plot888 Privacy Policy

This Privacy Policy is issued by the operator of the plot888 online gaming platform, accessible at plot888.org (referred to in this document as "plot888", "we", "us", or "our"). It describes how we collect, use, store, share, and protect the personal information of individuals who register for, access, or use any part of the plot888 platform, including all games, payment functions, promotional features, and customer support channels.

This Policy applies to all registered players and visitors of plot888.org, regardless of the device or network used to access the platform. It applies equally to players located in Metro Manila, Cebu City, Davao, the Visayas, Mindanao, and all other parts of the Philippines, as well as any other jurisdiction from which the platform is lawfully accessed.

By registering a plot888 account, making a deposit, or continuing to use the platform after this Policy has been communicated to you, you acknowledge that you have read and understood its contents. If you do not agree with any part of this Policy, you should stop using the platform and contact us to close your account.

This Privacy Policy should be read alongside the plot888 Terms & Conditions and Responsible Gaming Policy, all of which govern your use of the platform.

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can be used to identify a living individual, including but not limited to name, mobile number, email address, government ID number, financial account details, device identifiers, and IP address.
• "Processing" refers to any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "Player" or "User" refers to any individual who has registered or attempted to register for a plot888 account, or who uses the plot888 platform in any capacity.
• "Account" means a registered member account on the plot888 platform.
• "DPA 2012" refers to the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations.
• "NPC" refers to the National Privacy Commission of the Philippines, the independent government agency responsible for administering and implementing the DPA 2012.
• "Cookies" refers to small data files stored on a User's device by the plot888 platform for the purpose of session management, analytics, and platform performance.
• "Third Party" means any individual or entity other than the User and plot888 — including but not limited to payment processors, game providers, and identity verification services.

plot888 collects Personal Data through the following channels: account registration, identity verification, financial transactions, platform usage activity, customer support interactions, and voluntary submissions by users. The categories of data collected are set out in the table below.

Data You Provide Voluntarily: Some categories — such as identity documents and marketing preferences — are provided voluntarily by you. However, failure to provide certain mandatory data (such as identity verification documents when required for withdrawal processing) may result in restricted account functionality.

Data Collected Automatically: Technical and behavioral data is collected automatically when you access and use the plot888 platform. This collection is necessary for the secure operation of the platform, fraud prevention, and responsible gaming monitoring.

plot888 uses the Personal Data it holds about you for the following specific purposes only:

• Account Management: To create, maintain, and manage your plot888 account, including authentication, session management, and account settings.
• Payment Processing: To process deposits made via GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and InstaPay, and to process withdrawal requests to your verified payment method.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR regulations, anti-money laundering obligations, and platform security requirements.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, money laundering, and other prohibited conduct as defined in the plot888 Terms & Conditions.
• Responsible Gaming Monitoring: To monitor wagering patterns and session behavior for signs of problematic gambling, and to enforce deposit limits and self-exclusion arrangements activated by users.
• Customer Support: To respond to support queries, resolve disputes, and provide assistance through live chat and email channels.
• Legal and Regulatory Compliance: To fulfill obligations under Philippine law, including the Data Privacy Act of 2012, anti-money laundering regulations, and any requirements from PAGCOR or other competent authorities.
• Platform Improvement: To analyze aggregate usage data (anonymized where possible) to improve the platform's performance, game library, and user experience.
• Marketing Communications (with consent): To send promotional offers, bonus notifications, and platform updates via SMS or email, where you have provided explicit consent. You may withdraw consent at any time via your account settings.

Under the Data Privacy Act of 2012 (RA 10173), plot888 processes your Personal Data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing that is necessary to perform the agreement between you and plot888 — including account registration, payment processing, game access, and customer support — is conducted on the basis of contractual necessity.
• Legal Obligation: Processing required to comply with applicable Philippine law, including identity verification, anti-money laundering checks, age verification, and regulatory reporting, is conducted on the basis of legal obligation.
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics is conducted on the basis of plot888's legitimate interest in operating a safe, fair, and compliant platform, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications (promotional SMS and emails) is conducted solely on the basis of your explicit, freely given, and revocable consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6.1 What Are Cookies. Cookies are small text files stored on your device when you visit a website. The plot888 platform uses cookies and similar technologies (such as local storage objects and session tokens) to operate the platform, maintain your login session, prevent fraud, and analyze platform performance.

6.2 Types of Cookies Used by plot888.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without disrupting platform functionality.
• Performance Cookies: Used to collect anonymized data on how players use the platform — such as which pages are visited most frequently and where errors occur. This information is used to improve the platform experience.
• Functionality Cookies: Store your preferences (such as language settings and your last selected game category) to provide a more personalized experience.
• Anti-Fraud Cookies: Device fingerprinting tokens used to identify unusual login patterns and protect your account from unauthorized access.

6.3 Managing Cookies. You may control cookie behavior through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or using key platform features. Disabling performance or functionality cookies will not prevent platform access but may reduce the quality of your experience.

