tg888 Privacy Policy

1Introduction & Scope

This Privacy Policy applies to all personal information collected, processed, stored, disclosed, and otherwise handled by tg888 in connection with the operation of tg888.onl and all related gaming, payment, support, and promotional services offered by the Platform to players in the Philippines and other jurisdictions where tg888 is accessible.

This Policy is drafted in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR) as administered by the National Privacy Commission (NPC) of the Philippines. It is also consistent with tg888's obligations under PAGCOR's data protection requirements for licensed online gaming operators.

This Privacy Policy should be read alongside the tg888 Terms and Conditions (tg888.onl/terms-conditions), which govern the overall relationship between tg888 and registered players, including the handling of gaming data and financial transaction records.

2Who We Are — Data Controller

For the purposes of the Data Privacy Act of 2012, tg888 is the personal information controller in respect of the personal data it collects from users of tg888.onl. This means tg888 determines the purposes and means of processing your personal information in connection with the Platform's services.

tg888 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. To contact the tg888 DPO, please write to the support address provided in Section 14 of this Policy and mark your correspondence for the attention of the Data Protection Officer.

3Information We Collect

tg888 collects personal information in the categories set out in the table below. The specific information collected in each category depends on how you interact with the Platform.

4How We Collect Information

tg888 collects personal information through the following primary methods:

• Direct submission: Information you provide when completing the tg888 registration form, submitting KYC documents, making deposits or withdrawal requests, contacting support, or updating your account profile.
• Automated technical collection: Information gathered automatically when you access tg888.onl, including IP address, device identifiers, browser data, and session metadata collected via server logs and first-party cookies. See Section 10 for full details on cookies.
• Payment processor data: Confirmation data returned to tg888 by GCash, PayMaya, and banking partners upon completion of a transaction — such as transaction reference numbers, timestamps, and the registered name on the payment account — to the extent required for reconciliation and fraud prevention.
• Third-party game providers: Game outcome and session data transmitted to tg888 from licensed game providers (including JILI Gaming, PG Soft, Pragmatic Play, Evolution Gaming) in the course of game play, for the purpose of maintaining accurate player account records.

5How We Use Your Information

tg888 uses the personal information it holds for the following specific purposes. We do not use your data for any purpose incompatible with those listed below without first obtaining your separate consent or as otherwise required by law.

• Account creation and management: To open, verify, maintain, and close your tg888 Player Account, including processing deposits, withdrawals, and bonus credits.
• Identity verification and KYC: To verify your identity and age in compliance with PAGCOR's KYC requirements and the Anti-Money Laundering Act (AMLA), as amended.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, identity fraud, and other illegal or prohibited conduct on the Platform.
• Regulatory compliance: To fulfil tg888's reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities as required by law.
• Customer support: To respond to inquiries, resolve disputes, process complaints, and provide technical assistance to players across Manila, Cebu, Davao, Quezon City, and other parts of the Philippines.
• Responsible gaming: To monitor gaming patterns, apply responsible gaming limits requested by players, identify potential problem gambling indicators, and administer self-exclusion requests.
• Marketing communications: To send you promotional offers, bonus notifications, and tg888 news — but only if you have opted in to receive such communications. You may opt out at any time through your account settings.
• Platform improvement: To analyse aggregate usage data (in anonymised or pseudonymised form) for the purpose of improving tg888.onl's functionality, game library, and user experience.

6Legal Bases for Processing

Under the Data Privacy Act of 2012, tg888 processes personal data on the following legal bases depending on the specific processing activity:

• Contractual necessity: Processing required to enter into or perform the contract between you and tg888 — including account creation, deposit and withdrawal processing, game play, and support services.
• Legal obligation: Processing required by applicable Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for tg888's legitimate interests in operating a secure, fraud-free gaming platform — including fraud detection, platform security, and responsible gaming monitoring — where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily in the context of marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7Sharing & Disclosure of Your Data

7.1 Third Parties We Share Data With

tg888 may share your personal data with the following categories of recipients only to the extent necessary for the stated purposes and subject to appropriate contractual safeguards:

• Licensed game providers (e.g., JILI Gaming, PG Soft, Pragmatic Play, Evolution Gaming) — to deliver the game services you access through tg888, limited to session and wagering data required for game delivery and reconciliation.
• Payment service providers (GCash / Maya / BPI / BDO / Metrobank) — to process your deposit and withdrawal transactions in Philippine Pesos.
• KYC and identity verification processors — third-party identity verification services engaged by tg888 to assist with the verification of government-issued IDs submitted during the KYC process.
• Regulatory authorities (PAGCOR, AMLC, NPC, and other competent Philippine authorities) — where tg888 is required by law or regulatory obligation to disclose information.
• IT infrastructure and cloud service providers — contracted processors that host, maintain, or support tg888's technical infrastructure, bound by data processing agreements that restrict their use of data to service provision only.

