8k8o Privacy Policy

Introduction

This Privacy Policy (hereinafter "Policy") describes how 8k8o (hereinafter "8k8o," "we," "us," or "the Company") collects, processes, stores, and discloses personal information in connection with the operation of the online gaming platform accessible at 8k8o.one (hereinafter "the Platform").

8k8o is operated under a license granted by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. Where required by PAGCOR regulations, additional data collection and reporting obligations apply, and these are addressed specifically within this Policy.

This Policy applies to all personal information collected from Players, prospective Players, and other individuals who interact with the 8k8o Platform, website, support channels, or marketing communications. It does not apply to the privacy practices of third-party service providers or game studios accessible through the Platform, each of whom maintains independent privacy policies governing their own operations.

Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012, 8k8o is the Personal Information Controller in respect of all personal data collected from users of the Platform. 8k8o determines the purposes and means by which your personal data is processed.

Where 8k8o engages third-party service providers (for example, payment processors, identity verification providers, or game platform operators) to process personal data on its behalf, those parties act as Personal Information Processors under contractual arrangements that require them to process data only on 8k8o's instructions and in compliance with applicable Philippine privacy law.

8k8o has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with data privacy obligations. The DPO can be reached as described in Section 14 of this Policy.

Personal Data We Collect

8k8o collects personal data that is necessary for the lawful operation of the Platform, compliance with regulatory obligations, and the provision of a secure and functional gaming experience to Filipino players. The categories of data collected include:

3.1 Registration Data

When you create an 8k8o account, we collect: full legal name, date of birth, residential address (including city and province), email address, Philippine mobile number, and username. This data is required to verify your identity, confirm your eligibility to use the Platform (including the 21+ age requirement), and comply with PAGCOR's know-your-customer (KYC) requirements.

3.2 Identity Verification Data

To satisfy PAGCOR KYC and anti-money laundering (AML) requirements, 8k8o may collect copies of government-issued Philippine identification documents (e.g., PhilSys ID, UMID, Passport, Driver's License), selfie photographs for liveness verification, and proof of address documentation. This data is processed exclusively for identity verification and regulatory compliance purposes.

3.3 Financial Data

8k8o collects information necessary to process deposits and withdrawals, including your preferred payment method identifiers (e.g., registered GCash or PayMaya mobile number, bank account details for BPI, BDO, or Metrobank). 8k8o does not store full payment account credentials. Transaction records — including deposit amounts, withdrawal requests, timestamps, and payment method used — are retained as required by PAGCOR and AML regulations.

3.4 Gaming Activity Data

We record all gaming activity on your account, including games played, bet amounts, game outcomes, session duration, and wagering history. This data is used for account management, dispute resolution, responsible gaming monitoring, bonus management, and regulatory reporting to PAGCOR.

3.5 Technical & Device Data

When you access the Platform, 8k8o automatically collects technical data including: IP address, device type and operating system, browser type and version, session timestamps, and Platform navigation data. This data is used for security monitoring, fraud detection, and Platform performance optimisation.

3.6 Communications Data

Records of your communications with 8k8o support — including live chat transcripts and email correspondence — are retained for quality assurance, dispute resolution, and regulatory audit purposes.

How We Collect Personal Data

8k8o collects personal data through the following channels:

• Directly from you — through account registration forms, KYC document submission, deposit and withdrawal requests, support interactions, and survey or promotional participation;
• Automatically — through Platform access logs, session cookies, device fingerprinting, and analytics tools deployed on the 8k8o website;
• From third parties — from identity verification service providers (in connection with KYC processes), payment processors (in connection with transaction verification), and fraud detection partners (in connection with account security monitoring);
• From PAGCOR — in cases where PAGCOR shares information relevant to regulatory compliance, licensing conditions, or player protection obligations.

How We Use Your Personal Data

8k8o processes your personal data for the following purposes:

Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, 8k8o processes personal data under the following lawful criteria:

• Consent: Where you have provided clear, explicit, and freely given consent — particularly in connection with marketing communications and the collection of any sensitive personal information;
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and 8k8o (i.e., the provision of gaming services under the accepted Terms and Conditions);
• Legal Obligation: Where processing is required to comply with applicable law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and the Data Privacy Act itself;
• Legitimate Interest: Where processing is necessary for 8k8o's legitimate operational interests — including fraud prevention, platform security, and responsible gaming monitoring — provided such interests do not override your fundamental privacy rights.

Data Sharing & Disclosure

8k8o does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes. Personal data is disclosed to external parties only in the following circumstances:

7.1 Service Providers

8k8o engages trusted third-party service providers who process personal data on our behalf under contractual data processing agreements. These include: payment processing partners (GCash, PayMaya, BPI, BDO, Metrobank integration operators), identity verification service providers, customer support platform providers, and cybersecurity and fraud detection services. All such processors are required to handle your data in compliance with Philippine privacy law and solely for the specified purposes.

