Privacy Policy

This Privacy Policy ("Policy") describes how hot888 ("hot888," "we," "us," or "our") collects, processes, uses, discloses, stores, and protects the personal information of individuals ("you," "your," or "User") who access or use the hot888 online casino platform, website located at hot888.lat, mobile applications, and all related services (collectively, the "Services"). This Policy forms an integral part of the hot888 Terms and Conditions and is binding upon all registered players and visitors.

hot888 is fully committed to protecting the privacy rights of Filipino players and all other users in compliance with the Republic Act No. 10173 – Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and all issuances of the National Privacy Commission ("NPC"). By accessing or using the Services, you consent to the data practices described in this Policy.

1. Identity and Contact Details of the Personal Information Controller

For purposes of the Data Privacy Act of 2012, hot888 acts as the Personal Information Controller with respect to all personal data collected through the Services. Our designated Data Protection Officer ("DPO") oversees compliance with applicable data privacy laws and can be reached through the contact channels listed in Section 13 of this Policy.

2. Scope and Application

This Policy applies to:

• All registered account holders on the hot888 platform
• Visitors who browse the hot888 website without creating an account
• Individuals who contact hot888 customer support via any channel
• Participants in hot888 promotions, tournaments, or marketing campaigns
• Any person whose personal data is processed in connection with the delivery of the Services

This Policy does not govern the privacy practices of third-party websites, payment processors, or game providers that may be linked to or integrated within the hot888 platform. hot888 strongly encourages you to review the privacy policies of any third-party services you access independently of the hot888 platform.

3. Categories of Personal Data We Collect

3.1 Information You Provide Directly

When you register an account, use the Services, or communicate with hot888, we may collect the following categories of personal information:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., SSS, UMID, passport, driver's license)
• Contact Data: Residential address (including barangay, city or municipality, province), email address, and Philippine mobile number
• Financial Data: GCash-registered mobile number, Maya account details, bank account information for BPI, BDO, Metrobank, and other authorized payment channels, deposit and withdrawal transaction history
• Gaming Data: Game play history, wager amounts, session durations, game preferences, and responsible gaming settings
• Authentication Data: Username, encrypted password, device identifiers used for two-factor authentication, and session tokens
• Communications Data: Records of correspondence with customer support, live chat transcripts, and feedback submitted through platform tools

3.2 Information Collected Automatically

When you access the hot888 platform, our systems automatically collect certain technical information, including:

• Internet Protocol (IP) address and approximate geolocation data
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Pages visited, time spent per page, click-through patterns, and referring URLs
• Cookie identifiers and similar tracking technologies as described in Section 8
• Mobile network provider (e.g., Smart, Globe, DITO) and connection type

3.3 Information from Third Parties

hot888 may receive personal data about you from authorized third-party sources, including identity verification services, payment processors, fraud detection providers, and regulatory authorities such as PAGCOR and the Anti-Money Laundering Council (AMLC), where required by law.

4. Legal Bases and Purposes for Processing

hot888 processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The following table summarizes our primary processing purposes and their corresponding legal bases:

• Account creation and management — Performance of contract; necessary to provide the Services
• Identity verification and age verification (21+ compliance) — Legal obligation under PAGCOR regulations and DPA
• Anti-money laundering checks and suspicious activity monitoring — Legal obligation under R.A. 9160 (AMLA) and PAGCOR licensing requirements
• Processing deposits, withdrawals, and gaming transactions — Performance of contract
• Providing 24/7 customer support — Performance of contract; legitimate interest
• Fraud prevention and platform security — Legitimate interest; legal obligation
• Responsible gaming monitoring and player protection — Legal obligation; legitimate interest
• Sending promotional communications and personalized offers — Consent (which you may withdraw at any time)
• Platform analytics and product improvement — Legitimate interest
• Compliance with regulatory reporting obligations — Legal obligation

5. How We Share Your Personal Data

5.1 Internal Disclosures

Your personal data is accessible only to hot888 employees, contractors, and agents who require access in order to fulfill their designated roles in delivering the Services. All personnel with access to personal data are bound by confidentiality obligations.

5.2 Third-Party Service Providers

hot888 engages trusted third-party processors to support the delivery of our Services, including payment processors for GCash, Maya, and bank transfer integrations; game software providers such as JILI, Pragmatic Play, and Evolution Gaming; identity verification and KYC service providers; IT hosting, cloud storage, and cybersecurity service providers; and customer relationship management platform providers. All third-party processors are contractually bound to handle personal data in accordance with the Data Privacy Act and hot888's data protection standards.

