Six core privacy principles that guide how phboss8 handles your personal information. Full legal text follows in the sections below.
All personal data transmitted between your device and the phboss8 platform is encrypted using 256-bit SSL/TLS protocols. Data at rest is stored in encrypted, access-controlled servers aligned with ISO 27001 principles.
phboss8 complies with Republic Act No. 10173 — the Data Privacy Act of 2012 — and operates under the guidelines of the National Privacy Commission (NPC) of the Philippines. Your rights as a data subject are fully recognized.
phboss8 does not sell, rent, or trade your personal data to third-party marketers. Your information is shared only with service providers that directly support the phboss8 platform's operations, under strict contractual privacy obligations.
You have the right to access, correct, object to, erase, and port your personal data. phboss8 makes it straightforward to exercise these rights through your account settings or by contacting our support team directly.
phboss8 retains personal data only for as long as necessary to fulfill the purpose it was collected for, or as required by applicable Philippine law (including PAGCOR compliance and AMLA obligations). Data no longer required is securely deleted.
phboss8 only sends promotional communications to players who have opted in. You can withdraw marketing consent at any time from your account communication preferences — no re-confirmation required, effective immediately.
Under the Data Privacy Act of 2012, every Filipino data subject has the following rights with respect to their personal information held by phboss8.
Request a copy of the personal data phboss8 holds about you, including the purposes for which it is being processed.
Request correction of any inaccurate or incomplete personal data phboss8 holds about you.
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Request your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
This Privacy Policy ("Policy") applies to all personal data collected and processed by phboss8 ("phboss8," "we," "us," or "our") through the online gaming platform accessible at https://phboss8.app ("Platform"), including all sub-pages, game interfaces, account management features, and customer support channels associated with the Platform.
phboss8 is committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the Platform, in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations as administered by the National Privacy Commission (NPC) of the Philippines. By accessing the Platform or creating an account, you acknowledge that you have read this Policy and that you consent to the collection and processing of your personal data as described herein.
This Policy should be read alongside the phboss8 Terms & Conditions, which are incorporated herein by reference and govern your overall use of the Platform. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.
For purposes of the Data Privacy Act of 2012, phboss8 is the personal information controller ("PIC") in respect of all personal data collected through the Platform. phboss8 determines the purposes for which and the manner in which personal data on the Platform is processed.
phboss8 has designated a Data Protection Officer ("DPO") responsible for overseeing the Platform's data protection strategy and ensuring compliance with applicable Philippine data privacy law. Contact details for the phboss8 DPO are provided in Section 16 of this Policy.
Where phboss8 engages third-party service providers to process personal data on its behalf (such as payment processors, KYC verification providers, and customer support platforms), those providers act as personal information processors ("PIPs") under written data processing agreements that obligate them to process data solely in accordance with phboss8's documented instructions and to maintain appropriate security measures.
phboss8 collects the categories of personal data described in the table below. Collection is limited to data that is adequate, relevant, and not excessive in relation to the specific purpose for which it is collected.
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number | Account registration, KYC verification, age eligibility (21+) |
| Contact Data | Philippine mobile number, email address, barangay/city/province of residence | Account communication, two-factor authentication, support |
| Financial Data | GCash number, PayMaya number, bank account name and number (BPI/BDO/Metrobank), deposit and withdrawal history | Payment processing, withdrawal verification, AMLA compliance |
| KYC Documents | Government ID image, selfie photograph, proof of payment method ownership | Identity verification, fraud prevention, regulatory compliance |
| Gaming Data | Game session logs, bet history, win/loss records, game category preferences | Service delivery, dispute resolution, responsible gaming monitoring |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Security, fraud prevention, platform optimization |
| Usage Data | Pages visited, features used, session duration, click patterns | Platform improvement, user experience optimization |
| Communications Data | Live chat transcripts, email correspondence, support tickets | Support resolution, dispute records, quality assurance |
| Marketing Preferences | Communication opt-in/opt-out status, promotional campaign response history | Consent management, targeted promotions (opt-in only) |
phboss8 does not intentionally collect sensitive personal information as defined by Section 3(l) of the Data Privacy Act (such as health data, political affiliations, or religious beliefs) unless specifically required by law. If such data is provided incidentally — for example in a support conversation — it will be handled with heightened protection.
phboss8 collects personal data through the following means:
phboss8 processes personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The applicable legal bases for phboss8's data processing activities are:
phboss8 uses collected personal data for the following purposes:
phboss8 may share your personal data with the following categories of recipients, strictly for the purposes described in this Policy:
phboss8 engages third-party companies to process personal data on its behalf. These include KYC/identity verification providers, payment processing platforms (GCash, PayMaya, and banking partners), anti-fraud and AML screening services, cloud infrastructure and data hosting providers, and customer support platform operators. All service providers are bound by written data processing agreements requiring them to process data only on phboss8's documented instructions and to maintain adequate security measures.
phboss8 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where such disclosure is required by law, regulation, court order, or as necessary to protect phboss8's legal rights.
