ua888 Privacy Policy

1 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, ua888 is the Personal Information Controller (PIC) in respect of the personal data collected through the ua888 platform. As PIC, ua888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

ua888 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 14 of this Policy.

Where ua888 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification providers), those providers act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with ua888's instructions and applicable law.

2 Personal Data We Collect

ua888 collects the following categories of personal data from players and platform users:

ua888 does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data beyond selfie photographs required for KYC purposes.

3 How We Collect Your Data

ua888 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and gaming data collected automatically as you use the ua888 platform, including through cookies, log files, and session tracking technologies.
• Third-party sources: Identity and address verification data received from KYC/AML service providers; fraud risk signals from payment processors; regulatory data from PAGCOR where required.

You are not obligated to provide personal data to ua888; however, failure to provide mandatory data will prevent us from opening or maintaining your account, processing transactions, or providing platform services.

4 Why We Use Your Personal Data

ua888 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your ua888 player account, including authentication and account security.
• KYC and age verification: Verifying your identity and confirming that you meet the minimum age requirement of 21 years, as required by PAGCOR regulations.
• Transaction processing: Processing deposits, withdrawals, and bonus credits; maintaining accurate financial records of all account activity.
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws, including mandatory reporting to regulatory authorities.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, and other security threats.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour and administering self-exclusion, deposit limit, and cooling-off requests.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the ua888 platform, game offerings, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ua888 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your ua888 account, process transactions, and deliver platform services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing requirements, AMLA obligations, and NPC regulations.
• Legitimate interests: Processing necessary for ua888's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

ua888 does not sell your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya, and Philippine banking partners receive transaction data necessary to process deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• KYC/AML service providers: Identity verification and anti-money laundering screening providers receive identity and verification data to fulfil our regulatory obligations.
• Game providers: Licensed third-party game providers receive your player ID and gaming session data necessary to deliver game services. They do not receive your full identity or financial data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities may receive data where required by law or regulatory instruction.
• IT and security providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on ua888's behalf under strict data processing agreements.
• Professional advisers: Legal, audit, and compliance advisers who require access to data in the course of providing professional services to ua888, subject to professional confidentiality obligations.

All third-party processors engaged by ua888 are contractually required to implement appropriate technical and organisational security measures and to process personal data only in accordance with ua888's documented instructions.

7 Cookies and Tracking Technologies

ua888 uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for platform operation, including session management, authentication, and security. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players use the ua888 platform to help us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

ua888 does not use third-party advertising or behavioural tracking cookies. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may affect your ability to use the ua888 platform.

8 Data Retention

ua888 retains personal data for the following periods, after which data is securely deleted or anonymised:

Where retention beyond these periods is required by a specific legal obligation or ongoing regulatory investigation, data will be retained until that obligation is fulfilled.

9 Data Security

ua888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and ua888 servers is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256.
• Access controls: Personal data is accessible only to ua888 personnel and authorised processors who require it for their specific role. Role-based access controls and multi-factor authentication are enforced for all staff with data access.
• Infrastructure security: ua888 servers are hosted in secure, access-controlled data centres with 24/7 monitoring, intrusion detection systems, and regular penetration testing.
• Incident response: ua888 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, ua888 will notify the National Privacy Commission within 72 hours and affected players without undue delay, as required by RA 10173.
• Staff training: All ua888 personnel with access to personal data receive regular data protection training and are bound by confidentiality obligations.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ua888:

To exercise any of these rights, contact ua888's Data Protection Officer using the details in Section 14. ua888 will respond to all data subject requests within 15 business days. In complex cases, this period may be extended by a further 15 business days with prior notification. If you are not satisfied with ua888's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children's Privacy

The ua888 platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. ua888 does not knowingly collect personal data from individuals under the age of 21.

If ua888 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data, and report the matter to PAGCOR as required. If you believe that a minor has registered on ua888, please contact our support team immediately.

Age verification is a mandatory step in the ua888 KYC process. We use documentary verification to confirm that all registered players meet the minimum age requirement before any gaming activity is permitted.

12 Cross-Border Data Transfers

ua888 primarily processes personal data within the Philippines. Where data is transferred to third-party service providers located outside the Philippines — for example, cloud infrastructure providers or international game suppliers — ua888 ensures that such transfers comply with the requirements of RA 10173 and NPC regulations, including:

• Entering into data processing agreements that impose data protection obligations equivalent to those under Philippine law.
• Transferring data only to countries or organisations that provide an adequate level of data protection as recognised by the NPC.
• Implementing appropriate safeguards such as standard contractual clauses where required.

Details of the countries to which your data may be transferred and the safeguards in place are available upon request from the ua888 Data Protection Officer.

13 Updates to This Privacy Policy

ua888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The most current version of this Policy will always be available on this page, with the effective date updated accordingly.

For material changes that significantly affect your rights or the way we process your personal data, ua888 will provide at least 14 days' advance notice via email to your registered address or via a prominent notice on the platform. Your continued use of ua888 following the effective date of any update constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how ua888 protects your personal data.

14 Contact Us and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ua888, please contact our Data Protection Officer:

If you are not satisfied with our response to your data subject request, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines through their official channels.