5.3 Regulatory and Law Enforcement Disclosures

hot888 will disclose personal data to PAGCOR, the AMLC, the NPC, or other competent Philippine government authorities where required to do so by law, court order, or regulatory directive. We will endeavor to notify you of such disclosures to the extent permitted by applicable law.

5.4 Prohibition on Sale of Personal Data

hot888 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Any sharing of data occurs exclusively for the purposes enumerated in this Policy.

6. Data Retention

hot888 retains personal data for as long as your account remains active and for such additional period as is required by applicable Philippine law or regulatory obligation. Specifically:

• Account and identity verification records are retained for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC requirements
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction
• Gaming history records are retained for a minimum of three (3) years
• Customer support communications are retained for two (2) years from the date of the last interaction
• Marketing consent records are retained for the duration of the consent and up to two (2) years following withdrawal

Following the expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized in accordance with NPC guidelines.

7. Data Security Measures

hot888 implements a comprehensive information security program incorporating technical, organizational, and physical safeguards to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include, but are not limited to:

• 256-bit Transport Layer Security (TLS) encryption for all data transmitted between your device and hot888 servers
• Advanced encryption at rest for sensitive personal data stored in our databases
• Multi-factor authentication requirements for account access and administrative systems
• Regular independent penetration testing and vulnerability assessments
• Strict role-based access controls limiting data access to authorized personnel only
• Continuous intrusion detection and real-time security monitoring
• Regular staff training on data protection and cybersecurity best practices

Notwithstanding these measures, no method of electronic transmission or storage is completely secure. In the event of a personal data breach affecting your rights and freedoms, hot888 will notify the NPC within seventy-two (72) hours of becoming aware and will inform affected users without undue delay, as required by the Data Privacy Act.

8. Cookies and Tracking Technologies

hot888 uses cookies and similar technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The categories of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the platform, including session management, authentication, and fraud prevention. These cannot be disabled.
• Functional Cookies: Enable personalization features such as language preferences and remembered login details.
• Analytics Cookies: Help us understand how players interact with the platform, allowing us to improve performance and usability.
• Marketing Cookies: Used to deliver relevant promotional content. These are only placed with your prior consent.

You may manage non-essential cookie preferences through your browser settings or our on-platform consent manager. Please note that disabling certain cookies may affect platform functionality.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by hot888:

• Right to be Informed: To know whether hot888 processes your personal data and the purposes therefor
• Right of Access: To obtain a copy of your personal data in a structured and portable format
• Right to Rectification: To correct inaccurate or incomplete personal data
• Right to Erasure or Blocking: To request deletion of personal data that is unlawfully processed or no longer necessary, subject to legal retention obligations
• Right to Object: To oppose processing based on legitimate interest, including for direct marketing purposes
• Right to Data Portability: To receive your personal data in a commonly used electronic format
• Right to Damages: To claim compensation for damages sustained due to unlawful processing
• Right to Withdraw Consent: To revoke previously given consent at any time without affecting the lawfulness of prior processing

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 13. We will respond to verifiable requests within thirty (30) days, or as otherwise required by applicable law. We may require proof of identity before processing your request.

10. Children's Privacy

Parents or guardians who believe a minor has provided personal data to hot888 should contact our DPO immediately using the contact information in Section 13.

11. Cross-Border Data Transfers

hot888 may transfer your personal data to service providers located outside the Republic of the Philippines, including cloud service infrastructure providers and international game software partners. All cross-border transfers are carried out in accordance with Section 21 of the Data Privacy Act and NPC Circular 16-01, ensuring that receiving parties afford an equivalent level of data protection through appropriate contractual safeguards.

12. Amendments to This Policy

hot888 reserves the right to revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material amendments will be communicated to registered users via the email address on file at least fourteen (14) days prior to the changes taking effect. The most current version of this Policy is always accessible on the hot888 platform. Continued use of the Services after the effective date of any amendment constitutes acceptance of the revised Policy.

13. How to Contact Us

For all privacy-related queries, requests to exercise data subject rights, or to report a potential privacy concern, please reach out to the hot888 Data Protection Officer through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the hot888 platform in English and Tagalog
• Response Time: We aim to acknowledge all inquiries within one (1) business day and resolve them within thirty (30) calendar days

If you believe hot888 has not adequately addressed a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through their official channels.