ud888 Privacy Policy

1. Introduction

ud888 ("ud888," "we," "us," "our") is committed to protecting the privacy and personal data of all individuals who interact with the ud888 platform, including registered players, visitors to ud888.org, and prospective users ("you," "your," "Player").

This Privacy Policy is issued in compliance with the Data Privacy Act of 2012 of the Republic of the Philippines (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). It sets out the basis on which personal data collected by or provided to ud888 will be processed.

By registering an account with ud888 or otherwise using the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the ud888 platform.

2. Data Controller

For the purposes of applicable Philippine data protection law, ud888 is the data controller responsible for the personal data processed in connection with the platform and its services. ud888 is responsible for determining the purposes and means of processing personal data collected through the platform.

Where ud888 engages third-party service providers to process personal data on its behalf — such as game providers, payment processors, and KYC verification services — those providers act as data processors and are bound by data processing agreements that restrict their use of personal data to the purposes specified by ud888 and in compliance with applicable law.

For data protection inquiries or to exercise your rights under the Data Privacy Act, please contact our Data Protection Officer (DPO) at the contact information set out in Section 13 of this Policy.

3. Information We Collect

ud888 collects personal information in the following categories, depending on the nature of your interaction with the platform:

3.1 Registration & Account Data

• Full legal name as appearing on your Philippine government-issued identification
• Date of birth (for age verification – must be 21 years of age or older)
• Philippine mobile number (Smart, Globe, DITO, or MVNO)
• Email address
• Username and encrypted password
• Residential address

3.2 Know Your Customer (KYC) & Verification Data

• Copies of Philippine government-issued identification (passport, driver's license, UMID, SSS ID, PhilHealth ID, or equivalent)
• Selfie photograph with ID (liveness verification)
• Proof of address documentation where required
• Source-of-funds documentation for high-value transactions, as required under anti-money laundering regulations

3.3 Financial & Transaction Data

• GCash account details, PayMaya (Maya) account details, BDO, BPI, or Metrobank account information used for deposits and withdrawals
• Transaction history including deposits, withdrawals, bet amounts, game outcomes, and bonus activity
• Records of all financial transactions on the ud888 platform

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser version
• Session logs, login timestamps, and session duration
• Pages visited, games played, and feature interactions
• Referral source and marketing campaign attribution data

3.5 Communications Data

• Live chat transcripts, email correspondence, and support ticket history
• Feedback, survey responses, and complaints submitted to ud888

4. How We Use Your Information

ud888 processes personal data for the following specific purposes:

ud888 does not use personal data to make fully automated decisions that produce significant legal effects on players without human review, except for automated fraud detection systems that flag accounts for human investigation.

5. Legal Basis for Processing

ud888 processes personal data under the following legal bases as recognized under the Data Privacy Act of 2012 and applicable Philippine law:

• Contract Performance: Processing necessary to provide the gaming and betting services you have registered for, including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR regulatory requirements, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act itself.
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where ud888 has obtained your explicit consent. You may withdraw consent for marketing at any time by contacting support or updating your communication preferences in your account settings.

6. Data Sharing & Disclosure

ud888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following circumstances and with appropriate safeguards in place:

• Game Providers: Pragmatic Play, Evolution Gaming, JILI Games, PG Soft, and other certified providers receive limited technical data necessary to deliver game content and verify session legitimacy. They are contractually prohibited from using this data for any purpose beyond game delivery.
• Payment Processors: GCash (GXI), PayMaya (Maya Philippines), and partner banks (BDO, BPI, Metrobank) receive transaction data necessary to process deposits and withdrawals. These institutions are independently regulated under Philippine financial law.
• KYC Verification Services: Third-party identity verification providers may process your ID documents and selfie photographs to complete KYC verification. These providers operate under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities may receive data as required by law, court order, or regulatory directive. ud888 will notify you of such disclosures to the extent permitted by law.
• Fraud Prevention Networks: Industry-standard fraud prevention databases may receive limited data to identify fraudulent account activity. This is a legitimate interest processing activity.

7. Cookies & Tracking Technologies

The ud888 website uses cookies and similar tracking technologies to operate core platform functions, analyze usage patterns, and deliver relevant promotional content to registered players.

