Privacy Policy — ed888 Casino Philippines

Introduction & Data Controller Identity

This Privacy Policy describes how ed888 — the legal entity operating the online gaming platform at ed888.co under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) — collects, processes, stores, discloses, and protects the personal data of its registered players and website visitors in the Republic of the Philippines.

ed888 acts as the personal information controller (PIC) in respect of all personal data collected through the ed888 platform, as that term is defined under Republic Act No. 10173 (the Data Privacy Act of 2012) and its implementing rules and regulations issued by the National Privacy Commission of the Philippines.

This Privacy Policy is incorporated into and must be read together with the ed888 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions in relation to data privacy matters, this Privacy Policy shall prevail.

Personal Data We Collect

ed888 collects personal data that falls into the following categories, depending on how you interact with the platform:

2.1 Registration and Identity Data

• Full legal name as it appears on a valid Philippine government-issued identification document
• Date of birth (used to verify the 21+ age requirement under PAGCOR regulations)
• Gender
• Philippine mobile number (used for account verification and, where enabled, two-factor authentication)
• Email address (used for account communications, transaction notifications, and, where consented to, marketing)
• Username chosen at registration
• Encrypted password (never stored in plain text; not accessible to ed888 staff)

2.2 KYC and Identity Verification Data

• Copies of Philippine government-issued identification documents (Passport, SSS, UMID, PhilSys National ID, or Driver's License)
• Proof of residential address (utility bill, bank statement, or similar document dated within three months)
• Selfie photographs taken for identity verification purposes
• Source of funds documentation for significant deposit or withdrawal transactions, where required under anti-money laundering regulations

2.3 Financial and Transaction Data

• GCash mobile number and transaction reference numbers associated with deposits and withdrawals
• Maya account details associated with payment transactions
• Bank account details (account name, bank name, account number) provided for bank transfer withdrawals to BPI, BDO, Metrobank, or other Philippine banks
• Complete deposit and withdrawal history including amounts in Philippine Peso (₱), timestamps, and transaction statuses
• Account balance history

2.4 Gaming Activity Data

• Complete record of all games played, bets placed, and outcomes on the ed888 platform
• Sports betting selections, stake amounts, and settlement records
• Game preferences, favorite game lists, and recently played history
• Session duration, session start and end times, and session frequency
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion history)

2.5 Technical and Device Data

• IP address and approximate geographic location derived from IP address
• Device type, operating system, and browser type and version
• Mobile network operator (e.g., Globe, Smart, DITO) where the platform is accessed via mobile data
• Session tokens and authentication logs
• Cookie data and similar tracking technology data (see Section 9)
• Platform error logs and crash reports

2.6 Communications Data

• Content of live chat support conversations with ed888 customer service agents
• Email correspondence sent to or received from ed888 support
• Complaint and dispute records
• Survey and feedback responses where voluntarily provided

How We Collect Your Personal Data

ed888 collects personal data through the following means:

ed888 does not purchase personal data lists from third-party marketing companies or data brokers. All personal data we hold about you is either provided directly by you or generated by your use of the ed888 platform.

How We Use Your Personal Data

ed888 uses your personal data for the following specific purposes:

4.1 Account Administration and Service Delivery

We use your registration data, identity data, and financial data to create and maintain your ed888 account, process deposits and withdrawals in Philippine Peso, provide access to games and betting markets, deliver transaction confirmation notifications, and manage your responsible gaming tool preferences.

4.2 Legal Compliance and Regulatory Obligations

ed888 processes KYC and financial transaction data to comply with its legal obligations under the PAGCOR license conditions, Republic Act No. 9160 (Anti-Money Laundering Act of 2001) as amended, Republic Act No. 10168 (Terrorism Financing Prevention and Suppression Act), and all applicable PAGCOR directives. This includes filing reports with the Anti-Money Laundering Council (AMLC) where legally required.

