do888 Privacy Policy

do888 ("do888", "we", "us", "our") is committed to protecting the privacy and personal data of every player who uses the do888 online casino and betting platform available at do888.bio (the "Platform"). This Privacy Policy ("Policy") describes how do888 collects, uses, stores, shares, and protects personal information in connection with your use of the Platform.

This Policy applies to all do888 players, registered account holders, website visitors, and any other individuals whose personal data is processed by do888 in connection with the Platform's services — including bingo, JILI slots, live dealer games, color game, sports betting, Aviator, and cricket betting.

By accessing the do888 Platform, registering a player account, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, do888 acts as the Personal Information Controller in respect of the personal data collected and processed through the Platform.

As Personal Information Controller, do888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with RA 10173 and the regulations of the National Privacy Commission (NPC) of the Philippines.

Where do888 engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or cloud infrastructure operators — those providers act as Personal Information Processors under do888's instructions and are bound by appropriate data processing agreements.

do888 collects personal data from you directly and automatically in the course of providing its services. The categories of personal data we collect include the following:

3.1 Registration and Identity Data

When you create a do888 account, we collect information including your full name, date of birth, gender, nationality, residential address (including city — such as Manila, Cebu, Davao, Quezon City, or Makati), email address, and mobile phone number. This information is required to create and maintain your account and to verify your eligibility to use the Platform.

3.2 KYC Verification Data

To comply with PAGCOR regulatory requirements and Philippine anti-money laundering laws, do888 collects copies of government-issued identification documents — such as your PhilSys National ID, passport, or driver's license — as well as supporting documents such as proof of address (utility bills or bank statements) and, where required, documentation evidencing your source of funds.

3.3 Financial Data

We collect transaction-related information including deposit amounts, withdrawal requests, payment method details (such as your GCash mobile number, Maya account reference, BPI, BDO, or Metrobank account details), and transaction history. Note that do888 does not store full bank account or card numbers on its own servers — payment processing is handled by certified third-party payment processors.

3.4 Gaming Activity Data

do888 records details of your gameplay on the Platform, including game sessions, wager amounts, game outcomes, bonus usage, and betting history across all games including bingo, slots, live casino, sports betting, and Aviator. This data is used for regulatory reporting, dispute resolution, responsible gaming monitoring, and Platform improvement.

3.5 Technical and Device Data

When you access the do888 Platform, we automatically collect certain technical information, including your IP address, device type, operating system, browser type and version, screen resolution, time zone, and referring URL. This data is used for security monitoring, fraud detection, and Platform optimisation.

3.6 Communications Data

We retain records of communications between you and the do888 customer support team, including live chat transcripts, email correspondence, and any feedback or complaints submitted through the Platform.

3.7 Summary of Data Categories

do888 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, and securing your do888 player account, including processing deposits and withdrawals and managing your account balance.
• Identity and age verification: Confirming that you meet the 21+ age requirement and other eligibility criteria before granting access to real-money gaming services.
• Regulatory compliance: Meeting do888's obligations under PAGCOR licensing conditions, Philippine anti-money laundering laws (AMLA and its implementing rules), and the Data Privacy Act of 2012.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeover attempts, and other prohibited conduct.
• Responsible gaming: Monitoring gaming activity for signs of problem gambling, enforcing deposit limits and self-exclusion requests, and contacting players where welfare concerns are identified.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance related to your do888 account and gameplay.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the do888 Platform's features, performance, game selection, and user experience.
• Marketing communications: Sending you promotional offers, bonus notifications, and Platform updates — but only where you have given your consent and subject to your right to opt out at any time.

Under the Philippine Data Privacy Act of 2012, do888 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the do888 Terms and Conditions — such as account management, deposit and withdrawal processing, and gameplay services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AMLA obligations, and NPC data privacy regulations.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform analytics, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and optional Platform features, where you have given your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

do888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

6.1 Regulatory and Law Enforcement Authorities

do888 is required by Philippine law to share certain information with regulatory and law enforcement bodies, including PAGCOR (as do888's licensing authority), the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and the Philippine National Police (PNP), where legally required or where do888 has reasonable grounds to believe a legal obligation or legitimate enforcement purpose exists.

6.2 Payment Processors

To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other accepted payment channels, do888 shares the minimum necessary financial data with certified third-party payment processors. These processors are bound by their own regulatory obligations as BSP-supervised financial institutions and by contractual data protection requirements.

6.3 Identity Verification Providers

do888 may use third-party KYC and identity verification service providers to assist with document verification and age confirmation. These providers act as Personal Information Processors under do888's instructions and may not use your data for any purpose other than performing identity verification services on do888's behalf.

