Your privacy matters to us. This policy explains exactly what personal data by888 collects from Filipino players, how we use it, and how we keep it safe.
This Privacy Policy ("Policy") describes how by888 ("we," "us," "our") collects, uses, discloses, and safeguards the personal information of users ("you," "your") who register for or access services through the by888 online gaming platform at by888.win. By creating an account or using the by888 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. This Policy should be read together with the by888 Terms & Conditions.
by888 is an online casino and sports betting platform serving Filipino players across the Philippines. In the course of providing gaming services — including account registration, deposits, withdrawals, gameplay, and customer support — by888 necessarily collects and processes certain personal information about its users.
by888 is committed to handling your personal data with transparency, integrity, and in full compliance with applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. This Policy reflects those obligations and explains your rights as a data subject.
We recognize that Filipino players entrust by888 with sensitive financial and personal information when they register accounts and conduct transactions using services such as GCash, PayMaya, BDO, BPI, and Metrobank. The protection of that information is a core responsibility that by888 takes seriously.
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal information is by888, operator of the online gaming platform accessible at by888.win.
The data controller determines the purposes for which and the means by which your personal data is processed. All requests relating to your personal data — including access, correction, deletion, or objection to processing — should be directed to by888 through the contact channels set out in Section 16 of this Policy.
by888 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with this Policy and with applicable data protection regulations. The DPO may be reached via the contact information provided in Section 16.
by888 collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the by888 website, and in some cases from third-party service providers (such as payment processors and identity verification services). The categories of personal data collected include:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full name, date of birth, government ID number (Philippine passport, driver's license, SSS ID, PhilSys ID, UMID) | Provided by you at registration or KYC verification |
| Contact Data | Philippine mobile number, email address | Provided by you at registration |
| Financial Data | GCash account reference, PayMaya account reference, bank account details (BDO, BPI, Metrobank), transaction history, deposit and withdrawal records | Provided by you and generated by platform use |
| Gaming Activity Data | Games played, bet amounts, win/loss records, session duration, bonus usage history, sports betting selections | Automatically generated by platform use |
| Technical Data | IP address, browser type and version, device type and operating system, mobile network (Globe, Smart, DITO), geolocation (city/region level) | Automatically collected via cookies and server logs |
| Communications Data | Live chat transcripts, email correspondence, SMS communication records | Generated through customer support interactions |
| Verification Data | Copies of government-issued ID documents, selfie images submitted for identity verification | Provided by you during KYC processes |
by888 does not collect or process special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data) except where strictly required by applicable law or regulatory compliance obligations.
by888 processes your personal data for the following specific purposes:
by888 processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173) and its implementing rules:
by888 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your personal data may be disclosed to third parties only in the following limited circumstances:
All third parties with whom by888 shares personal data are required to handle that data in a manner consistent with applicable data protection law and with appropriate security safeguards in place.
by888 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Retention periods are determined by the following criteria:
At the end of the applicable retention period, by888 will securely delete or anonymize your personal data in a manner that prevents reconstruction or re-identification.
by888 implements a multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key security measures include:
by888 uses cookies and similar tracking technologies on its website to support platform functionality, enhance user experience, and collect analytics data. The types of cookies used by by888 include:
by888 does not use third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings, though disabling essential cookies will affect your ability to access the by888 platform.
Under the Data Privacy Act of 2012 (RA 10173), registered by888 players have the following rights with respect to their personal data. These rights may be exercised by contacting by888 through the channels described in Section 16:
You have the right to request a copy of the personal data that by888 holds about you, and to receive information about how it is being processed.
You have the right to request that inaccurate or incomplete personal data held by by888 be corrected or updated promptly.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to by888's legal obligations to retain certain records.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other processing activities where by888 relies on its legitimate interests as the legal basis.
You have the right to receive a copy of the personal data you provided to by888 in a structured, commonly used, machine-readable format where technically feasible.
