Privacy Policy
super888 Platform

super888 ("we," "us," or "our") is committed to protecting the privacy and personal data of every user who accesses or registers on the super888 platform at https://super888.cc (the "Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

This Privacy Policy applies to all users of the Platform, including registered account holders, visitors who browse without registering, and individuals who contact our customer support team. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

super888 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Nationality and country of residence
• Residential address (including barangay, city, province, and postal code)
• Email address
• Mobile number
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine passport, driver's licence, SSS/UMID card, PhilSys National ID, Voter's ID)
• Proof of address documents (e.g., utility bills, bank statements issued within the last three months)
• Selfie or live photo for facial verification purposes
• Source of funds declarations where required by anti-money laundering regulations

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Philippine Peso (PHP) and timestamps
• Payment method details (e.g., GCash account reference, PayMaya reference, BPI, BDO, or Metrobank account details — stored in tokenised or masked form only)
• Wagering history, game activity records, and account balance history
• Bonus and promotion redemption records

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the Platform
• Login timestamps and access logs
• Cookie identifiers and similar tracking technology data (see Section 7)

2.5 Communications Data

• Records of your communications with our customer support team, including live chat transcripts and email correspondence
• Feedback, survey responses, and complaints submitted through the Platform
• Marketing preferences and communication opt-in or opt-out records

super888 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically — through cookies, web beacons, server logs, and similar technologies when you browse or use the Platform (see Section 7 for details).
• From third-party service providers — including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, fraud detection services, and analytics platforms, where such providers share data with us in accordance with their own privacy policies and applicable law.
• From regulatory and law enforcement authorities — where we are legally required to receive or share information as part of our compliance obligations.

We do not collect personal data from publicly available social media profiles or purchase personal data lists from third-party data brokers.

super888 uses your personal data for the following purposes:

super888 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

Under the Philippine Data Privacy Act of 2012, super888 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to provide the gaming and betting services you have registered to use, process your transactions, and manage your account.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, tax reporting, and regulatory directives from PAGCOR and the National Privacy Commission.
• Legitimate interests: Processing is necessary for our legitimate interests in preventing fraud, ensuring platform security, improving our services, and conducting responsible gaming monitoring, provided those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

super888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary and in accordance with applicable law:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, fraud detection services, and customer support platforms. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security standards.

6.2 Regulatory & Law Enforcement Authorities

super888 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), or other competent Philippine authorities where required by law, court order, or regulatory directive.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of super888's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

6.4 With Your Consent

We may share your personal data with other third parties where you have given your explicit consent to such sharing.

super888 uses cookies and similar tracking technologies to operate the Platform effectively, remember your preferences, and analyse how the Platform is used. A cookie is a small text file placed on your device when you visit the Platform.

7.1 Types of Cookies We Use

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. For all other cookie types, you may withdraw consent at any time by adjusting your browser settings or contacting our support team.

7.2 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. At present, there is no universally accepted standard for responding to DNT signals, and super888 does not currently alter its data collection practices in response to DNT signals. We will update this section if our practices change.

super888 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with AML and regulatory record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, as required by the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing data: Retained until you withdraw consent or for two (2) years from your last interaction with marketing content, whichever comes first.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it may be retained in anonymised, aggregated form indefinitely for analytics purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

super888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption at rest for sensitive personal data stored on our servers.
• Multi-factor authentication (MFA) options for account access.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Intrusion detection and monitoring systems operating continuously to detect and respond to security threats.
• Staff training on data privacy and security obligations under RA 10173.

While super888 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, super888 will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by law.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by super888:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfils that obligation.
• Right to Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to Lodge a Complaint: If you believe your data rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, and we will notify you of any such extension.

The super888 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. super888 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. All funds associated with such an account will be forfeited in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered on the super888 Platform, please contact us immediately at the details provided in Section 14 so that we can take appropriate action.

The super888 Platform may contain references to third-party services such as payment providers (GCash, PayMaya, BPI, BDO, Metrobank) and game studio providers. When you interact with these third-party services, you are subject to their own privacy policies, which are separate from and independent of this Privacy Policy.

super888 is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with the Platform before providing them with your personal data.

super888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered users by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you do not agree with the changes, you should cease using the Platform and may request account closure in accordance with our Terms & Conditions.

super888 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data rights have been violated. The NPC can be reached through its official government channels.

For general customer support enquiries unrelated to data privacy, please contact our 24/7 support team via live chat on the Platform or by email at [email protected].