Privacy Policy

1 Who We Are and How to Contact Us

idd888 Casino operates the online gaming platform accessible at idd888.org (the "Platform"). For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), idd888 is the Personal Information Controller (PIC) in respect of the personal data it collects from players and visitors.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, you may contact the idd888 Data Protection Officer (DPO) through the following channel:

• Email: [email protected]
• Live Chat: Available 24/7 on idd888.org

idd888 customer support is staffed around the clock by Filipino-speaking agents based in Manila and Cebu, and can assist players from across the Philippines — including Davao, Quezon City, Makati, and beyond — with any privacy-related inquiries.

2 Personal Data We Collect

idd888 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

2.1 Registration and Identity Data

When you create an idd888 account, we collect your full legal name, date of birth, nationality, residential address, email address, and mobile phone number. This information is required to create and manage your account and to verify your identity in accordance with our Know Your Customer (KYC) obligations.

2.2 Identity Verification Documents

As part of the KYC process, idd888 may collect copies of government-issued identification documents such as your PhilSys National ID, passport, driver's license, UMID, SSS ID, or voter's ID, as well as proof of address documents. These are required by PAGCOR regulations and applicable anti-money laundering laws.

2.3 Financial and Payment Data

idd888 collects information necessary to process deposits and withdrawals, including your GCash number, PayMaya account details, bank account information (for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, or Security Bank transfers), and debit card details. Full payment credentials are processed through secure, certified payment processors and are not stored in plain text by idd888.

2.4 Gaming and Transaction Data

idd888 records all gaming activity on your account, including game sessions, bets placed, outcomes, winnings, and transaction history. This data is used to administer your account, resolve disputes, detect fraud, and comply with regulatory reporting requirements.

2.5 Technical and Usage Data

When you access idd888.org, we automatically collect certain technical data including your IP address, browser type and version, operating system, device identifiers, referring URLs, pages visited, time spent on pages, and clickstream data. This data is collected via cookies and similar tracking technologies as described in Section 7 of this Policy.

2.6 Communications Data

idd888 retains records of communications between you and our customer support team, including live chat transcripts, email correspondence, and any feedback or complaints submitted through the Platform.

3 How We Use Your Personal Data

idd888 uses the personal data we collect for the following purposes:

• Account creation and management: To register your idd888 account, verify your identity, and administer your player profile;
• Service delivery: To provide access to casino games, process deposits and withdrawals, and deliver customer support;
• Regulatory compliance: To fulfill our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including KYC verification and suspicious transaction reporting;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other illegal conduct on the Platform;
• Responsible gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion;
• Communications: To send you account-related notifications, transaction confirmations, security alerts, and — where you have consented — promotional communications about idd888 offers and games;
• Platform improvement: To analyze usage patterns, troubleshoot technical issues, and improve the functionality and user experience of idd888.org;
• Legal proceedings: To establish, exercise, or defend legal claims involving idd888.

idd888 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis under the DPA 2012.

4 Sharing Your Personal Data

idd888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and screen against sanctions lists;
• Game software providers: Licensed game studios and live dealer platform providers whose games are available on idd888, to the extent necessary to deliver gameplay;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulation;
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors engaged by idd888 under strict data processing agreements;
• Legal and professional advisors: Lawyers, auditors, and other professional advisors engaged by idd888 in connection with legal proceedings or compliance obligations.

All third-party service providers engaged by idd888 are required to process personal data only in accordance with idd888's instructions and applicable data protection law. idd888 does not transfer personal data outside the Philippines except where adequate safeguards are in place as required by the DPA 2012 and NPC regulations.

5 Data Retention

idd888 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your idd888 account and for a minimum of five (5) years following account closure, in accordance with PAGCOR requirements and AMLA obligations;
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Gaming records: Retained for a minimum of three (3) years from the date of each gaming session;
• Communications records: Retained for a minimum of two (2) years from the date of the communication;
• Technical and usage data: Retained for up to twelve (12) months from collection, unless required for longer for fraud investigation or legal proceedings.

Where personal data is no longer required for any lawful purpose, idd888 will securely delete or anonymize it in accordance with industry best practices.

6 Your Rights Under the DPA 2012

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by idd888:

• Right to be informed: The right to be notified of how your personal data is collected, used, and processed — which this Privacy Policy fulfills;
• Right of access: The right to request a copy of the personal data idd888 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking: The right to request deletion or blocking of personal data that is unlawfully processed or no longer necessary for the purpose for which it was collected, subject to idd888's legal retention obligations;
• Right to object: The right to object to the processing of your personal data on grounds relating to your particular situation, including processing for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to damages: The right to claim compensation for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.

If you believe idd888 has not handled your personal data in accordance with the DPA 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

7 Cookies and Tracking Technologies

idd888.org uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage, and support security functions. The types of cookies used by idd888 include:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled as they are required for login sessions, security, and core functionality;
• Functional cookies: Used to remember your preferences such as language settings and display options;
• Analytics cookies: Used to collect aggregated, anonymized data about how visitors use idd888.org, helping us improve the Platform's performance and user experience;
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

idd888 does not use third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of idd888.org.

8 Security Measures

idd888 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and idd888.org;
• Encryption of sensitive data at rest using industry-standard algorithms;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication (MFA) for administrative access to idd888 systems;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, idd888 will notify the National Privacy Commission and affected data subjects in accordance with the DPA 2012 and NPC Circular No. 16-03.

9 Children's Privacy

idd888 Casino is strictly for adults aged 21 years and above. idd888 does not knowingly collect personal data from individuals under the age of 21. If idd888 becomes aware that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted, and the matter may be referred to the relevant authorities.

If you are a parent or guardian and believe that a minor has registered on idd888.org, please contact us immediately at [email protected] so that we can take prompt action.

10 Changes to This Privacy Policy

idd888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised accordingly.

Where changes are material, idd888 will notify registered players via the email address on file or through a prominent notice on idd888.org. Continued use of idd888 services following notification of changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically.

11 Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the competent courts of the Philippines.