1.1 About This Policy. This Privacy Policy ("Policy") sets out the principles, practices, and legal bases that govern be888's collection, use, storage, processing, sharing, and protection of personal data belonging to players, registered account holders, website visitors, and prospective users of the be888 platform accessible at be888.one.
1.2 Applicable Law. be888 processes personal data in accordance with: (a) Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"); (b) the Implementing Rules and Regulations of the DPA; (c) the issuances and advisories of the National Privacy Commission of the Philippines ("NPC"); and (d) applicable PAGCOR regulatory requirements concerning player data and anti-money laundering obligations.
1.3 Scope. This Policy applies to all personal data collected by or on behalf of be888 through: the be888 platform and website; account registration and KYC verification processes; payment transactions; customer support interactions; marketing communications; and any other means by which you interact with be888. This Policy does not apply to the practices of third-party service providers who operate under their own separate privacy policies.
1.4 Consent. Where be888 relies on your consent as the lawful basis for processing your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal, and it does not affect processing conducted on other lawful bases. You may withdraw consent via your Account Settings or by contacting our Data Protection Officer.
2.1 Personal Information Controller. For the purposes of the Philippine Data Privacy Act of 2012, the Personal Information Controller responsible for your personal data is:
2.2 Data Protection Officer. In compliance with the DPA and NPC Circular No. 16-01, be888 has designated a Data Protection Officer ("DPO") responsible for ensuring the organisation's compliance with the DPA. Players may contact the DPO directly with privacy-related queries, complaints, or requests to exercise data subject rights.
3.1 Categories of Personal Data. be888 collects and processes the following categories of personal data:
| Category | Specific Data Elements | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number, ID document scans | Account registration; KYC verification |
| Contact Data | Philippine mobile number, email address, residential address | Account registration; updates via Account Settings |
| Financial Data | GCash number, Maya account reference, bank account details (name, account number, bank code), transaction history, wallet balances | Payment processing; withdrawal requests |
| Gaming Activity Data | Bet records, game session logs, win/loss history, bonus usage, wagering totals, responsible gaming settings | Automatically generated during platform use |
| Technical Data | IP address, device identifiers, browser type and version, operating system, session timestamps, login history | Automatically collected via cookies and server logs |
| Communications Data | Customer support chat logs, email correspondence, SMS records, feedback submissions | Direct communications with be888 |
| Marketing Preferences | Communication consent flags, preferred notification channels, promotional opt-in/opt-out status | Account registration; Account Settings |
3.2 Sensitive Personal Information. Under the DPA, certain categories of personal data are classified as sensitive personal information and are subject to heightened protection. be888 does not routinely collect sensitive personal information such as health data or religious beliefs. Government-issued identification numbers collected for KYC purposes are treated as sensitive personal information and are subject to the protections described in Section 8 of this Policy.
3.3 Data Minimisation. be888 collects only the personal data that is strictly necessary for the purposes set out in this Policy. Where processing can be achieved with anonymised or aggregated data, be888 will prefer that approach over collection of individually identifiable personal data.
4.1 Criteria for Lawful Processing. Under Section 12 of the DPA, be888 relies on one or more of the following criteria as the lawful basis for processing your personal data:
5.1 Account Administration. (Contractual Necessity; Legal Obligation) — be888 uses your Identity Data and Contact Data to create and maintain your account, verify your identity and age, administer your account settings, communicate service notices, and process account closure requests.
5.2 Payment Processing. (Contractual Necessity; Legal Obligation) — be888 uses your Financial Data to process deposits and withdrawals, verify that payments originate from accounts registered in your verified name, detect and prevent fraudulent transactions, and maintain transaction records as required by anti-money laundering regulations.
5.3 KYC and Anti-Money Laundering Compliance. (Legal Obligation) — be888 is required by PAGCOR regulations and the Anti-Money Laundering Act (Republic Act No. 9160, as amended) to verify the identity of all account holders, maintain records of significant transactions, and report suspicious transactions to the Anti-Money Laundering Council (AMLC) of the Philippines. This processing is mandatory and cannot be declined without affecting your ability to use the platform.
5.4 Game Service Delivery. (Contractual Necessity) — be888 uses your Gaming Activity Data to provide access to games, calculate and settle bets, award winnings, apply responsible gaming limits, and generate your account's bet history and transaction records.
5.5 Responsible Gaming. (Legal Obligation; Legitimate Interests) — be888 uses your Gaming Activity Data, Financial Data, and login history to monitor for indicators of problem gambling behaviour, enforce responsible gaming limits you have set, and take appropriate protective action where required by PAGCOR responsible gaming regulations.
5.6 Platform Security. (Legitimate Interests) — be888 uses Technical Data to detect and investigate security threats, unauthorised access attempts, fraud, and prohibited conduct as defined in our Terms and Conditions. This includes analysis of login patterns, IP addresses, and device identifiers.
5.7 Customer Support. (Contractual Necessity; Legitimate Interests) — be888 uses Communications Data and account information to respond to and resolve player support queries, complaints, and disputes.
