Privacy Policy

grand889 (referred to in this Privacy Policy as "grand889," "we," "us," or "our") is an online gaming platform operating at https://grand889.vip, offering casino games, slots, bingo, live dealer games, and related entertainment services to eligible players in the Philippines.

grand889 acts as the Personal Information Controller (as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines) with respect to the personal data of all registered users of the platform. This means grand889 determines the purposes and means by which your personal data is collected and processed.

Our designated Data Protection Officer (DPO) can be reached through the contact details provided in Section 15 of this Privacy Policy. The DPO is responsible for overseeing grand889's compliance with the Data Privacy Act and its Implementing Rules and Regulations, and for handling all data subject rights requests and privacy-related inquiries.

This Privacy Policy applies to all personal data collected, processed, stored, or shared by grand889 in connection with:

• Your registration and use of a grand889 player account.
• Your participation in any game, promotion, tournament, or loyalty program offered on the grand889 platform.
• Any financial transaction you conduct through grand889, including deposits and withdrawals via GCash, Maya, bank transfer, or debit card.
• Your interactions with grand889 customer support, live chat, or any other communication channel.
• Your browsing and navigation activity on the grand889 website, including data collected through cookies and similar tracking technologies.
• Any identity verification (KYC) process you undergo as a grand889 player.

This Policy does not apply to third-party websites, services, or platforms that may be referenced on the grand889 platform. grand889 is not responsible for the privacy practices of any third party, and we encourage you to review the privacy policies of any third-party service you use in connection with your grand889 account (such as your GCash or Maya app, or your bank's online portal).

grand889 collects the following categories of personal data from registered players and platform visitors. We collect only what is necessary for the purposes described in this Policy.

3.1 Registration and Identity Data

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth (to verify the 21+ age requirement under PAGCOR regulations)
• Residential address (barangay, city/municipality, province)
• Email address and mobile number
• Username and encrypted password
• Nationality and citizenship status

3.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, Voter's ID, PRC ID)
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate)
• Selfie or facial photograph for liveness verification, where required
• Source of funds declaration, where required for AML compliance

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and payment method references
• GCash account number or Maya account reference (masked)
• Bank account details (bank name, account number — masked after verification)
• Debit card details (card type, last four digits — full card numbers are never stored by grand889)
• Transaction history and account balance records

3.4 Gaming Activity Data

• Game session logs (games played, duration, stakes, outcomes)
• Bonus and promotion usage history
• Responsible gaming settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records

3.5 Technical and Device Data

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform usage logs and clickstream data

grand889 collects your personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings.
• Automatically: When you browse or use the grand889 platform, we automatically collect technical and device data through cookies, server logs, and similar technologies. See Section 8 for full details on our cookie practices.
• From third-party verification providers: grand889 may use third-party identity verification services to assist with KYC checks. These providers may cross-reference the information you provide against government databases or credit bureau records in the Philippines.
• From payment processors: When you make a deposit or withdrawal via GCash, Maya, or bank transfer, our payment processing partners share transaction confirmation data with grand889 to credit or debit your account correctly.
• From regulatory authorities: PAGCOR or other Philippine government agencies may share information with grand889 as part of regulatory compliance, responsible gaming, or anti-money laundering obligations.

grand889 uses your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and provide you with access to grand889 services.
• Age and eligibility verification: To confirm that you meet the 21+ age requirement and all other eligibility criteria under PAGCOR regulations and these Terms & Conditions.
• Payment processing: To process deposits and withdrawals via your chosen payment method (GCash, Maya, bank transfer, or debit card) and to maintain accurate financial records.
• KYC and AML compliance: To fulfill our obligations under Philippine anti-money laundering laws, including Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments, and PAGCOR's KYC requirements.
• Responsible gaming: To monitor gaming activity for signs of problem gambling behavior, enforce deposit and session limits you have set, and administer self-exclusion requests.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct.
• Platform improvement: To analyze aggregated, anonymized usage data to improve the grand889 platform, game selection, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Legal and regulatory compliance: To comply with applicable Philippine laws, PAGCOR regulations, court orders, and lawful requests from government authorities.

Under the Philippine Data Privacy Act of 2012, grand889 processes your personal data on the following legal bases:

• Contractual necessity: Processing that is necessary to perform the contract between you and grand889 — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR licensing requirements, and tax reporting duties.
• Legitimate interests: Processing necessary for grand889's legitimate business interests, such as fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

grand889 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only where necessary and in accordance with this Privacy Policy:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the minimum data necessary to process your financial transactions.
• Identity verification providers: Third-party KYC service providers who assist grand889 in verifying your identity and age in compliance with PAGCOR and AML requirements.
• Game content providers: Software providers whose games are hosted on the grand889 platform may receive anonymized session data for game performance and fairness auditing purposes. They do not receive your personally identifiable information.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law, regulation, or lawful order.
• Law enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other lawful legal process.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by grand889, subject to strict confidentiality obligations.

All third parties with whom grand889 shares personal data are required to handle that data in accordance with applicable Philippine data protection law and grand889's data processing standards. grand889 does not authorize any third party to use your personal data for their own independent marketing or commercial purposes.

grand889 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect your account. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have configured. These improve your experience but are not strictly required.
• Analytics cookies: Collect anonymized data about how players navigate and use the grand889 platform. This data helps us identify areas for improvement and optimize the user experience. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts on the grand889 platform.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the grand889 platform. For all other cookie types, you may opt out without affecting your ability to access the platform.

grand889 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and registration data: Retained for the duration of your active account, plus a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with Philippine tax and AML record-keeping obligations.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each session, for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Customer support records: Retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent, plus one (1) year after withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, grand889 will securely delete or anonymize your personal data in accordance with our data disposal procedures. Anonymized, aggregated data that cannot be used to identify you may be retained indefinitely for statistical and analytical purposes.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by grand889:

• Right to be Informed: You have the right to be informed about how grand889 collects, uses, and processes your personal data — which is the primary purpose of this Privacy Policy.
• Right to Access: You have the right to request a copy of the personal data grand889 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data grand889 holds about you. You may update basic account information directly through your account settings dashboard.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to grand889's legal retention obligations under Philippine law.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to grand889's overriding legal obligations.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe grand889 has violated your data privacy rights.

grand889 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and grand889 servers is encrypted using 256-bit SSL/TLS encryption.
• Password hashing: Your account password is never stored in plain text. grand889 uses industry-standard cryptographic hashing algorithms to store password credentials securely.
• Access controls: Access to personal data is restricted to authorized grand889 personnel on a strict need-to-know basis. All internal data access is logged and subject to regular audit.
• Firewalls and intrusion detection: grand889's servers are protected by enterprise-grade firewalls and real-time intrusion detection systems that monitor for suspicious activity around the clock.
• Regular security assessments: grand889 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in our systems.
• Data breach response: In the event of a personal data breach that poses a real risk of serious harm to affected players, grand889 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

While grand889 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your grand889 account credentials and for ensuring that no unauthorized person has access to your account.

The grand889 platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations and Philippine gaming law. grand889 does not knowingly collect, process, or store personal data from any person under the age of 21.

If grand889 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately:

• Suspend the associated account pending investigation.
• Delete all personal data associated with the underage user from our systems.
• Forfeit any account balance in accordance with our Terms & Conditions.
• Report the incident to PAGCOR and, where required, to the appropriate Philippine child protection authorities.

grand889 primarily stores and processes your personal data within the Philippines. However, in certain circumstances — such as when using internationally hosted game content providers, cloud infrastructure services, or KYC verification platforms — your personal data may be transferred to and processed in countries outside the Philippines.

Where such cross-border transfers occur, grand889 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection, as recognized by the National Privacy Commission of the Philippines.
• Entering into data processing agreements with all international recipients that include standard contractual clauses consistent with NPC requirements.
• Conducting transfer impact assessments where required to ensure that your rights as a data subject are not undermined by the transfer.

By registering and using the grand889 platform, you acknowledge and consent to the transfer of your personal data to international recipients where necessary for the operation of the platform, subject to the safeguards described above.

grand889 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulations, or NPC guidelines. The date of the most recent revision is always displayed at the top of this page.

When we make material changes to this Privacy Policy — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify you by posting a prominent notice on the grand889 platform and, where practicable, by sending an in-platform notification to your registered account before the changes take effect.

Your continued use of the grand889 platform after any updated Privacy Policy has been posted constitutes your acknowledgment of the changes. If you do not agree with any updated terms, you should stop using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or grand889's data processing practices, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 inside your grand889 account dashboard after logging in. Select "Privacy & Data" as the inquiry category.
• General Support: [email protected] (plain text — not a clickable link)

grand889 will acknowledge all privacy-related inquiries within three (3) business days and will provide a substantive response within fifteen (15) business days, in accordance with NPC guidelines on data subject rights requests.

If you are not satisfied with grand889's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.