6.4 Technology and Infrastructure Providers

do888 uses cloud hosting, cybersecurity, analytics, and customer support software provided by third-party technology vendors. These providers may process technical and operational data on do888's behalf as part of delivering the Platform's infrastructure. All such providers are bound by data processing agreements that restrict their use of your data to the specified service purpose.

6.5 Game Software Providers

Certain games available on the do888 Platform are provided by third-party game developers and studios (such as JILI and live dealer studios). These providers may receive limited gameplay data — such as session identifiers and wager records — strictly for the purpose of operating the respective games. They do not receive your full identity or financial data.

do888 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device when you visit the do888 website.

7.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function, including maintaining your login session, remembering your language preferences, and enabling secure transactions. These cannot be disabled.
• Performance cookies: Collect anonymised data about how players use the Platform — such as which pages are visited most frequently — to help us improve the user experience.
• Functional cookies: Remember your Platform preferences, such as game lobby filter settings and display preferences, to personalise your experience on return visits.
• Marketing cookies: Used only where you have given consent, to deliver relevant promotional content and measure the effectiveness of do888's marketing campaigns.

7.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the do888 Platform, including your ability to maintain a login session or access certain game features.

do888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in any event for the minimum periods required by applicable Philippine law. The following general retention periods apply:

Following the expiry of applicable retention periods, do888 will securely delete or anonymise your personal data in accordance with NPC-approved data disposal procedures.

do888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the do888 Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records, using industry-standard encryption algorithms.
• Role-based access controls ensuring that do888 staff can only access player data to the extent necessary for their specific job function.
• Regular security audits and penetration testing conducted by qualified cybersecurity professionals.
• Multi-factor authentication requirements for do888 staff accessing systems that process player personal data.
• 24/7 automated monitoring of Platform infrastructure for anomalous activity indicative of unauthorised access or cyberattack.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, do888 will notify the National Privacy Commission and affected players in accordance with the NPC Circular on Personal Data Breach Management, within the timeframes prescribed by applicable regulations.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by do888. To exercise any of these rights, contact our support team at [email protected].

do888 will respond to all data subject rights requests within fifteen (15) calendar days of receipt, in accordance with NPC guidelines. Where a request is complex or numerous, the response period may be extended by a further fifteen (15) days with prior notice to you.

The do888 Platform is strictly intended for individuals who are 21 years of age or older, as required by PAGCOR regulations. do888 does not knowingly collect personal data from individuals under the age of 21.

If do888 discovers or has reason to believe that a player account belongs to an individual under 21 years of age, we will immediately suspend the account, preserve relevant data for regulatory reporting purposes, and securely delete any personal data not required for legal or regulatory compliance purposes.

If you are a parent or guardian and believe that a minor in your care has registered a do888 account, please contact our support team immediately at [email protected] so that we can take prompt action.

do888 primarily processes and stores your personal data within the Philippines. In certain circumstances — such as where do888 uses internationally-based cloud infrastructure or game software providers — your personal data may be transferred to and processed in countries outside the Philippines.

Where such transfers occur, do888 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses with recipient organisations that impose data protection obligations consistent with RA 10173.
• Transfers only to organisations located in countries assessed by the NPC as providing an adequate level of data protection.
• Additional technical security measures applied to data transferred outside the Philippines.

The do888 Platform does not include links to external third-party websites for commercial or marketing purposes. Where references to third-party service providers (such as GCash, Maya, or BPI) appear on the Platform, these are solely for the purpose of explaining available payment methods and do not constitute endorsements or partnerships beyond the scope of payment processing.

do888 is not responsible for the privacy practices of any third-party payment or identity verification providers. We encourage you to review the privacy policies of any external organisations whose services you use in connection with your do888 account.

do888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The effective date of the current version is displayed prominently at the top of this page.

Where changes to this Policy are material — meaning they significantly affect your rights or how we use your data — do888 will notify you via the email address registered to your account at least fourteen (14) days before the changes take effect, or via a prominent notice on the Platform.

Your continued use of the do888 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept the updated Policy, you may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way do888 handles your personal data, please get in touch with our Data Privacy team:

• Email: [email protected]
• Subject line: Privacy / Data Request — [your registered email]
• Availability: 24 hours a day, 7 days a week
• Operating timezone: Philippine Time (PHT, UTC+8)
• Response time: Within 15 calendar days as required under RA 10173

If you are not satisfied with do888's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file an NPC complaint is available on the NPC's official government website.