p288 processes your personal data on the following legal grounds under the Philippine Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws, including anti-money laundering regulations, age verification requirements, and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

p288 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Payment Processors

To process deposits and withdrawals, p288 shares necessary financial data with payment service providers including GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, Visa, and Mastercard. These providers process your data under their own privacy policies and are bound by applicable financial regulations.

6.2 Identity Verification Providers

To fulfil KYC obligations, p288 may share identity documents and biometric data with accredited third-party identity verification agencies. These providers are contractually bound to process your data solely for verification purposes.

6.3 Regulatory Authorities

p288 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or other competent authorities in response to lawful requests, court orders, or to comply with applicable legal obligations, including anti-money laundering reporting requirements.

6.4 Technology & Infrastructure Providers

p288 uses third-party technology providers for hosting, analytics, fraud detection, and customer support infrastructure. These providers act as data processors under contractual agreements that require them to protect your data and process it only on p288's instructions.

6.5 Game Providers

Certain technical data (such as session tokens and game identifiers) may be shared with game providers, including JILI Games, to facilitate gameplay. Game providers do not receive your full personal profile.

7. Cookies & Tracking Technologies

p288 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login state to improve your experience.
• Analytics cookies: Collect anonymised data about how players use the Platform to help us identify areas for improvement. Used only with your consent.
• Security cookies: Help detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. p288 does not use third-party advertising or behavioural tracking cookies.

8. Data Retention

p288 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction, as required by financial regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless a longer period is required for dispute resolution.
• Technical and device data: Retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9. Data Security

p288 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the p288 Platform.
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial identifiers.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication options for player accounts.
• Continuous monitoring for suspicious activity, unauthorized access attempts, and data breaches.

In the event of a personal data breach that poses a risk to your rights and freedoms, p288 will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of the Philippine Data Privacy Act and its Implementing Rules and Regulations.

While p288 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your p288 account credentials.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by p288:

• Right to be informed: You have the right to know what personal data p288 collects about you and how it is used — which is the purpose of this Policy.
• Right of access: You may request a copy of the personal data p288 holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data in your p288 account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights , please contact our Data Protection Officer via live chat or by emailing [email protected]. p288 will respond to all verified data subject requests within thirty (30) days of receipt. We may require proof of identity before processing your request.

11. Minors & Age Restriction

The p288 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. p288 does not knowingly collect, process, or retain personal data from individuals under the age of 21.

All new accounts are subject to mandatory age verification as part of the KYC process. Where p288 discovers or has reasonable grounds to believe that a registered account is operated by a person under 21 years of age, we will immediately suspend the account, initiate an investigation, and take appropriate action including permanent account closure and notification to relevant authorities where required by law.

If you are a parent or guardian and believe that a minor has registered on the p288 Platform, please contact our support team immediately via live chat or at [email protected] so that we can take prompt corrective action.

12. International Data Transfers

p288 primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to, stored in, or processed by service providers located in other countries — for example, cloud infrastructure providers or game technology partners operating internationally.

Where such transfers occur, p288 ensures that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses that require recipient parties to maintain standards of data protection equivalent to those required under Philippine law.

By using the p288 Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

13. Changes to This Privacy Policy

p288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, p288 will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or in-platform notification.

We encourage you to review this Policy periodically to stay informed about how p288 protects your personal data. Your continued use of the Platform following the posting of any revised Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you must cease using the Platform and may request account closure by contacting our support team.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way p288 handles your personal data, please contact our Data Protection Officer through any of the following channels:

• Live Chat: Available 24/7 on all pages of the p288 Platform — the fastest way to reach us.
• Email: [email protected]

p288 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within thirty (30) days. For complex requests, we will keep you informed of progress throughout the process.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.