At million88, your privacy matters as much as your gaming experience. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have as a player based in the Philippines.
We built our privacy framework around six core principles — transparency, security, minimal collection, purpose limitation, your rights, and full compliance with Philippine data protection law.
million88 never sells, rents, or trades your personal information to third-party marketers. Your data stays within our platform and trusted service partners only.
All data transmitted between your device and million88 servers is protected by TLS 1.3 encryption. Stored data is encrypted at rest using AES-256 standards.
Under the Data Privacy Act of 2012, you have the right to access, correct, and request deletion of your personal data. million88 honors every valid request within 15 business days.
We only collect the personal information that is strictly necessary to operate your account, verify your identity, process transactions, and comply with PAGCOR regulations.
million88 operates in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and the implementing rules set by the National Privacy Commission (NPC) of the Philippines.
In the unlikely event of a data breach affecting your personal information, million88 will notify you and the National Privacy Commission within 72 hours as required by law.
This Privacy Policy applies to all users of the million88 platform at million88.app. By registering an account or using our services, you acknowledge that you have read and understood this policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the platform.
million88 ("million88," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online casino platform. This Privacy Policy describes how million88 collects, uses, stores, shares, and protects your personal information when you access or use the million88 website at million88.app (the "Platform").
This policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). It also reflects our obligations under PAGCOR's data governance requirements for licensed online gaming operators.
As a Filipino-focused platform serving players across Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond, million88 understands the importance of trust. We handle your personal data with the same care and security we apply to your financial transactions — because your information is just as valuable as your account balance.
Data Protection Officer: million88 has appointed a dedicated Data Protection Officer (DPO) to oversee compliance with this policy and applicable data protection laws. Contact details for our DPO are provided in Section 14.
million88 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party verification and payment service providers. The categories of personal data we collect include:
Principle of Minimum Necessary Data: million88 adheres to the principle of data minimization. We only collect personal data that is directly necessary for the specific purpose for which it is being collected. We do not collect sensitive personal information beyond what is required for identity verification and regulatory compliance.
million88 uses the personal data we collect for the following specific and legitimate purposes:
| Purpose | Data Used |
|---|---|
| Account registration and identity verification | Identity data, contact data, KYC documents |
| Processing deposits and withdrawals | Financial data, identity data |
| Providing and improving gaming services | Gaming activity data, technical data |
| Fraud prevention and security monitoring | Technical data, transaction data, identity data |
| AML compliance and regulatory reporting | Identity data, financial data, transaction data |
| Responsible gaming monitoring and intervention | Gaming activity data, contact data |
| Customer support and dispute resolution | All relevant account data |
| Sending account notifications and security alerts | Contact data, technical data |
| Promotional communications (with consent) | Contact data, gaming preferences |
| Platform analytics and performance optimization | Technical data, gaming activity data (anonymized) |
million88 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.
Marketing Opt-Out: If you have consented to receive promotional communications from million88 and wish to withdraw that consent, you may do so at any time by updating your communication preferences in your account settings or by contacting our support team. Opting out of marketing will not affect your ability to use the Platform.
Under the Data Privacy Act of 2012 and its Implementing Rules, million88 processes your personal data on the following legal bases:
million88 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:
To process your GCash, PayMaya, BPI, BDO, and Metrobank transactions, we share the minimum necessary financial and identity data with our licensed payment processing partners. These partners are contractually bound to process your data only for payment purposes and in compliance with applicable data protection laws.
For KYC compliance, we work with accredited identity verification service providers who process your identification documents and biometric data solely for the purpose of verifying your identity. All such providers are subject to strict data processing agreements.
million88 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
We use trusted cloud hosting, cybersecurity, and analytics service providers to operate the million88 Platform. These providers act as data processors on our behalf and are contractually prohibited from using your data for any purpose other than providing services to million88.
No Unauthorized Sharing: Any sharing of your personal data beyond the categories described above requires your explicit prior consent. million88 will never share your data with third-party advertisers, data brokers, or unaffiliated commercial entities.
million88 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and analyze usage patterns. A cookie is a small text file stored on your device when you visit a website.
