extrem88 Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how extrem88 ("extrem88," "we," "us," "our") collects, processes, stores, and protects the personal data of individuals ("you," "your," "Player," "User") who register for or access the extrem88 online gaming platform available at extrem88.co and its associated mobile platforms and services (collectively, the "Services").

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, which govern the collection, processing, and protection of personal data in the Philippines. By registering an extrem88 account or using the Services, you acknowledge that you have read and understood this Policy.

This Policy should be read in conjunction with the extrem88 Terms & Conditions, which govern the broader contractual relationship between you and extrem88. In the event of any conflict between this Policy and the Terms, the Terms shall prevail except in respect of data privacy matters, where this Policy shall govern.

2. Data Controller

extrem88 is the data controller in respect of personal data collected through the Services. As data controller, extrem88 determines the purposes and means by which your personal data is processed. extrem88 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with applicable data protection law.

To contact the extrem88 DPO, players may reach out through the contact methods listed in Section 13 of this Policy.

3. Data We Collect

extrem88 collects personal data in the following categories, depending on your interaction with the Services:

Registration & Identity Data:

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Philippine mobile number
• Username and encrypted password
• Government-issued ID type and number (collected when identity verification is required)
• Selfie or photograph (where required for enhanced verification)

Financial & Transaction Data:

• GCash number, Maya account, or other e-wallet identifiers registered for deposit and withdrawal
• Deposit and withdrawal history, amounts, timestamps, and payment method used
• Account balance history
• Bonus awards, wagering records, and promotional activity

Technical & Usage Data:

• IP address and approximate geographic location at login
• Device type, operating system, and browser information
• Session timestamps, game history, and betting patterns
• Login attempts, including failed attempts and 2FA events
• Pages visited within the extrem88 platform and clickstream data

Communications Data:

• Content of live chat, email, or support ticket conversations with the extrem88 customer support team
• Feedback, complaints, and dispute records

4. How We Use Your Data

extrem88 uses personal data for the following purposes:

• Account management: Creating, maintaining, and securing your extrem88 account, including authentication, password recovery, and 2FA.
• Service delivery: Enabling access to games, processing wagers, crediting winnings, managing bonuses, and facilitating deposits and withdrawals.
• Identity verification & age compliance: Confirming that you are at least 21 years of age and that your account is operated by its registered owner.
• Fraud prevention & security: Detecting and investigating unauthorized access, suspicious betting patterns, multi-accounting, and other fraudulent or prohibited activities.
• Anti-money laundering (AML) compliance: Monitoring transactions for unusual patterns, maintaining records as required by applicable AML regulations, and reporting to authorities where legally obligated.
• Customer support: Responding to inquiries, resolving disputes, processing complaints, and communicating account-related information.
• Platform improvement: Analyzing aggregate usage patterns to improve platform performance, game selection, user interface, and overall service quality.
• Responsible gaming: Monitoring gaming behavior to identify potential problem gambling indicators and, where appropriate, reaching out to affected players with support information.
• Marketing (opt-in only): Sending promotional communications, bonus notifications, and gaming news to players who have opted in to receive such communications.
• Legal compliance: Fulfilling obligations under applicable Philippine law, including tax, regulatory reporting, and cooperation with lawful authority requests.

5. Legal Bases for Processing

extrem88 processes your personal data on the following legal bases under RA 10173:

• Contractual necessity: Processing required to perform our obligations under the extrem88 Terms & Conditions, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine law, including AML reporting, tax obligations, and regulatory requirements.
• Legitimate interests: Processing for fraud detection, platform security, and responsible gaming monitoring — where our interests in maintaining a safe and fair platform do not override your privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit opt-in consent. You may withdraw marketing consent at any time from your account settings.

6. Data Sharing

extrem88 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances:

• Service providers: Third-party vendors who process data on our behalf, including payment processors (GCash, Maya, BPI, BDO, and others), game studios, identity verification providers, cloud hosting services, and customer support platform operators. All service providers are bound by data processing agreements that prohibit use of your data beyond the scope of the services they provide to extrem88.
• Regulatory & law enforcement authorities: Where required by applicable Philippine law, court order, or lawful authority request, extrem88 will disclose personal data to competent regulatory, law enforcement, or judicial bodies. We will endeavor to notify affected players of such disclosures where legally permitted to do so.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of extrem88's assets, player data may be transferred to the successor entity, subject to the same data protection obligations as set out in this Policy.