5.8 Marketing and Promotions. (Consent) — Where you have consented, be888 uses your Contact Data and Marketing Preferences to send you promotional offers, bonus announcements, and gaming news via SMS, email, or in-platform notifications. You may withdraw consent to marketing at any time via Account Settings.
5.9 Platform Analytics and Improvement. (Legitimate Interests) — be888 uses aggregated and, where necessary, pseudonymised Technical Data and Gaming Activity Data to analyse platform performance, improve game offerings, and optimise user experience.
6.1 General Principle. be888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. be888 discloses personal data to third parties only as described in this Policy, on a need-to-know basis, and subject to appropriate confidentiality and data protection safeguards.
6.2 Service Providers and Subprocessors. be888 engages third-party service providers who process personal data on our behalf as Personal Information Processors under the DPA. These include:
All subprocessors are bound by data processing agreements requiring them to process personal data only on be888's documented instructions and to implement appropriate technical and organisational security measures.
6.3 Regulatory Disclosures. be888 is required by law to disclose personal data to the following Philippine regulatory authorities upon lawful request:
6.4 Corporate Transactions. In the event of a merger, acquisition, corporate restructuring, or sale of all or a substantial portion of be888's assets, personal data held by be888 may be transferred to the acquiring entity, subject to that entity assuming the obligations of this Policy or providing equivalent data protection.
7.1 Retention Principle. be888 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, to comply with applicable legal obligations, or to resolve disputes and enforce our agreements.
7.2 Retention Periods. The following retention periods apply to specific categories of data:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & KYC Records | 5 years from account closure | PAGCOR requirements; AMLA obligations |
| Financial Transaction Records | 5 years from transaction date | AMLA; BIR record-keeping requirements |
| Gaming Activity Logs | 3 years from session date | PAGCOR audit requirements; dispute resolution |
| Customer Support Records | 2 years from last interaction | Dispute resolution; service quality |
| Marketing Preferences | Until consent is withdrawn, then 1 year | Consent management records |
| Technical / Server Logs | 12 months from creation | Security monitoring; fraud investigation |
7.3 Secure Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in a manner that prevents reconstruction of the original data. Where complete deletion is not technically feasible (for example, in backup systems), be888 implements controls to ensure the data is protected and isolated until it can be securely deleted.
8.1 Technical and Organisational Measures. be888 implements a combination of technical, administrative, and physical security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, or loss. These measures include:
9.1 Use of Cookies. The be888 platform uses cookies and similar tracking technologies (including local storage and session storage) to support platform functionality, enhance user experience, and analyse platform usage. A cookie is a small text file stored on your device by your web browser when you visit a website.
9.2 Types of Cookies Used. be888 uses the following categories of cookies:
9.3 Cookie Management. You may manage cookies through your web browser settings. Most modern browsers allow you to block or delete cookies, or to receive a notification before a cookie is placed. Note that disabling strictly necessary cookies will prevent you from logging into the be888 platform. Your cookie preferences can also be managed via the cookie consent tool displayed on your first visit to be888.one.
9.4 Do Not Track. Some browsers offer a "Do Not Track" signal. be888 does not currently alter its data collection practices in response to browser-level Do Not Track signals, as there is no universal standard for interpreting them. You may use the cookie management options described above to control tracking on the be888 platform.
10.1 Data Subject Rights. As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by be888:
10.2 Right to be Informed. You have the right to be informed of the existence of processing of your personal data, the purposes and methods of processing, the identity and contact details of be888 as the Personal Information Controller, and the scope and method of personal data collection and processing.
10.3 Right of Access. You have the right to request a copy of the personal data that be888 holds about you, information about the purposes for which it is processed, and details of any third parties to whom it has been disclosed. be888 will respond to access requests within twenty (20) working days of receipt, subject to identity verification.
10.4 Right to Rectification. If personal data held by be888 about you is inaccurate or incomplete, you have the right to request its correction. Many personal details can be updated directly in your Account Settings. For corrections to KYC identity data, please contact the DPO.
10.5 Right to Erasure / Right to be Forgotten. Subject to applicable legal retention requirements (see Section 7), you may request the deletion of your personal data where: (a) it is no longer necessary for the purposes for which it was collected; (b) you have withdrawn consent and there is no other lawful basis for processing; or (c) the data has been unlawfully processed. Note that certain data cannot be deleted where retention is required by PAGCOR regulations or anti-money laundering law.
10.6 Right to Object. Where be888 processes your data on the basis of legitimate interests, you have the right to object to that processing. be888 will cease processing unless it can demonstrate compelling legitimate grounds that override your interests, or the processing is for the establishment, exercise, or defence of legal claims.
10.7 Exercising Your Rights. To exercise any of the above rights, please submit a written request to our Data Protection Officer at [email protected]. Your request must include sufficient information to verify your identity. be888 will respond within the timeframes prescribed by the DPA and NPC regulations.
