hp888 Casino —
Privacy Policy
This Privacy Policy explains how hp888 collects, uses, stores, shares, and protects your personal information when you use our Platform at hp888.biz. We operate under the Philippine Data Privacy Act of 2012 (Republic Act 10173), its implementing rules, and PAGCOR's data handling requirements for licensed online gaming operators.
How hp888 Protects Your Data
hp888's data practices are governed by the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations. As a PAGCOR-licensed platform, we are also subject to PAGCOR's specific requirements for player data handling, KYC record retention, and AML compliance reporting under Philippine law.
All personal data transmitted between your device and the hp888 Platform is protected by 256-bit SSL encryption — the same standard used by Philippine banks and major e-wallets like GCash and Maya. Data at rest in our systems is stored in encrypted form with access restricted to authorised personnel only.
hp888 does not sell, rent, or trade your personal information to third-party advertisers, data brokers, or marketing companies. The data you provide to hp888 is used exclusively to operate your account, comply with PAGCOR and AMLA regulatory obligations, process payments, and deliver customer support — nothing else.
Under RA 10173, you have the right to be informed, to access your data, to object to processing, to erasure in qualifying circumstances, to data portability, and to lodge a complaint with the National Privacy Commission (NPC). hp888 honours these rights and has established a process to handle data subject requests within the legal timeframes.
hp888 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. PAGCOR licensing and Philippine AML regulations require certain records to be retained for a minimum period. We do not hold your information longer than legally required or operationally necessary.
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, hp888 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the requirements of RA 10173.
hp888 ("hp888", "we", "us", "the Company") is the operator of the online gaming platform accessible at hp888.biz. hp888 is a PAGCOR-licensed online gaming operator subject to the regulatory jurisdiction of the Philippine Amusement and Gaming Corporation.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations (IRR), hp888 is the Personal Information Controller (PIC) in respect of personal data collected and processed through the hp888 Platform. This means hp888 determines the purposes and means by which your personal information is processed.
This Privacy Policy applies to all personal information collected by hp888 through the hp888.biz website, account registration and management processes, payment transactions, customer support interactions, and any other hp888 services you access as a registered player.
hp888 collects personal data through multiple channels and for various purposes tied to the operation of a PAGCOR-licensed gaming platform. The categories of data we collect include:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, ID document images | You (registration & KYC) |
| Contact Data | Philippine mobile number, email address, residential address | You (registration) |
| Financial Data | GCash or Maya account reference, BPI/BDO/Metrobank account name, transaction amounts, deposit and withdrawal history | You & payment processors |
| Gaming Activity Data | Game session logs, bet amounts, win/loss records, bonus usage, VIP tier status | Automatically (Platform) |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Automatically (Platform) |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | You (support interactions) |
| Responsible Gaming Data | Deposit limits set, self-exclusion elections, session timer settings, reality check acknowledgements | You (account settings) |
2.1 Sensitive Personal Information. Government-issued identification documents submitted for KYC verification constitute sensitive personal information under RA 10173. hp888 processes this data solely for the purpose of satisfying PAGCOR's mandatory player identity and age verification requirements. This data is stored in encrypted form and access is restricted to authorised compliance personnel.
2.2 Voluntary Information. You are not required to provide personal information beyond what is necessary for account registration and KYC verification. However, providing incomplete information may prevent hp888 from enabling full account functionality, including real-money deposits and withdrawals, as required by PAGCOR licensing conditions.
hp888 processes your personal data for the following purposes:
- Account creation and management: To create, verify, and manage your hp888 player account, including identity verification as required by PAGCOR;
- Service delivery: To provide access to the hp888 game library, process bets and game outcomes, credit winnings, and maintain your VIP tier and bonus records;
- Payment processing: To facilitate deposits via GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment methods, and to process withdrawal requests to your nominated account;
- Regulatory compliance: To fulfil obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and the Philippine Data Privacy Act, including mandatory reporting to PAGCOR and the Anti-Money Laundering Council (AMLC);
- Responsible gaming: To monitor gaming activity for indicators of problem gambling patterns and to enforce responsible gaming tools you have elected (deposit limits, self-exclusion, etc.);
- Fraud prevention and security: To detect and prevent fraudulent activity, multi-accounting, unauthorised account access, and money laundering;
- Customer support: To respond to your inquiries, resolve complaints, and provide account-related assistance through live chat and email;
- Service improvement: To analyse aggregated, anonymised usage data to improve Platform performance, game library relevance, and the overall player experience;
- Legal obligations: To comply with any court order, regulatory direction, or lawful request from a Philippine government authority or law enforcement body.
