millon88 Privacy Policy

About This Privacy Policy

This Privacy Policy describes how millon88 ("we," "us," "our," or "the Platform") collects, uses, stores, shares, and protects personal information obtained from players and visitors who use the millon88 online gaming platform, accessible at millon88.app.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC"). It also reflects our data handling obligations as a PAGCOR-licensed gaming operator, which include specific data collection and retention requirements imposed by the Philippine Amusement and Gaming Corporation.

By registering for a millon88 account or using any feature of the millon88 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. Where our processing is based on consent, you have the right to withdraw that consent at any time, subject to legitimate regulatory retention obligations.

Data Controller Information

For the purposes of the Data Privacy Act of 2012, millon88's operating entity acts as the Personal Information Controller ("PIC") in respect of all personal data collected through the millon88 platform. The PIC is responsible for ensuring that personal data is processed in accordance with the DPA and this Privacy Policy.

millon88 has designated a Data Protection Officer ("DPO") as required under the DPA. The DPO is responsible for overseeing compliance with this Policy and applicable data protection law, handling data subject requests, and serving as the point of contact for the National Privacy Commission. The DPO may be contacted through the details provided in Section 14 of this Policy.

Personal Data We Collect

millon88 collects the following categories of personal data from players and platform visitors:

3.1 Registration and Account Data

3.2 Financial and Transaction Data

3.3 Gaming Activity Data

millon88 records all gaming activities conducted through your account, including game titles played, wager amounts, session durations, win/loss outcomes, and any games flagged for responsible gaming review. This data is retained for dispute resolution, RNG audit purposes, and PAGCOR regulatory reporting requirements.

3.4 Technical and Device Data

When you access the millon88 platform, we automatically collect certain technical data, including your IP address, device type and operating system, browser type and version, approximate geographic location derived from IP address, and session timing information. This data is used for security monitoring, fraud prevention, and platform optimization.

How We Collect Personal Data

millon88 collects personal data through the following means:

• Direct collection: Data you provide voluntarily during account registration, KYC verification, payment transactions, support interactions, and responsible gaming tool activations.
• Automated collection: Technical data collected automatically when you access or interact with the millon88 platform, including through session cookies, server logs, and device fingerprinting for fraud prevention purposes.
• Third-party sources: Identity verification data from PAGCOR's player exclusion registry; fraud intelligence from payment processing partners; geographic data from IP geolocation services. Data obtained from third parties is handled with the same protections as directly collected data.
• Payment providers: Transaction confirmation data from GCash, PayMaya, and Philippine banking partners, limited to what is necessary to process and record your financial transactions on the millon88 platform.

How We Use Your Personal Data

millon88 uses the personal data it collects for the following specific purposes:

• Account creation and management: Creating and maintaining your millon88 player account, authenticating your identity at login, and managing your account preferences and security settings.
• Identity verification and KYC compliance: Verifying your identity and age (21+) in accordance with PAGCOR licensing requirements, and conducting ongoing KYC reviews as required by anti-money laundering regulations.
• Processing financial transactions: Processing your deposits, withdrawals, and in-game transactions in Philippine pesos through your chosen payment method, and maintaining accurate transaction records.
• Delivering gaming services: Providing access to all games and services available on the millon88 platform, maintaining game session integrity, and resolving gaming disputes using server-side activity logs.
• Fraud and security monitoring: Detecting and preventing fraudulent activity, unauthorized account access, money laundering, and collusion, using automated monitoring systems and manual review.
• Regulatory compliance: Meeting millon88's obligations as a PAGCOR-licensed operator, including mandatory reporting, player activity monitoring, and record-keeping requirements.
• Customer support: Responding to your queries, complaints, and requests through the millon88 support channels.
• Responsible gaming: Monitoring player activity for indicators of problem gambling as required by PAGCOR, and administering responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion.
• Platform improvement: Analyzing aggregated, anonymized usage patterns to improve the millon88 platform, optimize game recommendations, and enhance the player experience.
• Marketing communications: Sending you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may opt out at any time through your account notification settings.

Legal Basis for Processing

Under the Data Privacy Act of 2012, millon88 relies on the following legal grounds for processing your personal data:

• Performance of a contract: Processing necessary to provide you with millon88's gaming services, including account management, payment processing, and game access, pursuant to our Terms and Conditions.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (RA 9160) obligations, NPC registration requirements, and other applicable Philippine regulatory requirements.
• Legitimate interests: Processing conducted for millon88's legitimate interest in platform security, fraud prevention, business analytics, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes, including marketing communications and enhanced personalization, where you have provided explicit, informed, and freely-given consent. Where consent is the basis, you have the right to withdraw it at any time.

