ha888 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is issued by ha888 ("ha888," "we," "us," "our") and applies to all personal information collected from individuals ("you," "your," "Player") who access, register on, or use the ha888 online gaming platform at ha888.org, including all associated subdomains, mobile interfaces, and related services (collectively, the "Platform").

ha888 operates in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. The National Privacy Commission ("NPC") of the Philippines is the regulatory authority responsible for supervising and enforcing the DPA. By using the ha888 Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal information as described herein.

This Policy is incorporated by reference into ha888's Terms & Conditions. In the event of a conflict between this Policy and any other document, this Policy shall govern with respect to personal data matters.

2. Personal Data We Collect

ha888 collects personal information through your interactions with the Platform. The categories of data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (used to verify the 21+ age requirement per PAGCOR guidelines)
• Residential address, including barangay, city or municipality, province, and postal code
• Philippine mobile number and/or email address
• Username and encrypted password
• Nationality and citizenship

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., PhilSys National ID, UMID, driver's license, Philippine passport)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie or facial image submitted for liveness verification, where required
• Source of funds documentation, where required by anti-money laundering (AML) obligations

2.3 Financial and Transaction Data

• GCash or Maya wallet identifiers (masked; ha888 does not store full wallet credentials)
• Bank account numbers used for deposit or withdrawal (masked)
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method references
• Bonus and promotional credit history

2.4 Gaming and Behavioral Data

• Game play history including game titles, bet amounts, outcomes, session durations, and win/loss records
• Sports betting selections, odds accepted, and settlement records
• Responsible gaming interactions, including deposit limit settings, self-exclusion requests, and cooling-off periods

2.5 Technical and Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, browser type and version
• Session timestamps and page interaction logs
• Cookie identifiers and similar tracking technology data (see Section 6)

2.6 Communications Data

• Records of your communications with ha888 customer support, including live chat transcripts, email correspondence, and support ticket logs
• Responses to surveys, promotions, or feedback requests

3. How ha888 Uses Your Personal Data

ha888 uses the personal data collected for the following specific purposes:

• Account Creation and Management: To register your ha888 account, authenticate your identity on login, and maintain your account in good standing.
• Age and Identity Verification: To confirm that you meet the minimum age requirement of 21 years, as required by PAGCOR and Philippine law, and to conduct KYC checks in accordance with our AML obligations.
• Payment Processing: To process deposits, execute withdrawal requests, verify payment method ownership, and maintain accurate financial records.
• Service Delivery: To operate and deliver the games, sports betting, live casino, bingo, and other services available on the ha888 Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Responsible Gaming: To monitor gaming behavior for indicators of problem gambling, enforce deposit limits and self-exclusion settings, and fulfil our duty of care to players.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, and other prohibited conduct.
• Legal and Regulatory Compliance: To fulfil our obligations under Philippine law, PAGCOR regulatory requirements, the Data Privacy Act of 2012, and any applicable anti-money laundering legislation.
• Marketing and Promotions: To send you promotional offers, bonus notifications, and platform updates where you have provided consent to receive such communications. You may withdraw consent at any time via account settings or by contacting support.
• Platform Improvement: To analyze aggregated usage patterns, improve game loading performance for Philippine mobile network conditions, and enhance the overall user experience.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, ha888 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and ha888 (i.e., the Terms & Conditions), including account operation, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with ha888's obligations under Philippine law, PAGCOR licensing conditions, AML regulations, and the DPA itself.
• Legitimate Interest: Processing for fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications, where you have given explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing and Disclosure

ha888 does not sell your personal data to third parties. ha888 may share your personal data with the following categories of recipients in limited circumstances:

• Game Providers: Licensed game software providers (e.g., PG Soft, Pragmatic Play, Jili) receive minimal session data necessary to deliver their games on the ha888 platform. These providers are contractually bound to data protection obligations equivalent to those in this Policy.
• Payment Processors: Payment service providers facilitating GCash, Maya, BPI, BDO, Metrobank, and other transactions receive transaction data necessary to process deposits and withdrawals. All payment partners are subject to their own regulatory data protection obligations.
• Identity Verification Services: Third-party KYC and AML compliance providers who assist ha888 in verifying player identity and screening against sanctions lists and politically exposed persons (PEP) databases.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law, court order, or regulatory requirement.
• Law Enforcement: Philippine law enforcement authorities, where disclosure is required in connection with a criminal investigation or as otherwise required by law.
• Technical Service Providers: Cloud hosting, cybersecurity, analytics, and customer support platform providers who process data on ha888's behalf under data processing agreements that impose equivalent protections.

