loto88 Privacy Policy

1. Introduction

loto88 ("we," "us," "our") is a PAGCOR-regulated online casino and sports betting platform operating at loto88.vu, built for Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and beyond. We take the privacy and security of your personal information seriously.

This Privacy Policy describes the categories of personal data we collect from players and visitors, the purposes for which we process that data, the parties with whom we share it, the measures we take to keep it secure, and the rights you are entitled to exercise under Philippine law. This policy applies to all services offered on the loto88 Platform, including the website, mobile application, and any related customer support channels.

By registering an account on loto88, making a deposit, or continuing to browse the Platform, you acknowledge that you have read, understood, and agreed to the data practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Platform and contact us to close your account.

2. Personal Data We Collect

2.1 Identity & Contact Data

When you register a loto88 account, we collect:

• Full legal name as it appears on your government-issued ID
• Date of birth (for 21+ age verification under PAGCOR mandates)
• Residential address (province, city, barangay, postal code)
• Philippine mobile number
• Email address
• Username and encrypted password

2.2 Identity Verification (KYC) Documents

To comply with PAGCOR regulations and the Anti-Money Laundering Act (RA 9160 as amended by RA 10365), we may collect copies of government-issued identification documents such as your SSS ID, UMID, PhilSys National ID, passport, or driver's license. We may also request proof of residential address and, for large transactions, documentation relating to source of funds.

2.3 Financial Data

loto88 collects data necessary to process deposits and withdrawals, including your GCash number, Maya account details, QR Ph identifiers, or bank account information (BPI, BDO, Metrobank). Full payment credentials are processed by our certified payment service providers and are not stored in plain text on loto88 servers.

2.4 Transaction & Gaming Data

• Deposit and withdrawal history with timestamps and amounts in PHP
• Betting history across all game types (slots, live dealer, sports, bingo, sabong)
• Bonus and promotion activity
• Account balance history and wallet movements
• Game session logs including duration, stakes, and outcomes

2.5 Technical & Device Data

• IP address and approximate geolocation (province/city level)
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Pages visited, clicks, and in-platform navigation patterns
• Error and crash logs for technical support purposes

2.6 Communications Data

When you contact loto88 support via live chat, email, or any other channel, we retain records of those communications including the content of messages, timestamps, and the identity of the support agent who handled your inquiry. This data is used for quality assurance, dispute resolution, and regulatory compliance.

3. How We Collect Your Data

loto88 collects personal data through the following means:

• Direct collection: Data you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically as you interact with the Platform, including via cookies, session trackers, and server logs.
• Third-party providers: Data received from our payment processors (e.g., GCash, Maya), identity verification service providers, and fraud detection partners in connection with transactions on the Platform.
• Regulatory sources: In limited circumstances, data received from PAGCOR, the AMLC, or other government agencies in the context of regulatory compliance activities.

4. Lawful Basis for Processing

Under the Philippine Data Privacy Act, all processing of personal data must be grounded on at least one of the criteria for lawful processing. loto88 relies on the following bases:

5. How We Use Your Personal Data

loto88 uses the personal data we collect for the following purposes:

• To create, manage, and secure your loto88 player account
• To verify your identity and age (21+ as required by PAGCOR) during registration and KYC reviews
• To process deposits, withdrawals, and related financial transactions in Philippine Pesos (PHP)
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities
• To comply with PAGCOR licensing conditions, AMLC reporting obligations, and NPC data governance requirements
• To personalize your gaming experience and surface promotions relevant to your activity on loto88
• To send transactional communications such as deposit confirmations, withdrawal updates, and security alerts
• To send marketing communications, including promotions and bonus offers, where you have given consent or where we have a legitimate interest under applicable law
• To monitor responsible gaming indicators and intervene where a player shows signs of problem gambling
• To improve Platform performance, fix technical issues, and develop new features
• To resolve disputes, handle complaints, and respond to regulatory inquiries

6. Sharing Your Personal Data

loto88 does not sell or rent your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary:

6.1 Service Providers

loto88 engages third-party companies to provide services on our behalf, including payment processing (GCash, Maya, BPI, BDO, Metrobank), identity verification, fraud detection, cloud hosting, email delivery, and customer support tooling. All service providers are bound by data processing agreements that restrict their use of your personal data to the specific services they provide for loto88 and prohibit secondary use for their own purposes.

6.2 Regulatory & Law Enforcement Authorities

loto88 is legally required to disclose certain personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where required by law, court order, or regulatory mandate. We will always seek to notify you of such disclosures where legally permitted to do so.

6.3 Game Content Providers

Some game titles on the Platform are provided by certified third-party software providers. These providers may receive anonymized or pseudonymized session data necessary to deliver, audit, and certify their games. They do not receive your full identity or payment data.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of loto88's assets, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and of any material changes to data processing practices that result from it.

7. Cookies & Tracking Technologies

loto88 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain secure session state, and understand how players interact with our services. The categories of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. You cannot opt out of these while using loto88.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and notification choices.
• Analytics Cookies: Help us understand how players navigate the Platform so we can identify areas for improvement. Data collected is aggregated and pseudonymized where possible.
• Marketing Cookies: Used only where you have given explicit consent, to deliver relevant promotional content on and off the Platform.

You can manage your cookie preferences through your browser settings. Note that disabling certain categories of cookies may affect your ability to use some features of the loto88 Platform. For a full list of cookies used by loto88 and their individual purposes, please contact our Data Privacy Officer.

8. Data Retention

loto88 retains personal data for no longer than is necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by law. Our standard retention schedules are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be associated with an identifiable individual. Where anonymized data is retained for statistical or research purposes, it no longer constitutes personal data under the DPA.

9. Data Security

loto88 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Key measures include:

• Transport encryption: All data transmitted between your device and loto88 is protected using TLS 1.3.
• Encryption at rest: Sensitive stored data, including KYC documents and payment details, is encrypted using AES-256.
• Access controls: Access to personal data within loto88 is restricted on a strict need-to-know basis using role-based access controls. All access events are logged and subject to regular audit.
• Two-factor authentication: Available and strongly recommended for all player accounts. Required for all internal loto88 staff accounts with access to personal data.
• Penetration testing: loto88 engages independent security firms to conduct regular penetration tests and vulnerability assessments of the Platform.
• Incident response: loto88 maintains a documented data breach response plan aligned with NPC Circular No. 16-03, including a 72-hour reporting timeline to the NPC for qualifying breaches.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by loto88:

To exercise any of the rights listed above, please submit a written request to loto88's Data Privacy Officer at the contact details provided in Section 14. loto88 will acknowledge all data subject requests within 72 hours and provide a substantive response within 15 business days of receipt. We may request identity verification before fulfilling any data subject request.

If you are not satisfied with loto88's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at [email protected] or by visiting the NPC website.

11. Children's Privacy

loto88 is strictly intended for adults aged 21 years and above, in compliance with PAGCOR's minimum age requirements for online gambling in the Philippines. loto88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by a minor, that account will be immediately suspended, all associated data will be deleted, and the matter may be referred to relevant authorities.

Parents and guardians who believe their minor child has registered an account on loto88 should contact our Data Privacy Officer immediately at the contact details in Section 14 so that the account can be closed and all associated data removed without delay.

12. International Data Transfers

loto88's primary data processing infrastructure is located within the Asia-Pacific region. In certain circumstances — for example, where we engage international cloud service providers or game content suppliers — your personal data may be transferred to and processed in countries outside the Philippines.

Where such transfers occur, loto88 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act and NPC guidelines. These safeguards may include standard contractual clauses approved by the NPC, binding corporate rules, or transfers to jurisdictions that the NPC has determined provide an adequate level of data protection.

By using the loto88 Platform, you consent to the transfer of your personal data as described in this section, subject always to the protections described in this Privacy Policy.

13. Changes to This Privacy Policy

loto88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, we will notify registered Players by email at the address on file and post a prominent notice on the Platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this policy will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the loto88 Platform following the effective date of any amendment constitutes your acceptance of the revised policy.

14. Contact Us & Data Privacy Officer

loto88 has appointed a Data Privacy Officer (DPO) responsible for overseeing data protection compliance and handling data subject inquiries. If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

For formal data subject requests — including access, rectification, erasure, or portability requests — please send a written request to [email protected] with the subject line "Data Subject Request — [Your Account ID]". Please include a copy of a valid government-issued ID so that we can verify your identity before processing the request.

For complaints regarding loto88's data processing practices that have not been resolved to your satisfaction, you may also contact the National Privacy Commission of the Philippines directly.