pit888 Privacy Policy

1 Introduction & Scope

1.1 This Privacy Policy ("Policy") is issued by pit888 and sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by pit888. This Policy applies to all users of the pit888 platform, including visitors to pit888.cam who have not yet registered an account, registered players, and former account holders.

1.2 pit888 is committed to protecting the privacy and personal data of every Filipino player who interacts with our platform. We process personal data lawfully, fairly, and transparently in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, as amended, "DPA"), its Implementing Rules and Regulations, and applicable PAGCOR data governance requirements.

1.3 This Policy should be read alongside the pit888 Terms & Conditions and Responsible Gaming Policy, which collectively form the full framework governing your relationship with pit888.

1.4 This Policy does not apply to third-party websites, payment processors, or game providers that you may access through the pit888 platform. Each third party operates under its own privacy policy, and pit888 is not responsible for those practices.

2 Data Controller

2.1 For the purposes of the Philippine Data Privacy Act, pit888 is the personal information controller in respect of the personal data collected and processed through the pit888 platform.

2.2 pit888 has appointed a designated Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. The DPO can be contacted using the details provided in Section 14 of this Policy.

2.3 pit888 operates under a license granted by the Philippine Amusement and Gaming Corporation (PAGCOR). As a PAGCOR licensee, certain data processing activities — including the transmission of account and transaction data to PAGCOR for regulatory oversight purposes — are mandatory and cannot be restricted by individual player data preferences.

3 Personal Data We Collect

3.1 The personal data pit888 collects depends on how you interact with the platform. The following table summarises the categories of personal data we collect:

3.2 pit888 does not collect special categories of personal data (such as health data, biometric data, or data concerning racial or ethnic origin) except where strictly necessary for responsible gaming assessments, in which case your explicit consent will be obtained separately.

4 How We Collect Your Data

pit888 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly to pit888 when creating an account, completing KYC verification, making deposits or withdrawals, contacting customer support, participating in promotions, or responding to surveys. This includes all information submitted via the pit888 registration form, the account dashboard, and the cashier section.

4.2 Automated Collection

Technical and usage data collected automatically when you access the pit888 platform through cookies, log files, pixel tags, and similar tracking technologies. This includes your IP address, device identifiers, browser characteristics, session activity, and navigation patterns. See Section 10 for a full explanation of cookies and tracking technologies used by pit888.

4.3 Third-Party Sources

pit888 may receive personal data about you from the following third-party sources:

• KYC verification providers: Identity verification results from accredited KYC service providers who cross-reference your submitted documents against authoritative data sources;
• Payment processors: Transaction confirmation data from GCash, Maya, BPI, BDO, Metrobank, and other payment partners used to process deposits and withdrawals;
• Anti-money laundering screening services: Politically Exposed Person (PEP) and sanctions screening results from compliance databases as required by Philippine AMLC regulations;
• Fraud prevention partners: Device fingerprinting and fraud risk scores from security service providers who help protect players from identity theft and account takeover.

5 Purposes of Processing & Legal Basis

5.1 pit888 processes your personal data only for specified, explicit, and legitimate purposes. The following table sets out the primary purposes for which pit888 processes your personal data, together with the legal basis under the Philippine Data Privacy Act for each purpose:

5.2 Where pit888 processes your personal data on the basis of legitimate interests, we have assessed that our legitimate interests are not overridden by your rights and interests as a data subject. If you wish to obtain a copy of the legitimate interests balancing test conducted for any specific processing activity, please contact our DPO.

5.3 Where processing is based on your consent — primarily for direct marketing communications — you may withdraw consent at any time without affecting the lawfulness of processing conducted before the withdrawal. Withdrawal of marketing consent does not affect your ability to use the pit888 platform.

6 Sharing Your Personal Data

6.1 pit888 does not sell your personal data. We share your personal data only with the categories of recipients listed below, and only to the extent necessary for the stated purpose:

6.2 Regulatory Authorities

PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities where required by applicable law or regulatory directive. Disclosure to these authorities is mandatory and cannot be restricted by player data preferences.

6.3 Payment Processors

GCash, Maya, BPI, BDO, Metrobank, and other payment service providers involved in processing your deposits and withdrawals. These providers receive only the minimum data necessary to execute the specific financial transaction.

6.4 KYC & Compliance Service Providers

Accredited identity verification and AML screening providers engaged to assist pit888 in meeting its PAGCOR-mandated KYC obligations and AMLC compliance requirements. All such providers are bound by data processing agreements that restrict their use of your data to the specified compliance purpose.

6.5 Technology & Infrastructure Partners

Cloud hosting providers, cybersecurity firms, fraud detection services, and other technology partners who support the operation of the pit888 platform. These partners act as data processors under written agreements with pit888 and process your data only on pit888's documented instructions.

6.6 Game Providers

Certain game providers integrated into the pit888 lobby may receive a player session token and anonymous session data for the purpose of loading and operating the game within the pit888 environment. pit888 does not share your identity data or financial data with game providers without your separate consent.

