i8ph Privacy Policy

This Privacy Policy describes how i8ph ("i8ph", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal data of individuals who access or use the i8ph online gaming platform at https://i8ph.asia ("Platform"), including registered account holders and visitors.

This Policy applies to all personal data collected and processed by i8ph in connection with your use of the Platform, including data collected through the website, account registration, payment processing, customer support interactions, and any related communications.

By registering an Account or continuing to use the i8ph Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy forms part of i8ph's Terms and Conditions.

For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, i8ph is the personal information controller in respect of the personal data of players and users of the Platform.

i8ph is licensed and operates under the oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). Our operations are conducted in compliance with PAGCOR licensing conditions, which impose specific obligations regarding the collection, use, and retention of player data.

i8ph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Contact details for the DPO are provided in Section 15 of this Policy.

i8ph collects only the personal data that is necessary for the specific purposes described in this Policy. The categories of personal data we collect include the following:

i8ph does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health information, political opinion, or religious beliefs) unless specifically required by law or regulation.

i8ph collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, log files, and similar tracking technologies (see Section 8);
• Third-party sources: Identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention services, and PAGCOR where required by our licensing conditions;
• Regulatory sources: Information shared with i8ph by PAGCOR or law enforcement authorities in the exercise of their lawful powers.

You are not obliged to provide all personal data requested. However, failure to provide data marked as mandatory during registration or KYC verification will prevent i8ph from opening or maintaining an Account for you, as this data is required to fulfil our regulatory obligations.

i8ph processes your personal data for the following specific, legitimate purposes:

• Account registration and management: Creating, maintaining, and administering your i8ph Account, verifying your identity and age (21+ requirement), and facilitating your access to the Platform;
• Regulatory compliance: Meeting obligations under our PAGCOR licence, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws and regulations;
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted methods in Philippine Peso (₱);
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, money laundering, and other illegal or prohibited conduct;
• Service delivery and improvement: Providing access to games, betting markets, and platform features; resolving technical issues; and improving the Platform based on usage patterns;
• Responsible gaming: Monitoring account activity for signs of problem gambling, facilitating access to responsible gaming tools including deposit limits and self-exclusion, and complying with responsible gaming obligations under our PAGCOR licence;
• Customer support: Responding to inquiries, resolving disputes, and providing technical assistance;
• Marketing communications: Sending promotional offers, bonus information, and platform updates to players who have consented to receive such communications. You may opt out at any time;
• Legal proceedings: Establishing, exercising, or defending legal claims.

i8ph processes personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contract performance: Processing necessary to provide the services described in i8ph's Terms and Conditions, including operating your Account, processing payments, and delivering game services;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AMLA obligations, and tax reporting requirements;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and certain non-essential cookies, where we have obtained your explicit and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

i8ph does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors for the purpose of processing deposits and withdrawals;
• Identity verification providers: Third-party KYC and AML screening service providers that assist i8ph in meeting its regulatory obligations;
• Game software providers: Licensed game developers and platform providers that supply casino games and betting software to i8ph. These providers may receive limited technical data necessary to deliver game services;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities as required by law, regulation, court order, or regulatory direction;
• Law enforcement: Philippine National Police (PNP), National Bureau of Investigation (NBI), and other law enforcement authorities where required by applicable law or in response to lawful requests;
• Professional advisers: Legal counsel, auditors, and other professional advisers where necessary in connection with legal proceedings or regulatory matters, subject to professional secrecy obligations;
• Technology and security providers: Cloud infrastructure, cybersecurity, and IT service providers who process data on behalf of i8ph as personal information processors under binding contractual agreements consistent with the Data Privacy Act.

All third parties with whom i8ph shares personal data are required, by contract or applicable law, to handle such data in a manner consistent with the standards set out in this Privacy Policy and the Philippine Data Privacy Act.

8.1 What Are Cookies. Cookies are small text files placed on your device when you visit the i8ph Platform. They are widely used to make websites function correctly, improve user experience, and provide analytics information to site operators.

8.2 Types of Cookies Used. i8ph uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session management cookies, security tokens, and authentication cookies. These cannot be disabled without significantly impairing your ability to use the Platform;
• Functional cookies: Used to remember your preferences such as language settings, layout preferences, and account settings to improve your experience;
• Analytics cookies: Used to collect aggregated, anonymised data about how visitors use the Platform – including pages visited, session duration, and navigation patterns. This data helps i8ph improve the Platform;
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

8.3 Cookie Management. You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the i8ph Platform. Instructions for managing cookies are available in the help section of your browser.

8.4 Log Files. i8ph also collects standard server log file data, including IP addresses, browser type, referring pages, and timestamps. This data is used for security monitoring, fraud detection, and platform diagnostics.

i8ph retains personal data only for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements.

The following retention principles apply:

• Active account data: Retained for the duration of your account and for a period thereafter as required by applicable law;
• KYC and identity verification data: Retained for a minimum of five (5) years following the closure of an Account, in accordance with PAGCOR licensing conditions and the Anti-Money Laundering Act;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under AMLA and PAGCOR regulations;
• Customer support records: Retained for a period sufficient to resolve any ongoing disputes and meet regulatory requirements, typically three (3) years from the date of the relevant interaction;
• Marketing data: Retained until you opt out or withdraw consent, plus a reasonable period to process and record your withdrawal.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

i8ph implements technical, organisational, and administrative security measures appropriate to the nature of the personal data held and the risks involved in its processing. These measures include:

• Encryption: All data transmitted between your device and i8ph servers is encrypted using Transport Layer Security (TLS/SSL). Personal and financial data stored in i8ph's systems is encrypted at rest;
• Access controls: Access to personal data is restricted to authorised i8ph personnel and third-party processors on a strict need-to-know basis. All personnel with access to personal data are subject to confidentiality obligations;
• Two-factor authentication: Available to all registered players as an additional account security measure. i8ph strongly recommends that all Players enable 2FA;
• Security monitoring: i8ph employs continuous monitoring of its systems for security threats, unusual access patterns, and potential breaches;
• Incident response: i8ph has a documented data breach response procedure. In the event of a personal data breach that is likely to result in harm to data subjects, i8ph will notify affected individuals and the National Privacy Commission in accordance with the requirements of the Data Privacy Act.

While i8ph takes all reasonable precautions to protect your data, no system can guarantee absolute security. You are also responsible for maintaining the security of your Account credentials.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of the personal data i8ph holds about you:

To exercise any of the above rights, please contact i8ph's Data Protection Officer as described in Section 15. i8ph will respond to all valid requests within thirty (30) days, or within such other timeframe as required by the Data Privacy Act. i8ph may need to verify your identity before processing your request.

Please note that certain data subject rights are subject to limitations under the Data Privacy Act – for example, where i8ph is required to retain data to comply with PAGCOR licensing conditions or the Anti-Money Laundering Act, it may not be able to immediately fulfil an erasure request in respect of that data.

The i8ph Platform is strictly intended for individuals aged twenty-one (21) years and above, in accordance with PAGCOR regulations and the laws of the Republic of the Philippines. i8ph does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted as part of the mandatory KYC process at account registration. If i8ph discovers or is informed that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, i8ph will:

• Immediately close the relevant Account;
• Delete or anonymise all personal data associated with that Account to the extent not required for regulatory purposes;
• Report the matter to PAGCOR as required under our licence conditions.

i8ph encourages parents and guardians to use device-level parental control tools to prevent minors from accessing online gambling platforms, including i8ph.

i8ph's primary operations and data storage are based in the Philippines. In certain circumstances, personal data may be processed by third-party service providers located outside the Philippines – for example, game software providers or cloud infrastructure providers operating internationally.

Where personal data is transferred outside the Philippines, i8ph ensures that such transfers are subject to appropriate safeguards in accordance with the Data Privacy Act and the implementing rules of the National Privacy Commission. These safeguards may include:

• Contractual clauses with the receiving party that impose data protection obligations equivalent to those applicable in the Philippines;
• Binding corporate rules where applicable;
• Transfers to countries or organisations that the NPC has determined provide adequate levels of protection for personal data.

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting i8ph's Data Protection Officer.

14.1 Right to Update. i8ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. The updated Policy will be published on this page with a revised "Last Updated" date.

14.2 Notification of Material Changes. Where changes to this Privacy Policy are material – meaning they significantly affect how your personal data is collected or used – i8ph will provide advance notice to registered Players via email or Platform notification before the changes take effect.

14.3 Continued Use. Your continued use of the i8ph Platform following the effective date of any update to this Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with the changes, you should cease using the Platform and may request the closure of your Account.

14.4 Archive. Prior versions of this Privacy Policy are available on request from i8ph's Data Protection Officer.

i8ph has designated a Data Protection Officer (DPO) responsible for overseeing all matters related to data privacy and the implementation of this Privacy Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 through the i8ph Platform – the fastest way to raise an urgent data concern.
• Email: [email protected] — for data subject rights requests, please include "Data Privacy Request" in the subject line.

i8ph will acknowledge all data subject rights requests within five (5) business days and will respond fully within thirty (30) days, or such extended period as permitted by the Data Privacy Act where the request is complex.

If you are not satisfied with i8ph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC can be contacted through its official channels.