Privacy Policy — How haha88 Handles Your Data

This Privacy Policy (hereinafter "Policy") sets out the principles and practices of haha88 (hereinafter "haha88," "we," "us," or "the Platform") regarding the collection, use, storage, disclosure, and protection of personal data belonging to users (hereinafter "Player," "Data Subject," or "you") of the haha88 platform accessible at haha88.asia and any associated mobile or web applications.

haha88 is committed to protecting the privacy and personal data of all Filipino players who use our platform. This commitment is grounded in and governed by Republic Act No. 10173, the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. haha88 also operates under a PAGCOR license, which imposes additional data governance and player information management obligations.

By registering for and using the haha88 platform, you acknowledge that you have read this Policy, understand its content, and consent to the processing of your personal data as described herein. If you do not agree to this Policy, you must not register for or use the haha88 platform.

2.1 Identity of Data Controller. haha88 is the personal information controller (PIC) with respect to all personal data collected through the haha88 platform. As the PIC, haha88 determines the purposes for which personal data is processed and the means by which such processing is carried out.

2.2 Data Protection Officer. haha88 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act. The DPO is responsible for overseeing haha88's compliance with RA 10173 and may be contacted for data privacy queries, complaints, or requests to exercise data subject rights. Contact details for the DPO are provided in Section 15 of this Policy.

2.3 NPC Registration. haha88 is registered with the National Privacy Commission as required by Philippine data protection law. Details of our NPC registration are available on request through our support team.

haha88 collects the following categories of personal data from players and prospective players. We collect only the data that is necessary for the purposes described in this Policy (the principle of data minimisation).

haha88 collects personal data through the following means:

• Direct submission by you — when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or update your account profile;
• Automated technical collection — when you access and use the haha88 platform, our servers and analytics systems automatically record technical data including your IP address, device identifiers, session data, and browsing behaviour within the platform;
• Cookies and similar technologies — as described in Section 11 of this Policy, haha88 uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse platform usage patterns;
• Third-party payment providers — when you make a GCash, Maya, or bank transfer deposit or withdrawal, the relevant payment provider may transmit transaction confirmation data to haha88;
• Identity verification providers — haha88 may use third-party KYC verification services to authenticate the identity documents you submit. These providers process your document data in accordance with their own privacy policies and their obligations under contracts with haha88;
• PAGCOR and regulatory sources — haha88 may receive information from PAGCOR or other Philippine regulatory bodies as part of its licensing and compliance obligations.

haha88 processes your personal data under the following legal bases as recognised by RA 10173 and the NPC:

• Contractual necessity — processing necessary to perform the contract between you and haha88 (i.e., to operate your account, process your bets, and manage deposits and withdrawals);
• Legal obligation — processing necessary for compliance with Philippine law, PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160 as amended), and NPC regulations;
• Consent — processing for which you have given explicit, informed consent, such as receiving promotional communications from haha88;
• Legitimate interests — processing necessary for haha88's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.

The specific purposes for which haha88 processes your personal data include:

• Creating and managing your haha88 account and verifying your identity and age (21+ requirement);
• Processing deposits, withdrawals, and all financial transactions through GCash, Maya, and Philippine banking channels;
• Complying with PAGCOR licensing obligations, including player fund segregation and gaming activity reporting;
• Conducting anti-money laundering (AML) due diligence as required by the Anti-Money Laundering Council (AMLC);
• Detecting and preventing fraud, account compromise, bonus abuse, and other prohibited activities;
• Delivering customer support through our 24/7 live chat and email channels;
• Administering bonuses, promotions, and loyalty programme benefits;
• Monitoring and enforcing responsible gaming obligations, including flagging potential problem gambling behaviours and enforcing player-set limits;
• Improving the haha88 platform through analysis of anonymised usage data;
• Sending transactional communications (deposit confirmations, withdrawal notifications, OTP codes, and security alerts) to your registered Philippine mobile number or email address;
• Sending promotional communications about haha88 offers — but only where you have opted in to receive such communications and have not subsequently withdrawn consent.

6.1 General Principle. haha88 does not sell, rent, or transfer your personal data to third parties for their own commercial purposes. Data is shared with third parties only to the extent necessary for operating the haha88 platform and complying with applicable Philippine law.

6.2 Service Providers (Personal Information Processors). haha88 engages third-party service providers who process personal data on our behalf as personal information processors (PIP) under RA 10173. These include:

• Payment processors — GCash (GXI), Maya (PayMaya Philippines), BDO, BPI, Metrobank, and other Philippine payment infrastructure providers who process your deposit and withdrawal transactions;
• KYC verification providers — identity verification services that authenticate the Philippine ID documents you submit during the KYC process;
• Game content providers — JILI, Evolution Gaming, PG Soft, Pragmatic Play, and other studios whose games are made available in the haha88 lobby. These providers may receive anonymised gaming session data for game performance and fairness auditing purposes;
• IT infrastructure providers — cloud hosting, data storage, and cybersecurity service providers who maintain the technical infrastructure of the haha88 platform;
• Customer support tools — live chat platform providers who process support conversation data on behalf of haha88.

All third-party processors engaged by haha88 are bound by data processing agreements that require them to process personal data only on haha88's instructions, to implement appropriate security measures, and to comply with RA 10173 and applicable data protection law.