7 International Data Transfers

7.1 Some of pit888's third-party service providers, including cloud hosting infrastructure and game providers, may be located outside the Philippines and may process your personal data in other countries. Where such transfers occur, pit888 ensures that appropriate safeguards are in place to protect your data in accordance with the Philippine Data Privacy Act.

7.2 Safeguards for international transfers implemented by pit888 include:

• Data processing agreements incorporating data protection clauses consistent with the DPA's cross-border transfer requirements;
• Transfer only to jurisdictions that the National Privacy Commission has assessed as providing an adequate level of data protection;
• Binding corporate rules where transfers are made within a group of companies;
• Technical measures including end-to-end encryption for data in transit and at rest.

7.3 You may request information about the specific safeguards applied to any international transfer of your personal data by contacting the pit888 DPO at the details in Section 14.

8 Data Retention

8.1 pit888 retains your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with pit888's data disposal procedures. Anonymised data (from which all identifying information has been irreversibly removed) may be retained indefinitely for statistical and analytical purposes.

9 Security Measures

9.1 pit888 implements a comprehensive suite of technical, administrative, and physical security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: 256-bit SSL/TLS encryption for all data in transit; AES-256 encryption for sensitive data at rest, including KYC documents, payment details, and account credentials;
• Access Controls: Role-based access control (RBAC) ensuring that pit888 personnel can access personal data only on a strict need-to-know basis, with all access logged and monitored;
• Authentication: Multi-factor authentication required for all pit888 staff accessing systems containing personal data; two-factor authentication (2FA) available to all registered players;
• Intrusion Detection: Continuous network monitoring, intrusion detection systems, and regular penetration testing conducted by qualified cybersecurity professionals;
• Vulnerability Management: Regular security patching, vulnerability scanning, and third-party security audits of the pit888 platform infrastructure;
• Employee Training: Mandatory data protection and information security training for all pit888 employees who handle personal data.

9.2 Notwithstanding these measures, no internet-based system can guarantee absolute security. Players can materially improve their own account security by activating two-factor authentication, using a strong unique password, and never sharing their login credentials with any other person.

10 Cookies & Tracking Technologies

10.1 pit888 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, analyse usage patterns, and support security features. A cookie is a small text file placed on your device when you access the pit888 website.

10.2 Types of Cookies Used

Essential Required for the platform to function. Cannot be disabled. Examples: session authentication tokens, security cookies, CSRF protection.

Functional Remember your preferences such as language settings, game lobby layout, and responsible gaming limit reminders.

Analytics Collect anonymised data about how players navigate the pit888 platform to help us identify and fix usability issues.

Marketing Used only with your explicit consent to personalise promotional communications based on your activity on the pit888 platform. Not used for third-party advertising networks.

10.3 You can manage your cookie preferences through the Cookie Settings panel accessible in the pit888 platform footer. Disabling non-essential cookies will not prevent you from using the platform, though some features may function with reduced personalisation.

10.4 pit888 does not use third-party advertising network cookies and does not share platform behavioural data with external ad networks. Marketing cookies, where active, are used solely to personalise communications within the pit888 platform and associated communications directed to you by pit888.

11 Your Data Subject Rights

11.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pit888. These rights may be exercised by contacting the pit888 DPO using the details in Section 14:

11.2 pit888 will respond to all data subject rights requests within 15 business days. In complex cases, this period may be extended by a further 15 business days with written notice to you explaining the reason for the extension. pit888 will not charge a fee for processing data rights requests unless they are manifestly unfounded or excessive.

12 Minors and Age Verification

12.1 The pit888 platform is strictly restricted to individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing casino-style gaming in the Philippines. pit888 does not knowingly collect or process personal data from individuals under the age of 21.

12.2 All registration attempts on the pit888 platform are subject to age verification, and KYC documentation confirming age must be submitted before any real-money withdrawal is processed. Where pit888 identifies that an account has been registered by a person under 21 years of age, the account will be immediately closed, all real-money funds will be returned to the original deposit method, and all associated personal data will be deleted from active systems.

12.3 If you are a parent or guardian and believe your child has provided personal data to pit888 without your knowledge, please contact our DPO immediately at the details in Section 14. pit888 will promptly investigate and, if confirmed, delete the data and close the account.

13 Amendments to This Policy

13.1 pit888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. All amendments will be published on this page with a revised effective date.

13.2 Where amendments are material — for example, where we are collecting a new category of data, processing data for a new purpose, or sharing data with a new category of third party — pit888 will notify registered players via email to their registered address no less than 7 days prior to the amended Policy taking effect.

13.3 Your continued use of the pit888 platform after the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not agree with the updated Policy, you should discontinue use of the platform and contact pit888 support to request account closure.

14 Contact Us & Data Protection Officer

14.1 If you have questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how pit888 has handled your personal data, please contact our Data Protection Officer:

14.2 If you believe pit888 has not adequately addressed your privacy concern, you have the right to lodge a complaint directly with the Philippine National Privacy Commission (NPC), the supervisory authority responsible for enforcing the Data Privacy Act. Information on how to contact the NPC is available through official Philippine government channels.

14.3 pit888 cooperates fully with NPC investigations and is committed to resolving all data protection concerns promptly and transparently in the interest of Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and all parts of the Philippines.