bingo8 Privacy Policy

This Policy applies to all personal information collected by bingo8 in connection with the operation of the bingo8 online gaming platform, including the bingo8 website, mobile-accessible platform, customer support channels, and all related services. It applies to all registered Members, prospective Members, and any individual who interacts with bingo8 through its platform or support channels.

bingo8 acts as the Personal Information Controller as defined under Section 3(h) of the Philippine Data Privacy Act with respect to all personal data collected and processed through the bingo8 Platform. Where bingo8 engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors under bingo8's instruction and are contractually bound to process data only for specified purposes and in compliance with applicable data protection law.

The bingo8 Platform operates under active PAGCOR (Philippine Amusement and Gaming Corporation) licensing. Certain data collection and processing activities are mandated by PAGCOR's regulatory conditions, the Anti-Money Laundering Act of 2001 (as amended), and other applicable Philippine regulatory frameworks. In such cases, bingo8's legal obligation to collect and retain data supersedes any individual opt-out preference.

bingo8 collects the following categories of personal information in the course of providing its services to Filipino players:

bingo8 does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (such as health, religious, or political information) unless specifically required for a documented regulatory purpose. Where such collection is necessary, bingo8 will provide explicit notice and obtain your prior written consent.

bingo8 collects personal information through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, respond to a survey, or update your account settings.
• Automatically: Through the use of cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the bingo8 Platform. This includes your IP address, device identifiers, browsing behavior on the Platform, and session data.
• From payment service providers: When you initiate a deposit or withdrawal via GCash, Maya, QR Ph, BPI, BDO, Metrobank, or other supported Philippine payment channels, we receive transaction confirmation data necessary to credit or debit your bingo8 Account balance.
• From identity verification services: bingo8 may engage third-party KYC and identity verification providers to assist in verifying the authenticity of documents submitted during the verification process. These providers return verification status and risk signals to bingo8.
• From regulatory and law enforcement bodies: bingo8 may receive information about you from PAGCOR, the Anti-Money Laundering Council (AMLC), or Philippine law enforcement authorities in the course of regulatory compliance or investigation activities.

bingo8 processes your personal data only for specified, legitimate purposes and relies on at least one lawful basis for each processing activity, as required by the DPA. The primary purposes and their corresponding legal bases are as follows:

• Account Registration and Management: Processing is necessary for the performance of the contract between you and bingo8, as established upon account registration and acceptance of the Terms & Conditions.
• Identity Verification (KYC): Processing is required by applicable law — specifically PAGCOR licensing conditions and the Anti-Money Laundering Act — and is also necessary for the performance of the contract.
• Deposit and Withdrawal Processing: Processing is necessary for the performance of the contract and to comply with financial regulatory requirements under Philippine law.
• Fraud Prevention and Platform Security: Processing is necessary for the legitimate interests of bingo8 and the protection of our Members, balanced against your privacy rights, and is in some respects required by law.
• Customer Support: Processing is necessary for the performance of the contract and for bingo8's legitimate interest in providing effective assistance to Members.
• Responsible Gaming Compliance: Processing is required under PAGCOR's responsible gaming regulatory framework and is in bingo8's legitimate interest as a licensed gaming operator.
• Marketing Communications: Processing is based on your explicit consent, which you may withdraw at any time by updating your account preferences or contacting bingo8 support. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.
• Legal and Regulatory Compliance: Processing is required to fulfill bingo8's legal obligations under PAGCOR licensing, the DPA, the AMLA, and other applicable Philippine law.

bingo8 does not sell, rent, or trade your personal information. We share personal data with third parties only in the following limited circumstances:

• Payment Service Providers: We share transaction data with GCash, Maya, QR Ph, BPI, BDO, Metrobank, and other payment processors to facilitate deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC and Identity Verification Providers: We engage third-party identity verification services to assist in verifying Member identities. These providers act as Personal Information Processors under our instruction.
• Game Software Providers: Game providers whose titles appear on the bingo8 Platform may receive anonymized or pseudonymized game session data necessary for technical operation, reporting, and game compliance. Identifiable personal data is not shared with game providers beyond what is technically necessary.
• Regulatory Authorities: bingo8 is legally required to share certain Member data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities upon lawful request or as required by applicable regulations.
• Law Enforcement: We may disclose personal information to Philippine law enforcement agencies where required by law, court order, or to prevent, detect, or investigate fraud or other criminal activity.
• Professional Advisers: We may share data with lawyers, auditors, and other professional advisers where necessary for legitimate business purposes, subject to applicable confidentiality obligations.

All third parties with whom bingo8 shares personal data are contractually required to handle that data in compliance with applicable Philippine law, including the DPA, and to use it only for the specified purpose for which it was disclosed.

bingo8 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active bingo8 Account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the AMLA and PAGCOR requirements.
• KYC Documents: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure.
• Gaming Activity Logs: Retained for a minimum of two (2) years, or longer where required for regulatory reporting or dispute resolution.
• Customer Support Communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for an ongoing dispute or investigation.
• Marketing Preference Records: Retained for the duration of your account relationship and for one (1) year following opt-out, to maintain an accurate suppression list.