6.3 Regulatory and Legal Disclosures. haha88 will disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), or other Philippine government bodies where required by law, court order, or regulatory direction. Such disclosures are not within haha88's control and cannot be refused where legally mandated.

6.4 Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of haha88's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy implications in advance, consistent with the requirements of RA 10173.

7.1 Primary Data Location. haha88 primarily stores and processes personal data on servers located in the Philippines or in countries with data protection standards comparable to those required under RA 10173.

7.2 Transfers Outside the Philippines. Where personal data must be transferred to third-party service providers operating outside the Philippines — such as international game content providers or global IT infrastructure companies — haha88 ensures that such transfers are subject to adequate safeguards. These safeguards include contractual protections that require the recipient to uphold data protection standards equivalent to those in Philippine law.

7.3 Cross-Border Processing Notification. Where the NPC requires notification of specific cross-border personal data transfers, haha88 complies with applicable NPC circulars governing such notifications.

8.1 Retention Principle. haha88 retains personal data for no longer than is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. Retention periods are determined on a data category basis.

8.2 Deletion. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using procedures that prevent reconstruction of the original data. Players may also request earlier deletion of certain data categories, subject to the conditions set out in Section 10 of this Policy.

haha88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and haha88 servers;
• Encrypted data storage for sensitive personal data including KYC documents and financial information;
• Two-factor authentication (2FA) via SMS OTP, available to all haha88 account holders and strongly recommended;
• Role-based access controls restricting access to personal data to haha88 personnel who require it for their specific job functions;
• Automated intrusion detection systems that monitor for unusual access patterns, brute-force login attempts, and other security threats;
• Regular security audits and penetration testing of the haha88 platform infrastructure;
• Staff data privacy training for all haha88 personnel who handle personal data, as required by RA 10173;
• Vendor security assessments for all third-party processors engaged by haha88.

Under Republic Act No. 10173 and NPC regulations, you have the following rights as a data subject. haha88 is committed to facilitating the exercise of these rights within the timeframes prescribed by Philippine law.

11.1 What Cookies Are. Cookies are small text files that are placed on your device when you visit the haha88 website. They are used to maintain your login session, remember your preferences, and help us understand how the platform is being used. haha88 uses the following categories of cookies:

• Strictly necessary cookies — required for core platform functions including maintaining your login session, remembering your language preference, and ensuring secure access to your account. These cannot be disabled.
• Functional cookies — remember your settings and preferences (such as the last game you played or your preferred betting interface layout) to personalise your experience on subsequent visits.
• Analytics cookies — collect anonymised information about how players use the haha88 platform to help us improve the service. These cookies do not identify you personally.
• Security cookies — used for fraud prevention and to detect suspicious activity, including repeated failed login attempts from an IP address.

11.2 Managing Cookies. You may manage non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will prevent the haha88 platform from functioning correctly and may prevent you from logging in to your account.

11.3 Session Tokens. In addition to cookies, haha88 uses session tokens stored in your browser's memory to maintain your authenticated session. These tokens expire when you log out or after a period of inactivity, as described in the haha88 Terms and Conditions.

12.1 Age Restriction. The haha88 platform is strictly intended for persons aged 21 years and above, as required by PAGCOR and Philippine gaming law. haha88 does not knowingly collect personal data from persons under the age of 21.

12.2 Discovery of Underage Data. If haha88 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete or quarantine the personal data in question, and handle the matter in accordance with applicable law and PAGCOR regulations.

12.3 Parental Responsibility. haha88 strongly encourages parents and guardians to monitor their household's internet usage and to install parental control software on devices that minors may access. If you are aware of an underage person using the haha88 platform, please contact our support team immediately.

13.1 Game Provider Platforms. The haha88 platform integrates games from third-party studios including Evolution Gaming, JILI, PG Soft, Pragmatic Play, and others. When you play a game from one of these providers within the haha88 platform, the provider's software processes certain game session data. This processing is governed by agreements between haha88 and the relevant provider and does not require the provider to have direct access to your personal registration data.

13.2 Payment Provider Terms. When you initiate a GCash or Maya transaction from within the haha88 deposit or withdrawal interface, you are interacting with GXI (GCash) or PayMaya Philippines (Maya) payment infrastructure. These payment providers have their own privacy policies governing the transaction data they process. haha88 is not responsible for the privacy practices of GCash, Maya, BDO, BPI, or Metrobank with respect to data processed directly by those institutions.

13.3 No Responsibility for External Sites. The haha88 platform does not contain links to external websites. However, should you navigate from haha88 to any third-party site by other means, haha88 is not responsible for the privacy practices or content of that site. This Policy applies exclusively to haha88.asia and its associated platform components.

14.1 Right to Update. haha88 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, updates to Philippine data privacy law, NPC guidance, PAGCOR requirements, or changes to the haha88 platform itself.

14.2 Notification of Material Changes. Material changes to this Policy — meaning changes that significantly affect your rights or the way haha88 processes your personal data — will be communicated to you via email to your registered address or via a prominent notice on the haha88 platform at least fourteen (14) days before the changes take effect.

14.3 Effective Date. The effective date of the current version of this Policy is stated at the top of this page and in the Table of Contents. Continued use of the haha88 platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

14.4 Version Archive. Previous versions of this Privacy Policy are available on request from haha88's Data Protection Officer, as required by NPC guidelines on privacy policy management.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by haha88, you may contact us through the following channels: