Check a Gaming App Before Installing It: Philippines Checklist

1. Check the download source: official store vs. third-party link

Always start by looking at where the app is coming from. The safest source is the Google Play Store (Android) or the Apple App Store (iOS), because apps there are scanned and reviewed.

If the app is not on an official store, you will be downloading it directly from a website. This is called "sideloading." Modern Android versions warn you about this. Take that warning seriously.

For any download link you receive: do not tap it immediately. Instead, verify the domain name. Does it match the official website of the gaming brand you expect? Does the URL look clean (no misspellings, extra numbers, or weird characters)?

If you are using an app or a short link from PH88K, first check where it redirects before downloading anything. You can also read our dedicated guide: PH88K login app guide – from campaign card to destination: a safer checklist.

Practical tip: bookmark the official website of the gaming service you intend to use. Only download from that bookmarked address.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance

2. Use Google Play Protect or equivalent device scanner

On Android, Google Play Protect is turned on by default. It scans every app you install — even those from outside the Play Store. Before installing a gaming app from a third-party source, open the Play Store app, tap your profile icon, then tap Play Protect. Make sure "Scan apps with Play Protect" is enabled and that "Improve harmful app detection" is also on.

When you try to install an unknown app, Play Protect may ask you to send the app to Google for scanning. This is a good idea: it sends app details for a code-level evaluation and returns a safety result.

On iOS, Apple has its own notarization process. However, if you install via TestFlight or enterprise certificates, you should be extra cautious.

If your device warns that the app is unverified or uses sensitive permissions commonly targeted by scammers, follow the warning and do not proceed.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance

3. Examine the app's requested permissions

After you start the installation, the system will show a list of permissions the app wants. Read each one. Ask yourself: does this gaming app really need access to my contacts, SMS, call logs, camera, or microphone?

A legitimate gaming app typically only needs: - Storage (to save data) - Notifications (for alerts) - Network (to connect to servers) - Possibly camera (for QR scanning)

It should NOT need: - SMS or call logs - Contacts - Microphone (unless it has a voice chat feature — confirm this) - Full location (only approximate location if required for legal verification) - Body sensors or health data

The official Android permission guide explains each type: Calendar, Camera, Contacts, Files, Location, Microphone, etc. If you see a permission that seems unrelated to gaming, deny it. On many devices, you can change permissions after installation via Settings > Apps > [App Name] > Permissions.

Practical tip: if the app is from an unknown source and asks for SMS permissions, that is a red flag — scammers use SMS access to intercept one-time passwords.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance

4. Verify the app's license and operator details

Every legitimate gaming platform in the Philippines should have a clear license from PAGCOR. However, do not take anyone's word for it. You can check the official PAGCOR Guarantee website at pagcor.ph/pagcorguarantee, which lists licensed internet gaming platforms.

Important: PH88K cannot and does not verify licenses for third-party platforms. You must confirm for yourself by visiting the PAGCOR site or contacting their hotline.

What to look for on the app's official site or inside the app: - A footer stating the operating company and jurisdiction - A license number (write it down) - Terms and conditions (should be easy to find, not hidden) - Customer support channels (email, local phone number, live chat)

If you cannot find any license information, or the app claims to be "claims a particular regulatory status" without a verifiable number, stop and do not proceed.

For additional guidance, see our full article: Verify the destination before you sign in.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance

5. Check the app's update history and version number

Legitimate apps are regularly updated to fix bugs and security issues. Before installing, look at: - The date of the last update. If it is more than a year old, the app may not be maintained. - The version number. Compare it with the latest version shown on the official site or store. - The number of downloads (on Play Store). A gaming app with very few downloads might be suspicious. - User reviews and ratings. Read recent reviews — do not rely only on star ratings. Genuine users often report issues or scams in the comments.

If you install from outside an official store, the update process becomes manual. You will need to re-download newer versions from the same source every time. This increases risk because you have to trust that source repeatedly.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance

6. Understand the account creation and payment process

Before you create an account, know what personal data the app collects. A gaming app should ask for a username, password, and possibly an email or phone number for verification. Some legitimate platforms require an ID during registration for age verification.

If the app asks for your full home address, bank account number, or other sensitive financial details before you even sign up, that is suspicious.

When it comes to payments, never use direct bank transfers to an individual. Use recognised digital wallets like GCash or Maya, but always verify the recipient details on the official site first. See our guide: Protect the wallet account behind a payment.

Warning: never share your GCash MPIN or Maya password with anyone or inside the app. Legitimate platforms will never ask for these.

Also, be aware of any minimum deposit requirements and withdrawal limits. Read the promotion terms carefully before depositing money. See: Read the complete promotion terms before joining.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance

7. Final steps before tapping install

Before you finally tap install, do a quick final review: - Did you check the source (official store vs. third-party)? - Did you scan with Play Protect? - Did you review permissions? - Did you verify the license via PAGCOR Guarantee? - Did you check update history? - Did you read the terms of service? - Did you set a budget and time limit for yourself?

If any step gives you doubt, do not install. There are many other platforms you can consider.

After installation, keep your guard up: monitor your phone for unusual behaviour, battery drain, or unexpected pop-ups. If anything seems off, uninstall the app immediately and run a security scan.

For adults aged 21 and over only. Play responsibly and set personal time and spending limits.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance