Privacy Policy

1. Introduction and Scope

bit888 Casino ("bit888", "we", "us", "our") operates the online gaming platform accessible at bit888.cam. We are committed to protecting the privacy and security of your personal information in accordance with the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable international data protection standards including the General Data Protection Regulation (GDPR) where relevant.

This Privacy Policy describes how we collect, use, process, store, and protect personal information obtained from users ("you", "player", "user") of our services. By accessing our website, creating an account, or using any bit888 services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy applies to all personal information collected through our website, mobile applications (if applicable), customer service channels, and any other means by which you interact with bit888. It should be read in conjunction with our Terms and Conditions, which govern your use of our services.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a bit888 account or use our services, we collect personal information that you voluntarily provide, including but not limited to:

• Account Registration Information: Full legal name, date of birth, gender, residential address, email address, mobile phone number, username, and password
• Identity Verification Documents: Government-issued identification cards (Philippine passport, driver's license, UMID, SSS ID, voter's ID), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification (KYC compliance)
• Payment Information: GCash account details, Maya account information, bank account numbers, cryptocurrency wallet addresses, and transaction history related to deposits and withdrawals
• Communication Records: Content of correspondence with our customer support team via live chat, email, or other communication channels, including complaints, inquiries, and feedback
• Survey and Feedback Data: Responses to voluntary surveys, promotional participation, and feedback forms

2.2 Information Collected Automatically

When you access our website or use our services, certain information is collected automatically through various technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information
• Usage Data: Pages visited, games played, betting patterns, session duration, click-through rates, referral sources, and navigation paths through our website
• Location Data: IP address and approximate geographic location derived from IP address (country, city, ISP) to ensure compliance with jurisdictional restrictions and detect fraudulent activity
• Transaction Data: Details of deposits, withdrawals, bets placed, winnings, losses, bonus usage, and account balance history
• Cookies and Similar Technologies: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies (see Section 10 for details)

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources including:

• Payment service providers (GCash, Maya, banks) confirming transaction details and account ownership
• Identity verification services conducting KYC checks and anti-fraud screening
• Game providers reporting gameplay data and results
• Marketing partners and affiliate networks (where you registered through referral links)
• Publicly available sources and databases used for compliance and fraud prevention

3. How We Use Your Information

bit888 collects and processes your personal information for the following legitimate business purposes:

3.1 Service Provision and Account Management

• Creating and maintaining your player account
• Processing deposits, withdrawals, and other financial transactions
• Enabling gameplay across our casino games and sports betting platforms
• Calculating winnings, managing bonuses, and updating account balances
• Providing customer support and responding to inquiries
• Sending transactional communications (deposit confirmations, withdrawal notifications, account alerts)

3.2 Legal and Regulatory Compliance

• Verifying your identity and age to prevent underage gambling (21+ requirement)
• Complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations
• Meeting PAGCOR licensing requirements and regulatory reporting obligations
• Responding to legal requests from government authorities, law enforcement, and courts
• Maintaining records as required by Philippine gaming laws and tax regulations

3.3 Security and Fraud Prevention

• Detecting and preventing fraudulent transactions, money laundering, and unauthorized access
• Identifying suspicious betting patterns, collusion, and bonus abuse
• Protecting against cybersecurity threats, hacking attempts, and data breaches
• Enforcing our Terms and Conditions and investigating violations
• Resolving disputes and addressing complaints

3.4 Marketing and Communications

• Sending promotional offers, bonus announcements, and marketing materials (with your consent)
• Personalizing your gaming experience based on preferences and playing history
• Conducting market research and analyzing player behavior to improve services
• Informing you about new games, features, and platform updates

3.5 Analytics and Business Improvement

• Analyzing website usage patterns to optimize performance and user experience
• Testing new features and measuring their effectiveness
• Understanding player preferences to curate game selections and promotions
• Improving customer support quality and response times
• Developing new products and services based on user feedback

4. Legal Basis for Processing

Under applicable data protection laws, bit888 processes your personal information based on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under our Terms and Conditions, including providing gaming services, processing transactions, and managing your account
• Legal Obligation: Processing is required to comply with Philippine laws, gaming regulations, tax obligations, court orders, and regulatory requirements imposed by PAGCOR and other authorities
• Legitimate Interests: Processing serves our legitimate business interests including fraud prevention, security, business analytics, and service improvement, provided these interests do not override your fundamental rights and freedoms
• Consent: Where required by law, we obtain your explicit consent before processing certain categories of data, particularly for marketing communications and optional data collection. You may withdraw consent at any time

5. Data Security Measures

bit888 implements comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, destruction, or loss. Our security framework includes:

5.1 Technical Security Controls

• Encryption: 256-bit SSL/TLS encryption for all data transmitted between your device and our servers. Passwords are hashed using advanced cryptographic algorithms (bcrypt, Argon2) that make them impossible to reverse-engineer
• Firewall Protection: Multi-layered firewalls protecting our servers from external attacks and unauthorized access attempts
• Intrusion Detection Systems: Real-time monitoring for suspicious activity, automated threat detection, and immediate response protocols
• Secure Hosting: Servers located in certified data centers with physical security, redundant power supplies, climate control, and 24/7 surveillance
• Regular Security Audits: Independent third-party penetration testing and vulnerability assessments conducted quarterly
• Data Backup: Daily encrypted backups stored in geographically separate locations to prevent data loss from system failures or disasters

5.2 Organizational Security Measures

• Access Controls: Strict role-based access limits ensuring only authorized personnel can access personal data, with all access logged and monitored
• Employee Training: Regular security awareness training for all staff handling personal data, including confidentiality agreements and data protection protocols
• Data Minimization: We collect only the minimum personal information necessary for stated purposes and delete data when no longer needed
• Incident Response Plan: Documented procedures for detecting, responding to, and reporting data breaches in accordance with legal requirements
• Third-Party Audits: Compliance certifications and security attestations from independent auditors verifying our data protection practices

5.3 Payment Security

Financial transactions are processed through PCI-DSS compliant payment gateways. bit888 does not store complete credit card numbers or sensitive payment credentials on our servers. Payment data is tokenized and processed by certified third-party payment processors.

6. Data Sharing and Third Parties

bit888 does not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your data with the following categories of recipients for legitimate business purposes:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf, including:

• Payment processors (GCash, Maya, banking partners) for transaction processing
• Identity verification services for KYC compliance and fraud prevention
• Game providers (Pragmatic Play, PG Soft, Evolution Gaming) for game delivery and result reporting
• Cloud hosting providers for data storage and server infrastructure
• Customer support platforms and communication tools
• Marketing and analytics platforms (with consent)
• Cybersecurity firms providing threat detection and monitoring services

All service providers are bound by contractual obligations to protect your data, use it only for specified purposes, and comply with applicable privacy laws. We conduct due diligence on all third parties before engaging their services.

6.2 Regulatory and Legal Authorities

We may disclose personal information to government agencies, regulatory bodies, law enforcement, and courts when required by law or necessary to:

• Comply with PAGCOR regulations and reporting requirements
• Respond to valid legal requests, subpoenas, court orders, or official investigations
• Report suspicious transactions under anti-money laundering laws
• Cooperate with tax authorities regarding player winnings and financial reporting
• Assist in criminal investigations or legal proceedings

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. You will be notified of any such change and given the opportunity to exercise your privacy rights under the new ownership.

6.4 With Your Consent

We may share your information with other third parties when you provide explicit consent, such as participating in joint promotions with partners or sharing your username on public leaderboards.

7. International Data Transfers

bit888 primarily operates within the Philippines and stores data on servers located within Philippine jurisdiction. However, some of our service providers and technology partners may be located outside the Philippines, potentially resulting in international data transfers.

When we transfer personal data to countries outside the Philippines, we ensure appropriate safeguards are in place to protect your information, including:

• Selecting service providers in jurisdictions with adequate data protection laws recognized by Philippine authorities
• Implementing Standard Contractual Clauses (SCCs) approved by data protection authorities
• Ensuring service providers are certified under recognized data protection frameworks
• Conducting privacy impact assessments for international transfers

Where data is transferred to countries without adequate protection, we obtain your explicit consent or rely on legal derogations permitting such transfers.

8. Data Retention

bit888 retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Account Data: Retained for the duration of your account's active status and for a reasonable period after account closure to handle disputes, process outstanding transactions, and meet legal obligations
• Financial Records: Retained for a minimum of seven (7) years after the transaction date to comply with Philippine tax laws, anti-money laundering regulations, and accounting requirements
• Identity Verification Documents: Retained for five (5) years after account closure as required by KYC and AML regulations
• Communication Records: Customer support interactions retained for three (3) years for quality assurance, dispute resolution, and training purposes
• Marketing Consent Records: Retained for as long as consent remains valid, plus additional time to demonstrate compliance with consent requirements
• Security and Fraud Prevention Data: Retained for reasonable periods necessary to protect against fraud, prevent future security incidents, and support ongoing investigations

After retention periods expire, personal data is securely deleted or anonymized so that it can no longer identify you. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes.

