pit888 Privacy Policy

Section 01

Overview & Scope

This Privacy Policy describes how pit888 — a PAGCOR-regulated online gaming platform operating under Philippine law — collects, uses, stores, and protects the personal data of individuals who register for and use the pit888 platform available at pit888.net.

This policy applies to all users of the pit888 platform, including registered players based in Manila, Cebu, Davao, Quezon City, Makati, and across the Philippine archipelago. It covers data collected through the website, customer support interactions, payment processing, and any communications between you and pit888.

This policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. pit888 is committed to full compliance with these legal frameworks and treats data protection as an operational priority — not merely a legal checkbox.

Section 02

Data Controller

For the purposes of the Data Privacy Act of 2012, pit888 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the pit888 platform. As a Personal Information Controller, pit888 determines the purposes for which personal data is processed and the means by which such processing occurs.

pit888 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with RA 10173 and this Privacy Policy. The DPO may be contacted through the account help center or by writing to the support email address listed in Section 14 of this policy. The DPO is also responsible for liaising with the National Privacy Commission on matters related to data subject rights and any reportable personal data breaches.

Section 03

Data We Collect

3.1 Registration & Identity Data

When you register a pit888 account, we collect your full legal name, date of birth, residential address within the Philippines, nationality, email address, and mobile number. This data is required to create your account, verify your identity, and comply with PAGCOR's player registration requirements.

3.2 KYC & Verification Documents

Before processing withdrawals, pit888 collects copies of valid Philippine government-issued identification (such as a PhilSys National ID, passport, driver's license, SSS ID, or UMID), a selfie holding your ID, and proof of residential address dated within the past three months. These documents are used solely for identity verification and anti-money laundering compliance as required by PAGCOR and the Anti-Money Laundering Council (AMLC).

3.3 Financial & Transaction Data

pit888 records all deposit and withdrawal transactions, including amounts, timestamps, payment method identifiers (e.g., GCash account reference, BPI or BDO account number last four digits), and transaction statuses. Full payment account numbers are not stored by pit888 — payment processing is handled by our regulated third-party payment partners. All transaction amounts are denominated in Philippine Peso (PHP).

3.4 Gaming Activity Data

pit888 automatically records your gaming activity on the platform, including games played, bet amounts, win/loss outcomes, session durations, and bonus usage. This data is used for game integrity monitoring, responsible gaming alerts, bonus management, fraud prevention, and statistical reporting to PAGCOR as required by our operating license.

3.5 Technical & Device Data

When you access the pit888 platform, our servers automatically collect technical data including your IP address, device type, operating system, browser type and version, screen resolution, referring URL, and session timestamps. This data helps us maintain platform security, detect unauthorized access, and optimize the user experience.

3.6 Customer Support Data

Any communications you initiate with the pit888 support team — including live chat transcripts, email correspondence, and support ticket records — are stored to facilitate resolution of your inquiry, train our support staff, and maintain an audit trail for regulatory purposes. Please avoid including sensitive financial data such as full bank account numbers in support messages.

Section 04

How We Collect Data

pit888 collects personal data through the following channels:

• Direct submission — information you provide when registering, completing KYC, making a deposit or withdrawal request, contacting support, or filling in any form on the platform.
• Automated collection — technical and device data collected automatically each time you access the pit888 website or mobile interface via cookies, server logs, and analytics tools.
• Third-party sources — identity verification results from our regulated KYC partners, fraud screening signals from payment processors, and AML watchlist screening results from compliance service providers.
• Game providers — session and outcome data passed from third-party game provider APIs to the pit888 platform in real time during your gaming sessions.

Section 05

Purpose & Legal Basis

pit888 processes your personal data for the following purposes, each grounded in a lawful basis under the Data Privacy Act of 2012:

• Account registration and management — necessary for the performance of the contract between you and pit888, namely providing you access to the gaming platform.
• Identity verification (KYC) — required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160, as amended), and the Terrorism Financing Prevention and Suppression Act.
• Payment processing — necessary for executing deposit and withdrawal transactions in Philippine Peso via approved local payment channels.
• Fraud detection and security — based on our legitimate interest in protecting the platform, our players, and the integrity of all gaming outcomes.
• Responsible gaming monitoring — required under PAGCOR regulations to detect patterns indicative of problem gambling and to respond with appropriate interventions including self-exclusion tools.
• Customer support — necessary for the performance of our service obligations to you as a registered player.
• Marketing communications — based on your explicit consent, where you have opted in to receive promotional emails or SMS messages from pit888. You may withdraw this consent at any time through your account notification settings.
• Regulatory reporting — required to fulfill our legal obligations to PAGCOR, the AMLC, and the National Privacy Commission as mandated by Philippine law.

Section 06

Data Sharing

6.1 Internal Sharing

Access to your personal data within pit888 is restricted to staff and departments that require it to perform their specific functions — including account management, compliance, payments, and customer support teams. All pit888 staff with access to personal data are bound by confidentiality obligations and undergo regular data protection training.

6.2 Third-Party Service Providers

pit888 engages regulated third-party service providers to support specific platform functions. These include payment processors (for GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank transactions), KYC verification partners, cloud hosting providers, cybersecurity vendors, and game content providers. Each service provider is bound by a data processing agreement that prohibits them from using your data for purposes beyond the services they provide to pit888.

