This Privacy Policy explains how em88 collects, uses, stores, shares, and protects the personal information of players who use our online casino platform. We are committed to handling your data responsibly, transparently, and in compliance with Philippine data privacy law.
Six principles that guide how em88 handles every Filipino player's personal data.
Your personal and financial data is protected with industry-standard encryption, secure servers, and access controls. em88 invests continuously in security infrastructure to keep your information safe.
em88 does not sell your personal data to third parties. Your information is used solely to provide, improve, and secure your gaming experience — never traded as a commercial commodity.
em88 collects only the personal data that is genuinely necessary to provide our services, verify your identity, process payments, and comply with legal obligations. We do not collect data for its own sake.
Under the Philippine Data Privacy Act, you have clear rights over your personal data — including access, correction, deletion, and portability. em88 will respond to your data rights requests promptly.
This Privacy Policy uses plain language to explain our data practices clearly. You will always know what data we collect, why we collect it, and who we share it with — no hidden clauses or confusing jargon.
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or to resolve disputes. Data no longer needed is securely deleted or anonymised.
em88 ("we," "us," or "our") operates the online casino and sports betting platform accessible at em88.vu ("the Platform"). We understand that your personal data matters — not just as a regulatory obligation, but as a fundamental aspect of the trust relationship between em88 and every Filipino player who uses our Platform.
This Privacy Policy applies to all personal data collected by em88 in connection with your use of the Platform, including data collected during account registration, identity verification (KYC), financial transactions, customer support interactions, and your browsing activity on the em88 website. It applies to all players accessing em88 from the Philippines.
This Policy is governed by Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), together with its Implementing Rules and Regulations. em88 is committed to full compliance with the DPA and the guidelines issued by the National Privacy Commission of the Philippines.
For the purposes of the Data Privacy Act of the Philippines, em88 is the personal information controller with respect to all personal data collected from players who use the em88 Platform. As the personal information controller, em88 determines the purposes for which, and the manner in which, your personal data is processed.
em88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data privacy laws. The DPO may be contacted via the support email address provided in Section 15 of this Policy.
em88 collects the following categories of personal data from players. We collect only the data that is necessary and proportionate to the purposes described in this Policy:
| Data Category | Specific Data Elements | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID type and number, photograph (for KYC) | Registration & KYC verification |
| Contact Data | Philippine mobile number, email address | Account registration |
| Financial Data | GCash account number, Maya account number, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal amounts | Payment processing |
| Gaming Data | Game history, bet amounts, wagering activity, game preferences, session duration, win/loss records | During gameplay |
| Technical Data | IP address, device type, operating system, browser type, device identifiers, geolocation (city/region level) | Platform access |
| Usage Data | Pages visited, features used, click patterns, session timing, referral source | Continuous during Platform use |
| Communications Data | Customer support chat transcripts, emails sent to em88, SMS OTP logs | Customer support interactions |
| Responsible Gaming Data | Self-imposed deposit limits, loss limits, session time limits, self-exclusion status and duration | When set by the player |
em88 does not collect sensitive personal information beyond what is necessary for identity verification and regulatory compliance. We do not collect information on racial or ethnic origin, religious beliefs, political opinions, or health data unless specifically required by applicable regulation.
em88 collects personal data through the following channels:
em88 processes your personal data for the following purposes, each with its corresponding legal basis under the Data Privacy Act of the Philippines:
6.1 What are cookies? Cookies are small text files placed on your device when you access a website. em88 uses cookies and similar technologies (such as local storage and session storage) to make the Platform work correctly, to remember your preferences, and to understand how players navigate the site.
6.2 Types of cookies we use:
6.3 Managing cookies: You can control and delete cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and browse in private mode. Note that disabling strictly necessary cookies will affect your ability to use the em88 Platform, including the ability to remain logged in to your account.
em88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data with third parties only in the following circumstances:
All third parties with whom em88 shares personal data are required to maintain appropriate security measures and to process that data only for the specified purposes and in accordance with applicable data privacy law.
em88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve any disputes. The following retention periods apply as general guidelines:
Upon expiry of the applicable retention period, personal data is securely deleted, anonymised, or archived in a manner that prevents it from being linked back to an identifiable individual.
9.1 Technical measures. em88 implements a range of technical security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction. These measures include: 256-bit SSL/TLS encryption for all data transmitted between your device and em88's servers; encryption of sensitive data at rest within em88's systems; firewall protection; intrusion detection systems; and regular security audits and penetration testing.
