Privacy Policy — tg888 Philippines

01 Who We Are — Data Controller

tg888 ("tg888," "we," "us," "the Platform") is the data controller responsible for the personal information processed through the tg888 website and associated services available at tg888.vu. tg888 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the jurisdiction of the Republic of the Philippines.

For all data protection matters, you may contact tg888's designated Data Protection Officer (DPO) using the contact details provided in Section 13 of this Policy.

02 Personal Data We Collect

tg888 collects personal data only to the extent necessary for the purposes described in this Policy. The categories of personal data we collect include:

tg888 does not collect or store full payment card numbers. All payment processing involving card data is handled by PCI-DSS-compliant third-party payment processors.

03 How We Collect Your Data

tg888 collects personal data through the following channels:

• Direct submission — information you provide when registering a tg888 account, completing KYC verification, making a deposit or withdrawal request, or contacting support;
• Automated technical collection — data generated automatically when you access tg888, including IP address, device identifiers, session logs, and browser information collected via standard server logging and cookies;
• Third-party payment providers — transaction confirmation data returned by GCash, Maya, BPI, BDO, Metrobank, and other payment processors when you initiate a financial transaction on tg888;
• Game providers — aggregated gameplay session data returned by tg888's certified game providers including Evolution Gaming, Pragmatic Play, JILI, PG Soft, and Habanero;
• PAGCOR regulatory submissions — in certain cases, tg888 may receive identity or compliance-related information through PAGCOR-mandated reporting channels.

04 Purposes of Processing

tg888 processes your personal data for the following purposes:

• Account creation and management — to create, operate, and maintain your tg888 account, including credential verification and account security;
• Identity verification and KYC compliance — to verify your identity, age (21+ requirement), and eligibility to use the tg888 platform in compliance with PAGCOR licensing conditions;
• Payment processing — to process deposits and withdrawal requests, reconcile transactions, and detect payment fraud;
• Anti-money laundering (AML) compliance — to monitor transactions for suspicious activity and fulfill tg888's obligations under the Anti-Money Laundering Act (AMLA) and related PAGCOR directives;
• Responsible gaming — to administer deposit limits, self-exclusion requests, session time reminders, and cross-platform exclusion lists as required by PAGCOR;
• Customer support — to respond to your queries, resolve disputes, and maintain records of support interactions;
• Platform security and fraud prevention — to detect and prevent account takeover, bonus abuse, collusion, and other fraudulent activity;
• Legal and regulatory compliance — to comply with applicable Philippine law, PAGCOR regulations, and court orders;
• Marketing communications (where you have consented) — to send you information about tg888 promotions, new games, and platform updates. You may withdraw marketing consent at any time through your account settings.

05 Legal Basis for Processing

Under Republic Act No. 10173 (Data Privacy Act of 2012), tg888 processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and tg888 (account operation, payment processing, game access);
• Legal obligation — processing required to comply with PAGCOR regulations, AMLA requirements, and other applicable Philippine law;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming administration, where tg888's legitimate interests are not overridden by your privacy rights;
• Consent — processing for optional marketing communications, where you have provided explicit, informed, and freely given consent.

06 Sharing Your Personal Data

tg888 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. We share personal data only in the following circumstances and only to the extent necessary:

• Payment processors — GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other payment service providers receive only the transaction data required to process your deposit or withdrawal;
• Game technology providers — Evolution Gaming, Pragmatic Play, JILI, PG Soft, Habanero, and Spadegaming receive session identifiers and gameplay data necessary to deliver game services; these providers operate under data processing agreements with tg888;
• PAGCOR and regulatory authorities — tg888 discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities as required by law or regulatory direction;
• Identity verification services — KYC document data may be shared with PAGCOR-approved identity verification partners solely for age and identity verification purposes;
• Legal proceedings — tg888 may disclose personal data to courts, law enforcement agencies, or legal counsel where required by valid legal process under Philippine law.

All third-party service providers who process personal data on behalf of tg888 are bound by contractual data processing agreements that require them to process data only on tg888's documented instructions and to implement appropriate security measures.

07 Data Retention

tg888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and KYC records: Five (5) years from account closure, as required under PAGCOR licensing conditions and AML regulations;
• Financial transaction records: Five (5) years from the date of the transaction, in accordance with AMLA record-keeping obligations;
• Gaming session logs: Two (2) years from the date of the session;
• Support communications: Two (2) years from the date of the interaction;
• Marketing consent records: Until consent is withdrawn, plus one (1) year thereafter to maintain a suppression record.

Upon expiry of the applicable retention period, tg888 will securely delete or anonymize your personal data unless a longer retention period is required by a court order, ongoing legal proceedings, or active regulatory investigation.

08 Security Measures

tg888 implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and tg888 is encrypted using 256-bit SSL/TLS protocols;
• Encryption at rest: Sensitive personal data stored in tg888 databases is encrypted using AES-256 encryption;
• Access controls: Access to personal data within tg888 is restricted on a strict need-to-know basis using role-based access controls and multi-factor authentication for all administrative access;
• Intrusion detection: tg888 operates continuous network monitoring and intrusion detection systems;
• Staff training: All tg888 staff who handle personal data receive data protection training as a condition of employment;
• Incident response: tg888 maintains a documented data breach response procedure. In the event of a personal data breach that creates a risk to your rights, tg888 will notify you and the National Privacy Commission (NPC) within the timeframes prescribed by RA 10173.

09 Your Data Subject Rights

Under Republic Act No. 10173, you have the following rights with respect to your personal data processed by tg888:

• Right to be informed — the right to be notified of how your personal data is collected and processed, as set out in this Policy;
• Right of access — the right to request a copy of the personal data tg888 holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data where tg888 no longer has a lawful basis to retain it, subject to applicable legal retention obligations;
• Right to object — the right to object to processing based on tg888's legitimate interests, including processing for direct marketing purposes;
• Right to data portability — the right to receive your personal data in a structured, machine-readable format where technically feasible;
• Right to file a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) if you believe tg888 has violated your data privacy rights.

To exercise any of the above rights, submit a written request to tg888's Data Protection Officer at the contact details in Section 13. tg888 will respond to verified requests within fifteen (15) business days in accordance with NPC guidelines.

10 Cookies & Tracking Technologies

tg888 uses cookies and similar tracking technologies to operate the platform, analyze usage patterns, and — where consent has been given — deliver relevant promotional content. The types of cookies used by tg888 include:

• Essential cookies: Required for the tg888 platform to function, including session management, login state persistence, and security tokens. These cannot be disabled without impairing platform functionality;
• Analytical cookies: Used to collect aggregated, anonymized data about how users navigate tg888 — page views, session durations, and navigation paths. This data is used solely to improve platform performance;
• Preference cookies: Store your settings preferences such as language and responsible gaming limits to improve your experience across sessions.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in to your tg888 account. tg888 does not use third-party advertising cookies or behavioural targeting cookies that track your activity across external websites.

11 Minors — 21+ Age Requirement

The tg888 platform is strictly restricted to individuals aged 21 years and older in accordance with PAGCOR regulations governing online gaming in the Philippines. tg888 does not knowingly collect personal data from anyone under the age of 21.

If tg888 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the account will be immediately suspended, all associated data will be deleted in accordance with applicable law, and any deposited funds will be returned through the original payment method.

tg888 conducts age verification as part of its mandatory KYC process. If you are aware of a minor accessing the tg888 platform, please contact tg888 support immediately.

12 Changes to This Privacy Policy

tg888 may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered account holders via the contact details on their tg888 account profile, with a minimum notice period of seven (7) days before the updated Policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the tg888 platform after the effective date of a revised Policy constitutes acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically. Archived versions are available upon written request to tg888's Data Protection Officer.

13 Contact & Data Protection Officer

For all data privacy-related inquiries, requests to exercise your data subject rights, or concerns about tg888's handling of your personal data, please contact tg888's Data Protection Officer:

If you are not satisfied with tg888's response to a data privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters under RA 10173.