In the event of a merger, acquisition, or sale of all or a material portion of phboss8's assets, personal data held by phboss8 may be transferred to the acquiring entity, subject to the same privacy protections set out in this Policy. Affected players will be notified of any such transfer in advance.
The phboss8 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalized experience. A cookie is a small data file stored on your device by your web browser when you visit the Platform.
You may manage non-essential cookies through your browser settings. Most modern browsers (Chrome, Firefox, Edge, Safari) allow you to refuse, block, or delete cookies. Disabling strictly necessary cookies will impair your ability to use the phboss8 Platform, including logging in and accessing games. phboss8 does not use third-party advertising networks or cross-site behavioral tracking cookies.
phboss8 implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, phboss8 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players as required by applicable NPC guidelines.
phboss8 retains personal data for as long as is necessary to fulfill the specific purpose for which it was collected, or as required by applicable Philippine law. The following general retention guidelines apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be attributed to any individual.
The phboss8 Platform primarily serves Filipino players and is designed to process and store data within infrastructure compliant with Philippine data protection requirements. Where the engagement of international service providers (such as global cloud hosting or KYC verification platforms) necessitates the transfer of personal data outside the Republic of the Philippines, phboss8 will only make such transfers where:
phboss8 does not transfer personal data internationally for the purpose of circumventing Philippine data protection obligations.
You may exercise any of the data subject rights described in Section 12 of the Data Privacy Act (and summarized in the feature section above this document) by submitting a request through any of the following channels:
phboss8 will respond to data rights requests within a reasonable period and in any event within thirty (30) calendar days of receipt of a valid request, as required under the Data Privacy Act. Complex requests may require additional time, in which case you will be informed of the extended response period and the reason for it.
phboss8 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive. phboss8 reserves the right to request additional verification of your identity before processing a data rights request that concerns personal data of a sensitive or financial nature.
phboss8 will only send you promotional emails, SMS messages, or push notifications about bonuses, new games, and Platform updates where you have expressly opted in to receive such communications during registration or subsequently from your account settings.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent takes effect immediately. Withdrawing consent does not affect the lawfulness of marketing communications sent prior to withdrawal, and does not affect the sending of service-critical communications (such as account verification messages, transaction confirmations, security alerts, and withdrawal notifications) which phboss8 sends as a necessary function of your account service and which are not marketing in nature.
If phboss8 becomes aware that personal data has been collected from an individual under 21 years of age, phboss8 will promptly suspend the relevant account, delete the associated personal data to the extent permitted by law, and report the matter to PAGCOR as required by its licensing conditions.
If you are a parent or guardian and believe that a person under 21 years of age in your household has registered for a phboss8 account, please contact the support team immediately via live chat or at [email protected].
phboss8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data processing practices, new regulatory requirements, or improvements to Platform services. The effective date at the top of this Policy will be updated to reflect the most recent revision.
For material changes to this Policy — those that significantly affect how phboss8 processes your personal data or that affect your data rights — phboss8 will provide advance notice via the email address or mobile number registered to your account, or through a prominent notice on the Platform, no less than fourteen (14) days before the revised Policy takes effect.
Your continued use of the phboss8 Platform after the effective date of a revised Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any revision, you may request account closure in accordance with the phboss8 Terms & Conditions.
For any questions, concerns, or formal requests regarding this Privacy Policy or the processing of your personal data by phboss8, please contact us through the following channels:
When contacting us regarding a data privacy matter, please include your registered phboss8 account username, a clear description of your query or request, and your preferred method of response. phboss8 will acknowledge receipt of all formal data privacy inquiries within five (5) business days.
If you believe that phboss8 has violated your data privacy rights under the Data Privacy Act of 2012, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines through the NPC's official regulatory complaint process.
Disclaimer: This Privacy Policy is provided to inform data subjects of phboss8's data handling practices and does not constitute legal advice. If you require independent legal advice regarding your data privacy rights under Philippine law, you should consult a qualified attorney or the National Privacy Commission directly.
phboss8 is built on transparency. You now know exactly how we handle your data — and you have full control over it. Join thousands of Filipino players who trust phboss8 for Color Game, Slots, and Live Casino.
DPA 2012 compliant · PAGCOR regulated · 256-bit SSL · 🔞 Must be 21+ to play