ds88play Privacy Policy

The data controller responsible for the personal data you provide through the ds88play platform is the ds88play operating entity — a PAGCOR-licensed online gaming operator registered and conducting business in the Republic of the Philippines.

As data controller, ds88play determines the purposes for which your personal data is collected and the means by which it is processed. ds88play is registered with the National Privacy Commission (NPC) of the Philippines as required under the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

For all data privacy inquiries, rights requests, or concerns, you may contact our designated Data Protection Officer (DPO) as detailed in Section 13 of this Policy.

ds88play collects personal data in the following categories, depending on how you interact with the platform:

ds88play does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly required for identity verification and AML compliance. Where sensitive information such as a copy of a government-issued ID is collected, it is handled with heightened security controls and accessed only by authorised compliance personnel.

ds88play collects your personal data through the following means:

• Direct Submission: Data you provide voluntarily during account registration, KYC verification, deposit and withdrawal requests, customer support inquiries, and promotional opt-ins.
• Automated Collection: Technical and usage data collected automatically when you access the ds88play platform, including via cookies, web beacons, and server-side access logs. See Section 8 for details on cookies.
• Payment Processors: Limited transaction confirmation data received from GCash, Maya, BPI, BDO, GrabPay, and other payment partners to verify and reconcile deposit and withdrawal transactions.
• Identity Verification Partners: Where automated or assisted KYC verification is employed, ds88play may work with regulated third-party identity verification service providers who return a verification result and associated risk indicators. Full document data is not retained by these providers beyond the period necessary for verification.
• PAGCOR and Regulatory Sources: ds88play may receive information from PAGCOR or other regulatory bodies regarding player self-exclusion registrations, compliance directives, or investigation requests.

ds88play processes your personal data only for specified, legitimate purposes and on the appropriate legal basis under the Data Privacy Act:

Where ds88play relies on your consent as a legal basis for processing — specifically, for optional promotional communications — you may withdraw that consent at any time by updating your marketing preferences in your account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

ds88play does not sell, rent, or commercialise your personal data. We may disclose your data to the following categories of third parties strictly for the purposes described:

• PAGCOR and Regulatory Authorities: ds88play is obligated to submit player activity reports, AML suspicious transaction reports (STRs), and other compliance data to PAGCOR, the Anti-Money Laundering Council (AMLC), and any other relevant Philippine government body as required by law. This sharing is non-negotiable and does not require your individual consent.
• Payment Service Providers: Necessary transaction data is shared with GCash, Maya, BPI, BDO, GrabPay, and other payment partners solely to process and verify your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• Game Software Providers: Licensed game providers (e.g., Pragmatic Play, Evolution Gaming, PG Soft) may receive a minimal set of account identifier data for the purpose of enabling gameplay sessions, verifying player eligibility, and resolving game disputes. Full identity documents are not shared with game providers.
• Identity Verification Services: Third-party KYC service providers may receive your identity documents and selfie photograph for the sole purpose of verifying your identity and age. These providers are selected for their compliance with applicable data protection standards.
• IT and Security Service Providers: Technically necessary data is accessible to ds88play's cloud infrastructure, hosting, and cybersecurity service providers operating under strict data processing agreements that prohibit any secondary use of your data.
• Professional Advisers: Legal, accounting, and auditing firms engaged by ds88play may have access to account or financial data as strictly necessary to provide their professional services, subject to professional secrecy obligations.
• Law Enforcement: ds88play will disclose personal data to law enforcement authorities in response to a lawful court order, subpoena, warrant, or equivalent legal process, or where disclosure is urgently necessary to prevent imminent harm.

ds88play retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:

After the applicable retention period expires, ds88play will either securely delete your personal data or anonymise it such that it can no longer be attributed to an identifiable individual. Anonymised data may be retained indefinitely for statistical and analytical purposes.

ds88play implements a range of technical, administrative, and physical security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include but are not limited to:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data in transit between your device and the ds88play platform.
• AES-256 encryption at rest for sensitive data categories including KYC documents and financial account references.
• Hashed password storage — passwords are never stored in plain text and cannot be retrieved by ds88play staff.
• Multi-factor authentication (2FA) available for all player accounts and required for all administrative access to production systems.
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis.
• Regular third-party penetration testing and security audits of the ds88play platform.
• 24/7 security monitoring and automated anomaly detection systems covering account activity, payment flows, and platform access patterns.
• Formal data breach response procedures, including notification to the NPC and affected data subjects within 72 hours of discovering a breach, as required by law.