7.2 Regulatory Authorities

8k8o is required by law to disclose personal and financial data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities upon lawful request or as mandated by applicable reporting obligations. Such disclosures are made pursuant to legal obligation and do not require your separate consent.

7.3 Law Enforcement

8k8o will disclose personal data to Philippine law enforcement agencies where required by a valid legal process (e.g., court order, subpoena) or where disclosure is necessary to prevent or investigate fraud, money laundering, or other criminal activity affecting the Platform or its users.

7.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of 8k8o's assets, personal data held by 8k8o may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer via the email address registered to your account, and your data rights under this Policy will be preserved.

Cookies & Tracking Technologies

The 8k8o Platform uses cookies and similar tracking technologies to deliver a functional, secure, and personalised user experience. A cookie is a small text file stored on your device by the Platform when you visit the site.

8.1 Types of Cookies Used

• Essential Cookies: Required for core Platform functionality — including login session management, security tokens, and fraud detection signals. These cannot be disabled without impairing your ability to use the Platform.
• Analytics Cookies: Used to understand how Players interact with the Platform in aggregate — which pages are visited, how long sessions last, and which features are used most. This data is processed in anonymised or pseudonymised form.
• Preference Cookies: Store your preferences (such as language setting and responsible gaming limit configurations) to personalise your experience on return visits.
• Security Cookies: Assist in detecting and preventing fraudulent login attempts, unusual activity patterns, and potential account compromise.

8.2 Managing Cookies

You can manage non-essential cookies through your browser settings. Most browsers allow you to refuse, delete, or be notified of cookies. However, disabling essential cookies will prevent you from logging in and using the Platform. Instructions for managing cookies in your specific browser are available in your browser's help documentation.

Data Retention

8k8o retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and PAGCOR regulatory obligations. The following general retention principles apply:

• Active Account Data: Retained for the duration of your account and for a period of five (5) years following account closure, as required by PAGCOR licensing conditions and AML regulations;
• KYC and Identity Verification Records: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, as mandated by the Anti-Money Laundering Act;
• Transaction Records: Retained for a minimum of five (5) years from the date of transaction, pursuant to PAGCOR and AMLC requirements;
• Support Communications: Retained for two (2) years from the date of the interaction, or longer where the communication relates to an open dispute or regulatory investigation;
• Marketing Consent Records: Retained for the duration of your consent and for a period sufficient to demonstrate compliance with the Data Privacy Act.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

Data Security Measures

8k8o implements technical and organisational security measures proportionate to the sensitivity of the personal data held and the risks posed by unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and 8k8o's infrastructure is encrypted using TLS 1.2 or higher with 256-bit symmetric encryption;
• Encryption at Rest: Sensitive personal and financial data stored in 8k8o's database infrastructure is encrypted at rest using AES-256 encryption;
• Access Controls: Personal data access is restricted to authorised 8k8o personnel whose roles require access, enforced through role-based access control (RBAC) and multi-factor authentication for administrative systems;
• Password Security: Player account passwords are stored as cryptographic hashes using modern hashing algorithms. Raw passwords are never stored or accessible to 8k8o personnel;
• Security Monitoring: 8k8o maintains continuous security monitoring of Platform infrastructure to detect intrusion attempts, unusual access patterns, and data breach indicators;
• Incident Response: 8k8o maintains a documented data breach response plan. In the event of a personal data breach affecting your rights and freedoms, 8k8o will notify you and the National Privacy Commission (NPC) in accordance with the timelines prescribed by the Data Privacy Act.

Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to the personal data that 8k8o holds about you. These rights may be exercised by contacting 8k8o's Data Protection Officer as described in Section 14.

Children & Minors

The 8k8o Platform is strictly not intended for use by persons under 21 years of age. This minimum age applies consistently with PAGCOR requirements for online casino gaming in the Philippines. 8k8o does not knowingly collect personal data from individuals under 21.

If 8k8o determines that an account was registered by or on behalf of a person under 21, that account will be immediately closed, any funds deposited will be returned in accordance with applicable PAGCOR protocols, and all personal data collected in connection with the underage account will be deleted or quarantined in accordance with regulatory requirements.

If you believe a minor has registered an 8k8o account, please contact our support team immediately via live chat or by email at [email protected]. We will investigate and act promptly.

Changes to This Privacy Policy

8k8o reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR regulatory requirements, or our operational practices. When material changes are made, 8k8o will notify registered Players via the email address on file no less than seven (7) days before the amended Policy takes effect, and will display a prominent notice on the Platform.

Your continued use of the 8k8o Platform following the effective date of any updated Policy constitutes your acknowledgment of and agreement to the revised terms. The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically.

Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the personal data 8k8o holds about you — including the exercise of your data subject rights under the Philippine Data Privacy Act — please contact 8k8o's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through the in-site chat widget at 8k8o.one. Specify that your query is a Data Privacy matter so it is routed to the DPO team. Support available in Tagalog and English.
• Email: [email protected] — include "Data Privacy Request" in the subject line. (Plain text address — not a clickable link.)

If you are not satisfied with 8k8o's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.