plot888 Privacy Policy

1Introduction

plot888 ("the Company," "we," "us," or "our") operates the online gaming platform accessible at plot888.vip (the "Platform"). We are committed to protecting the privacy and personal data of every player, visitor, and user who interacts with the plot888 Platform.

This Privacy Policy ("Policy") describes what personal data we collect, why we collect it, how we use and share it, how long we retain it, and the rights available to you as a data subject under Philippine law. This Policy applies to all users of the plot888 Platform, including registered players from Metro Manila, Cebu, Davao, Quezon City, Makati, and all other regions of the Philippines, as well as to visitors who browse plot888.vip without registering.

By using the plot888 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the practices described in this Policy, you must discontinue use of the Platform.

2Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, plot888 is the Personal Information Controller responsible for the personal data collected through the plot888.vip Platform. Decisions regarding the purposes and means of processing your personal data are made by plot888.

plot888 has designated a Data Protection Officer (DPO) in accordance with NPC requirements. The DPO is responsible for overseeing data protection compliance within the Company and serves as the point of contact for data subject requests and privacy-related inquiries.

3Personal Data We Collect

plot888 collects the following categories of personal data from users of the Platform:

• Identity data: Full legal name, date of birth, nationality, and government-issued identification number (as required for KYC verification under PAGCOR regulations and the Anti-Money Laundering Act).
• Contact data: Philippine mobile number (Globe, Smart, or DITO), email address, and residential address.
• Account data: Username, encrypted password, account preferences, login history, and device identifiers associated with your plot888 account.
• Financial data: GCash account number, Maya account number, or bank account details (BPI, BDO, Metrobank, UnionBank) used for deposits and withdrawals. Full payment instrument numbers are not stored by plot888 — payment processing is handled by our payment service providers.
• Transaction data: Records of all deposits, withdrawals, bonuses, wagers, winnings, and losses associated with your plot888 account.
• Gaming data: Game session history, wagering patterns, game preferences, and responsible gaming settings.
• Technical data: IP address, browser type and version, operating system, device type, time zone, and other technical information collected automatically when you access the Platform.
• Communications data: Records of your communications with plot888 customer support, including live chat transcripts and email correspondence.

4How We Collect Personal Data

plot888 collects personal data through the following means:

• Direct collection: Information you provide voluntarily when registering for an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and use the Platform.
• Third-party sources: Identity verification data from KYC/AML service providers; transaction data from payment processors (GCash, Maya, BPI, BDO, Metrobank); fraud prevention signals from security service providers.

5Lawful Basis for Processing

plot888 processes your personal data on the following lawful bases under RA 10173:

• Contractual necessity: Processing necessary to perform the contract between you and plot888 — i.e., to provide gaming services, process deposits and withdrawals, and manage your account.
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, AMLA obligations, KYC mandates, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for the legitimate interests of plot888, including fraud prevention, platform security, responsible gaming enforcement, and service improvement — provided such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6How We Use Your Personal Data

plot888 uses collected personal data for the following purposes:

• Account registration, identity verification, and KYC compliance as required by PAGCOR and AMLA.
• Processing deposits, withdrawals, and other financial transactions on the Platform.
• Delivering and improving plot888 gaming services, including live casino, slots, bingo, and sports betting.
• Administering bonuses, promotions, loyalty programs, and tournaments.
• Communicating with you regarding your account, transactions, security alerts, and platform updates.
• Enforcing responsible gaming obligations, including processing self-exclusion requests and deposit limit settings.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities.
• Complying with reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other regulatory bodies.
• Conducting internal analytics to understand player behavior and improve the Platform — all analytics are conducted on anonymized or pseudonymized data where feasible.
• Sending marketing and promotional communications where you have given consent (opt-out available at any time).