9. Your Privacy Rights

Under the Philippine Data Privacy Act and international data protection standards, you have the following rights regarding your personal information:

9.1 Right to Access

You have the right to request confirmation of whether we process your personal data and to obtain a copy of your data in a commonly used, machine-readable format. You can access most of your information directly through your account dashboard.

9.2 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly in your account settings or contact customer support for assistance.

9.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances, including when data is no longer necessary for its original purpose, you withdraw consent, or you object to processing. This right is subject to legal limitations, particularly where we must retain data to comply with legal obligations.

9.4 Right to Restrict Processing

You may request that we limit the processing of your personal data in specific situations, such as when you contest data accuracy or object to processing, but we need to retain the data for legal claims.

9.5 Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, commonly used format and to transmit that data to another service provider.

9.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

9.8 Right to Lodge a Complaint

If you believe we have violated your privacy rights or applicable data protection laws, you may lodge a complaint with the Philippine National Privacy Commission (NPC) or relevant data protection authority in your jurisdiction.

9.9 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer via email at [email protected] with "Privacy Rights Request" in the subject line. Include your full name, registered email address, and specific request details. We will respond within fifteen (15) business days and provide requested information or explain any limitations on fulfilling your request.

10. Cookies and Tracking Technologies

bit888 uses cookies and similar tracking technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on return visits.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality, including maintaining your login session, remembering your preferences, and enabling core features. These cookies cannot be disabled without affecting site performance
• Performance Cookies: Collect anonymous data about how visitors use our site, including pages visited, time spent, and errors encountered. This helps us improve website performance
• Functional Cookies: Remember your choices (language, currency, username) to provide enhanced, personalized features
• Marketing Cookies: Track your browsing activity to deliver targeted advertisements and measure campaign effectiveness. These cookies require your consent

10.2 Managing Cookies

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are placed. Note that disabling essential cookies may affect website functionality. Instructions for managing cookies are available in your browser's help section.

10.3 Third-Party Cookies

Some cookies are placed by third-party service providers for analytics (Google Analytics), advertising, and social media integration. These third parties have their own privacy policies governing their use of data.

11. Children's Privacy

bit888 services are intended exclusively for adults aged twenty-one (21) years and older, in compliance with Philippine gaming laws. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from someone under 21, we will take immediate steps to delete that information and close the associated account.

Parents or guardians who believe their child has provided personal information to bit888 should contact us immediately at [email protected]. We implement age verification measures during registration and may request identification documents to confirm age compliance.

12. Changes to This Privacy Policy

bit888 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated to active users via email or prominent notice on our website at least thirty (30) days before taking effect.

The "Last Updated" date at the top of this policy indicates when it was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of bit888 services after changes take effect constitutes acceptance of the updated Privacy Policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us through the following channels:

Data Protection Officer
Email: [email protected]
Subject Line: "Privacy Inquiry" or "Data Protection Request"

Customer Support: Available 24/7 via live chat on the bit888 website for privacy-related inquiries.

Postal Address: Available upon request for official correspondence and regulatory matters.

For complaints regarding privacy violations or data breaches, you may also contact the Philippine National Privacy Commission:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC),
Vicente Sotto Street, Pasay City 1307, Philippines
Email: [email protected]

Commitment to Privacy Excellence

bit888 recognizes that privacy is not merely a legal obligation but a fundamental right and competitive advantage. In an era where data breaches and privacy violations regularly make headlines, we differentiate ourselves through transparent practices, robust security, and genuine respect for player privacy.

Our privacy program extends beyond compliance with minimum legal requirements. We proactively adopt privacy-by-design principles, embedding data protection into every aspect of our operations from initial system design through product development, customer service protocols, and business partnerships. We conduct Privacy Impact Assessments (PIAs) before launching new features or entering relationships with third-party service providers.

We invest significantly in privacy-enhancing technologies including advanced encryption, anonymization techniques, and secure data storage solutions that exceed industry standards. Our security team continuously monitors evolving threats and adapts our defenses accordingly. We believe that strong privacy protections and excellent user experiences are complementary, not contradictory.

Most importantly, we maintain open communication with our players about privacy matters. We respond promptly to privacy inquiries, honor data subject rights, and welcome feedback about how we can improve our practices. Your trust is our most valuable asset, and we work every day to deserve it.