mn88 Privacy Policy

mn88 is committed to handling your personal data responsibly, transparently, and in accordance with applicable Philippine data protection law — principally the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the relevant issuances of the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy governs the collection, use, storage, sharing, and protection of personal data submitted to or generated by mn88 through all channels, including:

• The mn88.lat website and any mobile-optimised interface;
• The account registration, login, and KYC verification process;
• Deposits and withdrawals via GCash, Maya, bank transfer, and other supported Philippine payment channels;
• Live chat, email, and any other customer support communication;
• Game play, betting activity, and in-session data generated on the Platform;
• Marketing and promotional communications where you have opted in.

This Policy applies to all registered mn88 players, prospective players who browse the Platform without registering, and any person who contacts mn88 for support or information. It does not apply to third-party websites or services linked from mn88, which operate under their own privacy policies.

For the purposes of the Data Privacy Act of 2012, mn88 acts as the Personal Information Controller (PIC) in respect of personal data collected through the Platform. mn88 determines the purposes and means of processing your personal data and is responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

mn88 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173. Contact details for the DPO are provided in Section 15 of this Policy. The DPO is your primary point of contact for any data privacy concern, rights request, or complaint.

mn88 collects personal data in three broad categories: data you provide directly, data generated by your use of the Platform, and data received from third parties in connection with your account.

3.1 Data You Provide Directly

• Full legal name as it appears on your Philippine government-issued ID;
• Date of birth (for age verification — 21+ requirement);
• Residential address (barangay, city/municipality, province);
• Philippine mobile number (e.g., Globe, Smart, DITO);
• Email address;
• Username and encrypted password;
• Government-issued ID documents submitted for KYC (UMID, PhilSys ID, Passport, LTO Driver's License, Voter's ID, or PRC ID);
• Selfie or facial image submitted for liveness verification during KYC;
• Payment account details (GCash number, Maya account, bank account number) — stored in tokenised form only, never as raw financial credentials.

3.2 Data Generated by Platform Use

• Login timestamps, IP addresses, and device identifiers;
• Browser type, operating system, and screen resolution;
• Game session data: games played, stakes, outcomes, session duration;
• Transaction history: deposits, withdrawals, bonus claims, and wagering activity;
• Live chat transcripts and support ticket contents;
• Responsible gaming tool settings (deposit limits, session caps, self-exclusion status);
• Cookie and session identifiers (see Section 9).

3.3 Data Received from Third Parties

• Identity verification results from mn88's KYC/AML service partners;
• Transaction confirmation data from GCash, Maya, and partner banks;
• Fraud and risk scoring data from payment fraud prevention partners;
• Regulatory watchlist screening results required under Philippine AML law.

mn88 processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and administering your mn88 account, including authenticating your identity at login and processing account settings changes;
• Age Verification: Confirming that you meet the mandatory 21-year minimum age requirement under PAGCOR regulations before granting access to gaming services;
• KYC and AML Compliance: Verifying your identity as required under Philippine Anti-Money Laundering laws (RA 9160 as amended) and PAGCOR's Know Your Customer requirements;
• Payment Processing: Facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and other supported payment channels;
• Fraud Detection and Prevention: Monitoring transactions and gameplay patterns to detect and prevent fraudulent activity, money laundering, and other prohibited conduct;
• Customer Support: Responding to your enquiries, resolving disputes, and providing technical assistance via live chat and email;
• Responsible Gaming: Processing your responsible gaming tool settings (deposit limits, self-exclusion, session caps) and honouring self-exclusion requests across the Platform;
• Platform Improvement: Analysing aggregated and anonymised usage data to improve game performance, user experience, and platform stability;
• Legal and Regulatory Compliance: Fulfilling obligations imposed by PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other applicable Philippine regulatory body;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications. You may withdraw this consent at any time.

Under Section 12 of the Data Privacy Act of 2012, mn88 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to perform the contract between you and mn88 (i.e., providing the Platform's gaming and account services);
• Legal Obligation: Processing required to comply with obligations under Philippine law, including RA 9160 (AMLA), PAGCOR's licensing conditions, and NPC registration requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics — where those interests are not overridden by your data protection rights;
• Consent: Processing for optional purposes such as marketing communications, where you have given freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

mn88 shares personal data with third parties only to the extent necessary for the purposes described in this Policy and only where appropriate safeguards are in place. Recipients of your personal data may include:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, InstaPay, PesoNet, QR Ph, GrabPay, and 7-Eleven CLiQQ — solely for processing your deposits and withdrawals;
• KYC & Identity Verification Partners: Third-party providers that assist mn88 in verifying the authenticity of government-issued Philippine IDs and conducting liveness checks — processing under strict data processing agreements;
• Game Providers: Licensed game studios (e.g., PG Soft, Pragmatic Play, JDB) receive limited session tokens to authenticate your game access — they do not receive your full personal profile;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement where disclosure is required by law, court order, or regulatory directive;
• Fraud Prevention Services: Third-party fraud and risk assessment platforms that process transaction and behavioural data to detect suspicious activity;
• IT and Infrastructure Providers: Cloud hosting and data centre providers operating under data processing agreements with security standards equivalent to or exceeding mn88's own requirements.

