ab88 Privacy Policy

ab88 ("ab88," "we," "us," "our") is committed to protecting the privacy and personal data of every player who uses the ab88 platform. This Privacy Policy has been prepared in accordance with the Republic Act No. 10173 — Data Privacy Act of 2012 of the Philippines and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC).

This Policy sets out in clear terms: what personal data ab88 collects from Filipino players, the purposes for which that data is processed, the legal bases on which we rely, how long we retain your data, who we may share it with, and how you can exercise your rights as a data subject under Philippine law.

ab88 processes personal data only for legitimate, specified purposes and does not sell, rent, or trade your personal data to any third party for their own marketing purposes. Privacy at ab88 is treated as a fundamental obligation, not a compliance checkbox.

2.1 For the purposes of this Privacy Policy, the data controller responsible for your personal data is ab88, operating the platform at ab88.lat.

2.2 ab88 has designated a Data Protection Officer (DPO) responsible for overseeing data privacy compliance and handling data subject inquiries and requests. Queries regarding this Policy or your personal data may be submitted to the ab88 support team, who will route them to the DPO where appropriate.

2.3 Contact for privacy matters: [email protected] — please include "Privacy Request" in your subject line.

3.1 ab88 collects the following categories of personal data from players:

3.2 ab88 does not collect special categories of personal data (e.g., racial or ethnic origin, health data, biometric identifiers) unless specifically required for regulatory compliance and explicitly consented to by the Player.

4.1 ab88 collects personal data through the following channels and methods:

• Direct Provision: Data you provide during account registration, KYC document submission, payment transactions, support interactions, or when completing responsible gaming tool settings.
• Automated Collection: Technical data collected automatically when you access the ab88 platform, including IP addresses, device identifiers, browser data, session logs, and cookies. This data is collected regardless of whether you are logged in.
• Payment Processors: Confirmation data returned by GCash, PayMaya, BDO, BPI, Metrobank, and other payment partners following a transaction — typically limited to transaction status, reference numbers, and account name matching data.
• Identity Verification Services: Data returned by third-party KYC verification providers during the identity verification process, including government ID validation results.
• Third-Party Game Providers: Game session and outcome data returned by JILI, PG Soft, Pragmatic Play, CQ9, and other certified providers through their APIs.

5.1 ab88 uses your personal data for the following purposes:

1. Account management: Creating, maintaining, and administering your ab88 Account, including processing login authentication and two-factor verification.
2. Identity and age verification: Confirming that Players are at least 21 years of age and are the genuine holder of the payment methods associated with the Account, as required by PAGCOR regulations.
3. Payment processing: Executing deposits from and withdrawals to GCash, PayMaya, and Philippine bank accounts; maintaining accurate transaction records.
4. Anti-money laundering (AML) compliance: Monitoring transactions for suspicious patterns and reporting to relevant Philippine financial authorities where required by law.
5. Fraud prevention and security: Detecting and preventing unauthorised access, multi-accounting, bonus abuse, and other prohibited conduct as defined in the ab88 Terms and Conditions.
6. Platform operation and improvement: Analysing aggregated gameplay data to improve game selection, platform performance, and user experience.
7. Customer support: Responding to enquiries, resolving disputes, processing responsible gaming requests, and handling account-related complaints.
8. Marketing communications: Sending promotional offers, bonus notifications, and tournament announcements to Players who have opted in to receive such communications. You may withdraw this consent at any time.
9. Responsible gaming compliance: Monitoring gaming behaviour patterns to support the responsible gaming tools available in every ab88 Account and to fulfil obligations under applicable gambling regulations.
10. Legal and regulatory obligations: Complying with orders from Philippine courts, regulatory bodies, and law enforcement agencies as required by law.

6.1 ab88 processes personal data on the following legal bases under the Data Privacy Act of 2012 and its IRR:

• Contractual necessity: Processing required to perform the contract between ab88 and the Player — including account management, payment processing, game delivery, and KYC verification.
• Legal obligation: Processing required to comply with Philippine law, including AML obligations, PAGCOR regulations, tax reporting, and responses to lawful authority requests.
• Legitimate interests: Processing necessary for ab88's legitimate business interests, including fraud prevention, security monitoring, platform analytics, and responsible gaming risk assessment — balanced against the Player's rights.
• Consent: Processing for marketing communications and non-essential cookies, where ab88 relies on the Player's explicit, freely given, and revocable consent. Withdrawal of consent does not affect the lawfulness of prior processing.

7.1 ab88 may disclose your personal data to the following categories of recipients:

• Payment service providers: GCash, PayMaya, BDO, BPI, Metrobank, and cryptocurrency payment processors — solely for the purpose of executing your deposit and withdrawal instructions.
• KYC and identity verification providers: Third-party services used to verify government-issued identification documents and confirm player eligibility.
• Game content providers: JILI, PG Soft, Pragmatic Play, CQ9, and other certified studios — to the extent necessary to deliver game content and record session outcomes.
• IT and cloud infrastructure providers: Hosting, database, and security service providers who process data on ab88's behalf under binding data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine courts, and other competent authorities, where disclosure is required by law or court order.
• Professional advisers: Legal, accounting, and compliance advisers engaged by ab88 under strict confidentiality obligations.

