Your personal data belongs to you. This policy explains exactly what bl888 collects, why we collect it, how we protect it, and the rights you have under Philippine law.
These cards summarise bl888's core data privacy principles. The full policy below governs in all cases and takes precedence over these summaries.
bl888 collects only the personal data that is strictly necessary to operate your account, process transactions, and meet PAGCOR's regulatory obligations. We do not collect data for the sake of it.
bl888 processes all personal data in accordance with Republic Act 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations as administered by the National Privacy Commission of the Philippines.
bl888 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Your information is used solely to operate the bl888 platform and comply with legal obligations.
All data transmitted between your device and bl888 is encrypted using 256-bit SSL. Personal data stored on bl888 servers is protected through industry-standard encryption, access controls, and regular security audits.
As a bl888 player, you have the right to access, correct, delete, and object to the processing of your personal data. bl888 provides a clear process for exercising these rights without penalty or delay.
bl888 retains personal data only as long as required for the purposes for which it was collected or as mandated by PAGCOR and AMLA regulations. When data is no longer needed, it is securely deleted or anonymised.
This Privacy Policy ("Policy") describes how bl888 ("bl888," "we," "us," or "our"), operator of the online gaming platform at bl888.win, collects, uses, discloses, and safeguards the personal information of individuals who access or use the bl888 platform and related services (collectively, the "Platform").
This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations as overseen by the National Privacy Commission ("NPC") of the Philippines. It also reflects bl888's obligations under applicable PAGCOR regulations and the Anti-Money Laundering Act of the Philippines ("AMLA").
By registering an account on bl888, using the Platform, or interacting with any bl888 service, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. This Policy is incorporated into and forms part of the bl888 Terms and Conditions.
Language: This Policy is published in English. In the event of any inconsistency between the English version and any translated version, the English text shall govern.
For the purposes of the Data Privacy Act of 2012, bl888 is the Personal Information Controller in respect of all personal data collected through the bl888 Platform. bl888 determines the purposes and means by which your personal data is processed.
bl888 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA, monitoring data processing activities, and acting as the primary point of contact for data subjects exercising their rights under the DPA. Contact details for the bl888 DPO are provided in Section 14 of this Policy.
bl888 collects only the categories of personal data necessary for the specific purposes described in this Policy. The following table summarises the categories of data collected and the primary purpose for each:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | KYC / age verification, PAGCOR compliance |
| Contact Data | Mobile number (Philippine format), email address, city/province | Account communication, OTP delivery, support |
| Identity Document Data | Government-issued ID type, ID number, ID image | KYC identity verification, AMLA compliance |
| Financial Data | GCash number, Maya account, bank account name/number (masked) | Deposit / withdrawal processing, AML screening |
| Transaction Data | Deposit and withdrawal amounts, dates, methods; game wager records | Account management, regulatory record-keeping, AML |
| Technical Data | IP address, device type, operating system, browser, session logs | Fraud prevention, security, platform optimisation |
| Usage Data | Pages visited, games played, session duration, feature interactions | Platform improvement, personalisation |
| Communications Data | Support chat transcripts, email correspondence content | Dispute resolution, quality assurance, compliance |
| Responsible Gaming Data | Deposit limits set, self-exclusion status, session time preferences | Player protection, PAGCOR RG compliance |
bl888 does not knowingly collect sensitive personal information beyond what is required for KYC identity verification. Where sensitive information is collected (such as government ID details), it is handled with heightened security controls.
bl888 collects personal data through the following means:
Under the Data Privacy Act of 2012, bl888 processes personal data only where a lawful basis exists. The following legal bases apply to bl888's data processing activities:
bl888 uses the personal data collected for the following purposes. Each use is tied to a legal basis as described in Section 5:
Marketing opt-out: You may opt out of bl888 marketing communications at any time by updating your notification preferences in Account Settings, or by contacting bl888 support. Opting out of marketing does not affect operational communications such as deposit confirmations and OTP codes.
bl888 does not sell, rent, or trade your personal data. bl888 may share your personal data with third parties only in the following circumstances:
bl888 engages third-party service providers who process personal data on bl888's behalf and under bl888's instructions as Personal Information Processors under the DPA. These include:
All service providers are contractually bound to process personal data only on bl888's instructions, maintain appropriate security standards, and not use the data for their own independent purposes.
