p8989 Privacy Policy

1 Introduction & Controller Identity

1.1   p8989 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with the p8989 online gaming platform accessible at p8989.cam. This Privacy Policy sets out our practices with respect to the collection, use, storage, disclosure, and protection of personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

1.2   For the purposes of the Philippine Data Privacy Act, p8989 acts as the Personal Information Controller (PIC) in relation to all personal data collected from registered players and website visitors. Where p8989 engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements consistent with applicable law.

1.3   This policy applies to all personal data collected through: the p8989 website at p8989.cam; account registration and verification processes; deposit, withdrawal, and transaction processing; customer support interactions; and promotional and marketing communications.

2 Personal Data We Collect

2.1   p8989 collects the following categories of personal data from players and prospective players:

Identity & Contact Data

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (required for age verification — all players must be 21 or older);
• Valid Philippine mobile number;
• Email address;
• Residential address in the Philippines;
• Government-issued ID type and reference number (e.g., PhilSys National ID, UMID, Passport, Driver's License).

Financial & Transaction Data

• GCash account number or registered mobile number;
• PayMaya account details;
• Bank account details (BDO, BPI, Metrobank, UnionBank) where used for deposits or withdrawals;
• Cryptocurrency wallet addresses where applicable;
• Complete transaction history: deposits, withdrawals, and wagers on the p8989 platform.

Technical & Usage Data

• IP address and approximate geographic location at the time of login;
• Device type, operating system, and browser version;
• Session logs: login timestamps, game sessions, pages visited;
• Betting history and game preferences within the p8989 platform.

Communications Data

• Records of live chat, email, and telephone interactions with the p8989 support team;
• Responses to surveys or promotional communications where you voluntarily provide them.

2.2   p8989 does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health data, political opinions, or biometric data) unless specifically required by law or explicitly provided by the player with full consent.

3 How We Collect Your Data

3.1   p8989 collects personal data through the following means:

• Directly from you: When you register a p8989 account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team, or respond to a promotion;
• Automatically: When you access the p8989 website or platform, our servers and analytics tools automatically collect technical and usage data including your IP address, device information, and session behaviour;
• From third-party payment providers: Where you use GCash, PayMaya, BDO, BPI, Metrobank, or UnionBank to transact with p8989, those providers transmit payment confirmation data to our platform;
• From identity verification services: Where p8989 uses a third-party KYC service to verify your identity documents, that provider shares the verification outcome (pass/fail) and may share extracted document data with us;
• From regulatory authorities: Where required, p8989 may receive information about players from PAGCOR, the AMLC, or other Philippine regulatory bodies in the course of compliance activities.

4 Legal Basis for Processing

4.1   p8989 processes your personal data on one or more of the following legal bases under the Philippine Data Privacy Act:

• Performance of a Contract: Processing your account registration, verifying your identity, facilitating deposits and withdrawals, and operating your gameplay are all necessary to perform the agreement between you and p8989;
• Legal Obligation: p8989 is required by law — including PAGCOR regulations and the Anti-Money Laundering Act — to collect, verify, and retain certain player data regardless of your preferences;
• Legitimate Interests: p8989 may process certain data (such as usage analytics and fraud detection signals) where doing so is necessary for our legitimate business interests and does not outweigh your privacy rights;
• Consent: Where p8989 sends you direct marketing communications, we rely on your explicit consent, which you may withdraw at any time.

5 How p8989 Uses Your Personal Data

5.1   p8989 uses the personal data it collects for the following specific purposes:

• Creating and maintaining your p8989 player account;
• Verifying your identity and age (all players must be 21 or older as required by PAGCOR);
• Processing deposits and withdrawals in Philippine Pesos via GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, and Crypto;
• Providing access to games, live casino, sports betting, bingo, virtual sports, and all other p8989 platform features;
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited conduct on the p8989 platform;
• Complying with PAGCOR reporting requirements, AMLC transaction monitoring obligations, and NPC data breach notification duties;
• Personalising your p8989 account experience — including displaying recently played games and relevant promotional offers;
• Providing customer support in Tagalog and English through our 24/7 Filipino support team;
• Sending you promotional communications and bonus offers where you have consented to receive them;
• Administering responsible gaming tools including deposit limits, session timers, and self-exclusion where you activate them.

6 Data Sharing & Disclosure

6.1   p8989 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances:

Service Providers (Personal Information Processors)

p8989 engages carefully selected third-party service providers — including payment processors (GCash, PayMaya, banking partners), KYC identity verification providers, cloud infrastructure providers, and customer support platform operators — to process data on our behalf. All such providers are bound by contractual data processing agreements requiring them to maintain equivalent data protection standards to those applied by p8989.

Game Suppliers

Third-party game suppliers (such as Pragmatic Play, Evolution Gaming, and NetEnt) receive limited technical session data necessary to authenticate your p8989 session and load the relevant game. These suppliers do not receive your full identity data.

Regulatory & Legal Disclosure

p8989 is required by Philippine law to disclose player data to the following authorities when legally compelled:

• Philippine Amusement and Gaming Corporation (PAGCOR) — for licensing compliance and reporting;
• Anti-Money Laundering Council (AMLC) — for transaction monitoring and suspicious transaction reporting;
• National Privacy Commission (NPC) — in the event of a reportable data breach;
• Courts and law enforcement agencies — pursuant to a valid court order, subpoena, or lawful government request.

