walo88 Privacy Policy

1 Introduction & Scope

This Privacy Policy describes how walo88 — the online gaming platform operated at walo88.cam — collects, uses, stores, shares, and protects personal information in connection with the provision of its services to registered players and website visitors in the Philippines.

walo88 is committed to protecting the privacy and security of all individuals whose personal data it processes. This Policy is published in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), administered by the National Privacy Commission (NPC) of the Philippines.

This Policy applies to:

• All registered account holders on the walo88 platform;
• Visitors to the walo88.cam website who have not registered an account;
• Individuals who contact walo88 customer support by any channel; and
• Any other individual whose personal data walo88 processes in connection with its operations.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, walo88 is the Personal Information Controller (PIC) in respect of personal data collected through the walo88.cam platform. As PIC, walo88 determines the purposes for which and the means by which personal data is processed.

Where walo88 engages third-party service providers — including payment processors, game certification auditors, fraud detection services, and cloud infrastructure providers — to process personal data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by written data processing agreements that restrict their use of your data exclusively to the purposes specified by walo88.

walo88 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with the DPA. Contact details for the DPO are set out in Section 15 of this Policy.

3 Personal Data We Collect

walo88 collects the following categories of personal data, depending on your relationship with the platform:

4 How We Collect Your Data

walo88 collects personal data through the following means:

4.1 Directly from You

The majority of personal data walo88 holds is provided directly by you during the account registration process, KYC verification, payment transactions, communications with customer support, and any voluntary survey or promotional participation you undertake on the platform.

4.2 Automatically During Platform Use

When you access the walo88 platform — whether via browser on desktop or mobile — our systems automatically collect technical data including your IP address, device identifiers, browser characteristics, session duration, and navigation patterns. This data is collected using server logs, cookies, and similar tracking technologies as described further in Section 8.

4.3 From Third-Party Service Providers

walo88 may receive limited personal data from third-party service providers in the following contexts:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank, and others): transaction confirmation data, including payment reference numbers and account holder name verification;
• Identity verification providers: validation results for government-issued identification documents submitted during KYC; and
• Fraud detection services: risk scoring data based on device fingerprinting and behavioural analysis during account access events.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act, walo88 processes personal data on the following legal bases:

• Contractual necessity: Processing required to enter into and perform the contract with you (the walo88 Terms and Conditions), including account management, game delivery, deposit and withdrawal processing, and customer support;
• Legal obligation: Processing required to comply with applicable Philippine law, including the Anti-Money Laundering Act (RA 9160, as amended), PAGCOR licensing requirements, and NPC data protection obligations — specifically KYC verification, transaction monitoring, and regulatory reporting;
• Legitimate interests: Processing for purposes of platform security, fraud prevention, responsible gaming monitoring, and service improvement, where those interests are not overridden by your data protection rights; and
• Consent: Processing for direct marketing communications and for the use of non-essential cookies, which you may withdraw at any time without affecting the lawfulness of prior processing.

6 How walo88 Uses Your Personal Data

walo88 uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, verifying, and administering your walo88 player account, including password resets and security notifications;
• Service delivery: Providing access to casino games, live tables, bingo rooms, and sports betting markets, and crediting game winnings to your wallet;
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Unionbank, Landbank, and cryptocurrency networks;
• KYC and AML compliance: Verifying your identity, assessing money laundering risk, and fulfilling mandatory regulatory reporting obligations to PAGCOR and the Anti-Money Laundering Council;
• Responsible gaming: Monitoring gaming patterns for indicators of problem gambling and administering player-set responsible gaming tools including deposit limits, loss limits, and self-exclusion;
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, bonus abuse, and other prohibited activities;
• Customer support: Responding to your enquiries, resolving disputes, and processing complaints through live chat, email, and other support channels;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Players who have opted in — you may withdraw marketing consent at any time via account settings; and
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform features, game lobby design, payment flows, and overall user experience.

7 Sharing & Disclosure of Personal Data

walo88 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following circumstances:

7.1 Service Providers (Personal Information Processors)

We share personal data with carefully vetted third-party service providers who process data on our behalf and under our documented instruction. These include payment processors, cloud infrastructure providers, identity verification services, fraud detection platforms, and game certification auditors. All PIPs are bound by written agreements prohibiting secondary use of your data.

7.2 Regulatory and Law Enforcement Authorities

walo88 is required by Philippine law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and law enforcement agencies (including the Philippine National Police and the National Bureau of Investigation) in the following circumstances:

• Mandatory transaction reporting under the Anti-Money Laundering Act;
• Responses to valid legal process including court orders and regulatory directives; and
• Where disclosure is necessary to prevent, detect, or investigate serious crime or fraud.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of the Operator's business or assets, personal data held by walo88 may be transferred to the acquiring entity, subject to the same data protection commitments as described in this Policy. Affected Players will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

8 Cookies & Tracking Technologies

The walo88 platform uses cookies and similar tracking technologies to operate core platform functionality, maintain session state after login, and analyse aggregate usage patterns. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to function — these include session authentication tokens that keep you logged in, security cookies that protect against cross-site request forgery, and load-balancing cookies. These cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences — such as your preferred language, responsible gaming tool settings, and game lobby view configuration. Disabling these does not prevent platform use but may reduce convenience.
• Analytics cookies: Collect anonymised data about how Players navigate the platform — which game categories are visited most frequently, where users drop off during the registration flow, and similar aggregate behavioural data used to improve the platform. No individual player is identified in analytics reports.
• Security and fraud-detection cookies: Used to identify unusual device behaviour, detect automated bots, and flag access patterns consistent with unauthorised account access attempts.

You may manage cookie preferences for functional and analytics cookies through your browser settings. Please note that clearing all cookies will log you out of your walo88 session and may require you to reconfigure your platform preferences.

9 Data Retention

walo88 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:

• Identity and KYC documentation: Retained for a minimum of five (5) years following account closure, in compliance with the Anti-Money Laundering Act's record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC regulations and BIR requirements;
• Gaming activity data: Retained for a minimum of two (2) years following account closure for dispute resolution purposes;
• Customer support communications: Retained for a minimum of two (2) years from the date of each interaction; and
• Marketing consent records: Retained for as long as your account is active and for three (3) years thereafter, to evidence consent in the event of a regulatory inquiry.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be associated with an identified or identifiable individual.

10 Security Measures

walo88 implements technical and organisational security measures appropriate to the sensitivity of the personal data it processes. These include:

• Encryption: AES-256 encryption of personal data at rest; TLS 1.3 encryption of all data in transit between your device and walo88 servers;
• Access controls: Role-based access control (RBAC) restricting employee access to personal data on a strict need-to-know basis; all administrative access to personal data is logged and auditable;
• Authentication: Multi-factor authentication required for all walo88 administrative system access; SMS two-factor authentication available and recommended for all player accounts;
• Network security: Web application firewalls, intrusion detection systems, and DDoS mitigation deployed across walo88 infrastructure;
• Penetration testing: Periodic third-party security assessments of the walo88 platform and underlying infrastructure; and
• Staff training: All walo88 personnel with access to personal data receive mandatory data protection training covering DPA obligations, handling procedures, and breach response protocols.

11 Your Rights Under the Data Privacy Act

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by walo88:

To exercise any of the above rights, contact the walo88 Data Protection Officer using the details in Section 15. walo88 will respond to all data subject requests within ten (10) business days. Where a request is complex or involves a large volume of data, walo88 may extend this period by a further twenty (20) business days, in which case you will be notified of the extension and the reason for it within the initial ten-day period.

Please note that certain rights are subject to limitations under the DPA. Specifically, the right to erasure does not apply where walo88 is required by law to retain your data — for example, for AML record-keeping or PAGCOR regulatory compliance purposes.

12 Children's Privacy

walo88 does not knowingly collect, process, or retain personal data belonging to any person under the age of 21. Age is verified through the KYC process as a condition of withdrawal processing. Any account identified as belonging to a person under 21 is suspended immediately and all personal data associated with that account is deleted, subject to any minimum retention periods required by applicable law for audit trail purposes.

If you are a parent or guardian and believe that a person under 21 in your household has created a walo88 account, please contact the walo88 Data Protection Officer immediately using the contact details in Section 15. walo88 will take prompt action to investigate and close any such account.

13 Cross-Border Data Transfers

Some of the third-party service providers engaged by walo88 — including cloud infrastructure providers and certain game certification auditors — may process personal data on servers located outside the Philippines. Where such cross-border transfers occur, walo88 ensures that adequate safeguards are in place to protect your personal data to the standards required by the Philippine Data Privacy Act, including:

• Written data processing agreements containing NPC-compliant data protection clauses binding the recipient to processing only as instructed by walo88;
• Transfer only to countries or organisations that provide an adequate level of data protection as determined by applicable Philippine NPC guidance; and
• Regular review of third-party data processing arrangements to ensure continued compliance with the DPA.

A list of the categories of third-party processors to whom personal data may be transferred cross-border is available upon request from the walo88 Data Protection Officer.

14 Changes to This Privacy Policy

walo88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The date of the most recent revision is displayed at the top of this page.

For material changes — those that significantly affect how we process your personal data or reduce your privacy rights — walo88 will provide at least fourteen (14) days' advance notice by publishing a prominent notice on the walo88 platform and, where practicable, by sending an email notification to your registered email address.

Your continued use of the walo88 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you should cease using the platform and contact walo88 support to initiate account closure.

15 Contact & Data Protection Officer

All privacy-related inquiries, data subject access requests, objections to processing, and data breach reports should be directed to the walo88 Data Protection Officer through the following channels:

• Email: [email protected] — please include "Data Privacy Request" in the subject line for prompt routing to the DPO team;
• Live Chat: Available 24 hours a day, 7 days a week, from within the walo88 platform after logging in to your account — select the "Data Privacy" topic from the support menu; and
• Postal correspondence: Addressed to the Data Protection Officer, walo88, Philippines — contact the DPO by email first for the current postal address, as this may be updated periodically.

walo88 will acknowledge all privacy-related requests within three (3) business days and will provide a substantive response within ten (10) business days, or twenty (20) business days for complex requests.

If you are not satisfied with the response you receive from the walo88 DPO, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through its official complaint handling process. Information about how to file a complaint with the NPC is publicly available through PAGCOR and NPC official channels.