At bay88, your privacy is not an afterthought — it's built into the foundation of how we operate. This Privacy Policy explains exactly what personal data bay88 collects, why we collect it, how we use and protect it, and what rights you have as a data subject under Philippine law.
Every piece of data transmitted between your device and bay88 is protected by SSL/TLS encryption — the same standard used by BDO, BPI, and GCash. Your personal and financial information is never sent in plain text.
bay88 processes personal data in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations of the National Privacy Commission (NPC) of the Philippines.
bay88 does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Your information is used solely to operate and improve your bay88 experience.
As a bay88 player, you have the right to access, correct, and request deletion of your personal data at any time. Submit a data subject request through our support team and we will respond within the timeframes required by law.
bay88 does not store your GCash PIN, bank account passwords, or card CVV numbers on its servers. All payment transactions are handled through secure, PCI-compliant third-party payment gateways.
In the unlikely event of a personal data breach that poses a real risk to your rights and freedoms, bay88 will notify affected players and the National Privacy Commission within the timeframes mandated by Philippine law.
This Privacy Policy ("Policy") describes how bay88 ("bay88," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the bay88 online casino platform at bay88.app, including all associated services, features, and functionality.
bay88 is committed to protecting the privacy and personal data of all its players in accordance with the Data Privacy Act of 2012 of the Philippines (Republic Act No. 10173, hereinafter "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). This Policy is designed to be transparent, straightforward, and written in plain language so that every Filipino player can understand exactly how their data is handled.
This Policy should be read alongside the bay88 Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and bay88. Where this Policy conflicts with any other document, this Policy shall prevail with respect to matters of personal data processing.
bay88 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include the following:
bay88 collects personal data through the following channels and methods:
| Collection Method | Data Collected |
|---|---|
| Account Registration | Name, date of birth, mobile number, email, address, username, password |
| KYC Verification Process | Government ID copies, proof of address, selfie/liveness check |
| Deposit & Withdrawal Transactions | Payment method references, transaction amounts, timestamps |
| Platform Usage & Gaming | Game logs, session data, wager history, bonus activity |
| Cookies & Tracking Technologies | IP address, device data, browser type, navigation behavior |
| Support Interactions | Chat transcripts, email records, support ticket content |
| Third-Party Payment Providers | Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank |
bay88 uses the personal data it collects for the following specific purposes:
To create, verify, maintain, and manage your bay88 player account, including processing your registration, verifying your identity and age (21+ requirement), and enabling you to log in securely.
To provide you with access to all bay88 games, features, and services, including processing deposits and withdrawals through your chosen Philippine payment method, crediting bonuses, and maintaining your account balance and transaction history.
To comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act of 2012 (RA 10173), and any applicable gaming regulations. This includes conducting KYC verification, monitoring transactions for suspicious activity, and reporting to the Anti-Money Laundering Council (AMLC) and other competent authorities as required by law.
To support responsible gaming practices, including enforcing deposit limits, session reminders, cooling-off periods, and self-exclusion requests. bay88 may also use gaming activity data to identify patterns that may indicate problem gambling behavior and to reach out proactively to affected players.
To protect the integrity of the bay88 platform and its players by detecting, investigating, and preventing fraud, unauthorized account access, bonus abuse, money laundering, and other prohibited activities.
To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through bay88's support channels.
To analyze aggregated and anonymized usage data to understand how players interact with the bay88 platform, identify areas for improvement, and develop new features and services. This analysis does not involve identifying individual players.
To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have provided your consent to receive such communications. You may withdraw your consent to marketing communications at any time by contacting bay88 support or using the unsubscribe mechanism in any marketing email.