7Data Sharing and Disclosure

plot888 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: Financial data is shared with GCash (Mynt), Maya (Voyager Innovations), and Philippine banking partners solely for the purpose of processing your transactions. These parties act as independent data controllers for payment data under their own privacy policies.
• KYC/AML service providers: Identity and document data is shared with licensed identity verification and AML screening service providers for the purpose of fulfilling PAGCOR and AMLA compliance obligations.
• Regulatory authorities: Transaction records, identity data, and suspicious activity reports may be disclosed to PAGCOR, the AMLC, the National Privacy Commission, and other Philippine regulatory or law enforcement bodies where required by law or regulatory directive.
• Technology service providers: Technical and operational data is processed by cloud hosting, security, and analytics service providers acting as processors under data processing agreements that require them to process data only on plot888's instructions and in accordance with applicable law.
• Legal proceedings: Personal data may be disclosed in connection with legal proceedings, court orders, or to protect the rights, property, or safety of plot888, its players, or the public.

All third parties with whom plot888 shares personal data are required to handle that data securely, use it only for the specified purpose, and comply with applicable data protection law.

8Data Retention

plot888 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, subject to longer retention periods required by applicable law:

• Account data: Retained for the lifetime of your active account, plus a minimum of five (5) years following account closure, as required by AMLA record-keeping obligations.
• Transaction data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA and PAGCOR requirements.
• KYC documents: Retained for a minimum of five (5) years following the termination of the business relationship, as required by AMLA.
• Support communications: Retained for two (2) years following resolution of the inquiry unless longer retention is required for legal proceedings.
• Technical logs: Retained for ninety (90) days for security and fraud monitoring purposes, then deleted or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized.

9Your Rights as a Data Subject

Under Republic Act 10173, you have the following rights with respect to your personal data held by plot888:

• Right to be informed: The right to be told what personal data we collect and how we use it — satisfied by this Privacy Policy.
• Right of access: The right to obtain a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account details directly from your plot888 account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose collected, where consent has been withdrawn, or where processing is unlawful — subject to legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: The right to object to processing of your personal data for marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interests.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, contact the plot888 Data Protection Officer at [email protected]. We will respond to verified requests within thirty (30) calendar days.

10Cookies and Tracking Technologies

The plot888 Platform uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Required for core Platform functionality including login sessions, account authentication, and security. These cookies cannot be disabled without breaking the Platform.
• Performance cookies: Collect anonymized data about how users interact with the Platform, used to identify and fix errors and improve the user experience.
• Functional cookies: Remember your preferences such as language settings, game volume, and display options across sessions.
• Analytics cookies: Used to understand aggregate usage patterns across the Platform. Where possible, analytics are conducted on anonymized or pseudonymized data.

You may configure your browser to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in to your plot888 account.

11Children's Privacy and Minors

The plot888 Platform is strictly intended for adults aged twenty-one (21) years and older in accordance with PAGCOR regulations. plot888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, that account will be immediately suspended and the data will be deleted, with any deposited funds returned subject to identity verification.

If you are a parent or guardian and believe that a minor under your care has registered on the plot888 Platform, please contact us immediately at [email protected].

21+ Only adults 21 years and older may register and use the plot888 Platform.

12Security Measures

plot888 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the plot888 Platform.
• Encryption at rest for sensitive personal and financial data stored on plot888 servers.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning.
• OTP-based two-factor authentication available for all player accounts.
• Fraud detection and anomaly monitoring systems operating in real time.

While plot888 applies industry-standard security measures, no platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your plot888 login credentials and for promptly notifying us of any suspected unauthorized access to your account.

13Changes to This Privacy Policy

plot888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered users via the mobile number or email address on file at least seven (7) days before the changes take effect.

The current version of the Privacy Policy is always available at plot888.vip/privacy-policy. The "Last updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the Platform following the effective date of an updated Policy constitutes acceptance of the revised terms.

14Contact and Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or your personal data held by plot888, please contact us through the following channels:

• Email (Data Protection Officer): [email protected] — please include "Privacy Request" in the subject line
• Live chat: Available within your plot888 account dashboard, 9am–1am Philippine Standard Time

You also have the right to file a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe plot888 has not handled your personal data in accordance with RA 10173. We encourage you to contact us first so we can address your concern directly and promptly.