bay88 Privacy Policy

Bay88 ("bay88," "we," "us," or "our") operates the online gaming platform accessible at https://bay88.bio (the "Platform"). In the course of providing our gaming services to Filipino players across the Philippines — from Manila and Quezon City to Cebu and Davao — we necessarily collect and process personal information about our users.

This Privacy Policy ("Policy") governs bay88's collection, use, storage, disclosure, and protection of personal data. It applies to all personal data provided to bay88 through the Platform, including data collected during account registration, KYC verification, deposits, gameplay, withdrawals, and customer support interactions.

Bay88 is committed to full compliance with the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). This Policy is drafted in accordance with that legal framework.

Bay88 collects personal data through several distinct channels. The categories of data collected are described in the table below:

Bay88 does not collect sensitive personal information beyond what is necessary for identity verification and legal compliance. We do not store complete payment card numbers. GCash and Maya transactions are processed via the respective payment providers' secure APIs — bay88 receives only transaction reference data, not your full e-wallet credentials.

Bay88 uses the personal data it collects solely for the following purposes:

• Account creation and management: To create, maintain, and secure your bay88 player account.
• Identity verification (KYC): To verify your identity and age in compliance with anti-money laundering (AML) and PAGCOR-aligned regulatory requirements.
• Payment processing: To process deposits, withdrawals, and refunds in Philippine Peso via your nominated payment method.
• Service delivery: To provide access to the full bay88 gaming platform, including game functionality, bonus crediting, and VIP tier tracking.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance through Live Chat and email.
• Responsible gaming: To monitor gaming patterns and proactively identify signs of problem gambling, in line with bay88's responsible gaming obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorized access to accounts.
• Legal and regulatory compliance: To fulfill bay88's obligations under Philippine law, including the Data Privacy Act of 2012, AML regulations, and PAGCOR requirements.
• Platform improvement: To analyze usage patterns (in aggregated, anonymized form) to improve game selection, interface design, and overall platform performance.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have explicitly opted in to receive such communications.

Bay88 does not use your personal data to make automated decisions that produce legal or similarly significant effects on you, without human review.

Under the Data Privacy Act of 2012, bay88 relies on the following legal bases for processing your personal data:

• Contract performance: Processing necessary to provide the gaming services you have contracted for by registering an account on bay88.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, tax reporting requirements, and PAGCOR compliance standards.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where you have provided explicit, freely given, informed consent. You may withdraw this consent at any time by contacting bay88 support or updating your account notification preferences.

Bay88 does not sell your personal data to third parties under any circumstances. We share personal data only in the following limited circumstances:

• Game providers and technology partners: Certified game studios and platform technology providers who require limited technical data to deliver their services within the bay88 Platform. All such partners are contractually bound by data protection obligations consistent with this Policy.
• Payment processors: GCash, Maya, and bank partners process payment data under their own privacy policies and applicable Philippine financial regulations.
• KYC and AML service providers: Third-party identity verification services engaged to perform KYC checks on bay88's behalf, under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement agencies, where disclosure is required by law, court order, or regulatory demand.
• Professional advisers: Legal counsel, auditors, and insurers, where necessary for bay88's legitimate business operations and only to the extent required.

Bay88 does not transfer your personal data outside the Philippines except where required for KYC verification or payment processing, and only to recipients who provide equivalent data protection standards.

Bay88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming and session data: Retained for a minimum of two (2) years from the date of each session.
• Customer support communications: Retained for a minimum of two (2) years from the date of the last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be associated with any identifiable individual.

The bay88 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalized gaming experience. The categories of cookies in use are:

• Strictly necessary cookies: Required for the Platform to function. These include session management, authentication tokens, and security cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings, game history display, and notification preferences.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help bay88 improve the gaming experience. This data is not linked to individual player identities.

Bay88 does not use third-party advertising cookies or cross-site tracking technologies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the Platform.

Bay88 implements technical and organizational security measures appropriate to the risk level associated with processing your personal data. These measures include:

• 256-bit TLS encryption for all data transmitted between your device and the bay88 Platform.
• Encryption of sensitive data fields (including identity document numbers and payment references) at rest.
• Role-based access controls ensuring that only authorized bay88 personnel can access player personal data, strictly on a need-to-know basis.
• Regular security audits and penetration testing of the Platform's infrastructure.
• Incident response procedures for detecting, containing, and reporting personal data breaches to the National Privacy Commission within 72 hours, where required.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bay88:

• Right to be informed: The right to know what personal data bay88 collects and how it is used — which this Policy fulfils.
• Right of access: The right to request a copy of the personal data bay88 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to bay88's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for marketing purposes at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, contact bay88 at [email protected] or via 24/7 Live Chat. Bay88 will respond to data rights requests within 15 business days.

The bay88 Platform is strictly restricted to persons aged 21 years and older. Bay88 does not knowingly collect personal data from individuals under the age of 21. If bay88 becomes aware that personal data has been collected from an individual under 21, such data will be immediately deleted and the associated account terminated.

If you are a parent or guardian and believe that your child has provided personal data to bay88, please contact our support team immediately at [email protected].

Bay88 reserves the right to update this Privacy Policy at any time. When material changes are made, the revised Policy will be posted on this page with an updated effective date. Where required by law, bay88 will notify affected players of significant changes via email or in-Platform notification.

Your continued use of the bay88 Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

For questions, concerns, or requests relating to this Privacy Policy or bay88's data handling practices, please contact:

• Email: [email protected]
• Live Chat: Available 24/7 on the bay88 Platform
• Response time: Within 15 business days for data rights requests; within 2 hours for general support

You also have the right to escalate complaints to the National Privacy Commission of the Philippines at privacy.gov.ph if you believe your data protection rights have been violated.