grand888 Privacy Policy 🔒

grand888 ("grand888," "we," "us," or "our") operates the online gaming platform accessible at grand888.club (the "Platform"), offering Filipino players access to online slots, live casino games, sports betting, bingo, and related gaming services.

For the purposes of this Privacy Policy, grand888 acts as the data controller in respect of the personal data of registered players and visitors to the Platform. This means we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your general use of the grand888 website and any associated mobile-optimized interfaces.

grand888 collects the following categories of personal data from players and Platform visitors:

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, except where required by applicable law for identity verification purposes.

grand888 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 7 for more details on cookies.
• Third-party payment processors: Financial data shared with us by payment service providers (such as GCash, PayMaya, BPI, BDO, and Metrobank) when you initiate a deposit or withdrawal transaction.
• Identity verification providers: Data returned by third-party KYC and identity verification services when we verify your age and identity in compliance with regulatory requirements.
• Fraud prevention services: Risk signals and device fingerprinting data provided by fraud detection partners to protect the integrity of the Platform.

grand888 uses your personal data for the following purposes:

• To create and manage your grand888 account and verify your identity and age (21+ requirement).
• To process deposits, withdrawals, and other financial transactions on the Platform.
• To provide and improve our gaming services, including personalizing your experience on the Platform.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct.
• To comply with our legal and regulatory obligations under Philippine law, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• To monitor gameplay patterns for responsible gaming purposes and to enforce our responsible gaming tools.
• To communicate with you about your account, transactions, promotions, and Platform updates.
• To respond to your customer support inquiries and resolve disputes.
• To send you marketing communications where you have consented to receive them, or where we have a legitimate interest in doing so.
• To conduct analytics and research to improve the Platform's performance, features, and user experience.

grand888 will not use your personal data for any purpose that is incompatible with the purposes described in this Privacy Policy without first obtaining your consent or establishing another lawful basis for processing.

grand888 processes your personal data on the following legal bases under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML, KYC, and gaming regulatory requirements.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, Platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

grand888 does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors to facilitate deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services to confirm your identity and eligibility.
• Fraud prevention and security partners: Services that help us detect and prevent fraudulent activity and protect the Platform's integrity.
• IT and infrastructure providers: Cloud hosting, data storage, and technical service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by applicable Philippine law, court order, or regulatory instruction, including PAGCOR and the Anti-Money Laundering Council (AMLC).
• Professional advisers: Lawyers, auditors, and accountants where necessary for legal compliance, dispute resolution, or business operations.

All third-party service providers who process personal data on behalf of grand888 are required to implement appropriate technical and organizational security measures and to process data only in accordance with our instructions and applicable law.

grand888 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to personalize your experience.
• Analytics cookies: Collect anonymized data about how players use the Platform to help us improve performance and identify issues.
• Security cookies: Help detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. grand888 does not use third-party advertising cookies or cross-site tracking technologies for behavioral advertising purposes.

grand888 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

grand888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that personal data is accessible only to authorized personnel with a legitimate need.
• Regular security audits, vulnerability assessments, and penetration testing of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures to detect, contain, and notify affected players of any data breach in accordance with applicable law.

While grand888 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, grand888 will notify you and the relevant Philippine regulatory authority as required by law.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by grand888:

• Right to be informed: The right to know what personal data we collect and how we use it — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days of receipt.

The grand888 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on the grand888 Platform, please contact us immediately at the details provided in Section 14 so that we can investigate and take appropriate action.

grand888 primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international fraud prevention services — grand888 ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses that provide a level of protection equivalent to that required under Philippine law.

By using the grand888 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

grand888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address describing the key changes.
• Display a prominent notice on the Platform for a reasonable period following the update.

Your continued use of the grand888 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the grand888 Data Protection Officer (DPO):

grand888 aims to acknowledge all data rights requests within five (5) business days and to resolve them within thirty (30) days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.