Privacy Policy

ds88play ("we," "us," "our," "the Platform") is an online gaming platform serving Filipino players across the Philippines at ds88play.one. We understand that privacy is important to our players — especially when it involves financial information, identity documents, and gaming history. This Privacy Policy is our commitment to handling your personal data with the highest standard of care, transparency, and legal compliance.

This Privacy Policy has been prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the relevant issuances of the National Privacy Commission (NPC) of the Philippines. It also takes into account applicable PAGCOR guidelines regarding player data management in the context of online gaming operations.

We review and update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory guidance. The version published at ds88play.one/privacy-policy at any given time is the current governing version. We will notify registered players of material changes to this Policy via their registered email address or through in-platform notifications.

If you are a player based in the Philippines and have concerns about how ds88play handles your personal data, we encourage you to read this Policy in full. If you have specific questions not answered here, our Data Protection Officer is reachable through the contact details set out in Section 15.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal information is:

As the data controller, ds88play determines the purposes and means by which your personal data is processed. We are accountable for implementing and maintaining appropriate technical and organizational measures to protect your personal data, and for ensuring that all third-party data processors engaged by ds88play provide sufficient guarantees as to the security and lawful processing of your information.

ds88play has appointed a Data Protection Officer (DPO) as required under the DPA IRR for personal information controllers engaged in the processing of sensitive personal information, which includes financial data and identity verification documents collected from ds88play players.

ds88play collects personal data on the principle of data minimization — we only collect what is genuinely necessary for the specified and lawful purposes described in this Policy. The categories of personal data we collect are set out below:

When you register a ds88play account, we collect: your full legal name, date of birth, Philippine mobile number, email address, and a self-chosen username and password. This data is necessary to create and maintain your account and to verify that you meet the 21+ age requirement under PAGCOR regulations.

As part of our Know Your Customer (KYC) and AMLA compliance obligations, ds88play may collect copies or images of Philippine government-issued identification documents. Accepted documents include: PhilSys National ID, passport, driver's license, UMID, PRC ID, SSS ID, and GSIS ID. We may also collect a selfie or live photo for identity matching purposes where required.

To process deposits and withdrawals in PHP, ds88play collects payment-related information including: GCash-registered mobile number, PayMaya account identifier, or bank account details (account name, bank name, account number) for BPI, BDO, or Metrobank transfers. We do not store full card numbers or GCash PINs — payment authentication is handled directly by the respective payment provider.

ds88play maintains records of all gaming activity and financial transactions conducted through your account. This includes: game sessions played, bet amounts, win/loss outcomes, bonus credits claimed and wagered, deposit and withdrawal history, and promotional participation. This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.

When you access ds88play, we automatically collect certain technical information including: IP address, browser type and version, device type and operating system, screen resolution, time zone, referral URL, and session duration. This data is used for platform security, fraud detection, and performance optimization.

If you contact ds88play support via live chat or email, we retain records of those communications including: the content of messages exchanged, timestamps, the support agent who handled the interaction, and any resolution outcomes. This data is used for quality assurance and to provide consistent support across interactions.

ds88play collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or update your account settings;
• Automatically through your use of the platform — technical and device data is collected automatically when you access ds88play.one through standard web server logs, cookies, and similar technologies (see Section 7 on Cookies);
• From payment providers — when you initiate a GCash, PayMaya, or bank transfer transaction, the relevant payment provider shares confirmation data with ds88play to reconcile your transaction against your account;
• From identity verification service providers — during KYC verification, ds88play may use third-party identity verification platforms to authenticate government-issued ID documents and validate your identity against Philippine ID databases where lawfully permitted; and
• From fraud and security monitoring systems — ds88play's security infrastructure processes device fingerprints, behavioral patterns, and network-level data to detect and prevent fraudulent activity, multiple account creation, and unauthorized access.

Under the Data Privacy Act of 2012, ds88play must have a lawful basis for processing your personal data. The following table sets out the primary purposes for which ds88play processes your personal data and the corresponding legal basis under RA 10173:

ds88play does not sell, rent, or commercially transfer your personal data to third parties. Personal data is shared only with the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

GCash (Globe Fintech Innovations, Inc.), PayMaya (Maya Bank, Inc.), BPI, BDO, and Metrobank receive the minimum transaction data necessary to process deposits and withdrawals. These entities are themselves subject to applicable Philippine financial regulations, including BSP data protection requirements.

Game providers (such as Evolution Gaming, Pragmatic Play, and others in the ds88play lobby) may receive a pseudonymous player identifier and game session data for the purpose of operating their games, managing progressive jackpots, and conducting game audits. These providers do not receive your name, contact details, or financial data.

Third-party KYC and identity verification platforms engaged by ds88play receive copies of your submitted identification documents solely for the purpose of verifying authenticity and validating your identity. These providers operate under data processing agreements that bind them to handle your data with equivalent or higher standards of protection as those applied by ds88play.

ds88play will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine courts, or other competent government authorities where required to do so by applicable law, regulatory direction, valid court order, or national security directive. ds88play will not disclose player data to authorities beyond what is legally required.

ds88play uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device by your browser when you visit ds88play.one. They serve several important functions that support platform security, session management, and performance optimization.

