mnl888 Privacy Policy

This Privacy Policy ("Policy") is issued by mnl888 ("mnl888," "we," "us," or "our") and applies to all personal data collected from individuals ("you," "User," "Player") who access or use the mnl888 online gaming platform at mnl888.vip (the "Platform"). This Policy is incorporated into and forms part of the mnl888 Terms & Conditions.

mnl888 is committed to protecting the privacy and security of your personal data. We process all personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and other applicable Philippine data protection laws and regulations. This Policy explains what personal data we collect, why we collect it, how we use and protect it, and what choices and rights are available to you.

By using the mnl888 Platform, registering an account, or submitting personal data to us in any form, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Policy, please do not use the Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, mnl888 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. This means mnl888 determines the purposes and means of processing your personal data.

Where mnl888 shares your personal data with third-party service providers for defined purposes (such as payment processors or identity verification providers), those parties process your data as Personal Information Processors (PIPs) under binding data processing agreements and are not permitted to use your data for any purpose other than those specified by mnl888.

mnl888 has appointed a Data Protection Officer (DPO) who is responsible for overseeing data privacy compliance across the Platform. You may contact the DPO using the details provided in Section 15 of this Policy.

mnl888 collects the following categories of personal data, which vary depending on the stage of your relationship with the Platform:

mnl888 collects personal data through the following channels:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support via live chat or email, or responding to a promotional survey or questionnaire;
• Automated Collection: Technical and session data collected automatically through cookies, log files, and device fingerprinting technology when you access and navigate the Platform;
• Third-Party Collection: Identity verification data received from licensed KYC and AML service providers who process government ID documents and conduct fraud screening on our behalf;
• Payment Processor Data: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment processors in connection with your deposits and withdrawals;
• Responsible Gaming Monitoring: Behavioural data generated during your use of the Platform that may be analysed by our responsible gaming systems to identify potential indicators of problem gambling.

mnl888 processes your personal data on one or more of the following lawful bases, as recognised under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform the contract between you and mnl888 — including account registration, game provision, payment processing, and customer support;
• Legal Obligation: Processing required to comply with applicable law, including AML obligations, PAGCOR regulatory requirements, and tax reporting duties;
• Legitimate Interest: Processing necessary for mnl888's legitimate interests — including fraud prevention, platform security, abuse detection, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your data protection rights;
• Consent: Where we process data for marketing communications or non-essential cookies, we do so only upon your explicit consent, which you may withdraw at any time by contacting our DPO.

mnl888 uses the personal data we hold about you for the following defined purposes:

• To create, verify, operate, and maintain your mnl888 account;
• To verify your identity and age (21+) in compliance with PAGCOR and AML requirements;
• To process deposits and withdrawals via GCash, Maya, BPI, BDO, USDT, and other accepted payment methods;
• To provide access to all games and gaming features available on the Platform;
• To detect and prevent fraud, account takeover, money laundering, and other prohibited activities;
• To monitor gaming activity for the purpose of enforcing responsible gaming controls and identifying players who may require intervention or support;
• To respond to your enquiries and resolve disputes via the mnl888 support team;
• To administer promotions, bonuses, and loyalty programs in which you have chosen to participate;
• To comply with our reporting and record-keeping obligations to Philippine regulatory authorities including PAGCOR and the Anti-Money Laundering Council (AMLC);
• To improve, develop, and optimise the Platform through aggregated, anonymised analytics;
• To send transactional notifications — such as deposit confirmations, withdrawal updates, and security alerts — to your registered contact details.

mnl888 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection safeguards:

• KYC / Identity Verification Providers: Licensed third-party services that verify government-issued IDs and screen against sanctions and PEP (Politically Exposed Persons) lists as required under PAGCOR and AMLC regulations;
• Payment Processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and cryptocurrency payment processors, strictly for the purpose of processing your financial transactions;
• Game Providers: Game software providers (e.g., PG Soft, Pragmatic Play, Jili Games, Evolution Gaming) receive your Player ID and gaming session data to operate the games you play. These providers do not receive your full personal profile;
• Fraud & Security Providers: Technology providers that assist mnl888 in detecting fraud, bots, and suspicious activity. These providers process technical data only;
• Regulatory Authorities: Philippine government agencies including PAGCOR, the AMLC, the National Privacy Commission, and law enforcement authorities, where disclosure is required by law or court order;
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction, subject to the same data protection standards.

mnl888 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device that help us recognise you, maintain your session, and understand how you use the Platform.