7.2 No Sale of Personal Data

tg888 does not sell, rent, barter, or otherwise transfer your personal information to third parties for their own independent marketing or commercial use. Any third-party access to your data is strictly limited to what is necessary for the purposes identified in Section 7.1 and governed by binding contractual data protection obligations.

8Data Retention

tg888 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR's record-keeping requirements and the Anti-Money Laundering Act's retention mandate.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLA and PAGCOR reporting obligations.
• Gaming session records: Retained for a minimum of three (3) years from the date of each session, for responsible gaming monitoring, dispute resolution, and regulatory audit purposes.
• Support and communication records: Retained for two (2) years from the date of the interaction, for dispute resolution and quality assurance purposes.
• Marketing preference records: Retained while your account is active and for twelve (12) months following account closure, unless you withdraw consent earlier.

When personal data is no longer required and the applicable retention period has expired, tg888 will securely destroy, delete, or anonymise the data in accordance with its internal data disposal procedures.

9Security Measures

tg888 implements technical, organisational, and physical security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, or accidental loss. Key security measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your browser or device and tg888.onl is encrypted using 256-bit SSL/TLS encryption.
• Password hashing: Account passwords are stored as salted hashes using a one-way cryptographic algorithm (bcrypt). Plain-text passwords are never stored by tg888.
• Access controls: Access to personal data within tg888's systems is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls.
• Two-factor authentication (2FA): tg888 provides SMS OTP-based 2FA for player accounts and enforces multi-factor authentication for all internal system access by tg888 staff.
• Regular security assessments: tg888's technical infrastructure undergoes periodic vulnerability assessments and penetration testing by qualified security professionals.
• Incident response: tg888 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to data subjects, tg888 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

While tg888 applies rigorous security standards, no digital system can be guaranteed entirely free from risk. You are also responsible for keeping your account credentials secure. Do not share your tg888 password with anyone, and log out of your account after each session — particularly when accessing tg888 from a shared device (e.g., a computer at an internet café in Cebu or Davao).

10Cookies & Tracking Technologies

tg888.onl uses first-party cookies and similar tracking technologies (collectively, "cookies") to operate and improve the Platform. tg888 does not use third-party advertising or cross-site tracking cookies.

Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function, including session management, login authentication, and security token validation. These cookies cannot be disabled without affecting your ability to use the Platform.
• Functional cookies: Remember your preferences (e.g., language settings, game lobby display preferences) to provide a personalised experience on return visits.
• Analytics cookies: Collect anonymised data about how players interact with tg888.onl (e.g., most-visited game categories, session duration) to help tg888 improve the Platform. This data does not identify individual users.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the tg888 Platform. Disabling functional or analytics cookies will not prevent you from accessing your account or placing wagers.

11Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tg888. To exercise any of these rights, contact tg888 support as described in Section 14 and specify the right you are invoking. tg888 will respond within thirty (30) days of receiving a verifiable request.

12Children's Privacy — 21+ Rule

The tg888 Platform is intended solely for adults aged 21 years or older, in compliance with PAGCOR's minimum age requirements for licensed online gaming in the Philippines. tg888 does not knowingly collect personal data from any individual under the age of 21.

If tg888 discovers, through KYC verification or other means, that personal data has been collected from an individual under 21 years of age, all such data will be immediately deleted, the account will be permanently closed, and any balance held in the account will be retained pending regulatory review in accordance with PAGCOR's underage gaming procedures.

13Changes to This Privacy Policy

tg888 may update or amend this Privacy Policy from time to time to reflect changes in the Platform's operations, applicable Philippine laws and regulations, or PAGCOR requirements. Any material changes to this Policy will be communicated to registered players by email notification to the address on file and/or by a prominent notice on tg888.onl prior to the amendment taking effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. The current version of this Privacy Policy is always available at tg888.onl/privacy-policy. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy. If you do not agree to any material change, you should stop using the Platform and may request account closure in accordance with the tg888 Terms and Conditions.

14Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by tg888, please contact us through the following channels. When exercising data subject rights, please clearly state the right you are invoking and provide sufficient information for tg888 to verify your identity.

• Live Chat: Available 24/7 at tg888.onl — for urgent account-related privacy queries and fastest response.
• Email (Data Privacy): [email protected] — please mark your subject line "Data Privacy Request – [Your Registered Name]". This is a plain text address; please copy it manually and do not use a clickable link.
• Data Protection Officer: To specifically reach the tg888 DPO, address your correspondence to "Attn: Data Protection Officer" at the same email address.
• Response Time: tg888 will acknowledge privacy-related requests within five (5) business days and provide a substantive response within thirty (30) calendar days, as required by the Data Privacy Act of 2012.
• National Privacy Commission: If you are unsatisfied with tg888's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. Contact details are available on the NPC's official website.