4.3 Fraud Prevention and Security

Technical data, login history, and gaming activity data are analyzed to detect and prevent unauthorized account access, bonus abuse, account collusion, money laundering activity, and other fraudulent or prohibited conduct as defined in the ed888 Terms & Conditions.

4.4 Responsible Gaming Monitoring

Gaming activity data, session duration data, and financial transaction data are used to monitor player behavior for indicators of problem gambling. Where our monitoring systems identify patterns that may indicate harmful gambling behavior, ed888 may proactively contact the player with responsible gaming information or, in severe cases, restrict account activity to protect the player's interests.

4.5 Customer Support

Communications data and account data are used to handle your support requests, resolve disputes, and improve the quality of our customer service operations. Support conversation logs are retained for audit and quality assurance purposes.

4.6 Platform Improvement and Analytics

Aggregated and anonymized usage data is used to analyze platform performance, identify technical issues, improve game loading speeds, optimize the mobile user experience, and develop new features. Where possible, analytics are conducted on anonymized data sets that cannot be linked back to individual players.

4.7 Marketing Communications (Consent-Based Only)

If you have explicitly opted in to marketing communications during registration or through your account settings, ed888 may use your contact details to send you information about new games, promotions, bonuses, and platform updates. You may withdraw this consent at any time by updating your notification preferences in Account Settings or by contacting support.

Legal Basis for Processing

Under the Data Privacy Act of 2012 (R.A. 10173), ed888 processes your personal data on the following lawful bases:

Data Sharing & Disclosure

ed888 shares your personal data only with the following categories of recipients, and only to the extent necessary for the stated purposes:

6.1 Game Technology Providers

Third-party game developers and live casino studio operators (such as Pragmatic Play, PG Soft, Evolution Gaming, and others) receive limited technical session data necessary to deliver their games within the ed888 platform. These providers do not receive your full identity data or financial details and are bound by confidentiality obligations.

6.2 Payment Service Providers

GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), InstaPay-connected Philippine banks (BPI, BDO, Metrobank), and other approved payment processors receive the minimum data necessary to process your deposit or withdrawal transaction. These transactions are subject to each provider's own privacy policy and Philippine financial regulatory obligations.

6.3 Identity Verification Services

PAGCOR-accredited KYC and identity verification service providers may process your identification documents and biometric data (selfie photographs) on ed888's behalf for the purpose of verifying your identity in compliance with PAGCOR license conditions.

6.4 Regulatory and Law Enforcement Authorities

ed888 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities when required to do so by applicable law, court order, or regulatory directive. ed888 will not notify the data subject of such disclosure where prohibited from doing so by law.

6.5 Professional Advisers

Legal counsel, auditors, and other professional advisers engaged by ed888 may have access to limited personal data in the course of providing professional services to ed888. These advisers are bound by professional confidentiality obligations.

International Data Transfers

The ed888 platform's primary data infrastructure is located within Southeast Asia to ensure compliance with Philippine data residency requirements and to minimize latency for Filipino players. However, certain technology partners — including game providers, cybersecurity vendors, and cloud infrastructure providers — may process limited technical data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, ed888 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act and NPC guidance, including contractual data protection provisions requiring the recipient to apply standards of protection at least equivalent to those required under Philippine law.

Your KYC documents, financial transaction records, and full account data are stored in primary data centers within the Philippines and are not routinely transferred to servers outside Philippine jurisdiction.

Data Retention

ed888 retains your personal data for the following periods, which reflect legal requirements under Philippine law as well as legitimate business needs:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized. Where data is required for ongoing legal proceedings or regulatory investigations, retention may be extended for the duration of those proceedings.

Cookies & Tracking Technologies

The ed888 platform uses cookies and similar tracking technologies to deliver a functional, personalized, and secure experience. The following categories of cookies are used:

Strictly Necessary Cookies

These cookies are essential for the ed888 platform to function. They include session authentication tokens that keep you logged in as you navigate between pages, security cookies that detect and prevent fraudulent login attempts, and load balancing cookies that ensure the platform remains stable during high traffic periods. These cookies cannot be disabled — the platform will not function without them.