You can manage your cookie preferences through the million88 cookie settings panel, accessible from the footer of any page. You may also configure your browser to block or delete cookies; however, disabling essential cookies may impair your ability to use the Platform.
million88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | 5 years after account closure | AMLA / PAGCOR compliance |
| Financial transaction records | 5 years from transaction date | AMLA / tax regulations |
| KYC verification documents | 5 years after account closure | AMLA / PAGCOR compliance |
| Gaming activity logs | 2 years from session date | Legitimate interests / dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interests |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent / legal obligation |
| Technical and device logs | 90 days | Security / fraud prevention |
Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures. Where data must be retained beyond these periods due to an ongoing legal dispute or regulatory investigation, we will notify you where legally permitted.
million88 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:
Your Role in Security: While million88 takes every reasonable measure to protect your data, you also play an important role. Keep your password strong and unique, enable 2FA on your account, and never share your login credentials with anyone — including people claiming to be million88 staff. million88 will never ask for your password via email, SMS, or chat.
Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by million88. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14.
Request a copy of the personal data million88 holds about you, along with information on how it is being used and with whom it has been shared.
Request correction of any inaccurate or incomplete personal data we hold about you. You may also update most information directly in your account settings.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations under AMLA and PAGCOR rules.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests, at any time and without penalty.
Receive a copy of your personal data in a structured, commonly used, machine-readable format, and request that it be transmitted to another controller where technically feasible.
If you believe million88 has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
million88 will respond to all valid data rights requests within 15 business days of receipt. In complex cases, we may extend this period by a further 15 business days, in which case we will notify you of the extension and the reason for it.
The million88 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. million88 does not knowingly collect personal data from individuals under the age of 21.
If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and return any deposited funds in accordance with applicable regulations.
If you are a parent or guardian and believe your child has registered on the million88 Platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 24 hours.
million88 primarily stores and processes your personal data within the Philippines. In limited circumstances, certain data may be processed by our technology service providers in other jurisdictions — for example, cloud infrastructure providers operating data centers in the Asia-Pacific region.
Where personal data is transferred outside the Philippines, million88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards include contractual data processing agreements incorporating the NPC's standard contractual clauses, and transfers only to jurisdictions with adequate data protection frameworks.
By using the million88 Platform, you consent to the transfer of your personal data to our service providers in other jurisdictions, subject to the safeguards described above.
The million88 Platform may contain links to third-party websites or services, such as payment gateway portals or regulatory authority websites. This Privacy Policy applies solely to the million88 Platform at million88.app and does not extend to any third-party websites or services.
million88 is not responsible for the privacy practices, content, or data handling of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information to them.
Note: Clicking on a payment gateway link (e.g., GCash, PayMaya) will redirect you to that provider's own platform, which is governed by their own privacy policy. million88 does not control or have access to data you provide directly to those platforms.
million88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When we make material changes to this policy, we will:
Your continued use of the million88 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated policy, you must discontinue use of the Platform and may request account closure by contacting our support team.
We recommend that you review this Privacy Policy periodically to stay informed about how million88 protects your personal data. The current version of this policy is always available at million88.app/privacy-policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way million88 handles your personal data, please contact our Data Protection Officer using the details below. All data rights requests and privacy-related inquiries should be directed to the DPO.
Data Protection Officer — million88
Email: [email protected]
General Support: [email protected]
Response Time: Within 15 business days for formal data rights requests
Language: English and Filipino accepted
If you are not satisfied with our response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.
This Privacy Policy was last reviewed and updated on January 1, 2026. It supersedes all previous versions of the million88 Privacy Policy.
As a player based in the Philippines, the Data Privacy Act of 2012 gives you powerful rights over your personal information. million88 is committed to honoring every one of them.
Know what data is collected and why before it is processed.
Request a full copy of your personal data held by million88.
Fix inaccurate or outdated personal information at any time.
Request deletion of data no longer needed for its original purpose.
Opt out of marketing or processing based on legitimate interests.
Receive your data in a portable format to transfer elsewhere.
Suspend processing of your data while a dispute is being resolved.
Escalate unresolved concerns to the National Privacy Commission.
Your privacy is protected every step of the way at million88. Join thousands of Filipino players who trust us with their gaming experience — from Manila to Cebu, Davao to Quezon City.
By playing on million88, you confirm you are 21 years of age or older and agree to our Terms & Conditions and this Privacy Policy.