Under the Data Privacy Act of 2012, bay88 processes your personal data on the following legal bases:
bay88 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
bay88 shares transaction-related data with approved Philippine payment processors — including GCash, PayMaya, BPI, BDO, and Metrobank — solely to facilitate deposits and withdrawals. These providers process your payment data under their own privacy policies and are bound by applicable Philippine financial regulations.
bay88 may engage third-party KYC and identity verification service providers to assist with the verification of player identities and documents. These providers are contractually bound to process personal data only for the purpose of identity verification and in compliance with the DPA.
bay88's game library is powered by third-party game software providers. These providers may receive limited technical data (such as session tokens and game round identifiers) necessary to deliver game content. They do not receive your full personal profile or financial data.
bay88 will disclose personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent Philippine government authorities where required or permitted by law, including in response to lawful orders, subpoenas, or regulatory investigations.
bay88 may share personal data with its legal counsel, auditors, and other professional advisors where necessary for the provision of professional services, subject to applicable confidentiality obligations.
bay88 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years after closure | Legal obligation (AML, gaming regulations) |
| KYC Documents | Duration of account + 5 years after closure | Anti-Money Laundering Act (RA 9160) |
| Financial Transaction Records | Duration of account + 5 years after closure | Anti-Money Laundering Act (RA 9160) |
| Gaming Activity Logs | Duration of account + 2 years after closure | Contractual necessity, dispute resolution |
| Support Communications | 3 years from date of communication | Legitimate interests (dispute resolution) |
| Marketing Consent Records | Until consent is withdrawn + 1 year | Legal obligation (proof of consent) |
| Technical & Device Logs | 13 months from collection | Legitimate interests (security, analytics) |
Upon expiry of the applicable retention period, bay88 will securely delete or anonymize your personal data in accordance with its data disposal procedures.
bay88 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
While bay88 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that poses a real risk to your rights and freedoms, bay88 will notify affected players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the DPA and NPC regulations.
bay88 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit bay88.app. The following types of cookies are used:
These cookies are essential for the bay88 platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without significantly impairing your ability to use bay88.
These cookies remember your preferences and settings — such as your preferred language, game lobby layout, and responsible gaming tool configurations — to provide a more personalized experience on bay88.
bay88 uses analytics cookies to collect aggregated, anonymized data about how players navigate and use the platform. This data helps bay88 understand which features are most used, identify technical issues, and improve the overall player experience. Analytics data does not identify individual players.
You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will affect the functionality of the bay88 platform and may prevent you from accessing certain features, including your account.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bay88. To exercise any of these rights, please contact bay88 support as described in Section 14.
Request a copy of the personal data bay88 holds about you and information about how it is processed.
Request correction of any inaccurate or incomplete personal data bay88 holds about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Request that bay88 restrict the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Withdraw consent to processing at any time where processing is based on consent, without affecting the lawfulness of prior processing.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.
bay88 will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case bay88 will notify you of the extension and the reasons for it.
The bay88 platform is strictly intended for adults aged twenty-one (21) years and above, in accordance with Philippine gambling regulations. bay88 does not knowingly collect personal data from individuals under the age of 21.
If bay88 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on bay88, please contact bay88 support immediately so that the account can be closed and the data deleted.
bay88 employs age verification procedures during the registration process and during KYC verification to prevent underage access to the platform.
In the course of operating the bay88 platform, your personal data may be transferred to and processed in countries other than the Philippines — for example, where bay88's game software providers or cloud infrastructure providers are located.
Where such cross-border transfers occur, bay88 ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations on cross-border data transfers. These safeguards may include:
By using the bay88 platform, you acknowledge and consent to the transfer of your personal data to other countries as described in this section, subject to the safeguards described above.
bay88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, bay88 will update the "Last Updated" date at the top of this page and, where practicable, notify registered players via email or in-platform notification.
Your continued use of the bay88 platform following the posting of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you must cease using the bay88 platform and may request account closure in accordance with the bay88 Terms & Conditions.
bay88 recommends that you review this Privacy Policy periodically to stay informed of how your personal data is being handled. Previous versions of this Policy are available upon request by contacting bay88 support.
bay88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels:
For responsible gaming concerns, self-exclusion requests, or problem gambling support, please visit our Responsible Gaming page for dedicated resources available to players across the Philippines, including those in Manila, Cebu, Davao, Quezon City, and Makati.
Now that you know how bay88 protects your privacy, it's time to enjoy the games. SSL-secured, DPA-compliant, and built for Filipino players. 21+ only. Play responsibly.