9.2 Organisational measures. em88 implements internal access controls to ensure that personal data is accessible only to authorised personnel who require it in the course of their duties. All staff with access to personal data receive data privacy training and are bound by confidentiality obligations.
9.3 Account security. The security of your em88 account also depends on actions you take. You should use a strong, unique password for your em88 account; enable two-factor authentication via SMS; never share your login credentials with any other person; and access em88 only over secure, private internet connections. See the em88 Terms & Conditions for full account security requirements.
9.4 Data breach notification. In the event of a personal data breach that is reasonably likely to result in harm to affected players, em88 will notify the National Privacy Commission of the Philippines within seventy-two (72) hours of becoming aware of the breach. Affected players will be notified in a timely manner where notification is required by law or where em88 determines notification is in the players' interests.
em88 primarily stores and processes player data within server infrastructure serving the Philippine market. However, in certain cases — such as where third-party service providers (game studios, payment processors, fraud prevention services) are based in other countries — your personal data may be transferred to, and processed in, countries outside the Philippines.
Where such international transfers occur, em88 takes appropriate steps to ensure that adequate data protection standards apply to the transferred data. These steps may include contractual data transfer agreements incorporating standard data protection clauses, or transferring data only to organisations in countries recognised as providing adequate levels of data protection.
By using the em88 Platform and accepting this Privacy Policy, you acknowledge and consent to such international transfers where they are necessary to provide the services you have requested.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by em88. These rights can be exercised by contacting our Data Protection Officer as described in Section 15:
em88 will respond to valid data subject rights requests within thirty (30) days of receipt, extendable by a further thirty (30) days where the request is complex or numerous, in which case we will inform you of the extension. em88 may require identity verification before processing data subject rights requests to ensure that data is not disclosed to unauthorised persons.
The em88 Platform is strictly restricted to persons who are at least twenty-one (21) years of age, in accordance with PAGCOR regulations governing real-money online gaming in the Philippines. em88 does not knowingly collect personal data from individuals under the age of 21.
If em88 becomes aware that it has inadvertently collected personal data from an individual who does not meet the age requirement, em88 will promptly close the affected account, return any deposited funds in compliance with applicable procedures, and delete the associated personal data to the extent permitted by law.
If you are a parent or guardian and believe that your child may have accessed the em88 Platform and provided personal data, please contact our Data Protection Officer immediately via the contact details in Section 15.
The em88 Platform may contain links to third-party game providers' information pages or other third-party content. em88 is not responsible for the privacy practices of third-party websites or services. This Privacy Policy applies only to personal data collected by em88 through the em88 Platform itself.
We encourage you to review the privacy policies of any third-party services you interact with in connection with your em88 gaming activity, including your GCash and Maya payment apps, which have their own privacy policies governing their data handling.
em88 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law, or changes to the Platform's features and services. The "Effective Date" at the top of this page will be updated to reflect the date of the most recent revision.
Where changes are material — meaning they significantly affect the way em88 processes your personal data or your rights as a data subject — em88 will notify registered players via SMS to their registered Philippine mobile number and/or via a notification within their em88 account, with reasonable advance notice before the changes take effect.
Your continued use of the em88 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with the revised Policy, you should discontinue use of the Platform and may request account closure in accordance with em88's account termination procedures.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how em88 has handled your personal data, please contact our Data Protection Officer:
If you are not satisfied with em88's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines, which may be contacted through the NPC's official channels for Filipino data subjects. em88 will cooperate fully with any NPC investigation or inquiry.
Under the Philippine Data Privacy Act, these are the rights you can exercise at any time with em88.
Request a copy of all personal data em88 holds about you, including what it is, why we hold it, and who we've shared it with.
Ask us to correct any inaccurate or incomplete personal data in your em88 account records at any time.
Request deletion of your personal data where it is no longer needed, subject to em88's legal retention obligations.
Receive your personal data in a structured, machine-readable format you can transfer to another service provider.
Object to direct marketing at any time and, in certain circumstances, to other processing of your personal data.
Lodge a complaint with the National Privacy Commission if you believe em88 has mishandled your personal data.
Claim compensation where you have suffered harm due to unlawful or negligent processing of your personal data.
Always know what data we hold about you, why we process it, and how long we keep it — no hidden data practices.
Now that you understand how em88 handles your personal data, explore everything the platform has to offer — live casino, slots, sports betting, and bingo — with the confidence that comes from knowing your information is in safe hands.
Must be 21 years or older · For entertainment purposes only · Please gamble responsibly