Data Sharing and Disclosure

millon88 does not sell, rent, or trade your personal data to third parties. We may share your personal data only in the following circumstances, and only to the extent necessary for the stated purpose:

• PAGCOR and Philippine regulatory authorities: millon88 is required to share certain player data with PAGCOR as a condition of our operating license. This includes player activity reports, KYC documentation, and suspicious transaction reports as required under the Anti-Money Laundering Act.
• Law enforcement and government agencies: Where millon88 is required by law, court order, or valid regulatory directive to disclose personal data to Philippine law enforcement or government agencies.
• Payment service providers: Transaction data is shared with GCash, PayMaya, BPI, BDO, and Metrobank to the extent necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by Philippine financial regulations.
• Identity verification partners: KYC document data may be shared with third-party identity verification service providers engaged by millon88. All such providers are contractually required to maintain the confidentiality and security of your data.
• Game software providers: Your gaming activity data may be shared with the certified game studios (e.g., JILI, PG Soft, Pragmatic Play) whose games are hosted on the millon88 platform, solely for RNG audit, game integrity, and dispute resolution purposes.
• Fraud prevention networks: Anonymized fraud signals may be shared with industry fraud prevention networks to protect the millon88 platform and its players from fraudulent activity.

In all cases where personal data is shared with third parties, millon88 requires those parties to handle your data in accordance with applicable Philippine data protection law and to implement appropriate security measures.

Cookies and Tracking Technologies

The millon88 platform uses cookies and similar tracking technologies to support platform functionality, security, and analytics. A cookie is a small text file stored on your device by your web browser when you access a website. millon88 uses the following categories of cookies:

You may control cookie settings through your browser's privacy settings. Please note that disabling strictly necessary cookies will prevent you from accessing the millon88 platform. Disabling other cookie categories may affect platform functionality and personalization features but will not prevent basic account access.

Data Retention

millon88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to mandatory retention periods imposed by PAGCOR licensing requirements and Philippine law.

The following retention periods apply to major categories of personal data held by millon88:

At the expiry of the applicable retention period, millon88 will securely delete or anonymize the relevant personal data. Anonymized data — from which individual players cannot be identified — may be retained indefinitely for statistical and analytical purposes.

Data Security Measures

millon88 implements a layered data security framework to protect your personal data from unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include:

• Encryption: All personal data transmitted between your device and the millon88 platform is protected by TLS 1.3 with 256-bit encryption. Data stored on millon88 servers is encrypted at rest using AES-256 encryption.
• Access controls: Access to player personal data within the millon88 organization is restricted to authorized personnel on a strict need-to-know basis. All administrative access is subject to multi-factor authentication and audit logging.
• Vulnerability management: The millon88 platform undergoes regular security assessments, penetration testing, and code security reviews. Identified vulnerabilities are triaged and remediated according to their severity.
• Incident response: millon88 maintains a formal data breach response plan. In the event of a data security incident affecting your personal data, millon88 will notify affected players and the National Privacy Commission in accordance with NPC Circular 16-03 (Breach Notification) within the required timeframes.
• Staff training: All millon88 personnel with access to personal data receive mandatory data privacy training on appointment and at regular intervals thereafter.

Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by millon88. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14. We will respond to all valid requests within fifteen (15) business days.

Please note that certain rights — particularly the right to erasure — are subject to mandatory data retention obligations imposed on millon88 as a PAGCOR-licensed operator under Philippine anti-money laundering law. Where we are unable to fulfill a request due to these obligations, we will explain the applicable legal basis in our response.

Children's Privacy and Age Restriction

The millon88 platform is strictly for individuals who are at least twenty-one (21) years of age. This is a legal requirement under PAGCOR regulations. millon88 does not knowingly collect personal data from individuals under the age of 21.

As part of our KYC process, millon88 verifies the age of all players prior to processing any withdrawal. Where millon88 identifies or reasonably suspects that a player is under the age of 21, the relevant account will be immediately suspended, any associated personal data will be handled in accordance with applicable law, and the matter will be reported to PAGCOR.

Updates to This Privacy Policy

millon88 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, millon88 will notify registered players via the email address associated with their account, or through a prominent notification on the platform, at least fourteen (14) days before the changes take effect.

Continued use of the millon88 platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Policy, you may close your account by contacting millon88 support before the effective date of the change.

The effective date displayed at the top of this document reflects when the current version of the Privacy Policy entered into force. Previous versions of this Policy are available upon request by contacting our Data Protection Officer.

Contact Our Data Protection Officer

For any questions about this Privacy Policy, to exercise your data privacy rights, or to raise a privacy-related complaint, please contact millon88's Data Protection Officer through the following channels:

millon88 takes all privacy inquiries seriously. Whether you're a player in Manila, Cebu, Davao, or anywhere in the Philippines, your data rights are equally protected. Our DPO will acknowledge receipt of all formal data subject requests within three (3) business days and provide a full response within the statutory period.