bc88 Casino – Privacy Policy

01 Introduction & Scope

bc88 Casino ("bc88," "we," "our," or "us") operates the online gaming platform accessible at bc88.onl (the "Platform"). This Privacy Policy describes how bc88 collects, processes, stores, and protects personal information belonging to registered Members, visitors, and prospective players who interact with the bc88 Platform or communicate with bc88 in any capacity.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC"). bc88 is committed to responsible data handling and to respecting the privacy rights of every Filipino player who chooses to engage with our Platform.

This Privacy Policy applies to all personal data collected through the bc88 website, mobile browser interface, customer support communications, payment processing, and any promotional or marketing activities conducted by bc88. It does not apply to third-party websites, game providers, or payment processors whose privacy practices are governed by their own separate policies.

02 Data Controller

bc88 Casino acts as the personal information controller ("PIC") in respect of all personal data collected through the Platform, as that term is defined under the Philippine Data Privacy Act. As PIC, bc88 determines the purposes and means of processing your personal information and is responsible for ensuring that processing activities comply with applicable Philippine data protection law.

bc88 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with data protection obligations, handling data subject requests, and serving as the point of contact for the National Privacy Commission. Contact details for bc88's DPO are provided in Section 14 of this Policy.

03 Personal Data We Collect

bc88 collects the following categories of personal data from Members and Platform users:

bc88 does not collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or sexual orientation) unless specifically required for responsible gaming compliance purposes and with your explicit consent.

04 How We Use Your Personal Data

bc88 processes your personal data for the following specific, legitimate purposes:

• Account Registration and Management: Creating and maintaining your bc88 member account, verifying your identity, and administering your account settings and preferences;
• Identity Verification (KYC): Confirming your identity and age (21+) in compliance with PAGCOR regulatory requirements and Philippine anti-money laundering obligations under RA 9160;
• Payment Processing: Facilitating GCash, PayMaya, BPI, BDO, and Metrobank deposits and withdrawals; detecting and preventing fraudulent transactions;
• Platform Delivery: Providing access to bc88's game catalogue, sports betting markets, live dealer tables, and all other features of the Platform;
• Regulatory Compliance: Meeting bc88's obligations to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, and other relevant Philippine regulatory bodies;
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviors; administering deposit limits, loss limits, and self-exclusion requests; and complying with responsible gaming mandates;
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of support interactions for quality assurance;
• Security and Fraud Prevention: Detecting and investigating unauthorized access, fraud, cheating, and prohibited conduct as described in bc88's Terms & Conditions;
• Marketing Communications: Sending promotional offers, bonus notifications, and Platform updates to Members who have opted in to receive such communications. You may opt out at any time by contacting [email protected].

05 Legal Basis for Processing

bc88 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform the contract between you and bc88 — i.e., providing access to the gaming Platform, processing payments, and administering your account;
• Legal Obligation: Processing required to comply with bc88's obligations under Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself;
• Legitimate Interests: Processing for fraud prevention, Platform security, responsible gaming monitoring, and internal analytics, where bc88's legitimate interests are not overridden by your privacy rights;
• Consent: Marketing communications and non-essential cookie placement, where your explicit consent has been obtained and may be withdrawn at any time.

06 Data Sharing & Third-Party Disclosure

bc88 does not sell your personal data to third parties. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Game Software Providers: JILI, PG Soft, Pragmatic Play, and other licensed game providers receive technical session data necessary to deliver their games through the bc88 Platform. These providers are contractually bound to process such data solely for game delivery purposes;
• Payment Processors: GCash (G-Xchange, Inc.), PayMaya (Maya Bank), and partner banks receive the financial data required to process your deposit and withdrawal transactions. These entities are regulated by the Bangko Sentral ng Pilipinas and operate under their own privacy frameworks;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, and Philippine law enforcement agencies, where disclosure is required by law or regulatory directive;
• Identity Verification Services: Third-party KYC and identity verification service providers who assist bc88 in confirming member identities, subject to data processing agreements consistent with DPA requirements;
• Professional Advisors: Legal, accounting, and compliance advisors engaged by bc88, subject to professional confidentiality obligations.