Under RA 10173, personal information may be processed when at least one of the following lawful bases applies. hp888 relies on the following legal bases for its data processing activities:
Processing of your identity, contact, financial, and gaming activity data is necessary for the performance of the contract between you and hp888 — specifically, to operate your account, process deposits and withdrawals, deliver game services, and maintain your bonus and VIP records.
hp888 is required by PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), and other applicable Philippine laws to collect, verify, and retain certain personal data, including government ID documents, transaction records, and gaming activity logs. This processing is mandatory and cannot be declined without forfeiting account access.
Where hp888 relies on your consent — for example, to send promotional communications or to process data beyond what is strictly required for the service or legal compliance — we will obtain that consent separately and clearly. You may withdraw consent for discretionary processing at any time by contacting our Data Protection Officer, without affecting the lawfulness of prior processing.
hp888 processes certain technical data (such as IP addresses, device identifiers, and session logs) on the basis of legitimate interests — specifically, to detect and prevent fraud, unauthorised access, and cheating on the Platform. These processing activities are necessary for the security and integrity of the gaming environment and do not override your fundamental data privacy rights.
hp888 does not sell your personal information. We may share your data with the following categories of third parties, strictly for the purposes described:
- PAGCOR: As a licensed operator, hp888 is required to provide player records, gaming activity reports, and KYC documentation to PAGCOR upon request and in accordance with reporting obligations under our licence;
- Anti-Money Laundering Council (AMLC): hp888 is a covered institution under RA 9160 and is required to file suspicious transaction reports (STRs) and covered transaction reports (CTRs) with the AMLC as prescribed by law;
- Payment processors: GCash (GXI), Maya (Voyager Innovations), bank payment gateways, and other approved Philippine payment service providers receive the minimum data necessary to process your deposit and withdrawal transactions;
- Game providers: Licensed third-party game providers (such as PG Soft, JILI, Pragmatic Play, Evolution Gaming) receive session data necessary to deliver their games within the hp888 lobby. These providers are contractually bound to handle player data in compliance with applicable privacy law;
- Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform infrastructure vendors who provide services under strict data processing agreements that prohibit independent use of your data;
- Law enforcement and courts: hp888 may disclose personal data in response to a valid court order, warrant, or lawful demand from a Philippine government authority or law enforcement body.
All third parties with whom hp888 shares personal data are required by contract to maintain appropriate technical and organisational security measures and to use the shared data only for the specific, authorised purpose for which it was disclosed.
hp888 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device by your browser when you visit hp888.biz.
6.1 Essential Cookies. These cookies are strictly necessary for the hp888 Platform to function. They maintain your login session, enable secure account access, preserve game state during a session, and support Platform security features. These cookies cannot be disabled without preventing the Platform from functioning correctly.
6.2 Functional Cookies. These cookies remember your preferences — such as language, display settings, and "keep me logged in" elections — to personalise your experience. They persist between sessions and can be cleared through your browser settings.
6.3 Analytical Cookies. hp888 uses analytics tools to collect aggregated, anonymised data about how players navigate and use the Platform. This data is used solely to identify performance issues, optimise page loading on Philippine mobile networks, and improve the game lobby layout. No individual player is identified in this analysis.
6.4 Managing Cookies. You can manage, block, or delete cookies through your browser settings. Note that blocking essential cookies will prevent you from logging in to your hp888 account. Your browser's help documentation provides instructions for managing cookies on your specific browser.
hp888 retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR licensing conditions. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| KYC identity documents | 5 years from account closure | PAGCOR licensing & RA 9160 (AMLA) |
| Financial transaction records | 5 years from transaction date | RA 9160 (AMLA) / BIR requirements |
| Gaming activity logs | 3 years from session date | PAGCOR licence conditions |
| Account registration data | Duration of account + 5 years | Contractual & regulatory |
| Customer support communications | 3 years from closure of inquiry | Dispute resolution & legal claims |
| Technical / access logs | 12 months from creation | Security & fraud detection |
| Marketing preferences | Until withdrawal of consent | Consent |
Upon expiry of the applicable retention period, hp888 will securely delete or irreversibly anonymise personal data, unless an ongoing legal obligation, regulatory investigation, or legal claim requires its continued retention.
