ab88 Privacy Policy —
Your Data, Your Rights

This Privacy Policy applies to all personal data collected by ab88 in connection with the operation of the ab88 online casino and sports betting platform accessible at ab88.vu, including all games, promotional systems, payment processing infrastructure, and customer support services.

For the purposes of this policy, ab88 is the data controller — meaning ab88 is responsible for determining the purposes for which and the means by which your personal data is processed. Where ab88 engages third-party service providers to process personal data on its behalf, those parties act as data processors under ab88's instruction and are contractually bound to appropriate data protection standards.

This policy is intended to be read alongside ab88's Terms & Conditions and Responsible Gaming Policy, both of which address related aspects of your relationship with the ab88 Platform.

ab88 collects and processes the following categories of personal data in connection with the provision of its services:

ab88 does not collect special categories of personal data (such as health information, religious beliefs, or political opinions) except where required by applicable law or where you voluntarily provide such information in the context of a responsible gaming self-assessment or support interaction.

ab88 collects personal data through the following means:

• Direct provision: Data you voluntarily submit when registering for an ab88 Account, completing identity verification (KYC), making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the ab88 Platform, including IP addresses, device identifiers, session cookies, and navigation patterns within the Platform;
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners when you make deposits or withdrawals;
• Identity verification services: Results from third-party identity and age verification processes conducted as part of KYC procedures;
• Fraud prevention systems: Risk scoring data generated by fraud detection tools when evaluating account activity for compliance purposes.

ab88 processes personal data only for defined, lawful purposes. The primary purposes and their applicable legal bases are set out below:

ab88 does not sell, lease, or trade your personal data to third parties. We may share personal data with the following categories of recipients where necessary for the purposes described in Section 4:

• Payment processors: GCash (PayMongo), PayMaya (Maya Bank), BPI, BDO, Metrobank, and other payment service providers receive the data necessary to process your deposits and withdrawals;
• Identity verification providers: Third-party KYC and age-verification service providers engaged to verify player identity and age in compliance with applicable regulatory requirements;
• Fraud prevention and security services: Companies that provide fraud detection, risk scoring, and account security monitoring on behalf of ab88 as contracted data processors;
• Game content providers: Third-party game studios and live dealer operators may receive limited session data (player ID, wager amounts, game results) for the purpose of providing the game service and resolving disputes;
• Regulatory and law enforcement authorities: ab88 may disclose personal data to PAGCOR, the National Privacy Commission of the Philippines, or other relevant authorities where required by law, court order, or legitimate regulatory inquiry;
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by ab88, under obligations of professional confidentiality.

All third parties who receive personal data from ab88 are required to handle that data in a manner consistent with this Privacy Policy and applicable data protection law. ab88 does not permit third-party processors to use your data for their own marketing or commercial purposes.

The ab88 Platform uses cookies and similar tracking technologies to maintain your session state, remember your preferences, detect fraud, and understand how the Platform is used so we can improve it. The main types of cookies used by ab88 are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that detect and prevent fraudulent activity. These cannot be disabled without affecting Platform functionality;
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool settings. Disabling these may affect the personalisation of your experience;
• Analytics cookies: Used to collect aggregated, anonymised information about how players navigate the ab88 Platform, which pages are visited most often, and where technical errors occur. This data is used solely to improve the Platform;
• Security cookies: Used for fraud detection, bot detection, and to verify that actions on your Account are taken by a human user operating from your registered device.

ab88 does not use third-party advertising cookies or serve targeted advertising to players based on their browsing behaviour outside of the ab88 Platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

ab88 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal, regulatory, and contractual obligations. The general retention periods applied by ab88 are as follows:

• Active account data (identity, contact, financial, account history): Retained throughout the period the Account remains active and for a minimum of five (5) years following permanent account closure, in compliance with financial record-keeping obligations;
• Transaction records (deposits, withdrawals, wager history): Retained for a minimum of five (5) years from the date of each transaction, consistent with AML/CTF record-keeping requirements;
• KYC verification documents: Retained for a minimum of five (5) years following the completion of the verification process or the closure of the Account, whichever is later;
• Customer support communications: Retained for three (3) years following closure of the relevant support interaction;
• Technical and log data (IP logs, session logs): Retained for a maximum of twelve (12) months, unless specific records are required to be preserved in connection with an ongoing security investigation or legal matter;
• Marketing consent records: Retained until consent is withdrawn, and for a period of three (3) years following withdrawal of consent to demonstrate compliance.

Following expiry of the applicable retention period, personal data is either securely deleted from ab88's systems or irreversibly anonymised such that it can no longer be attributed to any identifiable individual.

ab88 implements and maintains a range of technical and organisational security measures designed to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS 1.2 or higher) encryption for all data transmitted between your device and the ab88 Platform;
• AES-256 encryption for personal and financial data stored in ab88's systems;
• Access controls limiting data access to authorised personnel on a strict need-to-know basis;
• Multi-factor authentication requirements for internal administrative access to player data systems;
• Regular security audits and vulnerability assessments of the ab88 Platform and underlying infrastructure;
• Automated monitoring systems for detection of unusual account activity and potential data security incidents.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you hold the following rights with respect to your personal data held by ab88:

ab88 may send you promotional communications regarding new games, bonus offers, and platform updates by SMS and/or email, but only where you have expressly opted in to receive such communications during registration or through your account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your ab88 Account settings;
• Clicking the unsubscribe link included in any marketing email sent by ab88;
• Contacting ab88 support via live chat or at [email protected] and requesting removal from marketing communications.

Withdrawal of marketing consent will be processed within ten (10) business days. Please note that withdrawing marketing consent does not affect transactional communications — ab88 will continue to send you communications necessary for the operation of your Account, such as deposit confirmations, withdrawal notifications, security alerts, and support responses.

If ab88 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately, the associated Account will be closed, and any balances (including deposits) associated with the minor's account will be handled in accordance with ab88's Terms & Conditions and applicable law.

If you are a parent or guardian and believe that a person under 21 years of age has registered for or accessed the ab88 Platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

ab88 reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform operations, or our data processing practices. The "Last Reviewed" date at the top of this policy will be updated to reflect the date of any revision.

Where changes are material — meaning they significantly affect how your data is processed or your rights in relation to that data — ab88 will provide advance notice to registered players via email or in-Platform notification before the revised policy takes effect. For non-material changes, we may update the policy without providing individual advance notice.

Your continued use of the ab88 Platform following the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree to a revised policy, you should cease use of the Platform and may contact our support team to request Account closure.

For any questions, concerns, or requests relating to this Privacy Policy or ab88's handling of your personal data, please contact our team through the following channels:

• Live Chat: Available 24/7 in Philippine Standard Time (PHT, UTC+8), accessible from any page on the ab88 Platform;
• Email: [email protected] — for formal privacy requests, data subject rights exercises, and written complaints.

When submitting a privacy-related request by email, please include your registered account username, a clear description of your request, and any information that may assist us in locating the relevant data. We will acknowledge your request within three (3) business days and provide a substantive response within thirty (30) calendar days.

If you are not satisfied with ab88's response to a privacy complaint, you may lodge a formal complaint with the National Privacy Commission of the Philippines (NPC), the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available on the NPC's official website.