07 Cookies & Tracking Technologies

bc88 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly — maintaining your login session, remembering your language preferences, and ensuring game integrity across your session. These cannot be disabled without impairing Platform functionality;
• Analytics Cookies: Collecting anonymized data on how Members navigate the bc88 Platform, which pages are most visited, and where users encounter difficulties. This helps bc88 improve the Filipino player experience;
• Security Cookies: Detecting and preventing fraudulent login attempts, automated bot traffic, and suspicious account activity patterns.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the bc88 Platform. bc88 does not use third-party advertising cookies or behavioral tracking for cross-site advertising purposes.

08 Data Retention

bc88 retains personal data for the following minimum periods, after which data will be securely deleted or anonymized unless retention is required by applicable law:

• Account and Identity Data: Retained for the duration of your active bc88 membership plus five (5) years following account closure, as required by Philippine anti-money laundering regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC record-keeping requirements;
• Gaming Activity Data: Retained for three (3) years from the date of each gaming session for regulatory compliance and dispute resolution purposes;
• Customer Support Communications: Retained for two (2) years from the date of each interaction;
• Marketing Consent Records: Retained for the duration of your active membership or until consent is withdrawn, plus one (1) year.

09 Data Security Measures

bc88 implements the following technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Industry-standard SSL/TLS encryption for all data transmitted between your device and the bc88 Platform;
• Encryption of stored sensitive personal data including identity documents and financial account details;
• Role-based access controls limiting bc88 staff access to personal data on a strictly need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scans of bc88 Platform infrastructure;
• Two-factor authentication options for Member accounts;
• Documented incident response procedures for personal data breaches, including NPC notification within 72 hours of awareness of a reportable breach.

No data transmission over the internet or electronic storage system is 100% secure. While bc88 implements substantial security safeguards, we cannot guarantee absolute security of personal data. Members are also responsible for maintaining the security of their bc88 login credentials.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act and as a bc88 Member, you have the following rights in respect of your personal data:

• Right to be Informed: The right to know whether bc88 processes your personal data and the purposes for which it is processed — as described in this Policy;
• Right of Access: The right to obtain a copy of the personal data bc88 holds about you, subject to identity verification;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data bc88 holds about you;
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where processing is unlawful or the data is no longer necessary for the purpose for which it was collected, subject to bc88's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transmission to another controller, where technically feasible;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe bc88 has violated your data privacy rights.

To exercise any of the above rights, submit a written request to bc88's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." bc88 will acknowledge your request within five (5) business days and respond substantively within fifteen (15) business days, or notify you of any extension required under the DPA.

11 Children's Privacy

The bc88 Platform is strictly restricted to individuals who are 21 years of age or older, consistent with PAGCOR age requirements for online gaming in the Philippines. bc88 does not knowingly collect personal data from individuals under the age of 21. If bc88 becomes aware that personal data has been collected from a person under 21 years of age, such data will be deleted immediately and the account will be permanently closed.

If you are a parent or guardian and believe your minor child has accessed the bc88 Platform or submitted personal information without your authorization, please contact bc88 immediately at [email protected] so we can take appropriate remedial action.

12 Cross-Border Data Transfers

Some of bc88's third-party service providers — including certain game software providers and cloud infrastructure partners — may process personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, bc88 ensures that adequate data protection safeguards are in place through contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law, consistent with NPC guidelines on cross-border data transfers.

bc88 does not transfer personal data to jurisdictions that the NPC has determined to lack adequate data protection standards without implementing additional contractual safeguards approved by the NPC.

13 Updates to This Privacy Policy

bc88 reserves the right to amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, NPC guidelines, or Platform features. The effective date of the current version is displayed at the top of this page.

Material changes to this Policy will be communicated to registered Members via a notice on the bc88 Platform homepage and, where practicable, via SMS to your registered mobile number at least seven (7) days before the changes take effect. Your continued use of the bc88 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Privacy Policy periodically so that you remain informed about how bc88 protects your personal data.

14 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bc88, please contact bc88's Data Protection Officer through the following channel:

• Email: [email protected] — Subject: "Privacy / DPO Inquiry"
• Live Chat: Available 24/7 on the bc88 Platform — ask to be connected to the DPO team for privacy matters
• Response Commitment: bc88 aims to acknowledge all privacy-related communications within 24 hours and to resolve data subject requests within 15 business days

If you are not satisfied with bc88's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about filing a complaint with the NPC is available on the NPC's official website.