Functional Cookies

These cookies remember your preferences — including your preferred language, display settings, and recently played game list — so that your ed888 experience is consistent between sessions. Disabling these cookies will not prevent you from using the platform but may reduce the quality of your experience.

Analytics Cookies

ed888 uses privacy-respecting analytics tools to understand how players navigate the platform, which pages experience technical issues, and where the mobile user experience can be improved. Analytics data is aggregated and does not personally identify individual players. You may opt out of analytics cookies via the cookie consent banner displayed on first visit to ed888.co.

Security Measures

ed888 implements the following technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction:

• 256-bit TLS Encryption: All data transmitted between your device and ed888 servers is encrypted using TLS 1.3. This includes the login page, deposit forms, KYC document uploads, and all in-session communications.
• Password Hashing: Passwords are hashed using a one-way cryptographic algorithm before storage. ed888 staff cannot read or recover your password — which is why the recovery process requires you to set a new one.
• Two-Factor Authentication: Optional SMS OTP two-factor authentication is available for all accounts. We strongly recommend enabling this feature, particularly for accounts with significant balances.
• Access Controls: Personal data is accessible only to ed888 staff whose roles require it. Access is role-based, logged, and reviewed on a regular basis. KYC documents are accessible only to compliance team members.
• Intrusion Detection: ed888's infrastructure includes real-time monitoring systems that detect and alert on unusual access patterns, potential intrusion attempts, and abnormal data access behaviors.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights, ed888 will notify the National Privacy Commission within 72 hours of discovery and will notify affected players without undue delay, in accordance with NPC Circular 16-03.

While ed888 maintains robust security measures, no internet-based platform can guarantee absolute data security. You contribute to your own account security by choosing a strong password, enabling two-factor authentication, not sharing your credentials, and using secure internet connections when accessing your ed888 account.

Children's Privacy

Your Privacy Rights Under Philippine Law

As a data subject under the Data Privacy Act of 2012 (R.A. 10173), you hold the following rights with respect to your personal data held by ed888:

Exercising Your Privacy Rights

To exercise any of the rights described in Section 12, please contact the ed888 Data Privacy Officer using the contact details in Section 15. Your request should include:

1. Your full registered name and the email address associated with your ed888 account
2. A clear description of the specific right you wish to exercise and the personal data it relates to
3. Sufficient information to allow ed888 to verify your identity before processing the request (this is required to protect your data from unauthorized access requests)

ed888 will respond to all verifiable privacy rights requests within fifteen (15) calendar days of receipt. Where a request is complex or where ed888 receives a large volume of requests, this period may be extended by a further fifteen (15) days, with notice provided to you of the extension and the reason for it.

Privacy rights requests are processed free of charge. However, where requests are manifestly unfounded, repetitive, or excessive, ed888 reserves the right to charge a reasonable fee to cover administrative costs, or to refuse the request, explaining the reasons for refusal to the data subject.

Changes to This Privacy Policy

ed888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or platform features. The most current version of this Policy will always be published at ed888.co/privacy-policy with the effective date clearly displayed at the top of the page.

For material changes that affect your privacy rights or introduce new categories of data processing, ed888 will notify registered players by email and/or via a prominent notice on the platform at least fourteen (14) days before the changes take effect. Your continued use of the ed888 platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of and agreement to the updated terms.

We recommend bookmarking ed888.co/privacy-policy and reviewing it periodically, particularly after receiving a notification of changes.

Contact & Data Privacy Officer

ed888 has appointed a Data Privacy Officer (DPO) in accordance with Section 23 of the Data Privacy Act of 2012 and NPC Circular 17-01. The DPO is responsible for overseeing ed888's compliance with R.A. 10173 and for handling all data subject rights requests and privacy complaints.