You have the right to request that by888 restrict the processing of your personal data in certain circumstances, for example where you contest the accuracy of the data or have objected to its processing.
If you believe that by888 has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
by888 will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by an additional thirty (30) days with prior notice provided to you.
Where by888 determines or reasonably suspects that a registered user is under the age of 21, the associated account will be immediately suspended pending investigation. All account balances, including deposits and any pending winnings, will be withheld until age verification is completed satisfactorily. If the user is confirmed to be under 21, the account will be permanently closed and deposits returned where traceable.
If you are a parent or guardian and believe that a person under your care has created an account on by888, please contact our support team immediately via live chat or email. by888 will investigate the report and take appropriate action promptly.
by888's primary data processing infrastructure is operated with reference to the Philippines. However, certain third-party service providers integrated with the platform — such as internationally licensed game software providers and cybersecurity services — may process data in jurisdictions outside the Philippines.
Where personal data is transferred outside the Philippines, by888 ensures that appropriate safeguards are in place to protect that data in accordance with the Data Privacy Act of 2012. Such safeguards may include contractual data protection clauses, binding corporate rules, or transfers to jurisdictions recognized as providing an adequate level of data protection.
The by888 platform integrates third-party game content providers, payment processors, and technical service providers to deliver its full range of services. While by888 exercises due diligence in selecting its partners, each third-party provider operates under its own privacy policy and data governance framework.
by888 is not responsible for the privacy practices of third-party game providers or payment processors. Where you interact directly with a third-party service accessible through by888 — such as a live dealer studio operated by a licensed game provider — that provider's privacy terms govern the data collected during your interaction with their service.
This Privacy Policy does not cover any third-party websites or services that may be referenced in by888's marketing materials or which you may access independently.
Where you have provided explicit consent during or after registration, by888 may send promotional communications to your registered Philippine mobile number via SMS or to your email address. These communications may include information about new game launches, deposit bonus offers, free spin promotions, and sports betting special events.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent does not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — which are necessary for the operation of your account.
by888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or the platform's data processing practices. The effective date at the top of this Policy will be updated accordingly.
Where a material change is made to this Policy — particularly one that affects how your personal data is used or your rights as a data subject — by888 will endeavor to notify registered players via SMS to their registered Philippine mobile number or via a prominent notice on the by888 website prior to the change taking effect.
Your continued use of the by888 platform following the posting of an updated Privacy Policy constitutes acceptance of the revised terms. If you disagree with any material changes to this Policy, you should cease using the platform and contact support to request account closure.
For all matters relating to this Privacy Policy, your personal data, or the exercise of your data rights under the Data Privacy Act of 2012, please contact by888 through the following channels:
Privacy at by888 isn't just a legal document — it's built into how the platform operates every day.
Every piece of data you send to by888 — login credentials, payment details, personal information — travels through 256-bit SSL encryption. The same standard used by BDO, BPI, and the major Philippine banks. Your information is never transmitted in plain text.
by888 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your information is shared only where strictly necessary for payment processing, identity verification, and legal compliance — nothing more.
by888 processes all Filipino player data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173). A designated Data Privacy Officer oversees compliance, and players may exercise their full data rights including access, correction, and deletion.
Suspicious login attempts and critical account changes trigger instant SMS notifications to your registered Philippine mobile number. Unauthorized access attempts are flagged in real time so you can act fast to protect your by888 account.
by888 keeps your data only as long as required by law and operational necessity. Active player records are maintained for the account lifecycle. After closure, records are retained for the legally mandated minimum period and then securely deleted or anonymized.
Access, correct, download, or delete your data — your rights under RA 10173 are fully supported by by888. Submit a request anytime via live chat or email and by888 will respond within 30 calendar days with a clear resolution.
Play over 500 games, bet on PBA and UFC, deposit via GCash — all with full confidence that your data is handled responsibly and securely. 21+ only.
Must be 21+. Gambling involves financial risk. PAGCOR regulated market. by888 is for entertainment only.