Angel288 Privacy Policy

1Introduction

Angel288 ("the Company," "we," "us," or "our") operates the online gaming platform accessible at https://angel288.app and through associated mobile applications (collectively, the "Platform"). This Privacy Policy ("Policy") describes how Angel288 collects, processes, stores, uses, and discloses personal information relating to individuals who access or use the Platform ("Players," "Users," or "you").

Angel288 is committed to protecting the privacy and personal data of all Players in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission ("NPC").

This Policy should be read together with the Angel288 Terms and Conditions, which govern your use of the Platform. Capitalised terms not defined in this Policy have the meanings given to them in the Terms and Conditions.

2Data Controller

Angel288 is the data controller responsible for the personal information collected through the Platform. As data controller, Angel288 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

3Data We Collect

Angel288 collects the following categories of personal information in connection with your use of the Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (used to verify that you meet the 21-year minimum age requirement);
• Gender;
• Nationality and country of residence;
• Government-issued identification number (e.g., Philippine passport number, SSS/UMID number, driver's license number);
• Username and encrypted password.

3.2 Contact Data

• Mobile phone number (Philippine or international);
• Email address;
• Residential address, including barangay, city or municipality, province, and postal code.

3.3 Financial & Transaction Data

• GCash or PayMaya mobile wallet number;
• Bank account details (BPI, BDO, Metrobank, or other accepted banks) where provided for withdrawal purposes;
• Deposit and withdrawal history, including amounts in Philippine Peso (₱), timestamps, and payment method used;
• Bonus and promotional transaction records;
• Account balance history.

3.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser information;
• Session logs, including login and logout timestamps;
• Game activity records, including games played, wager amounts, and outcomes;
• Clickstream and navigation data within the Platform.

3.5 Verification & Compliance Data

• Copies of government-issued photo identification documents submitted during KYC verification;
• Proof of address documents;
• Source of funds declarations where required by applicable AML regulations;
• Selfie or liveness check images where required for identity verification.

3.6 Communications Data

• Records of communications between you and Angel288 support staff, including chat transcripts and email correspondence;
• Feedback, complaints, and dispute records.

4How We Collect Your Data

Angel288 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the Platform;
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment confirmation data from GCash, PayMaya, and banking partners.

5Purpose & Legal Basis for Processing

The table below sets out the purposes for which Angel288 processes your personal data and the corresponding legal basis under the Data Privacy Act of 2012:

6Data Sharing & Disclosure

Angel288 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting and infrastructure providers, fraud detection and AML screening services, and customer support platform providers. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

6.2 Regulatory & Law Enforcement Authorities

Angel288 may disclose personal data to Philippine regulatory authorities, law enforcement agencies, or courts where required to do so by law, court order, or regulatory directive. This includes disclosures required under AML regulations and any applicable gaming regulatory framework.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Angel288's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that result from it.

6.4 With Your Consent

Angel288 may share your personal data with other third parties where you have given your explicit consent to such sharing. You may withdraw your consent at any time by contacting our Data Protection Officer.

7Data Retention

Angel288 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC and verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant verification process;
• Support communications: Retained for three (3) years from the date of the last communication;
• Technical and usage logs: Retained for up to twelve (12) months, unless required for longer periods in connection with an ongoing investigation or dispute.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with Angel288's data disposal procedures.

8Data Security

Angel288 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Angel288 Platform;
• Encryption of sensitive data fields, including passwords and financial account details, at rest;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and vulnerability testing of Platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Angel288 will notify the National Privacy Commission and affected Players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.

9Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by Angel288:

1. Right to be Informed: You have the right to be informed of how your personal data is being collected and processed, which this Policy fulfils;
2. Right of Access: You may request a copy of the personal data Angel288 holds about you, along with information about how it is being processed;
3. Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
4. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
5. Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
6. Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format;
7. Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request.

10Cookies & Tracking Technologies

Angel288 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled;
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to personalise your experience;
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players use the Platform, helping us identify areas for improvement;
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Angel288 does not use third-party advertising cookies or share cookie data with advertising networks.

11Minors & Age Restriction

The Angel288 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine regulations governing casino-style online gambling. Angel288 does not knowingly collect personal data from individuals under the age of 21.

If Angel288 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage user will be returned in accordance with applicable regulations, and any winnings will be forfeited.

12Cross-Border Data Transfers

In the course of operating the Platform, Angel288 may transfer your personal data to service providers or infrastructure systems located outside the Philippines. Where such transfers occur, Angel288 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Transfers only to jurisdictions that the National Privacy Commission has recognised as providing an adequate level of data protection;
• Data processing agreements with all third-party processors that impose binding obligations regarding data security and confidentiality.

By using the Angel288 Platform, you acknowledge and consent to the transfer of your personal data to other jurisdictions as described in this section, subject to the safeguards outlined above.

13Changes to This Policy

Angel288 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered Players via email or in-platform notification.

Your continued use of the Angel288 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

14Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by Angel288, please contact our Data Protection Officer. Our DPO is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy.

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that Angel288 has not handled your personal data in accordance with the Data Privacy Act of 2012. For general platform questions, our FAQ page is a good starting point.