7.2 All third-party processors engaged by ab88 are required to handle personal data in accordance with applicable Philippine data protection law and ab88's data processing standards.

8.1 ab88 uses cookies and similar tracking technologies to operate the platform, maintain session state, and support analytics and security functions. The categories of cookies used are as follows:

• Essential cookies: Strictly necessary for platform operation — including session authentication, security tokens, and load-balancing cookies. These cannot be disabled without impairing your ability to use the platform.
• Functional cookies: Used to remember your preferences, such as language settings, game lobby layout choices, and responsible gaming tool configurations.
• Analytics cookies: Used to collect aggregated data on how players navigate and interact with the ab88 platform, enabling continuous performance improvement. IP addresses processed for analytics purposes are anonymised.
• Security cookies: Used to detect suspicious login behaviour, IP anomalies, and potential fraud patterns.

8.2 Non-essential cookies (functional and analytics) are deployed only where the Player has provided consent through the cookie consent mechanism on the platform. Players may withdraw cookie consent at any time through browser settings, noting that this may affect platform functionality.

8.3 ab88 does not use third-party advertising or retargeting cookies.

9.1 ab88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption across all platform sessions, ensuring data transmitted between your device and ab88's servers is protected in transit.
• Encryption at rest for sensitive stored data, including payment details and government ID documents submitted for KYC.
• Access controls: Personal data is accessible only to ab88 personnel and authorised processors who have a legitimate need to process it for their assigned role. Access is logged and audited.
• Two-Factor Authentication (2FA) available to all Players as an additional layer of Account access protection.
• Regular security assessments: Vulnerability scanning, penetration testing, and security audits conducted on a periodic basis by qualified security professionals.
• Incident response procedures: Documented protocols for detecting, containing, and reporting personal data breaches in compliance with NPC notification requirements.

9.2 Notwithstanding the above measures, no system connected to the internet can guarantee absolute security. Players are responsible for maintaining the security of their Account credentials and should enable 2FA and use strong, unique passwords for their ab88 Account.

10.1 ab88 retains personal data for only as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Account data and KYC records: Retained for the duration of the active Account plus five (5) years following Account closure, in accordance with Philippine AML regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required for AML compliance and tax reporting purposes.
• Gaming activity data: Retained for three (3) years from the date of the relevant session or transaction, or as required for dispute resolution purposes.
• Communications data: Live chat transcripts and support correspondence are retained for two (2) years from the date of the interaction, unless required longer for an open dispute or regulatory matter.
• Marketing consent records: Retained for as long as the Player has an active Account and for three (3) years following Account closure or withdrawal of consent, as evidence of the consent previously given.

10.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ab88's data destruction procedures.

11.1 Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by ab88:

12.1 Where ab88 discovers or has reason to believe that a person under 21 years of age has registered an Account or provided personal data, ab88 will immediately suspend the Account, void any transactions associated with it, and securely delete all personal data collected from that individual — returning any net deposited funds to the original payment method.

12.2 If you believe a minor has registered an ab88 Account, please report this immediately to ab88 support through the live chat channel so that appropriate action can be taken without delay.

13.1 Some of ab88's third-party service providers — including cloud infrastructure, KYC verification, and game content providers — may process personal data on servers located outside the Philippines. Where such transfers occur, ab88 ensures that appropriate safeguards are in place to provide a level of data protection equivalent to that required under Philippine law.

13.2 Safeguards applied to international data transfers include: contractual clauses requiring recipient organisations to maintain data protection standards equivalent to Philippine law; and transfers only to jurisdictions with adequacy determinations or equivalent data protection frameworks recognised by the NPC.

13.3 Players may request details of the specific safeguards applied to international transfers of their personal data by submitting a data subject request as described in Section 11.

14.1 The ab88 platform may, from time to time, contain links to third-party websites or reference external services. This Privacy Policy applies only to ab88's own data processing activities and does not extend to any third-party websites, applications, or services accessed via links on the ab88 platform.

14.2 ab88 has no control over the privacy practices of third-party websites and accepts no responsibility for their content or data handling. Players are encouraged to review the privacy policies of any third-party service before providing personal information to that service.

15.1 ab88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

15.2 Where changes are material — for example, where we introduce a new purpose for processing your data or a new category of data recipients — ab88 will notify Players via the Platform or the registered email address associated with the Account at least seven (7) days before the changes take effect.

15.3 Continued use of the ab88 platform following the effective date of any revised Privacy Policy constitutes acknowledgment of the updated Policy. Players who do not accept the revised Policy may request Account closure in accordance with the ab88 Terms and Conditions.

16.1 For any questions, concerns, or formal requests relating to this Privacy Policy or ab88's data processing activities, please contact us through the following channels:

• Live Chat: Available 24/7 at ab88.lat — English and Tagalog supported. For privacy matters, please state "Privacy Request" at the start of your message.
• Email: [email protected] — Subject line: "Privacy Request" or "Data Subject Request"

16.2 ab88 will acknowledge all privacy-related communications within five (5) business days and resolve straightforward requests within thirty (30) calendar days. Where a matter requires extended investigation, ab88 will inform you of the expected timeline and reasons for the delay.

16.3 If you are not satisfied with ab88's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.