This Privacy Policy explains how ha88 collects, uses, stores, and protects the personal information of Filipino players and visitors to the ha88 platform. Ha88 is committed to upholding your privacy rights under the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA).
Ha88 is the operator of the online gaming platform accessible at ha88.lat, regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). In the context of this Privacy Policy, ha88 acts as the Personal Information Controller as defined under Republic Act No. 10173, the Data Privacy Act of 2012, with respect to the personal data of registered players and platform visitors located in the Philippines.
Ha88 is committed to processing personal data lawfully, fairly, and transparently, in accordance with Philippine privacy law and PAGCOR regulatory requirements. This Privacy Policy applies to all data processing activities conducted by ha88 in connection with the operation of the Platform and its gaming services.
When you register an ha88 account or use the Platform, we collect personal information that you voluntarily provide, which may include:
When you access the ha88 Platform, certain technical information is collected automatically by our systems, including:
Ha88 may receive information about you from third-party sources in limited circumstances, including: identity verification services used for KYC compliance; payment processors who confirm transaction completion; and fraud detection services that flag potentially suspicious activity patterns. All third-party data processing relationships are governed by data sharing agreements consistent with DPA requirements.
Ha88 processes your personal data for the following purposes:
Ha88 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:
Ha88 does not sell your personal data to third parties for marketing or commercial purposes. Ha88 may share your data in the following limited circumstances:
Ha88 engages trusted third-party service providers who process data on ha88's behalf under contractual obligations consistent with DPA requirements. These include: payment processors (GCash, Maya, banking partners), KYC verification providers, live casino game studios, IT infrastructure and cloud service providers, and customer support platform operators.
Ha88 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction when required by law, court order, or regulatory direction. Ha88 will notify affected players of such disclosures where permitted by law.
In the event of a merger, acquisition, or sale of ha88's business assets, personal data held by ha88 may be transferred as part of that transaction. Affected players will be notified prior to such transfer and the receiving entity will be required to honor the commitments made in this Privacy Policy.
The ha88 Platform uses cookies and similar tracking technologies to operate core platform functions and improve user experience. Categories of cookies used include:
You may adjust cookie preferences via your browser settings. Disabling non-essential cookies will not prevent you from accessing ha88's core gaming services.
Ha88 retains personal data for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with applicable legal obligations. As a PAGCOR-licensed operator, ha88 is required to retain account records, transaction histories, and KYC documentation for a minimum period as specified under PAGCOR conditions and AMLA regulations — typically five (5) years from the date of account closure.
Where personal data is no longer required for its original purpose and retention is not mandated by law, ha88 will securely delete or anonymize that data in accordance with its internal data retention schedule.
Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by ha88:
Ha88 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Security measures include 256-bit SSL/TLS encryption for all data in transit, encrypted storage for sensitive account data, OTP-based two-factor authentication for account access, role-based access controls limiting staff access to personal data, and regular security assessments and penetration testing of the ha88 Platform.
In the event of a personal data breach that poses a real risk to data subjects, ha88 will notify the National Privacy Commission and affected players within seventy-two (72) hours of becoming aware of the breach, consistent with DPA requirements.
Ha88 is strictly an adult gaming platform. The ha88 Platform is not directed at individuals under the age of 21, and ha88 does not knowingly collect personal data from persons under 21 years of age. If ha88 determines that a registered account belongs to an individual under the legal age, that account will be immediately suspended and all personal data associated with it will be deleted, subject to any mandatory retention requirements under PAGCOR and AMLA regulations.
Parents and guardians who believe that a minor has registered on ha88 are encouraged to contact ha88 support immediately so the account can be investigated and closed.
Ha88 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or regulatory obligations. Material changes will be communicated to registered players via Platform notification or SMS to the registered mobile number at least fourteen (14) days before taking effect. The updated policy will be published on this page with a revised "Last updated" date.
Continued use of the ha88 Platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms.
For all privacy-related inquiries, data subject rights requests, or concerns about ha88's data processing practices, you may contact ha88's designated Data Protection Officer through the following channels:
Ha88's DPO is registered with the National Privacy Commission as required under NPC Circular 17-01. All privacy inquiries are handled in strict confidence by dedicated DPO staff.
Six key ways ha88 handles your personal data responsibly on our PAGCOR-regulated platform.
All data you submit to ha88 — from your ha88 login credentials to GCash withdrawal requests — is protected by bank-grade SSL/TLS encryption. Your personal and financial information is never transmitted unprotected.
Ha88 processes all personal data of Filipino players in accordance with Republic Act 10173, the Data Privacy Act of 2012. Your rights to access, correct, and delete your data are formally recognized and honored by ha88.
Ha88 does not sell your personal data to advertising networks or data brokers. Your information is used solely to operate your ha88 account, comply with PAGCOR regulations, and improve Platform services.
Player financial data and wallet balances are maintained in accounts segregated from ha88's operational funds — a PAGCOR compliance requirement that also means your financial records are kept distinctly and securely.
Ha88 has a designated Data Protection Officer registered with the National Privacy Commission. Filipino players can submit formal data subject rights requests and receive responses within 15 business days as required by NPC rules.
In the unlikely event of a data breach affecting your personal information, ha88 commits to notifying you and the National Privacy Commission within 72 hours — consistent with DPA breach notification obligations.
Your personal data is protected under Philippine law. Ha88 is PAGCOR-regulated, DPA-compliant, and built to respect Filipino players' privacy. Create your account today and experience a gaming platform you can trust.