Fun88's Privacy Commitment to Data Protection and Personal Information Self-Management

Privacy isn't just a promise on paper โ€” it's how Fun88 handles every piece of user data entering the system each day. This policy clearly defines what information is collected, how it's used, the technical safeguards in place, and especially players' active rights to view, edit, or delete their personal information. Understanding it helps long-term players grasp the true scope of the commitment and how it works in practice on the platform.

Every time you log in, make a transaction, or edit your account, you're sending personal data into the system. The real question isn't "do they collect it?" โ€” it's "what do they collect, how is it used, and who can access it?" The privacy policy at Fun88 answers all three in turn.

Fun88 privacy commitment protecting players' personal data
The Fun88 privacy policy defines the scope of data collection, how it is used, and the commitment to protecting player information.

What information does Fun88 collect and what is it used for?

Scope of recorded data

When you open an account, the system records basic identity details: full name, date of birth, email address, and phone number. During transactions, financial data such as deposit and withdrawal methods and transaction history is also stored to support reconciliation and handle any future disputes.

Beyond what you provide directly, the system also logs technical data โ€” IP address, browser type, access device, and session cookies. This data is not used to build behavioral profiles outside the scope of running the platform.

Data is used for the following purposes:

  • Identity verification and eligibility checks (KYC)
  • Processing deposits, withdrawals, and transaction reconciliation
  • Fraud detection and account protection
  • Sending account-related service notifications
  • Compliance with legal requirements under the operating license

Fun88 operates under a PAGCOR (Philippines) license and an Isle of Man GSC license โ€” both bodies require transaction logs to be retained for a set period. As a result, some data is kept not at the platform's discretion but because of mandatory legal obligations.

Fun88 TLS SSL encryption and IOVATION infrastructure securing data
The 128-256 bit TLS/SSL encryption combined with IOVATION and multi-layer firewalls protects connections and stored data at Fun88.

What technical safeguards protect player data?

Connection encryption and internal access control

The connection between your browser and Fun88's servers is encrypted with 128-bit to 256-bit TLS/SSL, combined with IOVATION security infrastructure. TLS ensures that data in transit cannot be read or altered โ€” this applies to logins, deposits, withdrawals, and account updates alike.

Internally, not every staff member has access to the full data system. Only personnel authorized for specific roles are granted access, and that access requires multi-factor authentication. Every action is written to the system log, which serves as a cross-check when incidents occur or audits are requested.

Servers are hosted in internationally certified data centers and protected by multi-layer firewalls. Notably, these firewalls don't just block outside unauthorized access โ€” they also segment internal data zones, so if one zone is compromised, the others remain isolated.

Does Fun88 share data with third parties?

The general rule: personal data is not passed to third parties without the player's consent. This is the core commitment of this policy.

There are, however, two exception groups worth understanding clearly:

  • Technical operations partners: payment processors, identity verification providers, or fraud prevention services may receive the minimum data needed to perform their function โ€” no more. These partners are bound by their own data security agreements.
  • Legal requests: PAGCOR, Isle of Man GSC, or law enforcement agencies may request data under a valid legal order. This scenario falls outside the platform's ability to refuse.

Beyond these two groups, data is not sold or transferred for external advertising purposes.

Fun88 no third-party data sharing policy privacy
The principle of not sharing data with third parties, except technical operations partners and mandatory legal requests, at Fun88.

What rights do players have over their personal data?

Access, editing, and deletion requests

This is the most important section for long-term players โ€” especially when account information changes over time or when you want to leave the platform.

Fun88 grants three active rights:

  • Right of access: you can review all personal information currently stored in the system at any time through your account page.
  • Right to edit: update your phone number, email address, or other contact details directly in the settings. Some sensitive changes (full name, date of birth) may require additional identity verification to prevent account takeover.
  • Right to request deletion: you can submit a request to delete your account and related data. Note, however: transaction data subject to mandatory retention under legal requirements (PAGCOR/Isle of Man) cannot be deleted immediately โ€” the platform must keep it until the statutory period expires.

Beyond these three rights, players also control notification settings: turn email marketing, promotional alerts, and SMS messages on or off directly in account settings, without needing to contact support.

For more complex questions โ€” such as suspecting a data leak or wanting to confirm what data is currently held โ€” the Security support channel operates 24/7 as the direct point of contact. Players can also review the Terms of use to understand the corresponding obligations.

Fun88 player rights to access, edit and delete personal data
Fun88 players have the right to access, edit personal information, and request data deletion under the privacy policy.

GDPR and Asian regulatory frameworks

Fun88 applies GDPR standards โ€” the European Union's personal data protection regulation โ€” as a reference framework for its global data handling policy. GDPR requires explicit consent before collection, transparency about how data is used, and gives individuals real control โ€” not just on paper.

Alongside this, similar regulatory requirements in Asia โ€” including those from PAGCOR and Isle of Man GSC โ€” set specific obligations for retaining transaction logs, reporting suspicious transactions (AML), and verifying player identity. These three obligations can sometimes create tension with users' right to deletion โ€” which is why the deletion right is limited, as noted above.

Operational transparency is ensured through the system log: every internal data access is recorded with a timestamp and the identity of the staff member. This serves as a cross-check when disputes arise or when licensing authorities request an audit.

Players can also review the Disclaimer policy to understand the scope of each party's legal responsibilities. For a more comprehensive look at the technical security system, the Security page covers the IOVATION infrastructure and authentication mechanisms in more detail. Opening a new account via the Registration page also means you confirm that you have read and agreed to the current privacy policy.

Fun88 GDPR PAGCOR Isle of Man compliance privacy policy
Fun88 complies with GDPR and the PAGCOR and Isle of Man frameworks, ensuring transparency through its internal audit log system.

An important practical note: the right to request data deletion does not take immediate effect for transaction logs. If an account has an unresolved dispute or is currently undergoing KYC verification, the deletion request will be paused until that process is complete. This isn't a flaw โ€” it's a mandatory legal condition that both players and the platform must follow.