ha888 is committed to protecting the personal data of every Filipino player on our platform. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have over your own data.
These cards highlight the core principles of how ha888 handles your personal data. They are a summary only — please read the full policy document below.
ha888 collects personal data limited to what is necessary for account operation, legal compliance, and service delivery.
All personal data stored by ha888 is protected using industry-standard encryption, access controls, and security monitoring.
ha888 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial use.
You have the right to access, correct, and request deletion of your personal data held by ha888 at any time.
This policy is governed by the Data Privacy Act of 2012 (Republic Act No. 10173) and applicable PAGCOR regulations.
For any privacy-related requests or concerns, contact ha888 directly. We respond within the timeframes required by law.
This Privacy Policy ("Policy") describes how ha888 ("we", "us", "our", "Platform") collects, uses, stores, shares, and protects the personal information of individuals ("you", "Player", "User") who access or use the ha888 online gaming platform at ha888.co ("Site").
ha888 takes the privacy and security of your personal data seriously. We recognise that Filipino players entrust us with sensitive information — including financial details and identity documents — and we are committed to handling that information responsibly, transparently, and in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and all other applicable Philippine laws and regulations, including those issued by the National Privacy Commission ("NPC") and the Philippine Amusement and Gaming Corporation ("PAGCOR").
By registering for an ha888 account, using the Platform, or otherwise providing your personal information to ha888, you confirm that you have read, understood, and consent to the collection and use of your data as described in this Policy. If you do not agree with this Policy, you must not use the ha888 Platform.
This Policy should be read in conjunction with the ha888 Terms & Conditions and Responsible Gaming Policy, which together constitute the complete framework governing your relationship with the Platform.
For the purposes of the Data Privacy Act of 2012, ha888 acts as the Personal Information Controller in respect of personal data processed in connection with the operation of the ha888 Platform and the provision of gaming, payment, and customer support services to Philippine players.
As Personal Information Controller, ha888 determines the purposes and means by which personal data is processed and bears responsibility for ensuring that such processing is lawful, fair, and transparent, and that appropriate technical and organisational measures are in place to protect the data from unauthorised access, loss, or misuse.
ha888 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data protection law. Enquiries regarding this Policy or data protection matters may be directed to the DPO at the contact address set out in Section 15 of this Policy.
ha888 collects and processes the following categories of personal data in connection with the operation of the Platform and delivery of services to players:
| Data Category | Specific Items Collected |
|---|---|
| Identity | Full legal name, date of birth, gender, nationality |
| Contact | Mobile phone number, email address, residential address |
| Government ID | Type and number of Philippine government-issued ID; a copy of the document submitted for KYC verification |
| Account Credentials | Username; encrypted password hash (plaintext passwords are never stored) |
| Data Category | Specific Items Collected |
|---|---|
| Payment Methods | GCash or Maya mobile number; bank account details (BPI, BDO, Metrobank) submitted for withdrawals; payment reference numbers |
| Transaction Records | Deposit and withdrawal amounts, dates, times, and processing status; payment method used per transaction |
| Balance History | Account balance movements, bonus credit history, wager records, and win/loss data |
ha888 collects data relating to your use of the Platform, including: games accessed and played; bet amounts and outcomes; session duration and frequency; game category preferences; promotional offers claimed; and wagering progress toward applicable requirements. This data is used to operate the Platform, maintain game integrity, detect fraud, and tailor services to player preferences.
When you access ha888, we automatically collect certain technical data, including your IP address, browser type and version, device type and operating system, screen resolution, time zone, referring URL, and pages visited on the Site. This data is necessary for Platform security, fraud detection, and technical troubleshooting.
Records of all communications between you and ha888 — including customer support chat transcripts, emails, and any written complaints or disputes — are retained to ensure quality of service and to maintain evidence relevant to dispute resolution.
ha888 collects personal data through the following channels:
ha888 processes personal data only where there is a lawful basis for doing so. The following table sets out our primary processing purposes and the corresponding legal basis under the Data Privacy Act of 2012:
| Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract; fulfilment of your request to open an account |
| Age and identity verification (KYC) | Legal obligation under PAGCOR regulations and AML law |
| Processing deposits and withdrawals | Performance of contract; processing your financial transactions |
| Fraud detection and AML compliance | Legal obligation under RA 9160 (Anti-Money Laundering Act) and amendments |
| Responsible gaming monitoring and tools | Legal obligation; legitimate interest in player welfare |
| Customer support communications | Performance of contract; legitimate interest in service quality |
| Platform security and fraud prevention | Legitimate interest in protecting players and the Platform |
| Personalisation of gaming experience | Consent (where applicable); legitimate interest |
| Marketing communications | Consent — you may withdraw consent at any time (see Section 13) |
| Compliance with regulatory reporting | Legal obligation to PAGCOR, NPC, AMLC, and other authorities |
ha888 does not sell, rent, or trade your personal information to any third party for their own independent commercial purposes. We share personal data with third parties only in the following limited circumstances, and only to the extent necessary for the stated purpose:
ha888 engages third-party service providers who process personal data on our behalf and under our instruction, bound by data processing agreements and security obligations consistent with the DPA. These include payment processors (GCash, Maya, Philippine banks, InstaPay, PesoNet operators), KYC and identity verification providers, fraud detection and AML screening services, cloud infrastructure and hosting providers, and game software providers whose titles are hosted on the ha888 platform.
ha888 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue, law enforcement agencies, and courts of competent jurisdiction where required to do so by applicable Philippine law, a court order, or a valid regulatory demand.