7. Cookies & Tracking Technologies

extrem88 uses cookies and similar tracking technologies to operate and improve the Services. Categories of cookies used include:

• Essential cookies: Required for the platform to function — managing login sessions, maintaining account state, and enabling secure navigation. These cannot be disabled without impairing Service functionality.
• Performance cookies: Collect anonymized data about how players interact with the platform — page load times, error rates, navigation paths — to support platform optimization. No personally identifiable information is included in performance cookie data.
• Functional cookies: Remember your preferences, such as language settings, game lobby filters, and notification preferences, to personalize your experience across sessions.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to extrem88 core gaming features, but may affect personalization functionality.

8. Data Security

extrem88 implements a multi-layered security framework to protect personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption on all data transmitted between your device and extrem88 servers
• AES-256 encryption for personal data stored in extrem88 databases
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Two-factor authentication available and strongly encouraged for all player accounts
• Continuous login monitoring with automated alerts for unusual access patterns
• Regular security audits, penetration testing, and vulnerability assessments
• Incident response procedures with defined timelines for breach notification to affected players and, where required, to the National Privacy Commission of the Philippines

While extrem88 takes all reasonable technical and organizational measures to protect your data, no system is completely immune to security incidents. Players are encouraged to use strong, unique passwords and to enable 2FA on their extrem88 accounts.

9. Data Retention

extrem88 retains personal data for the following periods:

• Active accounts: Data is retained for the duration of the account relationship plus a post-closure period of at least 5 years, to satisfy AML record-keeping requirements and regulatory audit obligations.
• Transaction records: Financial transaction data is retained for a minimum of 5 years following each transaction, in compliance with applicable financial record-keeping regulations.
• Support communications: Customer support records are retained for 3 years following resolution of the relevant inquiry or dispute.
• Marketing consent records: Records of your marketing consent or withdrawal of consent are retained for the period during which the consent status is relevant, plus 3 years thereafter for accountability purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized, such that it can no longer be attributed to any identified or identifiable individual.

10. Your Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by extrem88:

• Right to Access: You may request a copy of the personal data extrem88 holds about you, along with information about how it is processed.
• Right to Correction: You may request correction of inaccurate or incomplete personal data. Some corrections can be made directly from your account settings; others may require supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and no other legal basis applies. Note that erasure requests may not be fulfilled in full where retention is required by law.
• Right to Object: You may object to processing of your personal data for marketing purposes or where processing is based on legitimate interests. Objection to marketing will be honoured immediately; other objections will be assessed on a case-by-case basis.
• Right to Data Portability: You may request that your personal data be provided to you in a structured, commonly used, and machine-readable format.
• Right to Restrict Processing: In certain circumstances, you may request that extrem88 limit its processing of your personal data while a correction or objection request is being assessed.

To exercise any of these rights, contact the extrem88 Data Protection Officer using the contact details in Section 13. extrem88 will respond to valid requests within 15 business days, consistent with RA 10173 requirements. Requests may require identity verification before being processed.

11. Children's Privacy

extrem88 Services are strictly for individuals aged 21 years and above. extrem88 does not knowingly collect personal data from individuals under the age of 21. If extrem88 becomes aware that an account has been registered by or for an individual under 21, the account will be immediately suspended and any personal data associated with the account will be deleted, subject to any overriding legal retention obligations.

If you believe that a minor has registered an extrem88 account, please notify our support team immediately via live chat.

12. Policy Updates

extrem88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered players via the mobile number or other contact details on file, and the updated Policy will be published on this page with a revised "Last Updated" date.

Continued use of the extrem88 Services following notification of material changes constitutes acceptance of the revised Policy. If you do not agree to the updated Policy, you must cease using the Services and may request account closure by contacting our support team.

13. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the extrem88 Data Protection Officer:

• Live Chat: Available 24/7 via the extrem88 platform — fastest response channel
• Email: [email protected]

If you are not satisfied with extrem88's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), the statutory body responsible for administering and enforcing RA 10173.