6.2   p8989 will not disclose your personal data to any other third party without your prior explicit consent, except as required by law.

7 Cookies & Tracking Technologies

7.1   The p8989 website uses cookies and similar tracking technologies to operate the platform, remember your login session, detect fraud signals, and analyse platform usage. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the p8989 platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing your access to the platform.
• Functional Cookies: Remember your p8989 account preferences such as language settings and recently played games.
• Analytics Cookies: Aggregate, anonymised data about how players navigate the p8989 platform, used to improve site performance and user experience.
• Marketing Cookies: Used only where you have consented — to track the effectiveness of p8989 promotional campaigns and deliver relevant bonus communications.

7.2   You may manage cookie preferences through your browser settings at any time. Note that disabling strictly necessary cookies will prevent access to your p8989 account.

8 Data Retention

8.1   p8989 retains personal data for as long as is necessary for the purposes set out in this policy and to comply with applicable legal obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active p8989 account plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLC anti-money laundering regulations;
• Transaction records: Retained for a minimum of five (5) years following the transaction date, per AMLC recordkeeping requirements;
• Support communications: Retained for two (2) years from the date of the interaction, or longer where relevant to an ongoing dispute;
• Marketing consent records: Retained for the duration of the marketing relationship plus one (1) year to demonstrate compliance with consent requirements.

8.2   When data is no longer required and no legal obligation exists to retain it, p8989 will securely delete or anonymise it in a manner that prevents reconstruction.

9 Data Security

9.1   p8989 implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and p8989 servers;
• Encryption at rest for all stored personal and financial data;
• Salted cryptographic hashing for all account passwords — plain-text passwords are never stored;
• Two-factor authentication (2FA) availability for all p8989 player accounts;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of the p8989 platform infrastructure;
• Automated monitoring for suspicious login activity and account access anomalies.

9.2   In the event of a personal data breach that poses a risk to your rights and freedoms, p8989 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

10 International Data Transfers

10.1   Some of the third-party service providers used by p8989 — including cloud infrastructure providers and game suppliers — may process data in countries outside the Philippines. Where such transfers occur, p8989 ensures that adequate safeguards are in place through one or more of the following mechanisms:

• Contractual clauses in data processing agreements that require recipient organisations to maintain data protection standards equivalent to those required by Philippine law;
• Transfer only to jurisdictions recognised as providing an adequate level of data protection by the National Privacy Commission;
• Specific safeguards approved by the NPC for international transfers.

10.2   p8989 will never transfer personal data to an international recipient that cannot demonstrate adequate data protection safeguards.

11 Children and Minors

11.1   The p8989 platform is not intended for use by individuals under the age of 21. p8989 does not knowingly collect personal data from any person under 21 years of age. Age verification is a mandatory step in the p8989 account registration process.

11.2   If p8989 discovers that personal data has been collected from a person who is under 21 years of age, the relevant account will be immediately suspended, any collected data will be securely deleted (subject to any mandatory retention obligations under PAGCOR regulations), and the incident will be reported to PAGCOR and relevant Philippine authorities where required.

12 Exercising Your Data Subject Rights

12.1   To exercise any of your rights as a data subject — including access, rectification, erasure, objection, portability, or restriction — please submit a written request to the p8989 Data Protection Officer. All requests must include:

• Your full name as registered on your p8989 account;
• Your registered p8989 email address or mobile number;
• A clear description of the right you wish to exercise and the specific data concerned;
• A copy of a valid Philippine government-issued ID to verify your identity before any data is released or deleted.

12.2   p8989 will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days of receiving your verified request. In complex cases, this period may be extended to thirty (30) business days, in which case you will be notified of the extension and the reason for it.

12.3   The first data access request per calendar year is provided at no charge. Subsequent requests within the same year may be subject to a reasonable administrative fee.

12.4   If you are not satisfied with how p8989 has handled your data subject rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

13 Marketing Communications

13.1   p8989 may send you promotional communications — including bonus offers, free spin promotions, VIP tier updates, and platform news — by email or SMS, but only where you have provided explicit consent to receive such communications at the time of account registration or subsequently through your account notification preferences.

13.2   You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your p8989 account settings;
• Clicking the "unsubscribe" link included at the bottom of every p8989 marketing email;
• Contacting the p8989 support team directly via live chat.

13.3   Withdrawing marketing consent does not affect your ability to use the p8989 platform or receive transactional communications (such as deposit confirmations, withdrawal status updates, and security alerts) that are necessary for the operation of your account.

14 Changes to This Privacy Policy

14.1   p8989 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable laws, or platform functionality. When material changes are made, we will post a prominent notice on the p8989 website and notify registered players by email at least seven (7) days before the updated policy takes effect.

14.2   The "Last updated" date at the top of this policy reflects the most recent revision. We encourage all p8989 players to review this policy periodically. Your continued use of the p8989 platform after the effective date of any revised policy constitutes your acceptance of the updated terms.

15 Contact & Data Protection Officer

15.1   If you have any questions, concerns, or requests relating to this Privacy Policy or to how p8989 handles your personal data, please contact us through the following channels:

15.2   If you believe that p8989 has not adequately addressed a privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines, which has jurisdiction over data protection matters under Republic Act No. 10173.