In the event of a merger, acquisition, sale of assets, or other corporate restructuring affecting the ha888 Platform, personal data held by ha888 may be transferred to the successor entity as part of the transaction. Affected players will be notified of any such transfer and any changes to this Policy prior to the transfer taking effect.
ha888 requires all third-party service providers who handle player data to implement appropriate technical and organisational security measures and to process data only in accordance with ha888's documented instructions.
Certain third-party service providers used by ha888 — including cloud infrastructure providers and game software providers — may operate data centres or processing facilities outside the Philippines. Where personal data is transferred to or processed in a country outside the Philippines, ha888 ensures that such transfers are subject to appropriate safeguards consistent with the requirements of the Data Privacy Act of 2012, including:
ha888 will not transfer personal data internationally in a manner that reduces your data protection rights below those afforded by Philippine law.
ha888 retains personal data only for as long as it is necessary for the purposes for which it was collected, or for as long as required by applicable Philippine law. The following retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and KYC documents | Five (5) years from account closure, or longer if required by PAGCOR or AML regulations |
| Financial transaction records | Ten (10) years, in compliance with AML reporting obligations and tax record requirements |
| Gameplay and wager records | Three (3) years from the date of the activity, or five (5) years where relevant to a regulatory matter |
| Customer support records | Three (3) years from the date of the last communication in a ticket or dispute |
| Marketing preferences and consent records | For the duration of the account and three (3) years following account closure |
| Technical and device logs | Twelve (12) months from the date of the log entry, unless required for an active investigation |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identified individual.
ha888 uses cookies and similar tracking technologies to operate and improve the Platform, maintain your session, and understand how players interact with the Site. The following categories of cookies are used:
You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the ha888 Platform. Strictly necessary cookies cannot be turned off without preventing you from using the service.
ha888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
No method of transmission over the internet or electronic storage is completely secure. While ha888 implements strong security measures, we cannot guarantee absolute security. Players are also responsible for keeping their login credentials confidential and enabling 2FA on their accounts.
As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ha888. To exercise any of these rights, contact ha888 at [email protected] with a clear description of your request and sufficient information to verify your identity.
Request a copy of the personal data ha888 holds about you, together with information about how it is processed.
Request correction of inaccurate or incomplete personal data held about you by ha888.
Request deletion of your personal data where there is no longer a legal basis or legitimate reason for ha888 to retain it.
Request that ha888 restrict or suspend the processing of your personal data pending resolution of a dispute or complaint.
Request a structured, machine-readable copy of personal data you provided to ha888, for transfer to another controller.
Object to the processing of your personal data where ha888 relies on legitimate interest as the legal basis, including for direct marketing.
ha888 will respond to all data subject requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days and will inform you of the extension and the reasons for it. We may need to verify your identity before processing your request to ensure we do not disclose data to an unauthorised person.
The ha888 Platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. ha888 does not knowingly collect, use, or retain personal data from individuals under 21 years of age.
Age verification is conducted during the registration and KYC process. Any account that is found to be held by an individual under 21 years of age will be immediately suspended. Any personal data collected in connection with an underage account will be deleted promptly, except to the extent that retention is required to comply with applicable law or to report the matter to the relevant authorities.
If you believe that ha888 has inadvertently collected personal data from an individual under 21 years of age, please contact us immediately at [email protected] so that we can take appropriate action.
ha888 may send promotional communications — including information about bonuses, new game releases, sports betting events, and platform updates — to your registered mobile number or email address where you have given your consent to receive such communications.
You may withdraw your consent to marketing communications at any time by using the unsubscribe link included in any email communication, by adjusting your notification preferences in your ha888 account settings, or by contacting [email protected] with a request to opt out of marketing.
Opting out of marketing communications does not affect the delivery of transactional communications related to your account — such as deposit confirmations, withdrawal processing notifications, security alerts, and KYC request notifications. These are considered essential service communications and cannot be opted out of while your account is active.
ha888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or operational requirements. When material changes are made to this Policy, ha888 will notify registered players via email, through a notice within the account dashboard, or by displaying a prominent notice on the ha888 website, at least seven (7) days before the updated Policy takes effect.
The effective date and last updated date at the top of this document reflect the version currently in force. We encourage you to review this Policy periodically to remain informed about how ha888 protects your personal data.
Your continued use of the ha888 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the Platform and may request account closure in accordance with the ha888 Terms & Conditions.
If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how ha888 handles your personal data, please contact our Data Protection Officer through the following channel:
ha888 will acknowledge all privacy-related enquiries within five (5) business days and endeavour to resolve them within thirty (30) days in accordance with the requirements of the Data Privacy Act of 2012.
If you are not satisfied with ha888's response to your privacy complaint or data subject rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent government authority responsible for overseeing compliance with the Data Privacy Act of 2012 and adjudicating data privacy disputes. The NPC provides an independent complaints process available to all Philippine data subjects.
ha888 is built to respect and protect your personal data. Register with confidence — your information is secured, never sold, and processed only for the purposes set out in this Policy. Filipino players across Manila, Cebu, and Davao trust ha888 with their gaming experience.
⚠️ 21+ only. Gambling involves financial risk. Play within your means. PAGCOR-aligned operations. Your data is protected under RA 10173.