Privacy Policy — infinity88

This Privacy Policy ("Policy") describes how infinity88 ("infinity88," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "User," or "Player") who access or use the infinity88 website, mobile platform, games, and all related services (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your use of the infinity88 Platform, regardless of whether you access it via desktop browser, mobile browser, or any other means. It covers data collected directly from you, data collected automatically through your use of the Platform, and data received from third parties in connection with your account.

By registering an account or using the infinity88 Platform, you acknowledge that you have read and understood this Policy. This Policy forms part of our Terms & Conditions, which govern your use of the Platform. If you do not agree with this Policy, please discontinue use of the Platform immediately.

For the purposes of the Data Privacy Act of 2012 and this Policy, infinity88 acts as the Personal Information Controller (PIC) in respect of the personal data you provide or that is collected through your use of the Platform.

As the Personal Information Controller, infinity88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine law.

Where infinity88 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only on infinity88's instructions and in accordance with this Policy.

infinity88 collects the following categories of personal data:

infinity88 collects personal data through the following means:

• Direct collection: When you register an account, complete identity verification (KYC), make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide data directly to us.
• Automated collection: When you access and use the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: We may receive data about you from identity verification providers, payment processors (e.g., GCash, Maya, BPI), fraud prevention services, and regulatory databases, where permitted by law.
• Publicly available sources: In limited circumstances related to fraud prevention or regulatory compliance, we may consult publicly available information such as government sanction lists or court records.

infinity88 uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the infinity88 Platform.
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the core functionality of the infinity88 Platform.
• Identity verification (KYC/AML): To verify your age (21+), identity, and payment method ownership in compliance with Philippine anti-money laundering laws and PAGCOR requirements.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion and deposit limits, and identify players who may need support.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other illegal activity.
• Marketing and promotions: To send you relevant offers, bonuses, and promotional communications — but only where you have given your consent or where we have a legitimate interest to do so. You may opt out at any time.
• Legal and regulatory compliance: To comply with applicable Philippine laws, respond to lawful requests from regulatory authorities (including PAGCOR and the AMLC), and enforce our Terms & Conditions.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features, performance, and security of the infinity88 Platform.

Under the Data Privacy Act of 2012, infinity88 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your infinity88 account and deliver the Platform services).
• Legal obligation: Processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and PAGCOR regulatory requirements.
• Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Where we rely on your consent (e.g., for direct marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

infinity88 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other Philippine payment providers, solely to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services used to verify your identity and comply with Philippine anti-money laundering regulations.
• Game software providers: Licensed game developers whose software powers games on the infinity88 Platform. These providers may receive anonymized or pseudonymized gaming data for technical and audit purposes.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or court order.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection providers who process data on our behalf under strict data processing agreements.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

All third parties with whom infinity88 shares personal data are required to maintain appropriate technical and organizational security measures and to process your data only in accordance with our instructions and applicable Philippine law.

The infinity88 Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and collect usage analytics. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled as they are required for login sessions, security, and core functionality.
• Performance and analytics cookies: Used to understand how players interact with the Platform, which pages are most visited, and where errors occur. This data is aggregated and anonymized.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits you have set.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent and can be disabled at any time through your browser settings.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the infinity88 Platform. For more information on managing cookies, refer to your browser's help documentation.

infinity88 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• TLS/SSL encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored at rest, including financial account details and government ID information;
• Multi-factor authentication options for player accounts;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• 24/7 monitoring of our systems for suspicious activity and potential breaches.

While infinity88 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your infinity88 login credentials and for notifying us immediately if you suspect unauthorized access to your account.

infinity88 retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law and our legitimate business needs. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by Philippine anti-money laundering regulations (AMLA).
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA and PAGCOR requirements.
• Gaming history: Retained for a minimum of three (3) years for audit, dispute resolution, and responsible gaming monitoring purposes.
• Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records: Retained for the duration of your consent and for one (1) year thereafter as evidence of consent.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by infinity88:

• Right to be informed: The right to know whether infinity88 holds personal data about you and to receive a copy of this Privacy Policy.
• Right of access: The right to request a copy of the personal data infinity88 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You can update most account information directly through your infinity88 account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 15. We will respond to all verified requests within fifteen (15) business days, as required by the Data Privacy Act of 2012.

The infinity88 Platform is strictly intended for individuals who are 21 years of age or older. infinity88 does not knowingly collect personal data from persons under the age of 21.

If infinity88 discovers or is notified that it has inadvertently collected personal data from a person under 21 years of age, it will immediately close the associated account, delete the personal data, and return any deposits made (minus any winnings, which will be forfeited) in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account with infinity88, please contact us immediately using the details in Section 15.

The infinity88 Platform may contain links to third-party websites or services for informational purposes. infinity88 has no control over the content, privacy practices, or data handling of these third-party sites and is not responsible for their privacy policies.

We encourage you to review the privacy policy of any third-party website you visit. The inclusion of a link on the infinity88 Platform does not constitute an endorsement of that website or its privacy practices.

infinity88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered users by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the infinity88 Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way infinity88 handles your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Response Time: We aim to respond to all data privacy requests within fifteen (15) business days as required by the Data Privacy Act of 2012.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.