idd888 Privacy Policy

Introduction

idd888 is committed to protecting the privacy and personal information of every individual who interacts with our platform. We recognize that Filipino players entrust us with sensitive personal and financial information when they register and play on idd888, and we treat that trust as a material obligation — not merely a legal formality.

This Policy applies to all personal data collected by idd888 through: the idd888 website (idd888.co), the mobile interface, account registration and KYC processes, payment transactions, customer support communications, and any other interaction you have with the idd888 platform or its representatives.

By registering an account on idd888 or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This consent is in addition to, and does not replace, any separate consent obtained at the point of data collection.

Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is idd888, operating the online gaming platform at idd888.co. As data controller, idd888 determines the purposes and means by which your personal data is processed.

idd888 has designated a Data Protection Officer (DPO) responsible for overseeing data privacy compliance, handling data subject requests, and serving as the point of contact for the National Privacy Commission. Contact details for the DPO are provided in Section 16 of this Policy.

Personal Data We Collect

idd888 collects the following categories of personal data, depending on how you interact with the platform:

How We Collect Your Data

idd888 collects personal data through the following means:

4.1 Directly from You

• Account registration forms (name, date of birth, email, mobile number);
• KYC verification submissions (identity documents, selfies);
• Payment and withdrawal request forms (financial account references);
• Customer support interactions via live chat, email, or any other communication channel;
• Responses to surveys, promotions, or feedback requests.

4.2 Automatically During Platform Use

• Session and login data recorded each time you access your idd888 account;
• Game activity logs generated as part of normal platform operation and required for dispute resolution;
• Technical data collected via cookies, web beacons, and server logs (see Section 8 for cookie details);
• Device fingerprinting for fraud detection and security monitoring purposes.

4.3 From Third Parties

• KYC and identity verification service providers used to validate identity documents and liveness checks;
• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank) for transaction confirmation;
• PAGCOR and law enforcement where required by regulation or court order;
• Fraud prevention and anti-money laundering screening services.

How idd888 Uses Your Personal Data

idd888 processes your personal data for the following purposes:

• Account Management: To create, maintain, and manage your idd888 account, including authentication, password resets, and account security;
• Service Delivery: To provide access to games, process bets, calculate and pay out winnings, and operate the idd888 platform;
• Identity Verification (KYC): To verify your identity and age (21+) as required by PAGCOR and anti-money laundering regulations;
• Payment Processing: To process deposits and withdrawals through your chosen payment method and to comply with financial regulatory requirements;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and violations of the idd888 Terms & Conditions;
• Anti-Money Laundering (AML) Compliance: To screen transactions and account activity against AML obligations and report suspicious activity to PAGCOR or relevant authorities as required;
• Customer Support: To respond to your inquiries, process complaints, and resolve disputes;
• Responsible Gaming: To monitor gaming patterns, enforce self-imposed limits, and identify indicators of problem gambling in accordance with PAGCOR's responsible gaming requirements;
• Marketing & Promotions: To send you promotional offers, bonus notifications, and marketing communications where you have provided consent — you may opt out at any time;
• Legal & Regulatory Compliance: To comply with PAGCOR requirements, Philippine law, NPC directives, court orders, and other applicable legal obligations;
• Platform Improvement: To analyze usage patterns and improve the idd888 user experience, using aggregated and anonymized data where possible.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, idd888 processes your personal data on the following legal bases:

Consent

Processing for marketing communications and non-essential analytics is based on your explicit consent provided at registration or through your account settings. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Contract Performance

Processing required to create your account, deliver gaming services, process payments, and fulfill the idd888 Terms & Conditions is necessary for the performance of the contract between you and idd888.

Legal Obligation

KYC identity verification, AML screening, age verification, transaction monitoring, and regulatory reporting are required by PAGCOR, the Philippine Anti-Money Laundering Act (AMLA), R.A. 10173, and other applicable laws.

Legitimate Interests

Fraud detection, platform security monitoring, responsible gaming pattern analysis, and internal analytics are conducted on the basis of idd888's legitimate interests, provided these do not override your fundamental privacy rights.

Data Sharing & Disclosure

idd888 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary and in accordance with this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the financial data necessary to process your transactions. These processors are contractually bound to handle your data securely and only for the specified payment purpose.
• KYC & Verification Providers: Third-party identity verification services receive identity document data to perform age and identity checks as required for PAGCOR compliance.
• Fraud & AML Screening Services: Transaction and account data may be shared with certified fraud detection and anti-money laundering screening providers for compliance purposes.
• Game Providers: Game providers (such as JILI, Pragmatic Play, PG Soft, and Evolution) may receive the minimum session data necessary to deliver their games within the idd888 platform. These providers are contractually prohibited from using player data for independent marketing purposes.
• PAGCOR: idd888 reports to PAGCOR as required by its operating license, which may include player activity data, transaction records, and KYC documentation.
• Law Enforcement & Government Authorities: idd888 will disclose personal data to Philippine law enforcement, the NPC, AMLC, or other government authorities when required by law, court order, or regulatory direction.
• Professional Advisors: Legal, audit, and compliance advisors may access personal data as necessary to provide professional services to idd888, subject to confidentiality obligations.

Cookies & Tracking Technologies

idd888 uses cookies and similar tracking technologies to operate the platform, ensure security, and improve the user experience. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function — these enable session management, authentication, security monitoring, and load balancing. They cannot be disabled without impairing core platform functionality.
• Functional Cookies: Store your preferences such as language settings, display preferences, and responsible gaming limits to provide a consistent experience across sessions.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the idd888 platform to help us identify areas for improvement. These are only activated with your consent.
• Security Cookies: Used for fraud detection, session integrity verification, and device fingerprinting to protect your account from unauthorized access.

You may manage your cookie preferences through the idd888 platform settings. Disabling non-essential cookies will not affect your ability to use the core gaming services on idd888. Essential and security cookies cannot be disabled as they are necessary for platform operation and player account protection.

Data Retention

idd888 retains personal data for as long as is necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active idd888 account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure or the last transaction date, as required by AMLA regulations.
• Transaction Records: Retained for a minimum of five (5) years in compliance with AMLA and PAGCOR financial record requirements.
• Customer Support Records: Retained for three (3) years following the resolution of a support interaction or dispute.
• Marketing Consent Records: Retained for as long as the consent remains valid, plus three (3) years following withdrawal of consent for evidentiary purposes.
• Technical and Session Logs: Retained for twelve (12) months for security and fraud detection purposes, after which they are anonymized or deleted.

Upon expiry of the applicable retention period, personal data will be securely deleted, anonymized, or pseudonymized in accordance with idd888's data disposal procedures and NPC guidelines.

Data Security

idd888 implements technical, organizational, and physical security measures appropriate to the sensitivity of the personal data we process. These measures include:

• Encryption: All data transmitted between your device and idd888 is protected by TLS/SSL encryption. Stored personal data and financial information is encrypted at rest using industry-standard encryption protocols.
• Password Security: Account passwords are stored using a one-way cryptographic hash function — idd888 does not store passwords in plain text and cannot retrieve your original password.
• Access Controls: Personal data is accessible only to idd888 personnel with a documented business need. Access is governed by role-based access control policies and is subject to regular review.
• Two-Factor Authentication: idd888 offers 2FA for all player accounts and requires it for certain high-value account actions, adding an additional layer of identity verification beyond the password.
• Vulnerability Management: idd888 conducts periodic security assessments and vulnerability scans of its platform infrastructure. Critical vulnerabilities are remediated on a priority basis.
• Data Breach Response: idd888 maintains a data breach response procedure. In the event of a breach likely to result in significant harm to data subjects, idd888 will notify the National Privacy Commission within 72 hours of discovery, and affected individuals will be notified in accordance with NPC requirements.

Minors & Age Protection

idd888 does not knowingly collect personal data from individuals under the age of 21. The idd888 platform is strictly for use by adults aged 21 and above, as required by PAGCOR's online gaming regulations for the Philippines.

idd888 implements age verification procedures as part of the KYC process to confirm that all registered players meet the 21-year minimum age requirement. Where idd888 discovers that personal data has been collected from a person under the age of 21, all such data will be immediately deleted and the account will be closed in accordance with the Terms & Conditions.

Parents and guardians who have reason to believe that a minor has accessed or registered on the idd888 platform should contact idd888 customer support immediately so that the account can be investigated and appropriate action taken without delay.

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by idd888. These rights may be exercised by contacting the idd888 Data Protection Officer as described in Section 16.

To exercise any of the above rights, submit a written request to the idd888 Data Protection Officer (see Section 16). idd888 will respond within fifteen (15) business days. Where a request is complex or voluminous, we may extend this period by a further thirty (30) business days, with notice to you.

Some rights are subject to limitations where processing is required for legal compliance, PAGCOR regulatory purposes, or the prevention of fraud and money laundering. idd888 will inform you of any applicable limitations when responding to your request.

If you are not satisfied with idd888's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through the NPC's official complaints process.

International Data Transfers

Some of the service providers idd888 engages — including game software providers and cloud infrastructure operators — may process personal data in jurisdictions outside the Philippines. Where such transfers occur, idd888 ensures that appropriate safeguards are in place in accordance with Section 21 of the Philippine Data Privacy Act, including:

• Execution of data processing agreements that require foreign processors to maintain data protection standards equivalent to those required under R.A. 10173;
• Limiting the data transferred to the minimum necessary for the specific processing purpose;
• Conducting data protection impact assessments for high-risk processing involving sensitive personal information.

idd888 does not transfer personal data to jurisdictions identified by the NPC as providing inadequate data protection without implementing additional contractual or technical safeguards.

Third-Party Services

The idd888 platform integrates third-party game providers and payment processors to deliver its services. While idd888 screens these providers for data protection compliance and binds them by contractual data processing obligations, idd888 is not responsible for the independent privacy practices of third-party platforms accessed outside the idd888 environment.

This Policy applies solely to personal data processed by idd888 in the operation of the idd888 platform at idd888.co. Any personal data you share directly with payment providers (such as GCash or PayMaya) through their own interfaces is governed by those providers' respective privacy policies.

Policy Amendments

idd888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or PAGCOR directives. The most current version of this Policy is always available at idd888.co/privacy-policy.

Where amendments are material — meaning they significantly affect how your personal data is processed or alter your rights — idd888 will provide notice through:

• Email notification to your registered idd888 account email address; and/or
• A prominent in-platform notification displayed upon your next login to idd888.

Where required by the Data Privacy Act, material changes to data processing activities that rely on your consent will require fresh consent before the new processing commences. You will be given the opportunity to review the changes and provide or withhold consent as appropriate.

Contact & Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or to report a potential data breach, please contact the idd888 Data Protection Officer through the following channels:

Data Protection Officer (DPO)

Designated DPO responsible for R.A. 10173 compliance and NPC liaison for idd888. All formal data subject rights requests should be directed to the DPO in writing.

Email (Data Privacy Inquiries)

[email protected] — use subject line "DATA PRIVACY REQUEST" for faster routing. Response within 15 business days.

Customer Support (General Inquiries)

24/7 live chat support available on the idd888 platform for general account queries, cookie preferences, and marketing opt-outs.

Regulatory Escalation

If you are not satisfied with idd888's response, you may file a complaint with the National Privacy Commission (NPC) of the Philippines through NPC's official complaint channels.

All formal data subject rights requests must be submitted in writing (email or letter) and must include: your full name as registered on idd888, your idd888 account username, a description of the right you are exercising, and any supporting information relevant to your request. idd888 may request additional verification to confirm your identity before processing the request.