Our security measures include, but are not limited to:
- Transport encryption: All data in transit between your device and hp888 servers is protected by TLS 1.3 / 256-bit SSL encryption;
- Encryption at rest: Sensitive data — including KYC documents, payment references, and account credentials — is encrypted using AES-256 in our storage systems;
- Access controls: Access to personal data within hp888 systems is restricted on a role-based, need-to-know basis. Privileged access is subject to multi-factor authentication and audit logging;
- OTP authentication: Login events from new devices or unfamiliar locations trigger SMS-based one-time password verification to your registered Philippine mobile number;
- Fraud detection systems: Automated monitoring detects anomalous account activity, unusual login patterns, and potential account takeover attempts in real time;
- Penetration testing: hp888's Platform undergoes periodic security testing by independent third-party security professionals;
- Staff training: hp888 personnel with access to personal data undergo data privacy and security training and are bound by confidentiality obligations.
Despite these measures, no Internet-based system can guarantee absolute security. hp888 encourages all players to use strong, unique passwords for their hp888 account and to enable OTP authentication on all login sessions.
As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to personal data hp888 holds about you:
The right to know that your personal data is being collected, the purposes of collection, and how it will be used — fulfilled by this Privacy Policy.
The right to obtain a copy of the personal data hp888 holds about you and information about how it is being processed. Requests fulfilled within 15 working days.
The right to request correction of inaccurate, incomplete, or outdated personal data. Basic contact data can be updated directly in your account settings.
The right to request deletion of personal data where there is no longer a lawful basis for processing. Note: regulatory retention obligations may limit this right for certain data categories.
The right to object to processing based on legitimate interests, or to processing for direct marketing purposes. Objection to essential processing may require account closure.
The right to receive a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another controller where technically feasible.
How to Exercise Your Rights. To exercise any of the above rights, submit a written request to hp888's Data Protection Officer at the email address in Section 13. Include your full name, registered mobile number, a description of the right you wish to exercise, and (for access and portability requests) your preferred delivery format. We will respond within 15 working days for standard requests and may request additional identity verification before processing sensitive requests.
National Privacy Commission. If you are not satisfied with hp888's response to a data rights request, or if you believe we have violated your rights under RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
If you are a parent or guardian and believe that a minor in your care has provided personal data to hp888, please contact our Data Protection Officer immediately at the contact details in Section 13. We will take prompt action to investigate and, where confirmed, to close the account and delete the associated data.
hp888's primary data storage infrastructure is located in data centres serving the Philippine region. However, some of hp888's third-party game providers and infrastructure vendors operate internationally, which may result in your personal data being processed in or transferred to servers located outside the Philippines.
Where personal data is transferred outside the Philippines, hp888 ensures that appropriate safeguards are in place, including:
- Contractual clauses in agreements with third-party processors that impose data protection obligations equivalent to or exceeding those required by RA 10173;
- Transfer only to jurisdictions or recipients that provide an adequate level of data protection as recognised by the National Privacy Commission;
- Limiting cross-border transfers to the minimum data necessary for the specific service purpose.
hp888 does not transfer personal data to jurisdictions or entities for purposes beyond those described in this Privacy Policy.
hp888 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable Philippine law, or updated PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.
Where changes are material — meaning they significantly affect your rights or the way hp888 processes your personal data — hp888 will notify you via the email address or mobile number registered to your account, or through a prominent notice on the hp888 Platform, prior to the changes taking effect.
Continued use of the hp888 Platform following the notification of material changes constitutes your acknowledgement of the revised Privacy Policy. If you do not agree to the updated policy, you may close your account in accordance with the procedure described in the hp888 Terms and Conditions.
hp888 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173, handling data subject requests, and coordinating with the National Privacy Commission. The DPO can be reached through the following channels:
DPO Email: [email protected] (subject line: "Data Privacy Request — [Your Name]")
General Support: Live Chat on hp888.biz — available 24/7
Response Time: Data subject requests acknowledged within 3 working days; substantive response within 15 working days
NPC Reference: For unresolved privacy complaints, contact the National Privacy Commission — www.privacy.gov.ph
When submitting a data rights request, please include your full name, your registered hp888 account mobile number, a clear description of the request or concern, and any supporting information that will help us process your request accurately and efficiently. Identity verification may be required before sensitive requests are fulfilled.
For general questions about this Privacy Policy or hp888's data practices, you may also contact our player support team through the Live Chat function on hp888.biz, available around the clock with an average response time under 2 minutes. For written email inquiries, responses are provided within 4 hours during Philippine business hours (08:00–24:00 PHT).
Play at hp888 Casino
with Confidence — PAGCOR-Regulated,
RA 10173 Compliant.
Your personal data is in safe hands at hp888. We collect only what we need, hold it only as long as the law requires, and never sell it. Register your free account today — PAGCOR-licensed, 21+ only, fully verified before real-money play. Your privacy, your security.