extreme88 Privacy Policy

extreme88 takes the privacy and security of your personal data seriously. As a PAGCOR-regulated online gaming platform serving Filipino players, we are subject to both gaming regulations and data protection laws that require us to handle your information responsibly, transparently, and securely.

This Policy applies to all personal data collected through the extreme88 website at extreme88.one, including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and any other use of our platform or services.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

For the purposes of the Philippine Data Privacy Act of 2012, extreme88 is the personal information controller in respect of the personal data collected through the extreme88 platform. This means extreme88 determines the purposes and means of processing your personal data.

If you have any questions about how extreme88 processes your personal data, or if you wish to exercise any of your rights as a data subject, you may contact our Data Protection Officer through the contact details set out in Section 13 of this Policy.

extreme88 collects the following categories of personal data in connection with your use of the platform:

3.1 Registration & Identity Data

• Full legal name, date of birth, and gender
• Residential address (including city, province, and postal code)
• Mobile number and email address
• Government-issued identification document (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID)
• Selfie or photograph for identity verification purposes

3.2 Financial Data

• GCash or PayMaya mobile number linked to your account
• Bank account details (account name, account number, bank name) for withdrawal processing
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment references

3.3 Gaming & Activity Data

• Game history, wager amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)

3.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session logs, login timestamps, and access records
• Cookie and tracking data (see Section 9)

3.5 Communications Data

• Records of live chat conversations, email correspondence, and support ticket history
• Feedback, complaints, and dispute records

extreme88 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the extreme88 platform.
• Payment processing: To process deposits and withdrawals through GCash, PayMaya, and bank transfer channels, and to maintain accurate transaction records.
• KYC and age verification: To verify that you meet the minimum age requirement of 21 years and to comply with PAGCOR's Know Your Customer obligations.
• Regulatory compliance: To meet our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws and regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other security threats.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our live chat and email support channels.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Platform improvement: To analyze usage patterns, troubleshoot technical issues, and improve the features and performance of the extreme88 platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided your consent to receive such communications. You may withdraw this consent at any time through your account settings.

extreme88 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and gameplay services.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing is necessary for the legitimate interests of extreme88, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent: For processing activities that are not strictly necessary — such as marketing communications and non-essential cookies — extreme88 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

extreme88 does not sell, rent, or trade your personal data. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash (Mynt), PayMaya (Voyager Innovations), and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) — to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services engaged by extreme88 to conduct document checks and age verification in compliance with PAGCOR requirements.
• Game providers: Licensed game software providers whose games are available on the extreme88 platform — limited to the data necessary to deliver gameplay and maintain game integrity.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities — where disclosure is required by law, court order, or regulatory direction.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged by extreme88 under strict data processing agreements that prohibit independent use of your data.

extreme88 retains your personal data for as long as your account remains active and for such additional period as is required by applicable law or regulation. Specifically:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• Transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Customer support records are retained for three (3) years from the date of the interaction, or longer if the matter is subject to an ongoing dispute or regulatory investigation.
• Marketing consent records are retained for as long as you remain subscribed to marketing communications, plus one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, extreme88 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

extreme88 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the extreme88 platform
• Encryption of sensitive data at rest, including payment details and identity documents
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for all internal systems that process personal data
• Regular security audits, vulnerability assessments, and penetration testing
• Incident response procedures for the detection, containment, and notification of personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, extreme88 will notify the National Privacy Commission and affected players in accordance with the timelines prescribed by the Data Privacy Act and its Implementing Rules.

extreme88 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and understand how you use the platform.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the platform, including session management and security. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences (such as language settings and display options) to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how players use the platform — such as pages visited and session duration — to help us improve performance and user experience.
• Marketing cookies: Used only with your consent to deliver relevant promotional content. You may opt out of marketing cookies at any time through your browser settings or account preferences.

You can control cookie settings through your browser. Note that disabling certain cookies may affect the functionality of the extreme88 platform.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by extreme88:

• Right to be informed: The right to know whether extreme88 holds personal data about you and to receive clear information about how it is processed — as provided in this Policy.
• Right of access: The right to request a copy of the personal data extreme88 holds about you, together with information about how it is used.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe extreme88 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. extreme88 will respond to all data subject requests within thirty (30) days of receipt, in accordance with the Data Privacy Act.

The extreme88 platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. extreme88 does not knowingly collect personal data from individuals under the age of 21.

If extreme88 discovers that personal data has been collected from a person under 21 years of age, the relevant account will be immediately closed, all associated data will be deleted, and any deposits will be returned to the payment source where possible.

If you believe that a minor has registered an account on the extreme88 platform, please contact our support team immediately so that we can take appropriate action.

extreme88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The effective date at the top of this Policy will be updated whenever a material change is made.

Where changes are significant, extreme88 will notify registered players via the platform or by email to the address on file. Your continued use of the extreme88 platform following the publication of an updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Policy periodically to stay informed about how extreme88 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by extreme88, please contact our Data Protection Officer through the following channels:

• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available daily, 8:00 AM – 12:00 AM PHT, via the extreme88 platform
• Service Location: Manila, Philippines

extreme88 aims to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) days. For complex requests, we may require additional time and will notify you accordingly.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with our response to your data subject request.