The following categories of cookies are used by ud888:

• Strictly Necessary Cookies: Required for platform operation, including session authentication, security tokens, and user preference storage. These cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to understand how players navigate the platform, which games are most accessed, and where technical issues occur. Analytics data is aggregated and does not identify individual users.
• Functional Cookies: Store player preferences such as language settings, preferred game categories, and display options to improve the experience on subsequent visits.
• Marketing Cookies: Used only with your consent to track interactions with ud888 promotional materials and tailor offers to your activity. You may opt out of marketing cookies through your account settings or browser controls.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect platform functionality, including your ability to log in and maintain a session.

8. Data Retention

ud888 retains personal data for as long as is necessary for the purposes described in this Policy, taking into account applicable legal and regulatory retention requirements.

• Active Account Data: Retained for the duration of your registered account plus five (5) years following account closure, to comply with PAGCOR record-keeping requirements and AML regulations under Republic Act No. 9160.
• KYC & Identity Documents: Retained for five (5) years following the end of the business relationship, as required under Philippine AML law.
• Transaction Records: Retained for five (5) years following each transaction, in compliance with PAGCOR and AMLC requirements.
• Communications Data: Support chat transcripts and email correspondence retained for two (2) years from the date of the interaction.
• Marketing Data: Retained until you withdraw consent or for two (2) years following your last interaction with a ud888 marketing communication, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of individual identities.

9. Data Security

ud888 implements technical and organizational security measures appropriate to the risks presented by the processing of player personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ud888 servers
• Encryption of sensitive data at rest, including passwords (hashed with salted algorithms), financial account details, and ID document images
• Two-Factor Authentication (2FA) available to all players and strongly recommended for account security
• Access controls limiting ud888 employee access to personal data on a strict need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• Segregation of player funds from operational accounts
• Incident response procedures for detecting, reporting, and managing personal data breaches in compliance with the NPC's breach notification requirements

In the event of a personal data breach that poses a risk to your rights and freedoms, ud888 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

10. Your Data Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), Filipino data subjects have the following rights with respect to their personal data held by ud888:

• Right to Be Informed: The right to know what personal data is being collected, how it is used, with whom it is shared, and how long it is retained — as described in this Policy.
• Right of Access: The right to request a copy of your personal data held by ud888 and information about how it is processed. ud888 will respond to access requests within 30 calendar days.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. Most account data can be updated directly through your ud888 account settings; for KYC data, please contact support.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes collected, subject to overriding legal retention obligations (such as AML record-keeping requirements). Deletion requests will be assessed on a case-by-case basis.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another data controller where technically feasible.
• Right to Object: The right to object to processing based on legitimate interests, including direct marketing. You may opt out of marketing communications at any time.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission if you believe ud888 has breached your data protection rights.

To exercise any of the above rights, contact our Data Protection Officer using the details in Section 13. We may ask you to verify your identity before processing your request.

11. Children & Minors

The ud888 platform is strictly intended for adults aged 21 years and above. ud888 does not knowingly collect personal data from individuals under the age of 21. If ud888 discovers that personal data has been collected from a person under 21 years of age, it will immediately delete that data and close the associated account.

Parents and guardians who believe a minor has registered an account with ud888 should contact our support team immediately. ud888 takes the protection of minors in the context of online gambling with the utmost seriousness and enforces age verification through documented KYC processes before processing any withdrawal.

12. Changes to This Privacy Policy

ud888 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. When material changes are made, ud888 will notify registered players via email and/or a prominent notice on the platform, with a minimum of seven (7) days' advance notice before the updated Policy takes effect.

The date of the most recent revision to this Privacy Policy is displayed at the top of this page. We encourage all players to review this page periodically. Your continued use of ud888 following the effective date of any revised Policy constitutes acceptance of the updated terms.

For historical versions of this Policy, please contact our Data Protection Officer.

13. Contact & Data Protection Officer

For any questions, concerns, or requests regarding this Privacy Policy or your personal data held by ud888, please contact our Data Protection Officer. Contact details are provided as plain text only and are not clickable links.

If you are not satisfied with ud888's handling of your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) through NPC's official channels.