The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in during your visit and security cookies that protect against CSRF attacks. These cannot be disabled without impairing the Platform's functionality;
• Performance Cookies: Collect anonymised data about how visitors use the Platform — which pages are visited most, where errors occur, and how load times perform. This data helps us improve the Platform experience for Filipino players;
• Functional Cookies: Remember your preferences (such as language settings and display preferences) to provide a more personalised experience;
• Fraud Prevention Cookies: Assist our fraud detection systems by identifying unusual access patterns and potential account takeover attempts.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies will impair or prevent access to the mnl888 Platform. To manage cookie preferences, refer to your browser's help documentation.

mnl888 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive personal data and financial records stored at rest;
• Multi-factor authentication requirements for all internal administrative access to personal data systems;
• Role-based access controls limiting employee access to personal data on a strictly need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• 24/7 monitoring of our infrastructure for suspicious activity and intrusion attempts;
• Secure data backup procedures with tested disaster recovery capabilities;
• Employee data privacy training and awareness programmes.

In the event of a personal data breach that is reasonably likely to result in serious harm to you, mnl888 will notify you and the National Privacy Commission (NPC) within the timeframe required by the DPA and its IRR.

mnl888 retains personal data for the following periods, after which data is securely deleted or anonymised:

Where data is required to be retained beyond the above periods due to an ongoing legal dispute, regulatory investigation, or court order, mnl888 will retain only what is strictly necessary for the duration of that proceeding.

Under Republic Act No. 10173, the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by mnl888:

To exercise any of your data subject rights, please contact our Data Protection Officer using the details in Section 15. We will respond to all verifiable data subject requests within 15 business days. We may require you to verify your identity before processing your request to prevent unauthorised disclosure of another person's data.

If you are unsatisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The mnl888 Platform is strictly restricted to individuals who are 21 years of age or older. This is a legal requirement under PAGCOR's online gaming regulations applicable to the Philippine market. mnl888 does not knowingly collect or process personal data from individuals under the age of 21.

Age verification is conducted during the account registration and KYC process. Any account found to belong to a person under 21 years of age will be immediately closed and all personal data associated with that account will be deleted, subject to any legal retention obligations. Any funds in such an account will be dealt with in accordance with applicable law.

If you believe that a person under 21 has registered an mnl888 account or that we have inadvertently collected data from an underage individual, please contact our DPO immediately at the address provided in Section 15.

Some of mnl888's service providers and game technology partners are located outside the Republic of the Philippines. Where personal data is transferred to countries outside the Philippines, mnl888 ensures that appropriate safeguards are in place in accordance with Section 21 of the DPA and the NPC's issuances on cross-border data transfers.

These safeguards include:

• Standard contractual clauses approved by the National Privacy Commission requiring the recipient to apply data protection standards equivalent to those under the DPA;
• Conducting transfer impact assessments where the destination country does not have an adequate level of data protection;
• Selecting game providers and technology partners who have demonstrated compliance with internationally recognised data protection frameworks (such as ISO 27001 certification).

Personal data transferred cross-border by mnl888 is limited to what is strictly necessary for the relevant service provider to perform their contracted function on mnl888's behalf.

mnl888 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, applicable law, and regulatory guidance from the National Privacy Commission. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

Where changes are material — meaning they significantly affect how we process your data or alter your rights — mnl888 will notify registered users via their registered email address or via an in-platform notification before the updated Policy takes effect.

Your continued use of the mnl888 Platform following any published update to this Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not accept the revised Policy, you should cease using the Platform and may close your account by contacting our support team.

For all data privacy enquiries, data subject rights requests, complaints, or questions about this Privacy Policy, please contact the mnl888 Data Protection Officer through the following channels:

If you believe that mnl888 has processed your personal data in a manner that violates the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.