Data Privacy
This Privacy Policy ("Policy") describes how bingo8 ("bingo8," "we," "us," or "our"), the operator of the online gaming platform accessible at bingo8.asia, collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "data subject") who access or use the bingo8 platform, including its website, web application, and all associated services.
This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the applicable issuances of the National Privacy Commission (NPC) of the Philippines. Where relevant, this Policy also reflects the requirements of PAGCOR's regulations applicable to licensed online gaming operators.
This Policy applies to all personal data processed by bingo8 in connection with account registration and maintenance, Know Your Customer (KYC) verification, financial transactions, gameplay activity, customer support interactions, marketing communications, and use of the bingo8 website. It applies to all data subjects who are residents of or physically located in the Philippines, and to any other individuals whose personal data is processed by bingo8 in the course of its Philippine operations.
Important: By creating a bingo8 account or using any part of the bingo8 platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree to any part of this Policy, you must not use the bingo8 platform.
This Policy should be read together with the bingo8 Terms and Conditions, which govern your overall use of the platform and are incorporated by reference into this Policy.
For the purposes of the Data Privacy Act of 2012 and its IRR, bingo8 is the personal information controller (PIC) responsible for the personal data you provide when using the bingo8 platform. As PIC, bingo8 determines the purposes and means of processing your personal information.
bingo8 has designated a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012. The DPO is responsible for ensuring bingo8's compliance with the Data Privacy Act and the NPC's regulations, and serves as the primary point of contact for data privacy concerns. Contact details for the bingo8 DPO are provided in Section 14 of this Policy.
Data Protection Registration: bingo8 has complied with the registration requirements of the National Privacy Commission applicable to personal information controllers processing personal data of one thousand (1,000) or more individuals. bingo8's NPC registration details are available upon written request to the bingo8 DPO.
bingo8 collects personal data that is necessary, adequate, relevant, and not excessive for the specific purposes for which it is processed. The categories of personal data collected by bingo8 are described below.
Sensitive Personal Information: bingo8 may collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act of 2012 — specifically, government-issued identification numbers (for KYC purposes) and financial account information (for payment processing). Such data is processed with heightened security controls and strict access restrictions in accordance with the Data Privacy Act.
bingo8 processes your personal data only for specified, explicit, and legitimate purposes. The table below sets out the primary purposes for which bingo8 processes personal data and the corresponding legal basis for each processing activity.
| Processing Purpose | Data Categories Used | Legal Basis |
|---|---|---|
| Account registration and management | Registration data, account data | Contract performance; consent |
| KYC identity verification and age verification (21+) | KYC data, registration data | Legal obligation (PAGCOR, AML regulations) |
| Processing deposits, withdrawals, and payments | Financial data, registration data | Contract performance |
| Anti-money laundering (AML) and fraud prevention | Financial data, KYC data, technical data | Legal obligation (RA 9160, AMLA) |
| Providing gaming services (slots, bingo, live casino, sports betting) | Gaming data, account data | Contract performance |
| Responsible gaming compliance and monitoring | Gaming data, account data, registration data | Legal obligation; legitimate interests |
| Customer support and complaint resolution | Communications data, account data | Contract performance; legitimate interests |
| Sending promotional offers and bonuses (opted-in players only) | Registration data, gaming data | Consent |
| Platform security and fraud detection | Technical data, account data | Legitimate interests; legal obligation |
| Regulatory reporting to PAGCOR, AMLC, and NPC | All categories as required | Legal obligation |
| Platform analytics and service improvement | Technical data, gaming data (aggregated) | Legitimate interests |
Under the Data Privacy Act of 2012, bingo8 processes personal data on one or more of the following legal bases:
bingo8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. bingo8 may share your personal data with third parties only in the circumstances described below.
bingo8 engages authorized personal information processors (PIPs) to perform certain services on its behalf — including but not limited to: payment processing (GCash, PayMaya, Philippine bank integration partners), KYC verification technology providers, cloud hosting and infrastructure services, game content providers, customer support platforms, and fraud detection services. Such processors are contractually bound to process personal data only on bingo8's instructions and to maintain appropriate data security measures.
bingo8 may disclose personal data to the following authorities as required by applicable Philippine law: PAGCOR (Philippine Amusement and Gaming Corporation), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and any court or law enforcement body of competent jurisdiction. Such disclosures are made pursuant to bingo8's legal obligations and do not require your prior consent.
In the event of a merger, acquisition, restructuring, or sale of all or part of bingo8's business operations, your personal data may be transferred to the relevant acquiring entity as part of that transaction, subject to the same protections as described in this Policy. You will be notified of any such transfer where required by the Data Privacy Act.
No Sale of Personal Data: bingo8 does not and will not sell, license, or otherwise commercially exploit your personal data for third-party advertising, marketing profiling, or data brokering purposes. Your data is used only to provide and improve the bingo8 platform and to comply with applicable legal requirements.
bingo8 uses cookies and similar tracking technologies (such as local storage tokens and session identifiers) on the bingo8 website and web application. Cookies are small data files stored on your device that enable the platform to function correctly, maintain your login session, remember your preferences, and analyze usage patterns.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent the bingo8 platform from functioning correctly and may prevent login. Disabling analytics or functional cookies will not prevent access to the platform but may reduce certain personalization features.
bingo8 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable legal, regulatory, and accounting obligations. The following retention periods apply as a general guide:
Following the expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with bingo8's data disposal procedures.
bingo8 implements organizational, technical, and physical security measures appropriate to the sensitivity of the personal data processed, consistent with the standards required by the Data Privacy Act of 2012 and its IRR. These measures include:
Your Role in Data Security: bingo8's security measures are most effective when combined with responsible security practices on your part. You are responsible for maintaining the confidentiality of your account credentials and for notifying bingo8 promptly if you suspect unauthorized access to your account.
Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data processed by bingo8. To exercise any of these rights, please contact the bingo8 DPO as described in Section 14.
You have the right to be informed of the purposes, extent, and method of processing of your personal data before it is collected or at the time it is first collected. This Policy fulfills bingo8's obligation under this right.
You have the right to request access to the personal data bingo8 holds about you, including the purposes for which it is processed, the categories of data held, and the recipients to whom it has been disclosed.
You have the right to request correction of inaccurate or incomplete personal data held by bingo8. You may update certain information directly through your bingo8 account settings; other corrections should be requested via the DPO.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bingo8's legal retention obligations under PAGCOR regulations and AML law.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to bingo8's overriding legitimate grounds.
You have the right to receive a copy of the personal data you have provided to bingo8 in a structured, commonly used, and machine-readable format, where technically feasible and where processing is carried out by automated means.
You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that bingo8 has violated any of your rights under the Data Privacy Act. NPC contact details are available at the NPC's official website.
You have the right to claim compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, taking into account any contributory negligence.
bingo8 will respond to data subject rights requests within ten (10) business days of receipt. Complex requests may require additional time; in such cases, bingo8 will notify you within the initial ten-day period and provide an estimated response date. bingo8 may request proof of identity before processing a rights request to ensure data is not disclosed to unauthorized parties.
The bingo8 platform is strictly intended for individuals aged 21 years and above. bingo8 does not knowingly collect or process personal data from individuals below the age of 21. This minimum age requirement is mandated by PAGCOR for all licensed online gaming in the Philippines.
Age verification is performed through mandatory KYC identity verification, which all registered players must complete before any real-money withdrawal is processed. Any account discovered to be held by a person below the age of 21 will be immediately suspended and all personal data associated with that account will be securely deleted, except where retention is required by applicable law.
Parental Notice: If you are the parent or guardian of a minor who has accessed or registered on the bingo8 platform without authorization, please contact bingo8 immediately at [email protected]. bingo8 will take immediate steps to suspend the account and securely delete the associated personal data.
bingo8 is primarily operated for and from the Philippines. However, certain technical service providers engaged by bingo8 — including cloud infrastructure, game content, and security technology providers — may process personal data on servers located outside the Philippines.
Where personal data is transferred to recipients outside the Philippines, bingo8 ensures that such transfers are made only to countries, organizations, or parties that provide an adequate level of data protection consistent with the requirements of the Data Privacy Act of 2012. Safeguards used by bingo8 for international transfers include: contractual data processing agreements that incorporate standard data protection clauses; transfers to jurisdictions recognized by the NPC as providing adequate protection; or transfers subject to binding corporate rules where applicable.
You may request further information about the specific safeguards applied to international transfers of your personal data by contacting the bingo8 DPO at the address provided in Section 14.
bingo8 reserves the right to update or revise this Privacy Policy at any time. Material changes — those that significantly affect your rights as a data subject or the way bingo8 processes your personal data — will be communicated to registered players by email to the address on record and/or by a prominent notice on the bingo8 platform, at least fourteen (14) calendar days before the amended Policy takes effect.
Non-material updates — such as corrections of typographical errors, changes in formatting, or clarifications that do not alter your substantive rights — may take effect immediately without advance notice. The effective date at the top of this Policy reflects the date of the most recent revision.
Your continued use of the bingo8 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of and consent to the revised terms, to the extent that such consent is required under the Data Privacy Act. If you do not agree to any revised Privacy Policy, you must cease using the platform and may close your account by contacting bingo8 customer support.
Policy Archive: Previous versions of the bingo8 Privacy Policy are available upon written request to the DPO. The current version is always the version published at bingo8.asia/privacy-policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bingo8, you may contact us through the following channels:
For data subject rights requests (access, rectification, erasure, portability, objection), please send a written request to [email protected] with the subject line "Data Subject Rights Request." Please include your full name, registered email address, and a description of your request. bingo8 may request proof of identity before processing your request.
If you are not satisfied with bingo8's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information about the NPC complaint process is available through the NPC's official communications and publications.
Effective Date: This Privacy Policy is effective as of 1 January 2026 and supersedes all previous versions. bingo8 recommends that registered players review this Policy periodically to stay informed of how their personal data is being protected.
Six pillars of data protection that bingo8 applies to every Filipino player's personal information.
All data transmitted between your device and bingo8's servers — login credentials, payment details, personal information — is encrypted with TLS. At rest, sensitive data including KYC documents and financial records is encrypted in bingo8's storage systems with modern cryptographic standards.
bingo8 operates in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and the NPC's implementing regulations. A registered Data Protection Officer oversees compliance and serves as your direct point of contact for any data privacy concern.
Access to your personal data within bingo8 is restricted on a strict need-to-know basis. All personnel with data access are bound by confidentiality obligations. Your account password is stored only as a cryptographic hash — it cannot be retrieved or read by bingo8 staff.
bingo8 does not sell, license, or broker your personal data to third parties for advertising or commercial profiling. Your data is used exclusively to provide bingo8 services, comply with Philippine regulatory requirements, and improve the platform for Filipino players.
bingo8 retains personal data only for as long as required by law and the purposes for which it was collected. Account data, KYC records, and financial transactions are held for a minimum of five years per AML regulations, then securely deleted or anonymized.
In the event of a personal data breach that poses a real risk of harm, bingo8 is committed to notifying the NPC within 72 hours of discovery, and notifying affected players as promptly as the investigation allows — in full compliance with NPC Circular 16-03.
Privacy, security, and fairness are the foundation of the bingo8 experience for every Filipino player. When you know your data is protected, you can focus on what matters — the games.