All third-party processors engaged by mn88 are required to process personal data only on mn88's documented instructions and in accordance with data protection obligations consistent with RA 10173.

mn88 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal and regulatory retention requirements. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification, unless retention for a longer period is required by a specific legal obligation.

mn88 implements technical and organisational security measures appropriate to the sensitivity of the personal data we process. These include:

• Encryption in Transit: All data transmitted between your device and mn88 servers is encrypted using TLS 1.2+ (256-bit SSL), consistent with the standards used by Philippine banks for online transactions;
• Encryption at Rest: Sensitive data fields (ID document images, payment tokens, passwords) are encrypted at rest using AES-256;
• Access Controls: Personal data is accessible only to mn88 personnel with a documented, role-specific business need. Access is governed by the principle of least privilege and is regularly audited;
• Password Security: Player passwords are stored as salted cryptographic hashes — mn88 staff cannot see your password in plain text;
• Two-Factor Authentication: mn88 supports SMS-based 2FA for player accounts, adding a second verification layer beyond username and password;
• Intrusion Detection: mn88 systems are monitored for unauthorised access attempts, anomalous login patterns, and security incidents around the clock;
• Incident Response: mn88 maintains a data breach response plan compliant with NPC Circular 16-03 requirements, including notification obligations to the NPC and affected data subjects within prescribed timeframes.

While mn88 takes all reasonable measures to protect your personal data, no internet transmission or electronic storage method is 100% secure. Players are reminded to use strong, unique passwords for their mn88 accounts and to enable two-factor authentication to maximise account security.

mn88 uses cookies and similar tracking technologies to provide, secure, and improve the Platform. The following categories of cookies are used:

mn88 does not use third-party advertising or behavioural tracking cookies. No data collected via mn88 cookies is shared with advertising networks. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair or prevent access to the Platform.

As mn88 partners with game providers and infrastructure vendors whose servers may be located outside the Philippines, personal data may in some cases be transferred to, processed in, or stored in jurisdictions other than the Philippines.

Where such transfers occur, mn88 ensures that appropriate safeguards are in place in accordance with Section 21 of RA 10173 and the NPC's guidelines on cross-border data transfers. Safeguards include:

• Data processing agreements requiring the recipient to protect the data to a standard at least equivalent to RA 10173;
• Transfer only to jurisdictions that the NPC has determined provide adequate protection, or to recipients that have implemented adequacy measures acceptable under Philippine law;
• Contractual clauses binding the recipient to the same data protection obligations applicable to mn88.

No personal data is transferred to any jurisdiction for the purpose of evading the protections of the Data Privacy Act of 2012 or any other applicable Philippine law.

The Data Privacy Act of 2012 grants you the following rights with respect to your personal data held by mn88. You may exercise any of these rights at any time by contacting the mn88 Data Protection Officer (see Section 15):

mn88 does not knowingly collect personal data from any person under the age of 21. The Platform is strictly for adults aged 21 and above in compliance with PAGCOR's regulations governing online gaming in the Philippines.

mn88 implements mandatory age verification during account registration and KYC. If mn88 discovers or has reason to believe that personal data has been collected from a person under 21, the account will be immediately closed, all associated data will be deleted or anonymised, and any balance will be returned via the original payment method following identity verification of the account holder's guardian or legal representative.

If you believe a minor has registered or is using an mn88 account, please notify our support team immediately via live chat or email so that we can take prompt action.

mn88 processes certain personal data — including game session history, deposit frequency, and responsible gaming tool settings — specifically to support its responsible gaming obligations. This data is used to:

• Honour self-exclusion requests immediately and across all access points to the Platform;
• Monitor for behavioural indicators consistent with problem gambling and, where appropriate, prompt players with responsible gaming information;
• Record and enforce deposit limits, loss limits, and session time caps set by the player;
• Comply with PAGCOR's player protection requirements for online gaming operators.

Self-exclusion data is retained beyond the standard account closure period as required by PAGCOR to prevent a self-excluded player from re-registering on mn88 during the exclusion period. This retention is in the player's own interest and is a legal obligation for regulated operators.

For full details on mn88's responsible gaming tools and resources, please visit the Responsible Gaming page.

mn88 reviews and updates this Privacy Policy periodically to reflect changes in applicable Philippine law, NPC guidance, PAGCOR requirements, or mn88's data processing practices. The effective date of the current version is shown at the top of this page.

When material changes are made to this Policy, mn88 will notify registered players by email or by posting a prominent notice on the Platform at least seven (7) days before the changes take effect. Your continued use of mn88 after the effective date constitutes your acknowledgement of the updated Policy.

We encourage you to review this Privacy Policy periodically. Prior versions of the Policy are available upon request from the mn88 Data Protection Officer.

For any question, concern, or rights request relating to this Privacy Policy or mn88's processing of your personal data, please contact the mn88 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the mn88 Platform — the fastest route for urgent privacy concerns
• Email: [email protected] — please include "Privacy / DPO" in your subject line
• Response SLA: Acknowledgement within 2 business days; substantive response to rights requests within 15 calendar days

If you are not satisfied with mn88's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.