• Essential / Strictly Necessary Cookies: Required for core platform functionality including login session management, account authentication, and security token validation. These cannot be disabled without rendering the platform inoperable.
• Functional Cookies: Remember your preferences such as language settings, game lobby view preferences, and responsible gaming tool configurations to deliver a consistent experience across sessions.
• Analytics Cookies: Used to understand aggregate usage patterns on ds88play — which games are most visited, typical session durations, and mobile vs desktop usage ratios. This data is used in aggregate and anonymized form to improve platform performance.
• Security Cookies: Support fraud detection and account protection functions, including device fingerprinting to identify unauthorized login attempts or duplicate account activity.

ds88play does not use advertising cookies or third-party tracking pixels for behavioral advertising purposes. You may manage cookie preferences through your browser settings. Disabling essential cookies may impair your ability to log in and use ds88play.

ds88play retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus five (5) years following account closure, in accordance with AMLA record-keeping requirements;
• KYC documents: Retained for five (5) years from the date of verification or from the date of account closure, whichever is later;
• Financial transaction records: Retained for five (5) years in compliance with AMLA and PAGCOR record-keeping obligations;
• Gaming history and session data: Retained for a minimum of three (3) years for regulatory compliance and dispute resolution purposes;
• Support communications: Retained for two (2) years from the date of the interaction; and
• Marketing consent records: Retained for the period of active consent plus two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, ds88play will securely delete or anonymize the personal data in question using industry-standard data destruction methods. Where data is anonymized rather than deleted, the resulting information can no longer be linked to your identity and is no longer subject to this Privacy Policy.

ds88play implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, and destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and ds88play servers;
• AES-256 encryption at rest for sensitive personal data stored in ds88play databases;
• Role-based access controls limiting which ds88play personnel can access different categories of personal data, based on their job function and legitimate need;
• Two-factor authentication for all ds88play team members with access to personal data systems;
• Regular security audits and penetration testing conducted by qualified independent security professionals;
• Continuous monitoring of platform infrastructure for anomalous activity, potential breaches, and unauthorized access attempts; and
• Staff data protection training provided to all ds88play personnel who handle personal data as part of their responsibilities.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ds88play. These rights may be exercised at any time by contacting our Data Protection Officer using the details in Section 15:

ds88play will respond to verified data subject requests within fifteen (15) calendar days of receipt. For complex requests, this period may be extended by up to an additional fifteen (15) days with written notice to you. There is no fee for exercising your rights under normal circumstances.

If ds88play discovers or is notified that personal data of a person under 21 years of age has been collected — including through the creation of a fraudulent account — the following actions will be taken immediately: (a) the account will be suspended and permanently closed; (b) all personal data associated with the underage individual will be deleted from ds88play's systems within the shortest practicable timeframe consistent with regulatory obligations; and (c) any deposits made will be refunded at ds88play's discretion.

If you are a parent or guardian and believe that your child under 21 has registered on ds88play, please contact us immediately at [email protected] (plain text) with the subject line "Minor Account Report." We will investigate and take action promptly.

Some of the third-party service providers engaged by ds88play — including game software providers, technical infrastructure providers, and identity verification platforms — may process data in jurisdictions outside the Philippines. Where such international data transfers occur, ds88play ensures that appropriate safeguards are in place in compliance with Section 21 of the Data Privacy Act of 2012 and the NPC guidelines on cross-border data transfers.

These safeguards may include: binding contractual clauses that require the overseas recipient to provide a standard of data protection equivalent to that required under Philippine law; confirmation that the recipient is in a jurisdiction that has been recognized as providing adequate data protection standards; or explicit consent from the data subject where required.

ds88play will not transfer your personal data to any overseas entity that cannot provide adequate assurances of protection. A list of the categories of third-party processors and their operating jurisdictions is available upon written request to our Data Protection Officer.

ds88play will only send you promotional communications — including bonus offers, new game announcements, seasonal promotions, and platform updates — where you have provided explicit consent during registration or through your account settings. Marketing communications are delivered via your registered email address and, where consented, via SMS to your Philippine mobile number.

You may withdraw your consent to receive marketing communications from ds88play at any time through one of the following methods:

• Clicking the "Unsubscribe" link included in every ds88play marketing email;
• Updating your communication preferences in your ds88play Account Settings; or
• Contacting ds88play support at [email protected] (plain text) requesting removal from marketing lists.

Withdrawal of marketing consent will be processed within ten (10) business days. Note that withdrawing marketing consent does not affect your ability to receive transactional and operational communications from ds88play, such as deposit confirmations, withdrawal notifications, account security alerts, and regulatory notices — these are required to maintain and operate your account.

ds88play reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, NPC guidance, or PAGCOR regulatory requirements. All updates will be published at ds88play.one/privacy-policy with a revised "Last Updated" date.

For material changes — defined as changes that significantly expand the categories of personal data collected, change the purposes for which data is used, or materially affect player rights — ds88play will provide at least fourteen (14) days' advance notice via email to all registered players before the changes take effect. Your continued use of the ds88play platform after the effective date of any material change constitutes your acceptance of the updated Privacy Policy.

For non-material changes such as minor editorial corrections, clarifications, or formatting updates, no advance notice will be given. Players are encouraged to review this Privacy Policy periodically. The current version is always accessible at the URL above.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by ds88play, please contact our Data Protection Officer through the following official channels:

• DPO Email: [email protected] (plain text — not a clickable link) — Subject line: "Data Privacy / DPO Inquiry"
• Live Chat: Available 24/7 on ds88play.one — for general privacy questions, a support agent can assist and escalate to the DPO if required
• Response Time: Privacy-related inquiries are responded to within fifteen (15) business days

If you are not satisfied with ds88play's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC accepts complaints from Philippine data subjects regarding violations of the Data Privacy Act of 2012. Contact information for the NPC is available at privacy.gov.ph (external government website, not affiliated with ds88play).