ab88 Privacy Policy

ab88 ("we", "us", "our") operates the online casino and sports betting platform accessible at ab88.bio (the "Platform"). As a PAGCOR-regulated gaming operator serving Filipino players, ab88 is committed to protecting the privacy and personal data of every individual who uses our Platform, visits our website, or interacts with our services.

This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA") and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. ab88 acts as a personal information controller in respect of the personal data it processes in connection with the Platform.

We recognise that Filipino players entrust ab88 with sensitive personal and financial information when they register and use our services. This policy explains, as clearly as possible, how that information is handled — what we collect, why we collect it, how long we keep it, and what your rights are as a data subject under Philippine law.

This Privacy Policy applies to all personal data collected and processed by ab88 in connection with:

• The registration and management of Member accounts on the ab88 platform.
• The provision of casino gaming, sports betting, bingo, and other gaming services offered through ab88.
• The processing of deposits, withdrawals, and other financial transactions carried out through the platform.
• The delivery of customer support services to ab88 Members.
• The fulfilment of ab88's legal, regulatory, and compliance obligations, including those arising under PAGCOR regulations and Philippine anti-money laundering laws.
• Marketing and promotional communications directed at existing and prospective ab88 Members, where consent has been obtained.

This Privacy Policy should be read in conjunction with ab88's Terms & Conditions, which govern the contractual relationship between ab88 and its Members. By registering an account on ab88, you acknowledge that you have read and understood this Privacy Policy.

ab88 collects the following categories of personal data from and about its Members:

ab88 does not collect sensitive personal information beyond what is required for KYC compliance and responsible gaming obligations. Where sensitive information — such as government ID details — is collected, it is handled with heightened security measures and processed only for specifically defined purposes.

ab88 collects personal data through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, initiate deposits or withdrawals, contact our support team, or update your account settings.
• Automatically via the Platform: When you access ab88, our systems automatically log Technical Data such as your IP address, device identifiers, and session information. This is collected via server logs and cookies as described in Section 10.
• From payment providers: When you transact via GCash, Maya, BPI, BDO, or other payment partners, those providers may transmit transaction confirmation data to ab88 to facilitate payment processing and reconciliation.
• From identity verification services: Where ab88 uses third-party KYC or identity verification providers to verify government-issued identification documents submitted during the registration or withdrawal process.
• From PAGCOR and regulatory bodies: In limited circumstances, ab88 may receive information about a Member from PAGCOR or other regulatory authorities in connection with licensing, compliance, or enforcement matters.

ab88 processes your personal data for the following purposes:

• Account registration and management: To create, verify, maintain, and administer your ab88 Member account throughout your membership.
• Service delivery: To provide access to ab88's casino games, sports betting markets, bingo rooms, and all other features of the platform.
• Payment processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, and other supported payment methods, and to maintain accurate transaction records.
• Identity and age verification: To verify that you are aged 21 or above and to confirm your identity in compliance with PAGCOR KYC requirements and Philippine anti-money laundering laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats affecting the platform or its Members.
• Responsible gaming compliance: To monitor gaming activity for signs of problem gambling, to enforce player-imposed limits and self-exclusion orders, and to fulfil ab88's responsible gaming obligations under PAGCOR regulations.
• Legal and regulatory compliance: To comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and all other applicable Philippine laws and regulations.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where we have a legitimate interest in communicating with you as an existing Member.
• Platform improvement: To analyse aggregated and anonymised usage data to improve the ab88 platform, personalise your experience, and develop new features and services.

Under the Data Privacy Act of 2012, ab88 processes your personal data on one or more of the following legal bases:

• Your consent: Where you have given clear, specific, and informed consent to processing — for example, when opting in to receive marketing communications from ab88.
• Performance of a contract: Where processing is necessary for the performance of the contract between you and ab88 — including account registration, service delivery, and payment processing.
• Legal obligation: Where processing is required to comply with a legal obligation imposed on ab88 — including KYC verification under PAGCOR requirements, anti-money laundering reporting under AMLA, and data retention obligations.
• Legitimate interests: Where processing is necessary for ab88's legitimate interests, provided those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and improving our services.

ab88 does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly for the purposes described in this policy:

• Payment processors and e-wallet providers: GCash, Maya, BPI, BDO, Coins.ph, and other payment partners — to process deposits and withdrawals made through your ab88 account.
• Identity verification and KYC service providers: Third-party providers engaged by ab88 to assist with the verification of government-issued ID documents submitted during the registration and withdrawal process.
• Game content providers: Software providers whose casino games are made available on the ab88 platform may receive limited technical data (such as session tokens and game result logs) for the purpose of game delivery and integrity verification.
• IT infrastructure and cloud service providers: Third-party providers who host, maintain, and secure the ab88 platform infrastructure. These providers are bound by contractual obligations to process data only on ab88's instructions.
• PAGCOR and regulatory authorities: ab88 is required to share certain Member data with PAGCOR and other competent regulatory or law enforcement authorities when required by law, by a valid regulatory direction, or by a court order.
• Anti-money laundering reporting bodies: Where ab88 is required to file suspicious transaction reports (STRs) or other mandatory disclosures under the Anti-Money Laundering Act of the Philippines.
• Professional advisers: Legal, financial, and compliance advisers engaged by ab88 who are subject to professional secrecy obligations.

In some circumstances, the personal data you provide to ab88 may be processed by our service providers in countries outside the Philippines. This may occur in connection with cloud hosting, game platform infrastructure, or the use of globally-operated identity verification services.

Where personal data is transferred outside the Philippines, ab88 takes steps to ensure that the transfer is subject to appropriate safeguards in compliance with the Data Privacy Act of 2012 and the applicable rules and regulations of the National Privacy Commission. These safeguards may include:

• Standard contractual clauses approved or recognised by the National Privacy Commission.
• Data processing agreements that impose obligations on the recipient equivalent to those applicable to ab88 under Philippine law.
• Transfer to jurisdictions that have been assessed to provide an adequate level of data protection.

You may request further information about the safeguards in place for international transfers of your personal data by contacting our Data Privacy Officer at the contact details provided in Section 15.

ab88 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable law. The following retention principles apply:

• Active accounts: Personal data associated with an active ab88 account is retained for the duration of your membership and for a period of five (5) years following the closure of your account, in accordance with PAGCOR record-keeping requirements and applicable anti-money laundering obligations.
• Transaction records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines.
• KYC documents: Copies of government-issued identification documents submitted for KYC verification are retained for a minimum of five (5) years following account closure.
• Gaming records: Individual game session logs and wagering history are retained for a period of two (2) years from the date of each session, unless a longer retention period is required for regulatory or dispute resolution purposes.
• Customer support records: Communications with ab88's support team are retained for a period of two (2) years from the date of the last interaction, or longer where the communication relates to an unresolved dispute or regulatory matter.
• Marketing consent records: Records of your marketing preferences and consent decisions are retained for the duration of your membership and for one (1) year following account closure.

Upon the expiry of the applicable retention period, ab88 will securely delete or anonymise personal data in a manner that ensures it cannot be reconstructed or re-identified.

ab88 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain your session, and collect Technical Data as described in this policy. The following types of cookies may be used:

• Essential cookies: Strictly necessary for the operation of the Platform, including session management, login authentication, and security features. These cookies cannot be disabled without affecting your ability to use the Platform.
• Functional cookies: Used to remember your preferences — such as language settings, game layout preferences, and saved login details where you have enabled the Remember Me feature — to provide a more personalised experience.
• Analytics cookies: Used by ab88 to understand how Members use the Platform — which games are most popular, how long sessions last, and where users encounter difficulties — in order to improve the platform experience. Analytics data is aggregated and is not used to identify individual users.
• Security cookies: Used to detect and prevent fraudulent activity, including account takeover attempts, suspicious login patterns, and bot traffic.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the ab88 platform. ab88 does not use advertising or cross-site tracking cookies.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of personal data held about you by ab88:

To exercise any of these rights, please submit a written request to ab88's Data Privacy Officer via the contact details provided in Section 15. ab88 will respond to all valid data rights requests within thirty (30) calendar days of receipt, in accordance with NPC guidelines.

ab88 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ab88 platform.
• Encrypted storage for sensitive personal data, including KYC documents and financial information, held in ab88's secure database infrastructure.
• Access controls limiting access to personal data within ab88 to authorised personnel who require it for the performance of their duties, on a strict need-to-know basis.
• Multi-factor authentication for internal systems that contain personal data, including OTP-based verification for login to administrative platforms.
• Regular security assessments including penetration testing and vulnerability scans conducted by independent security specialists.
• Incident response procedures to detect, contain, and notify affected parties of personal data breaches, in accordance with NPC notification requirements.

While ab88 takes all reasonable precautions to protect your personal data, no transmission over the internet and no storage system can be guaranteed to be 100% secure. You play an important role in keeping your data safe — particularly by maintaining the security of your ab88 account credentials as described in the Terms & Conditions.

The ab88 platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gambling in the Philippines. ab88 does not knowingly collect personal data from individuals under the age of 21.

If ab88 discovers or is notified that a Member account has been registered by or on behalf of a person under 21 years of age, the account will be immediately suspended, all associated personal data will be reviewed, and any funds on account will be handled in accordance with PAGCOR guidelines and applicable law.

ab88 may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or the evolution of the Platform. The date of the most recent revision is displayed at the top of this document.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights as a data subject or our obligations to you — ab88 will notify you of the changes by posting a prominent notice on the Platform and, where practicable, by sending a notification to your registered email address or mobile number prior to the changes taking effect.

Your continued use of the ab88 platform following the effective date of any material revision constitutes your acknowledgement of the updated Privacy Policy. If you do not agree to the revised policy, you should cease using the platform and contact our support team to arrange account closure.

ab88 has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests related to your personal data or this Privacy Policy, please contact the ab88 Data Privacy Officer through the following channels:

• Email: [email protected] — For written data rights requests, privacy complaints, and formal DPA-related enquiries. Please mark your subject line with "Data Privacy Request" for priority handling.
• Live Chat: Available 24/7 within the ab88 platform — for general privacy queries and to be directed to the appropriate privacy team member.

ab88 will acknowledge all data privacy correspondence within five (5) business days and will provide a substantive response within thirty (30) calendar days, in accordance with the timeframes prescribed by the National Privacy Commission.

If you are not satisfied with ab88's response to a privacy complaint or data rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines in accordance with the procedures set out on the NPC's official website.