6.3 Regulatory and Legal Disclosures

pit888 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, the Bureau of Internal Revenue, or any other competent Philippine government authority where such disclosure is required by law, a lawful order, or regulatory directive. pit888 will, where legally permissible, notify you of such disclosures.

Section 07

Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the pit888 website. They allow the platform to remember your session state, preferences, and certain account settings across page loads and return visits. pit888 also uses similar technologies such as local storage and session tokens for platform functionality.

7.2 Types of Cookies Used

• Strictly Necessary Cookies — required for the pit888 platform to function. These include your session authentication token, security cookies, and load-balancing cookies. These cannot be disabled without rendering the platform non-functional.
• Functional Cookies — used to remember your language preferences, last game played, and notification settings to personalize your experience on pit888.
• Analytics Cookies — used to collect anonymized statistics about how users navigate the pit888 platform, which pages are most visited, and where technical errors occur. This data is used to improve platform performance.
• Security Cookies — used to detect suspicious activity patterns, bot traffic, and to support our fraud prevention and account security systems.

7.3 Managing Cookies

You may adjust your browser settings to refuse or delete cookies at any time. Please be aware that disabling strictly necessary cookies will prevent you from logging in to and using the pit888 platform. Disabling analytics or functional cookies will not prevent platform access but may limit certain personalization features.

Section 08

Data Retention

pit888 retains your personal data for the following periods, after which data is securely deleted or anonymized unless a longer retention period is required by law:

• Account and registration data — retained for the duration of your account and for five (5) years following account closure, as required by PAGCOR record-keeping obligations.
• KYC and identity documents — retained for five (5) years from the date of submission, or such longer period as required by the Anti-Money Laundering Act.
• Transaction records — retained for ten (10) years in compliance with AMLC reporting requirements applicable to PAGCOR-licensed operators.
• Gaming activity logs — retained for five (5) years from the date of the recorded session.
• Customer support communications — retained for three (3) years from the date of the last interaction.
• Marketing consent records — retained for the duration of your account and for two (2) years following account closure or consent withdrawal.

Section 09

Security Measures

pit888 employs a multilayered security architecture to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security program includes the following controls:

• TLS 1.3 encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive personal data stored in our databases.
• Bcrypt hashing for all account passwords — pit888 staff cannot view your password.
• Two-factor authentication (2FA) available on all player accounts and mandatory for administrative access.
• Automated intrusion detection and real-time anomaly monitoring across all platform infrastructure.
• Regular third-party penetration testing and vulnerability assessments conducted by certified cybersecurity firms.
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis.
• Physical and logical access controls on all data centers hosting pit888 platform infrastructure.

In the event of a personal data breach that is likely to result in serious harm to affected players, pit888 will notify the National Privacy Commission within seventy-two (72) hours of discovery and will notify affected players without undue delay, as required by the Data Privacy Act and NPC Circular 16-03.

Section 10

Your Data Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by pit888:

To exercise any of these rights, please contact pit888 through the live chat inside your account or via the support email in Section 14. pit888 will respond to data subject requests within fifteen (15) business days. Some requests may be subject to identity verification before processing, and certain rights may be limited where legal retention obligations apply.

Section 11

Minors & Age Policy

The pit888 platform is strictly restricted to individuals who are at least twenty-one (21) years of age, as required by PAGCOR regulations governing online casino gaming in the Philippines. pit888 does not knowingly collect personal data from individuals under the age of 21.

If pit888 discovers or is notified that an account has been registered by a person under 21 years of age, we will immediately suspend the account, delete all associated personal data that is not required for regulatory reporting purposes, and forfeit any balance in accordance with our Terms & Conditions. Any person who suspects that an underage individual has registered on the pit888 platform is encouraged to report this through the support channel.

Section 12

Cross-Border Data Transfers

Some of the third-party service providers engaged by pit888 — including cloud infrastructure providers, game content providers, and cybersecurity vendors — may process or store data in data centers located outside the Philippines. In all cases, pit888 ensures that such transfers comply with the requirements of the Data Privacy Act, including the requirement that the receiving party provides an equivalent level of data protection.

pit888 implements appropriate safeguards for cross-border data transfers, including contractual data transfer agreements that incorporate the standard data protection clauses recognized by the National Privacy Commission. Players based in Metro Manila, Cebu, Davao, and other regions of the Philippines can be assured that their personal data remains subject to Philippine data protection standards regardless of where it is technically processed.

Section 13

Policy Changes

pit888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, pit888 will notify registered players via email and display a prominent notice on the platform at least seven (7) days before the updated policy takes effect.

Minor updates — such as clarifications, corrections of typographical errors, or organizational restructuring that does not alter the substance of your rights or our obligations — may be made without advance notice. The effective date at the top of this policy will always reflect when the most recent version was published.

Continued use of the pit888 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you may close your account in accordance with the process described in our Terms & Conditions.

Section 14

Contact & Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, you may contact the pit888 Data Protection Officer through the following channels:

• Live chat available inside your pit888 account — available 24/7.
• Help center accessible after logging in to your pit888 account.
• Email: [email protected] — displayed as plain text only, not a clickable link.

When submitting a data subject request or privacy complaint, please include your registered account email address, a clear description of your request or concern, and any relevant transaction or account reference numbers to help us process your inquiry efficiently. pit888 acknowledges all privacy-related inquiries within two (2) business days and provides a full response within fifteen (15) business days.