Game software providers integrated into the bl888 Platform (such as JILI, Pragmatic Play, PG Soft, and others) may receive session and wagering data necessary for game operation. This data is limited to what is required for game function and does not include full identity documents or payment credentials.
bl888 may disclose personal data to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, law enforcement agencies, or courts in the Philippines where required by applicable law, regulatory directive, or lawful order. bl888 will notify affected players of such disclosures where permitted by law.
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bl888's assets, personal data may be transferred to the acquiring or successor entity. Players will be notified in advance of any such transfer and provided the opportunity to exercise their rights under the DPA.
Cross-border transfers: Where any bl888 service provider is located outside the Philippines, bl888 ensures that appropriate contractual safeguards are in place to protect your data to a standard equivalent to the DPA's requirements.
bl888 uses cookies and similar tracking technologies to operate and improve the Platform, ensure security, and personalise your experience. The following types of cookies are used on bl888.win:
You may manage cookie preferences through your browser settings. Blocking all cookies will affect your ability to log into your bl888 account and use core Platform features. bl888 does not use cookies to serve third-party advertising or to build advertising profiles.
bl888 retains personal data for as long as necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, or to resolve disputes. The following retention periods apply as a general guide:
When personal data is no longer required, bl888 securely deletes it or renders it permanently anonymous such that it can no longer be attributed to any identifiable individual.
bl888 implements technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Your role in security: bl888's security measures protect data on our end, but you are responsible for keeping your bl888 login credentials confidential. Never share your password or OTP codes with anyone, including those claiming to be bl888 staff. bl888 will never ask for your password via chat or email.
As a data subject under Republic Act 10173, you have the following rights with respect to your personal data held by bl888:
To exercise any of these rights, contact the bl888 Data Protection Officer using the contact details in Section 14. bl888 will respond to verified requests within fifteen (15) business days of receipt.
No penalty for exercising your rights: Exercising any right under the DPA will not affect the status of your bl888 account, your ability to withdraw available balances, or the quality of service you receive, except where the exercise of that right (e.g., account erasure) necessarily results in account closure.
bl888 is strictly prohibited to individuals under the age of twenty-one (21) years, as required by PAGCOR. bl888 does not knowingly collect personal data from individuals below this age. 21+ only.
If bl888 discovers that personal data has been collected from an individual who is under 21 years of age, bl888 will immediately close the relevant account, delete or anonymise the personal data collected, and void any transactions associated with the account. If you believe that bl888 has inadvertently collected personal data from a person under 21, please notify the bl888 DPO immediately using the contact details in Section 14.
bl888 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new legal or regulatory requirements, or improvements in our privacy procedures. When changes are made, the "Last Updated" date at the top of this Policy will be revised accordingly.
Where changes are material — meaning they significantly affect your rights or the way bl888 processes your personal data — bl888 will provide advance notice to registered players via their registered email or through an in-platform notification. Your continued use of the bl888 Platform after the effective date of any revised Policy constitutes your acknowledgment and acceptance of the changes.
If you do not agree with any material change to this Policy, you may request account closure and withdrawal of your available balance before the change takes effect.
For all data privacy inquiries, requests to exercise your DPA rights, or to report a potential data privacy concern, please contact the bl888 Data Protection Officer:
If you are not satisfied with bl888's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).
This Privacy Policy was last updated on January 1, 2026 and supersedes all previous versions. The bl888 Terms and Conditions and Privacy Policy are complementary documents — please read both in full. For game rules, see the bl888 Terms & Conditions.
Your data is protected under Philippine law. Your wallet is in PHP. Your GCash works instantly. bl888 was built for Filipino players — sign in and see the difference. 21+ only.