Privacy Policy
super888 Online Casino Platform

1Introduction

super888 takes the privacy of its players seriously. As an online gaming platform serving Filipino players, we understand that the personal information you share with us is sensitive, and we are committed to handling it responsibly, transparently, and in full compliance with Philippine law.

This Privacy Policy applies to all personal data collected through the super888 website at super888.club, our mobile platform, customer support channels, and any other service we operate under the super888 brand. It covers data collected from registered players, prospective players who browse the platform, and any other individuals who interact with super888 in any capacity.

By registering an account on super888 or continuing to use the platform after this policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.

2Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection regulations, super888 acts as the data controller in respect of the personal data it collects from users of the super888 platform. As data controller, super888 determines the purposes and means of processing your personal data.

super888 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. If you have any questions or concerns about how your personal data is handled, you may contact our DPO through the contact details provided in Section 16 of this policy.

3Personal Data We Collect

super888 collects the following categories of personal data from players and platform users:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Gender;
• Nationality and country of residence;
• Government-issued ID number (e.g., Philippine passport, SSS, UMID, PhilSys National ID, driver's license);
• Username and encrypted password.

3.2 Contact Data

• Email address;
• Mobile phone number (Philippine mobile number);
• Residential address (barangay, city/municipality, province, ZIP code).

3.3 Financial Data

• GCash or Maya (PayMaya) account number or registered mobile number;
• Bank account details (bank name, account number, account name) for bank transfer transactions;
• Debit card details where applicable (card number is tokenised and never stored in full);
• Transaction history including deposits, withdrawals, and bonus credits;
• Source of funds documentation where required for AML compliance.

3.4 Gaming Activity Data

• Game history, wager amounts, win/loss records, and session durations;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status);
• Customer support interaction records.

3.5 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Session timestamps and login history;
• Cookies and similar tracking data as described in Section 10.

4How We Collect Your Data

super888 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated collection: Data collected automatically when you access the platform, including IP address, device information, session data, and cookie data;
• Third-party sources: Identity verification data from KYC service providers; payment transaction data from GCash, Maya, and banking partners; fraud prevention data from third-party risk management services;
• Regulatory sources: Data received from PAGCOR or other regulatory authorities in connection with compliance obligations, including self-exclusion registry data.

5How We Use Your Personal Data

super888 uses your personal data for the following purposes:

super888 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

6Legal Basis for Processing

super888 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where such interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent that you may withdraw at any time.

7Data Sharing and Disclosure

7.1 Service Providers

super888 shares personal data with carefully selected third-party service providers who assist us in operating the platform. These include identity verification (KYC) providers, payment processors (GCash, Maya, and banking partners), fraud detection services, cloud hosting providers, and customer support platform providers. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities

super888 is required by law to share certain personal and financial data with regulatory and law enforcement authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies, where required by applicable law or regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of super888's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

7.4 No Sale of Data

super888 does not sell, rent, lease, or otherwise transfer your personal data to third-party marketers, data brokers, or advertising networks. Your data is never used for third-party advertising purposes.

8International Data Transfers

super888 primarily stores and processes your personal data within the Philippines. Where it is necessary to transfer your data to service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services — super888 ensures that such transfers are conducted in compliance with the Data Privacy Act of 2012 and that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law.

Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, or transfers to jurisdictions that have been assessed as providing an adequate level of data protection. You may request information about the specific safeguards applicable to any international transfer of your data by contacting our Data Protection Officer.

9Data Retention

super888 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AML reporting obligations;
• Gaming activity data: Retained for a minimum of three (3) years from the date of the activity;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

10Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the super888 platform. They allow the platform to recognise your device, remember your preferences, and provide a more personalised and functional experience.

10.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality;
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations;
• Analytics cookies: Collect anonymised data about how players use the platform to help us improve performance and user experience. super888 uses privacy-respecting analytics tools that do not share data with third-party advertising networks.

10.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the super888 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

11Your Data Protection Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by super888:

• Right to be informed: The right to be informed about how your personal data is collected and processed, as set out in this Privacy Policy;
• Right of access: The right to request a copy of the personal data super888 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 16. We will respond to all verified requests within thirty (30) calendar days. We may need to verify your identity before processing your request.

12Children's Privacy and Age Restriction

The super888 platform is strictly intended for adults aged twenty-one (21) years and above, in accordance with Philippine gaming law and PAGCOR regulations. super888 does not knowingly collect personal data from individuals under the age of 21.

During the registration process, super888 requires all applicants to confirm that they are at least 21 years of age. Identity verification (KYC) procedures are used to confirm the age of players before withdrawal privileges are activated. Any account found to belong to a person under 21 years of age will be immediately closed, all funds will be returned to the payment source, and the matter may be reported to the relevant authorities.

If you are a parent or guardian and believe that a minor has registered on super888 without your knowledge, please contact us immediately at the details provided in Section 16 so that we can take prompt action.

13Security Measures

super888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS (Transport Layer Security) encryption for all data transmitted between your device and the super888 platform;
• AES-256 encryption for sensitive data stored at rest, including financial data and identity documents;
• Multi-factor authentication options for player accounts;
• Regular security audits and penetration testing conducted by independent security professionals;
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role;
• Continuous monitoring of platform systems for suspicious activity and potential security incidents;
• A documented data breach response procedure, including notification to the National Privacy Commission and affected players within the timeframes required by law.

While super888 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your super888 login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

14Third-Party Links

The super888 platform may contain references to third-party services such as payment providers (GCash, Maya, and banking partners). When you interact with these third-party services, you will be subject to their own privacy policies and terms of service. super888 is not responsible for the privacy practices of third-party services and encourages you to review their privacy policies before providing any personal data to them.

super888 does not include external advertising links or third-party marketing content on the platform. Any links present on the platform are limited to services directly necessary for platform operation.

15Changes to This Privacy Policy

super888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The updated policy will be posted on this page with a revised effective date.

For material changes that significantly affect how we process your personal data, super888 will provide advance notice to registered players via email or in-platform notification at least seven (7) days before the changes take effect. Your continued use of the super888 platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how super888 protects your personal information.

16Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by super888, please contact our Data Protection Officer through the following channels:

Please note that all contact details above are provided as plain text for informational purposes. Email addresses are not clickable links. Do not share your account password or full financial details in any support communication.