11.1 Age Restriction. The be888 platform is intended exclusively for adults aged twenty-one (21) years and above, consistent with Philippine casino gaming regulations. be888 does not knowingly collect personal data from persons below the age of 21.
11.2 Age Verification. be888 enforces age verification through its mandatory KYC process, which requires submission of a valid Philippine government-issued ID for all account holders. Accounts that cannot be verified as belonging to an individual aged 21 or above are suspended pending verification or permanently closed.
11.3 Discovery of Underage Account. If be888 discovers or has reasonable grounds to believe that personal data belonging to a person under the age of 21 has been collected — whether through a misrepresentation during registration or otherwise — be888 will: (a) immediately suspend the account; (b) delete the minor's personal data to the extent permitted by applicable legal retention obligations; and (c) forfeit any account balance in accordance with applicable regulations. Parents or guardians who discover that a minor has registered on be888 should contact our DPO immediately.
12.1 Philippine Operations. be888's primary data processing operations are conducted within the Philippines, consistent with its status as a PAGCOR-licensed operator. The majority of player personal data is stored and processed on servers located within the Philippines or in jurisdictions recognised by the NPC as providing adequate data protection.
12.2 Transfers to Third-Party Service Providers. Certain service providers engaged by be888 may process personal data in jurisdictions outside the Philippines — for example, cloud infrastructure providers or game software providers. Where personal data is transferred internationally, be888 ensures that appropriate safeguards are in place, which may include: contractual clauses approved by the NPC; binding corporate rules; or transfers to countries that the NPC has recognised as providing adequate data protection.
12.3 No Transfer Without Safeguards. be888 will not transfer your personal data to a country or territory outside the Philippines unless the transfer is covered by one of the safeguards described in Section 12.2 above, the transfer is required for the performance of a contract between you and be888, or the transfer is required by Philippine law.
13.1 Breach Response. In the event that be888 discovers or is notified of a personal data breach involving your personal data, be888 will take immediate steps to contain and investigate the breach, assess the risk to affected data subjects, and implement remediation measures.
13.2 NPC Notification. In accordance with NPC Circular No. 16-03, be888 will notify the National Privacy Commission of any personal data breach that is likely to give rise to a real risk of serious harm to the affected data subjects within seventy-two (72) hours of becoming aware of the breach, where feasible.
13.3 Individual Notification. Where a personal data breach is likely to result in a high risk to your rights and freedoms — for example, where sensitive personal information such as identity documents or financial data has been exposed — be888 will notify you directly in a clear and plain manner without undue delay. Notification will be made via your registered email address and, where appropriate, via in-platform notification or SMS.
13.4 What We Will Tell You. Breach notifications to affected individuals will include: a description of the nature of the breach; the categories and approximate number of individuals and personal data records affected; contact details of the DPO; the likely consequences of the breach; and the measures taken or proposed to address the breach and mitigate its possible adverse effects.
14.1 Right to Amend. be888 reserves the right to update, amend, or replace this Privacy Policy from time to time. Reasons for amendments may include changes in Philippine law or NPC regulations, changes in PAGCOR requirements, introduction of new services or processing activities, or operational changes affecting data flows.
14.2 Notification of Changes. Material amendments to this Policy — that is, changes that significantly affect how we collect, use, or share your personal data — will be communicated to registered account holders via email to the address on file, with a notice period of at least fourteen (14) calendar days before the amended Policy takes effect.
14.3 Version History. The date of the most recent revision is displayed at the top of this Policy. Your continued use of the be888 platform following the effective date of any amended Policy constitutes your acknowledgment of the changes. If you do not agree with the amended Policy, you should cease using the platform and may request account closure in accordance with the Terms and Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by be888, please contact our Data Protection Officer:
This Privacy Policy was last updated in January 2026. All previous versions are superseded by this document upon its effective date.
A plain-language summary of the most important data protection commitments be888 makes to every Filipino player on the platform.
be888 processes your data in full compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and the National Privacy Commission's regulations — your rights as a Filipino data subject are fully recognised and protected.
Every byte of data transmitted between your device and be888 is protected by 256-bit SSL encryption — the same standard used by Philippine banks. Sensitive data including government ID scans is encrypted at rest as well.
Under RA 10173, you have enforceable rights: access, rectification, erasure, portability, and the right to object. You can update most of your personal details directly in Account Settings, or contact our DPO for broader requests.
be888 does not sell, rent, or share your personal data with advertisers or data brokers. The only third parties who receive your data are service providers who need it to deliver the services you've requested — bound by strict data processing agreements.
If a data breach occurs that affects your personal information, be888 will notify the NPC within 72 hours and inform you directly if there is a high risk to your rights. Prompt notification is a legal obligation — and a commitment we take seriously.
be888 keeps your data only for as long as legally required. KYC records are kept 5 years after account closure per PAGCOR/AMLA rules; marketing data is deleted when you withdraw consent. Clear retention schedules — no data kept indefinitely.