6.4 No Third-Party Advertising Cookies. plot888 does not allow third-party advertising networks to place tracking cookies on your device through the plot888 platform. We do not participate in behavioral advertising networks.

plot888 does not sell, rent, or trade your Personal Data. We share your information with third parties only in the following limited circumstances, and always subject to appropriate data protection obligations:

• Payment Processors: Your financial data is shared with payment service providers (including GCash, PayMaya, and banking partners) only to the extent required to process your deposit or withdrawal transaction.
• Game Providers: Game providers (such as JILI, Pragmatic Play, and Evolution) may receive anonymized session identifiers necessary to deliver game content. They do not receive your name, mobile number, or financial details.
• Identity Verification Services: Where third-party KYC or identity verification services are used, your identity documents and verification data are shared with those providers under strict data processing agreements.
• Regulatory and Law Enforcement Authorities: plot888 may disclose Personal Data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or Philippine law enforcement agencies where required by law, court order, or legitimate regulatory demand.
• Platform Service Providers: Technical service providers (hosting, security monitoring, analytics) who process data on behalf of plot888 are bound by data processing agreements that restrict their use of your data to purposes directed by plot888.

plot888 retains your Personal Data only for as long as necessary to fulfill the purposes described in this Policy, and to comply with applicable legal retention obligations under Philippine law. The retention periods below reflect our standard practices:

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymized in accordance with our internal data lifecycle procedures. Anonymized aggregate data may be retained indefinitely for platform analytics purposes.

9.1 plot888 implements appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and plot888 servers;
• Cryptographic hashing of passwords — your password is never stored in readable form;
• Two-factor authentication (OTP) for account logins from unrecognized devices;
• Role-based access controls limiting staff access to Personal Data on a need-to-know basis;
• 24/7 server monitoring and intrusion detection systems;
• Regular security audits and vulnerability assessments of the plot888 platform;
• Data minimization practices — only data necessary for each operation is processed.

9.2 While plot888 takes these obligations seriously, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, plot888 will notify affected players and the National Privacy Commission (NPC) in accordance with the requirements of the DPA 2012 and its implementing rules.

9.3 You are responsible for maintaining the security of your own account credentials. plot888 will never request your password, OTP, or full payment details through any support channel. Any communication making such a request should be treated as fraudulent.

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your Personal Data held by plot888. To exercise any of these rights, please contact our Data Privacy Officer using the details in Section 14.

plot888 will respond to verified data subject requests within fifteen (15) business days of receipt. We may request proof of identity before processing any request. Where a request is refused, we will explain the reason and your right to escalate to the National Privacy Commission.

The plot888 platform is strictly prohibited for use by persons under the age of 21. plot888 does not knowingly collect Personal Data from individuals under 21 years of age. If we become aware that a person under 21 has provided us with Personal Data or has registered an account, we will immediately close that account, delete the associated data to the extent permitted by law, and retain only the records required by legal obligation.

If you are a parent or guardian and believe that a minor under your care has registered with plot888 or accessed the platform, please contact our support team immediately via live chat at plot888.org or by emailing [email protected]. We will take prompt action.

12.1 Some of the third-party service providers used by plot888 — including certain game providers and technical infrastructure suppliers — may be located or operate servers outside of the Philippines. Where Personal Data is transferred to a jurisdiction outside the Philippines, plot888 takes steps to ensure that adequate data protection safeguards are in place, consistent with the requirements of DPA 2012 and the applicable rules and regulations of the National Privacy Commission.

12.2 Where cross-border transfers occur, they are limited to the minimum data necessary for the service being provided, and recipient parties are required by contract to maintain data protection standards no less protective than those applied by plot888 under this Policy.

12.3 Payment data (including GCash and PayMaya transaction data) is processed through Philippine-domiciled payment processors and does not leave the Philippines in personally identifiable form.

13.1 plot888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform functionality, or our data processing practices. Material changes — meaning changes that affect the substance of how your Personal Data is used or your rights as a data subject — will be communicated to registered players no less than fourteen (14) days before taking effect.

13.2 Notification of material changes will be delivered via the platform's notification system and, where possible, by SMS to your registered Philippine mobile number. Non-material updates (such as clarifications of existing practice or formatting corrections) may take effect without prior notice.

13.3 The effective date at the top of this page will always reflect the date of the most recent revision. The current version of this Privacy Policy is available at all times at plot888.org/privacy-policy. We encourage you to review this page periodically to stay informed of how plot888 protects your data.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or would like to make a formal privacy complaint, please contact the plot888 Data Privacy Officer through the following channels:

• Live Chat: Available 24/7 via the in-app live chat at plot888.org. For data subject requests, please state "Data Privacy Request" at the start of your message so it is directed to the correct team.
• Email: [email protected] — for formal data subject requests and privacy complaints, use the subject line "Privacy Request" or "Data Complaint".

plot888 will acknowledge receipt of all formal privacy requests within three (3) business days and provide a substantive response within fifteen (15) business days. Where a request is complex or involves a large volume of data, we will notify you of an extended timeline not to exceed thirty (30) days.

Escalation to the NPC: If you are not satisfied with plot888's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about the NPC's complaint process is available on the official NPC website.