Any third party receiving your data from ha888 is prohibited from using it for purposes beyond those specified in their agreement with ha888 and applicable law.

6. Cookies and Tracking Technologies

ha888 uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. ha888 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your ha888 account. These cannot be disabled without breaking Platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings, display options, and previously played games. Disabling these may reduce Platform functionality.
• Analytics Cookies: Used to collect aggregated data on how players use the Platform, which pages are most visited, and how performance can be improved. ha888 uses this data only in anonymized, aggregated form.
• Marketing Cookies: Used only where you have given consent to receive marketing communications. These may track your interaction with ha888 promotional materials.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from using core Platform features including ha888 login.

7. Data Retention

ha888 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. Specific retention periods include:

• KYC and identity verification documents: retained for a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Transaction records: retained for a minimum of five (5) years following the transaction date, in compliance with AMLC reporting obligations.
• Gaming session records: retained for two (2) years following the session date, or longer where required for dispute resolution or regulatory purposes.
• Support communications: retained for two (2) years following the resolution of the relevant support interaction.
• Marketing consent records: retained for the duration of your account and for one (1) year following consent withdrawal, as evidence of compliance.

Upon expiry of the applicable retention period, ha888 will securely delete or anonymize your personal data in a manner that prevents its reconstruction.

8. Data Security

ha888 implements technical and organizational security measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ha888 servers
• Encryption of sensitive data at rest, including identity documents and financial records
• Role-based access controls restricting ha888 staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of Platform infrastructure
• Two-factor authentication available for all player accounts
• Automated detection systems monitoring for unauthorized access attempts and anomalous activity

While ha888 takes all reasonable precautions, no transmission over the internet or electronic storage system is completely secure. ha888 cannot guarantee absolute security but commits to notifying affected players and the National Privacy Commission of any data breach in accordance with NPC Circular No. 16-03 and the DPA's breach notification requirements.

9. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ha888:

• Right to be Informed: The right to know whether ha888 processes your personal data and to receive a copy of this Privacy Policy.
• Right of Access: The right to obtain a copy of the personal data ha888 holds about you, subject to identity verification.
• Right to Rectification: The right to correct inaccurate or incomplete personal data in your ha888 account.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to ha888's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. Objection to processing based on legitimate interests will be assessed against ha888's legitimate grounds.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe ha888 has violated your data privacy rights.

To exercise any of these rights, contact ha888 at [email protected]. ha888 will respond to verified requests within thirty (30) days. Identity verification is required before processing any data access, rectification, or erasure request.

10. Children's Privacy

The ha888 Platform is strictly intended for adults aged 21 years and above, consistent with PAGCOR's minimum age requirements for online casino gaming in the Philippines. ha888 does not knowingly collect personal data from individuals under the age of 21. If ha888 discovers or is notified that it has collected personal data from an individual under 21, the relevant account will be immediately suspended, the data will be deleted, and any funds held in the account will be handled in accordance with applicable law and regulatory guidance.

If you are a parent or guardian and believe that a minor in your household has created an ha888 account, please contact [email protected] immediately so that the account can be closed and the data removed.

11. International Data Transfers

Some of ha888's service providers — including cloud infrastructure and game providers — may be located outside the Philippines. Where personal data is transferred internationally, ha888 ensures that such transfers are subject to appropriate safeguards, including contractual clauses that impose data protection obligations equivalent to those under the DPA, or that the recipient jurisdiction provides an adequate level of data protection as recognized under Philippine law.

ha888 will not transfer your personal data to jurisdictions that do not provide adequate protection without your explicit consent or a lawful basis under the DPA.

12. Third-Party Links

The ha888 Platform does not include links to third-party websites. All navigation links on ha888.org direct to internal pages within the ha888 platform. This Policy applies only to data collected by ha888 directly. ha888 is not responsible for the privacy practices of any external sites that you may independently visit.

13. Changes to This Privacy Policy

ha888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes — including any change to how we use your personal data, any new categories of data collected, or any change in data sharing practices — will be communicated to registered players via email and/or a prominent notice on the Platform no fewer than seven (7) days before the change takes effect.

Your continued use of the ha888 Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure.

14. Contact Information and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or ha888's handling of your personal data, please contact us:

Data Protection and Privacy Inquiries: [email protected]

ha888 customer support is available 24 hours a day, 7 days a week via live chat. For formal data rights requests under the DPA, please contact us in writing via email with the subject line "Data Privacy Request" and include your full name, registered email address, and a description of your request. ha888 will verify your identity before processing any data rights request.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe ha888 has not handled your personal data in accordance with the Data Privacy Act of 2012.