Where data is no longer required for any lawful purpose, bingo8 will securely delete or anonymize it in accordance with best-practice data destruction standards. Anonymized data that can no longer be attributed to any identifiable individual may be retained indefinitely for statistical and platform improvement purposes.

bingo8 implements a multi-layered security framework to protect your personal information against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in Transit: All data transmitted between your device and bingo8 servers is encrypted using 256-bit SSL/TLS technology, preventing interception of login credentials, financial data, and personal information during transmission.
• Encryption at Rest: Sensitive data fields, including identity documents, financial account references, and authentication credentials, are encrypted at rest in bingo8's database infrastructure.
• Access Controls: Access to personal data within bingo8's internal systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo privacy and security training and are bound by confidentiality obligations.
• Intrusion Detection and Monitoring: bingo8's platform infrastructure is monitored continuously for anomalous activity, unauthorized access attempts, and security threats. Incident response procedures are in place to contain and remediate security events promptly.
• Penetration Testing: bingo8 conducts regular security assessments, including third-party penetration testing, to identify and remediate vulnerabilities before they can be exploited.

While bingo8 employs industry-standard security measures, no system is entirely immune to security incidents. In the event of a personal data breach that is likely to cause harm to affected individuals, bingo8 will notify the National Privacy Commission and affected Data Subjects in accordance with the DPA's breach notification requirements.

bingo8 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the bingo8 Platform, including maintaining your logged-in session, security tokens, and load balancing. These cannot be disabled without preventing the Platform from functioning correctly.
• Functional Cookies: Remember your preferences and settings (such as language, game display preferences, and responsible gaming tool configurations) so you do not need to re-enter them on each visit.
• Performance and Analytics Cookies: Collect anonymized data about how users interact with the bingo8 Platform — which pages are most visited, where users encounter technical issues, and how navigation flows are used — to help us improve performance and usability.
• Security Cookies: Support bingo8's fraud detection and account security systems by tracking login patterns, device fingerprints, and session anomalies.

bingo8 does not use third-party advertising or behavioral tracking cookies that serve advertisements on behalf of external advertisers. Your browsing behavior on the bingo8 Platform is not shared with advertising networks.

You may manage non-essential cookie preferences through your browser settings. Please note that disabling functional cookies may affect your user experience on the Platform. Strictly necessary and security cookies cannot be disabled without impairing Platform functionality.

As a Data Subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by bingo8:

• Right to Be Informed: You have the right to be informed that your personal data is being collected and processed, the purposes for which it is processed, and your rights in relation to that data. This Policy fulfills bingo8's obligation to inform.
• Right to Access: You have the right to request a copy of the personal information that bingo8 holds about you, including how it is being used and with whom it has been shared.
• Right to Correction: You have the right to request correction of any inaccurate, incomplete, or outdated personal information. You may update basic account information directly through your Account Settings; for KYC data corrections, please contact support.
• Right to Object: You have the right to object to the processing of your personal data on grounds relating to your particular situation, where processing is based on bingo8's legitimate interests. You may also withdraw consent for marketing communications at any time.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies. This right is subject to regulatory retention obligations described in Section 6.
• Right to Data Portability: You have the right to receive personal data you provided to bingo8 in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that bingo8 has processed your personal data in breach of the DPA.

To exercise any of the above rights, please contact bingo8 via live chat or by emailing [email protected]. bingo8 will acknowledge receipt of your request within five (5) business days and will respond substantively within thirty (30) calendar days, or such extended period as is permitted under the DPA for complex or high-volume requests.

The bingo8 Platform is strictly intended for individuals who are 21 years of age or older, as required by PAGCOR regulations. bingo8 does not knowingly collect personal information from any person under the age of 21. Age verification is enforced during the registration process and as part of the KYC procedure prior to withdrawal processing.

If bingo8 becomes aware that personal information has been collected from a person under the age of 21 — whether through a falsified registration or any other means — the Account will be immediately suspended and the personal data collected will be securely deleted, subject only to any retention obligations imposed by applicable law in connection with the investigation of the underage access.

If you have reason to believe that a person under the age of 21 has registered a bingo8 Account, please contact us immediately via live chat or at [email protected] so that we can investigate and act promptly.

The bingo8 Platform is operated primarily within the Philippines, and personal data is principally processed and stored on servers located within the Philippines or in jurisdictions that provide an adequate level of data protection.

In certain circumstances, personal data may be transferred to, or accessed by, parties located outside the Philippines — for example, where bingo8 uses internationally headquartered technology service providers, cloud infrastructure providers, or game software vendors. Where such cross-border transfers occur, bingo8 ensures that appropriate safeguards are in place to protect your personal data to the standard required by the Philippine Data Privacy Act, including:

• Contractual data processing agreements imposing DPA-equivalent obligations on the receiving party.
• Transfers only to countries whose data protection laws have been recognized as providing an adequate level of protection, or to recipients who have implemented appropriate technical and organizational security measures.

By using the bingo8 Platform and accepting this Privacy Policy, you acknowledge and consent to the transfer of your personal data to service providers outside the Philippines where necessary for the provision of the bingo8 service, subject to the safeguards described above.

bingo8 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. Updated versions of this Policy will be published at bingo8.cam/privacy-policy with the revised "Last Updated" date shown at the top of the page.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — bingo8 will provide advance notice through a prominent notice on the Platform and, where practicable, by notification via your registered email address or Philippine mobile number.

Your continued use of the bingo8 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the revised Policy, you should cease using the Platform and contact bingo8 to request account closure.

For any questions, requests, or complaints relating to this Privacy Policy or bingo8's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the bingo8 Platform — the fastest channel for urgent data concerns.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in your subject line and provide your registered account username for faster handling.

bingo8 acknowledges privacy-related inquiries within five (5) business days. We will do our best to resolve your concern to your satisfaction within thirty (30) calendar days.

If you are not satisfied with bingo8's response to your privacy complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC). The NPC is the government authority responsible for administering and enforcing the Data Privacy Act of 2012. Information on filing a complaint with the NPC is available through official Philippine government information channels.