1. Check the PAGCOR Guarantee List

The Philippine Amusement and Gaming Corporation (PAGCOR) operates the PAGCOR Guarantee website at www.pagcor.ph/pagcorguarantee. This page lists internet gaming platforms that are under PAGCOR oversight. Before logging in, visit that page and search for the domain name you intend to use. If the domain does not appear on the list, treat it with caution. The list is regularly updated, so check back if you are unsure. Do not rely on screenshots or third-party claims; always verify directly on the official PAGCOR site.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

2. Inspect the Domain Name Carefully

Open the site and look at the full URL in your browser's address bar. Check for misspellings, extra words, or unusual top-level domains (like .xyz or .top instead of .com or .ph). Legitimate gaming platforms registered in the Philippines typically use professional domains. If the domain looks suspicious or tries to imitate a known brand, do not enter your login details. You can also search for the domain name plus the word “scam” or “complaint” to see if others have reported issues.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

3. Verify the Site Uses HTTPS

Ensure the website address starts with https:// (the “s” stands for secure). Look for a padlock icon in the address bar. Click the padlock to view the site’s security certificate details. The certificate should show the correct domain name and a valid issuer. If the site uses plain HTTP or the certificate is invalid, do not log in.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

4. Review App Permissions and Source (Mobile Users)

If you are using a mobile app, only download it from the official Google Play Store or Apple App Store. Before installing, check the app's requested permissions. For example, a gaming app should not need access to your contacts, SMS, or call logs. If it asks for these, deny installation. On Android, you can use Google Play Protect to scan the app for harmful behaviour. To check Play Protect settings, open the Play Store app, tap your profile icon, go to Settings > Play Protect, and ensure scanning is on. If the app was sideloaded from an unknown source, consider uninstalling it before logging in.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

5. Confirm the Site’s Terms and Support Information

A legitimate gaming platform provides clear terms and conditions, a privacy policy, and a contact support page. Look for a “Terms of Service” or “About Us” link at the bottom of the homepage. Read at least the key points: age requirements (21+), jurisdiction, and dispute resolution. Also check if the site lists a physical address or local contact number. If the support page only shows an email form or no contact details at all, that is a red flag.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

6. Use Domain Age and Reputation Checkers

Tools like Whois lookup (available at whois.domaintools.com) can show when a domain was registered. A brand new domain (registered within the last 30 days) used for gaming is suspicious. Established legitimate sites usually have years of history. You can also check the site's reputation on independent forums or review sites, but treat anonymous reviews with caution. Cross-reference with the PAGCOR list as your primary source.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

7. Practice Responsible Login Habits

Even after verifying the domain, use a strong, unique password for the gaming account. Enable two-factor authentication (2FA) if available. Do not save your login credentials on shared or public devices. Log out after each session. If you receive an email or message asking you to log in via a link, do not click it – go directly to the verified domain instead. And always remember: gambling is only for adults 21+. Set personal time and spending limits, and stop if it stops being fun.

Sources for this section: Google Play Protect app safety, Android app permission guidance, PAGCOR platform verification guidance, PAGCOR and ASC advertising standards

Sources checked

  1. Google Play Protect app safetyChecked 2026-07-19
  2. Android app permission guidanceChecked 2026-07-19
  3. PAGCOR platform verification guidanceChecked 2026-07-19
  4. PAGCOR and ASC advertising standardsChecked 2026-07-19

Related PH88K guides

Verify the destination before you sign inA practical Philippines checklist for checking a gaming destination, final domain, visible terms, support details and official verification sources before signing in.Check a Gaming App Before Installing It: Philippines ChecklistStep-by-step checklist to verify a gaming app before installing it in the Philippines. Check download source, permissions, license, and more to stay safe.Verify every payment instruction before you sendUse GCash and Maya as verification examples when checking current payment availability, recipient details, fees, references and transaction records on a destination.Verify GCash Recipient Before Sending for Gaming PhilippinesLearn how to verify a GCash recipient before sending money for gaming in the Philippines. Avoid fraud with official help center steps and responsible play reminders.Check a gaming app before installing itCheck the download source, Android package, permissions, updates and account route before installing a third-party gaming application in the Philippines.