The ds88play platform uses cookies and similar tracking technologies to ensure the proper functioning of the platform, maintain your login session, and where you have consented, to improve our understanding of how the platform is used.

The following categories of cookies are used on ds88play:

• Strictly Necessary Cookies: Required for the platform to function. These include session cookies that maintain your logged-in state, security cookies that help detect fraud, and cookies that remember your language and display preferences. These cannot be disabled without significantly impairing your use of the platform.
• Functional Cookies: Store your preferences such as responsible gaming limits and notification settings to personalise your platform experience. These improve convenience but are not strictly necessary for core platform operation.
• Analytics Cookies: Aggregate, anonymised data about how players navigate and use the ds88play platform, used solely for internal platform improvement. ds88play uses privacy-respecting analytics tools that do not share this data with third-party advertising networks.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent the ds88play platform from functioning correctly, including your ability to log in and maintain a session.

The ds88play platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. ds88play does not knowingly collect personal data from persons under the age of 21.

Age verification is a mandatory step in the ds88play account registration process. Any account where the registered player is subsequently determined to be under 21 years of age will be immediately closed, all associated data processed for compliance purposes and then deleted to the extent legally permissible, and any real-money balance may be forfeited in accordance with our Terms & Conditions.

Parents and guardians who believe that a minor may have registered an account on ds88play, or who have concerns about a minor's access to gambling platforms, are encouraged to contact our support team immediately. ds88play takes all such reports seriously and will act promptly to investigate and close any account belonging to a person under 21.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to the personal data held about you by ds88play:

To exercise any of the above rights, submit a written request to ds88play's Data Protection Officer using the contact details provided in Section 13. ds88play will respond to all data rights requests within fifteen (15) business days. Where requests are complex or numerous, ds88play may extend this period by an additional thirty (30) days with notice to the requesting party.

Note that certain rights may be limited where compliance with your request would conflict with ds88play's legal obligations — for example, the obligation to retain AML-relevant data for the period mandated by Philippine law.

ds88play's primary data processing operations are conducted within the Philippines. However, certain service providers engaged by ds88play — including cloud infrastructure providers, game software suppliers, and identity verification services — may process or store data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, ds88play ensures that appropriate safeguards are in place to protect your data to at least the standard required by the Philippine Data Privacy Act. Such safeguards include:

• Standard contractual data processing agreements with all cross-border service providers, incorporating data protection obligations consistent with Philippine law.
• Transfer to jurisdictions recognised by the NPC as providing adequate data protection standards.
• Technical and organisational security measures applied to all cross-border data flows.

ds88play does not transfer personal data outside the Philippines to any party that has not provided adequate data protection commitments consistent with the requirements of RA 10173.

ds88play reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory guidance. Any material changes will be communicated to registered players via email to their registered address or via a prominent notice on the ds88play platform prior to the change taking effect.

Non-material changes — such as clarifications to existing language or corrections of typographical errors — may be made without individual notification, though the updated policy will always be published on this page with a revised effective date.

Your continued use of the ds88play platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree to the amended Policy, you must stop using the platform and may close your account as described in the Terms & Conditions.

The current, binding version of the ds88play Privacy Policy is always the version published on this page. We recommend reviewing this page periodically to stay informed.

ds88play has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. The DPO serves as the primary point of contact for all data privacy inquiries, rights requests, complaints, and concerns.

You may contact the ds88play Data Protection Officer or our general privacy team through the following channels:

• Live Chat Support: Available 24/7 directly on the ds88play platform. Use the subject line "Data Privacy Request" when initiating a data rights inquiry via live chat.
• Support Email: [email protected] — please include "Privacy Policy Inquiry" or "Data Rights Request" in the subject line.

For formal complaints about ds88play's handling of your personal data that cannot be resolved directly with ds88play, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC can be reached through its official government website and offices.