Privacy Policy

1. Overview

i8ph Casino ("i8ph," "we," "us," or "our") operates the online gaming platform accessible at i8ph.vip. We are committed to protecting the privacy and personal data of all users ("you," "Player," or "User") who access or use our Platform.

This Privacy Policy describes how i8ph collects, uses, discloses, stores, and protects your personal information in connection with your use of the i8ph Platform, including our website, games, customer support channels, and any related services. It is prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account or using the i8ph Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform immediately.

2. Personal Data We Collect

Depending on how you interact with the i8ph Platform, we may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS number).
• Contact Data: Mobile number, email address, and residential address (including city, province, and postal code).
• Account Data: Username, encrypted password, account preferences, and communication settings.
• Financial Data: GCash or PayMaya account details, bank account information (for bank transfer transactions), transaction history, deposit and withdrawal records, and account balances. We do not store full debit card numbers; card data is handled by our PCI-DSS compliant payment processors.
• Gaming Data: Game history, wager amounts, win/loss records, session durations, and bonus usage.
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and cookies or similar tracking identifiers.
• Communications Data: Records of your interactions with our customer support team, including live chat transcripts and email correspondence.
• KYC Verification Data: Copies of government-issued identification documents and selfie photographs submitted during the Know Your Customer (KYC) verification process.

3. How We Collect Your Data

i8ph collects personal data through the following means:

• Direct Interactions: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automated Technologies: When you browse or use the Platform, we automatically collect technical data through cookies, web beacons, server logs, and similar technologies.
• Third-Party Sources: We may receive data from payment processors (e.g., GCash, PayMaya, banks), identity verification service providers, fraud prevention agencies, and analytics providers, to the extent permitted by applicable law.
• Regulatory Sources: We may receive information from PAGCOR or other Philippine regulatory authorities in connection with our compliance obligations.

4. Purpose of Processing

i8ph processes your personal data for the following purposes:

• To create, manage, and maintain your i8ph account.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and the DPA.
• To process deposits, withdrawals, and other financial transactions.
• To provide, operate, and improve the i8ph Platform and its games.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities.
• To comply with our legal and regulatory obligations, including Anti-Money Laundering Act (AMLA) reporting requirements.
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, account alerts).
• To send you promotional communications about i8ph offers and bonuses, where you have consented to receive such communications.
• To administer responsible gaming tools and enforce self-exclusion requests.
• To respond to your customer support enquiries.
• To conduct analytics and improve the performance and user experience of the Platform.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, i8ph processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide the i8ph gaming services you have registered for).
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including the DPA, AMLA, and PAGCOR regulatory requirements.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fair, and compliant gaming platform, including fraud prevention and platform improvement, provided such interests are not overridden by your rights.
• Consent: For certain processing activities, such as sending promotional communications, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time by contacting us or updating your account preferences.

6. Data Sharing and Disclosure

i8ph does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, PayMaya/Maya, and Philippine banking partners, for the purpose of processing your financial transactions.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to assist with our compliance obligations.
• Game Providers: Licensed game software providers whose games are available on the i8ph Platform, to the extent necessary for game operation and fairness auditing.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory mandate.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and fraud detection service providers engaged to support the operation and security of the Platform.
• Professional Advisers: Lawyers, auditors, and accountants engaged in connection with our business operations, subject to professional confidentiality obligations.

Any third party with whom we share your data is required to handle it in accordance with the DPA and our data processing agreements. We do not transfer your personal data outside the Philippines unless adequate data protection safeguards are in place.

7. Data Retention

i8ph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Specifically:

• Account and KYC data is retained for a minimum of five (5) years from the date of account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications are retained for two (2) years from the date of the interaction.
• Technical and analytics data is retained for twelve (12) months from collection, unless a longer retention period is required for security or compliance purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

8. Data Security

i8ph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the i8ph Platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including passwords and financial information, is stored in encrypted form using strong cryptographic algorithms.
• Access Controls: Access to personal data is restricted to authorised i8ph personnel and service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Regular Security Audits: The Platform undergoes regular penetration testing and security audits by independent cybersecurity professionals.
• Incident Response: i8ph maintains a data breach response plan. In the event of a personal data breach that poses a real risk of serious harm, we will notify the NPC and affected data subjects within the timeframes prescribed by the DPA.

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by i8ph:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed.
• Right of Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is unlawful or the data is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data, including for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the details in Section 13. We will respond to your request within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10. Cookies and Tracking Technologies

i8ph uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support our security and fraud prevention measures. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect anonymised information about how visitors use the Platform, helping us improve functionality and user experience.
• Functional Cookies: Used to remember your preferences, such as language settings and game preferences.
• Marketing Cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information, refer to your browser's help documentation.

11. Minors and Age Restriction

The i8ph Platform is strictly intended for persons who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account and delete the data in accordance with our data disposal procedures.

If you are a parent or guardian and believe that your child has provided personal data to i8ph, please contact our DPO immediately using the details in Section 13.

12. Changes to This Privacy Policy

i8ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13. Contact Us & Data Protection Officer

i8ph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact us:

• Data Protection Officer, i8ph Casino
• Email: [email protected]
• Response Time: Within 15 business days of receipt of your request

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.