superplay88 Privacy Policy

superplay88 ("superplay88," "we," "us," or "our") operates the online gaming platform accessible at superplay88.app, offering casino games, live dealer tables, slots, bingo, and related entertainment services to eligible players in the Philippines.

For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, superplay88 acts as the Personal Information Controller (PIC) with respect to the personal data of registered players and website visitors. This means superplay88 determines the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the superplay88 website, mobile platform, customer support channels, and any other touchpoint through which you interact with superplay88. By registering an account or using the superplay88 platform, you acknowledge that you have read and understood this Privacy Policy.

superplay88 collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect are as follows:

Identity & Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for age verification — 21+ requirement)
• Residential address (barangay, city/municipality, province)
• Email address
• Mobile number
• Government-issued ID type and number (for KYC verification)

Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details (BPI, BDO, Metrobank) where used for deposits or withdrawals
• Transaction history (deposits, withdrawals, wager amounts, winnings)

Gaming & Behavioral Data

• Game session logs (games played, duration, bet sizes, outcomes)
• Responsible gaming settings (deposit limits, self-exclusion status, session reminders)
• Bonus and promotion usage history
• Customer support interaction records

Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and login history
• Cookie identifiers and similar tracking data (see Section 7)

superplay88 collects your personal data through the following channels:

Directly From You

The majority of your personal data is collected directly from you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings. You provide this data voluntarily as part of using the superplay88 platform.

Automatically Through Platform Use

When you access and use the superplay88 platform, certain technical and behavioral data is collected automatically. This includes your IP address, device information, session logs, and game activity data. This data is collected through server logs, cookies, and similar technologies embedded in the platform.

From Third-Party Service Providers

superplay88 may receive personal data about you from third-party service providers in the following circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank may share transaction confirmation data with superplay88 to verify deposits and process withdrawals.
• Identity Verification Services: Third-party KYC providers may share the results of identity and document verification checks.
• Fraud Prevention Services: Anti-fraud and AML screening providers may share risk assessment data to help superplay88 identify suspicious activity.

superplay88 uses your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with those listed below without first obtaining your consent or as otherwise permitted by law.

Under the Data Privacy Act of 2012, superplay88 must have a lawful basis for processing your personal data. The legal bases on which superplay88 relies are as follows:

• Contractual Necessity: Processing your identity data, financial data, and gaming data is necessary for superplay88 to perform its obligations under the Terms & Conditions you agreed to when registering your account. Without this processing, superplay88 cannot provide its services to you.
• Legal Obligation: superplay88 is required by Philippine law — including the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and applicable gaming regulations — to collect and retain certain categories of personal data. Processing for KYC verification, AML screening, and regulatory reporting falls under this basis.
• Legitimate Interests: superplay88 processes technical and behavioral data for fraud prevention, platform security, and analytics on the basis of its legitimate interests in operating a secure and well-functioning platform. These interests are balanced against your privacy rights and do not override them.
• Consent: Where superplay88 processes your data for marketing communications or for purposes not covered by the above bases, we will obtain your explicit consent before doing so. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

superplay88 does not sell, rent, or trade your personal data to any third party. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

Service Providers (Data Processors)

superplay88 engages third-party service providers to assist in delivering its services. These providers act as data processors under the Data Privacy Act of 2012 and are contractually bound to process your data only on superplay88's instructions and to maintain appropriate security measures. Categories of service providers include:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank)
• KYC and identity verification providers
• Anti-fraud and AML screening services
• Cloud hosting and infrastructure providers
• Customer support platform providers
• Game content providers (who may receive anonymized session data)

Regulatory & Law Enforcement Authorities

superplay88 may disclose your personal data to Philippine regulatory authorities (including PAGCOR and the Anti-Money Laundering Council), law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory directive. superplay88 will notify you of such disclosure where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of superplay88's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

superplay88 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform. A cookie is a small text file placed on your device when you visit the superplay88 website. Cookies do not contain executable code and cannot access other data on your device.

Types of Cookies We Use

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in to your superplay88 account. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

superplay88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your active account relationship with superplay88, plus a minimum of five (5) years after account closure, in compliance with Philippine AML record-keeping requirements.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification, as required by the Anti-Money Laundering Act and its implementing regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and BIR record-keeping requirements.
• Gaming Session Logs: Retained for a minimum of two (2) years for dispute resolution and responsible gaming monitoring purposes.
• Customer Support Records: Retained for two (2) years from the date of the last interaction, or longer if the interaction relates to an unresolved dispute or regulatory matter.
• Marketing Consent Records: Retained for the duration of your account relationship plus three (3) years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, superplay88 will securely delete or anonymize your personal data. Where anonymization is used, the resulting data can no longer be linked to you and is no longer subject to this Privacy Policy.

superplay88 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and superplay88 servers is encrypted using TLS 1.2 or higher (256-bit encryption). The superplay88 website enforces HTTPS at all times.
• Encryption at Rest: Sensitive personal data stored on superplay88 servers — including government ID details and financial account information — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to superplay88 personnel and service providers who have a legitimate need to access it for the purposes described in this Privacy Policy. Access is governed by role-based permissions and is logged and audited.
• Two-Factor Authentication: superplay88 supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorized access.
• Penetration Testing & Security Audits: superplay88 conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate potential security weaknesses.
• Incident Response: superplay88 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, superplay88 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by superplay88. These rights are real and enforceable — superplay88 is committed to honoring them promptly and without unnecessary barriers.

How to Exercise Your Rights

To exercise any of the rights listed above, contact the superplay88 Data Protection Officer (DPO) at the email address provided in Section 15 of this Privacy Policy. Please include your full name, registered email address, and a clear description of the right you wish to exercise. superplay88 will respond to your request within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified of the extension and the reason for it.

superplay88 will not charge a fee for handling your privacy rights requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply. You will be informed of any applicable fee before superplay88 proceeds with processing your request.

superplay88 is strictly an adult platform. In accordance with Philippine law, access to casino-style gambling services is restricted to individuals who are 21 years of age or older. superplay88 does not knowingly collect personal data from individuals under the age of 21.

As part of the account registration process, all applicants are required to provide their date of birth and to submit government-issued identification for KYC verification. Any application from a person under 21 years of age will be rejected, and any account found to belong to a minor will be immediately suspended and all funds returned in accordance with superplay88's responsible gaming procedures.

If you are a parent or guardian and believe that a minor has registered an account with superplay88 or provided personal data to superplay88 without your consent, please contact the superplay88 DPO immediately at the contact details in Section 15. superplay88 will investigate the matter promptly and take appropriate action, including deletion of the minor's personal data.

Some of superplay88's service providers — including cloud infrastructure providers and game content suppliers — may be located outside the Philippines. Where your personal data is transferred to a country outside the Philippines, superplay88 ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and NPC regulations on cross-border data transfers.

These safeguards may include:

• Transferring data only to countries that the NPC has determined provide an adequate level of data protection;
• Entering into data transfer agreements with the receiving party that incorporate the NPC's standard contractual clauses or equivalent protections; or
• Relying on the receiving party's binding corporate rules where applicable.

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting the superplay88 DPO at the details provided in Section 15.

The superplay88 platform may contain references to or integrations with third-party services, including payment gateways (GCash, PayMaya, BPI, BDO, Metrobank) and game content providers. When you interact with these third-party services — for example, when you initiate a GCash deposit — you will be subject to the privacy policy of that third party in addition to this Privacy Policy.

superplay88 is not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service you use in connection with your superplay88 account. superplay88 selects its service providers carefully and requires them to maintain appropriate data protection standards, but cannot guarantee the practices of independent third parties beyond the scope of our contractual agreements with them.

superplay88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The date of the most recent update is displayed at the top of this page.

Where a change to this Privacy Policy is material — meaning it significantly affects your rights or the way superplay88 processes your personal data — superplay88 will notify you by email to your registered address and/or by a prominent notice on the superplay88 platform at least fourteen (14) days before the change takes effect. Your continued use of the superplay88 platform after the effective date of a material change constitutes your acceptance of the updated Privacy Policy.

For non-material changes (such as clarifications, corrections of typographical errors, or updates to contact details), superplay88 may update this Privacy Policy without prior notice. We recommend reviewing this page periodically to stay informed of how superplay88 protects your personal data.

superplay88 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-01. The DPO is responsible for overseeing superplay88's compliance with data privacy law and serves as the primary point of contact for players wishing to exercise their privacy rights or raise data protection concerns.

You can reach the superplay88 DPO and general support team via the following channel:

• Email: [email protected]

When contacting the DPO regarding a privacy matter, please include your full name, registered email address, and a clear description of your request or concern. This will help us locate your account records and respond to you as efficiently as possible. All privacy-related correspondence is treated as confidential and handled exclusively by authorized personnel.