Privacy Policy

1. Overview & Data Controller

idd88 ("we," "us," "our") is the data controller responsible for the personal data you provide when using the idd88 online gaming platform. idd88 operates under the PAGCOR regulatory framework and is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

As a data controller, idd88 determines the purposes and means of processing your personal data. We process your data only for legitimate, specified, and explicit purposes directly related to the provision of our online gaming services, regulatory compliance, and the protection of our players and platform.

By registering an account on idd88, accessing our platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

idd88 collects personal data through several channels. The categories of data we collect include:

2.1 Registration & Account Data

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Username and encrypted password
• Preferred language and currency settings

2.2 Identity Verification (KYC) Data

• Government-issued ID (e.g., Philippine passport, PhilSys National ID, SSS ID, driver's license) — front and back copies
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or live photo for identity matching purposes
• Proof of payment method (e.g., screenshot of GCash or bank account showing your name)

2.3 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method details (GCash number, Maya account, bank account name — we do not store full card numbers)
• Transaction reference numbers
• Account balance history

2.4 Gaming Activity Data

• Games played, bet amounts, win/loss records
• Session duration and frequency of play
• Bonus and promotion usage history
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookie identifiers and session tokens
• Pages visited, click patterns, and time spent on platform

2.6 Communications Data

• Customer support chat logs and email correspondence
• Feedback and survey responses
• Marketing communication preferences

3. How We Use Your Personal Data

idd88 uses your personal data for the following purposes:

• Account creation and management: To register your idd88 account, verify your identity, and maintain your player profile.
• Age verification: To confirm that you meet the 21+ age requirement mandated by PAGCOR for online gaming in the Philippines.
• Service delivery: To provide access to idd88 games, process deposits and withdrawals, and deliver customer support.
• Regulatory compliance: To comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and reporting requirements to the Anti-Money Laundering Council (AMLC).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct on the platform.
• Responsible gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out option.
• Platform improvement: To analyse usage patterns, improve our games and services, and personalise your idd88 experience.
• Legal proceedings: To establish, exercise, or defend legal claims where necessary.

4. Legal Basis for Processing

idd88 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given clear, informed consent to the processing of your personal data for a specific purpose (e.g., marketing communications). You may withdraw consent at any time.
• Contractual necessity: Where processing is necessary to perform our contract with you — i.e., to provide the idd88 gaming services you have registered for.
• Legal obligation: Where processing is required to comply with applicable Philippine law, including PAGCOR regulations, the AMLA, and the Data Privacy Act itself.
• Legitimate interests: Where processing is necessary for idd88's legitimate interests (e.g., fraud prevention, platform security, responsible gaming monitoring), provided those interests are not overridden by your rights and interests.

5. Sharing Your Personal Data

idd88 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• PAGCOR and regulatory authorities: As required by our operating licence and applicable Philippine law.
• Anti-Money Laundering Council (AMLC): Where we are legally obligated to report suspicious transactions under the AMLA.
• Payment processors: GCash, Maya, and Philippine banking partners, to the extent necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist with document verification and age confirmation.
• Game software providers: Licensed game studios whose titles are available on idd88 may receive anonymised or pseudonymised gameplay data for technical and audit purposes.
• IT and cloud service providers: Hosting, database, and security service providers who process data on our behalf under strict data processing agreements.
• Legal and professional advisers: Lawyers, auditors, and compliance consultants where necessary for legal proceedings or regulatory compliance.
• Law enforcement: Where required by a valid court order, subpoena, or other lawful legal process.

6. Cookies & Tracking Technologies

idd88 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The types of cookies we use include:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your idd88 account. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players use the idd88 platform — which pages are visited most, how long sessions last, and where players encounter difficulties. This data is used to improve the platform.
• Security cookies: Help detect and prevent fraudulent activity, bot access, and other security threats.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may prevent you from accessing certain features of the idd88 platform, including your account login.

7. Data Retention

idd88 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Active account data: Retained for the duration of your idd88 account and for a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• KYC and identity documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by the AMLA.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support communications: Retained for three (3) years from the date of the last communication.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted or anonymised within 30 days.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

8. Security Measures

idd88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and idd88 servers.
• Encrypted storage of sensitive data including passwords (hashed with bcrypt) and financial information.
• Access controls: Personal data is accessible only to idd88 staff and contractors who have a legitimate need to access it, subject to role-based access controls and confidentiality obligations.
• Regular security audits and penetration testing to identify and remediate vulnerabilities.
• Two-factor authentication (2FA) available for player accounts to add an additional layer of login security.
• Intrusion detection systems that monitor for suspicious access patterns and automatically flag anomalies.
• Data minimisation: We collect only the personal data that is strictly necessary for the stated purposes.

While idd88 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, idd88 will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the requirements of the Data Privacy Act and NPC Circular No. 16-03.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by idd88:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and shared — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data idd88 holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR and AMLA requirements.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to idd88's overriding legitimate grounds.
• Right to data portability: You may request that idd88 provide your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe idd88 has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the contact details in Section 13 of this Policy. idd88 will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10. Minors & Age Restriction

idd88 is strictly an adults-only platform. In compliance with PAGCOR regulations, the minimum age to register and play on idd88 is 21 years old. idd88 does not knowingly collect personal data from individuals under the age of 21.

If idd88 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data collected, and report the incident as required by applicable regulations. Any funds deposited by an underage player will be handled in accordance with PAGCOR guidelines.

Parents and guardians who believe their child may have registered on idd88 are encouraged to contact our support team immediately so that the account can be investigated and closed without delay.

11. Third-Party Links & Services

The idd88 platform may contain references to third-party payment processors (such as GCash and Maya) and game software providers. When you interact with these third-party services — for example, when completing a GCash deposit — you will be subject to the privacy policies of those third parties.

idd88 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your idd88 account. idd88 selects third-party partners carefully and requires them to maintain appropriate data protection standards through contractual data processing agreements.

12. Changes to This Privacy Policy

idd88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered players via email or an in-platform notice.

Your continued use of the idd88 platform after any amendment to this Privacy Policy constitutes your acknowledgement of the updated policy. We recommend reviewing this page periodically to stay informed of how idd88 protects your personal data.

13. Contact & Data Protection Officer

idd88 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact our DPO:

If you are not satisfied with idd88's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act.

For responsible gaming concerns, self-exclusion requests, or account restriction requests, please visit our Responsible Gaming page.