8k8app2 Privacy Policy

1 Introduction

8k8app2 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every individual who uses our online casino, sports betting, and gaming services. This Privacy Policy sets out in clear, plain language how we collect, process, store, share, and protect personal data in connection with the 8k8app2 platform, and how you can exercise your rights as a data subject under Philippine law.

This policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR) as administered by the National Privacy Commission (NPC) of the Philippines. It also reflects the requirements placed on licensed online gaming operators under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR).

We encourage you to read this policy carefully before registering an account or submitting any personal information to us. If you have questions about anything covered here, our Data Protection Officer (DPO) is available at the contact details provided in Section 14.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and its implementing regulations, the personal data controller responsible for your information is:

As the data controller, 8k8app2 determines the purposes and means of processing your personal data. We are responsible for ensuring that all processing activities comply with the Data Privacy Act and any other applicable laws, including PAGCOR compliance requirements relating to player data.

Where third-party processors handle personal data on our behalf — such as payment processors, identity verification services, or technology partners — those parties act as data processors under written agreements that impose equivalent data protection obligations consistent with the DPA.

3 Data We Collect

8k8app2 collects personal data through several channels, including account registration, platform use, customer support interactions, and technical systems. The categories of personal data we collect include the following:

3.1 Account & Identity Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile phone number
• Username and encrypted password
• Residential address (barangay, city/municipality, province)
• Government-issued identification documents (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS ID) submitted for KYC verification
• Selfie or liveness check photograph submitted during identity verification

3.2 Financial & Payment Data

• GCash mobile number or registered account identifier
• PayMaya, BPI, BDO, or Metrobank account details as provided for deposit or withdrawal
• Cryptocurrency wallet address (USDT) where applicable
• Transaction history including deposit amounts, withdrawal requests, and timestamps
• Wagering and game history as required for regulatory compliance and dispute resolution

3.3 Technical & Usage Data

• IP address and geolocation data at the time of registration and login
• Device type, operating system, and browser information
• Session data including login times, session duration, and pages visited
• Clickstream and navigation data within the platform
• Game play logs, bet placement records, and round outcomes

3.4 Communications Data

• Records of live chat conversations with our support team
• Email correspondence sent to or received from 8k8app2
• Feedback, complaints, and dispute submissions
• Marketing preferences and opt-in / opt-out records

4 How We Use Your Data

8k8app2 processes your personal data only for specified, explicit, and legitimate purposes in accordance with the principle of purpose limitation under the Data Privacy Act. The table below summarises the primary purposes for which your data is used and the type of data involved in each activity:

8k8app2 will never sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. Data is shared with third parties only as described in Section 6 of this policy.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, personal data may only be processed if at least one of the following criteria is satisfied. 8k8app2 relies on the following legal bases for its processing activities:

• Contract Performance: Processing necessary to provide the services you have registered for, including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, Anti-Money Laundering Act (AMLA) obligations, and NPC requirements.
• Legitimate Interests: Processing necessary for the legitimate interests of 8k8app2, such as fraud prevention, security monitoring, and platform analytics — provided such interests are not overridden by your fundamental rights.
• Consent: Processing based on your freely given, specific, and informed consent, such as receiving marketing emails or SMS promotions. Consent may be withdrawn at any time by contacting our support team or adjusting your account communication settings.

6 Data Sharing & Third Parties

8k8app2 does not sell your personal data. We may share personal data with carefully selected third parties only in the following circumstances and solely to the extent necessary for the specified purpose:

6.1 Service Providers & Processors

We engage trusted third-party service providers who process personal data on our behalf under written data processing agreements. These include:

• Payment processors: GCash (Mynt/G-Xchange), PayMaya, BPI, BDO, Metrobank, and USDT payment infrastructure providers, for the purpose of executing deposits and withdrawals;
• Identity verification providers: eKYC and document verification services used to confirm player identity and age in compliance with PAGCOR and AMLA requirements;
• Customer support platforms: Live chat and helpdesk software providers who host support conversation data;
• Cloud infrastructure providers: Hosting and data storage services that maintain 8k8app2 platform data in secure, access-controlled environments;
• Game software providers: Third-party game studios and live casino operators whose games are hosted on the 8k8app2 platform may receive limited gameplay data necessary for game delivery and integrity purposes.

6.2 Regulatory & Legal Authorities

8k8app2 may disclose personal data to government agencies, regulatory authorities, and law enforcement bodies where required to do so by applicable Philippine law, court order, or the directives of PAGCOR, the Anti-Money Laundering Council (AMLC), or the National Privacy Commission (NPC).

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or part of the 8k8app2 business, personal data held by the platform may be transferred to the acquiring entity, subject to the same or equivalent data protection obligations. Affected users will be notified in advance wherever legally permissible.

7 Data Retention Periods

8k8app2 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with the NPC's guidelines on data disposal. Where data cannot be immediately deleted due to technical constraints, it will be isolated from active processing until secure deletion is possible.

8 Data Security

8k8app2 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• TLS Encryption: All data transmitted between your browser or device and the 8k8app2 platform is encrypted using industry-standard Transport Layer Security (TLS 1.2 or higher);
• Encryption at Rest: Sensitive personal data, including identity documents and financial information, is encrypted at rest using AES-256 encryption;
• Access Controls: Personal data is accessible only to authorised 8k8app2 personnel and service providers on a strict need-to-know basis, enforced through role-based access control (RBAC);
• Two-Factor Authentication: 8k8app2 offers optional two-factor authentication (2FA) for all player accounts and mandates 2FA for internal administrative access;
• Penetration Testing: The platform undergoes regular third-party security assessments and penetration testing to identify and remediate vulnerabilities;
• Incident Response: 8k8app2 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the NPC and affected individuals in accordance with the timeframes required under the Data Privacy Act;
• Staff Training: All 8k8app2 personnel who handle personal data receive regular privacy and security training aligned with DPA requirements.

9 Cookies & Tracking Technologies

8k8app2 uses cookies and similar tracking technologies to operate the platform, improve your experience, and fulfil our security and compliance obligations. A cookie is a small text file placed on your device by our platform when you visit or log in.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and notification preferences to provide a personalised experience.
• Analytics Cookies: Help us understand how players use the platform — which pages are visited most, how long sessions last, and where navigation issues arise. Data collected is aggregated and anonymised where possible.
• Security Cookies: Used for fraud detection, bot prevention, and detecting suspicious login patterns. These are part of our regulatory obligation to protect player accounts.

9.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 8k8app2 platform. Strictly necessary cookies cannot be disabled, as they are required for the platform to operate securely. Most modern browsers allow you to review and delete cookies stored on your device through the browser's settings menu.

9.3 No Third-Party Advertising Cookies

8k8app2 does not allow third-party advertising networks or data brokers to place tracking cookies on our platform. We do not use behavioural advertising technologies that build cross-site profiles of individual users for commercial advertising purposes.

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to the personal data 8k8app2 holds about you. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 14:

8k8app2 will respond to all verifiable data subject requests within 30 calendar days of receipt. Where a request is complex or multiple requests have been received, we may extend this period by a further 30 days and will notify you of the extension in writing. We will not charge a fee for processing data subject requests except in cases of manifestly unfounded or excessive repetition, in which case a reasonable administrative fee may be applied.

11 Minors & Age Restriction

The 8k8app2 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online casino-style gambling. 8k8app2 does not knowingly collect personal data from individuals under the age of 21.

As part of our registration process, all applicants are required to confirm that they are at least 21 years of age, and identity verification procedures are in place to substantiate this claim. Where 8k8app2 discovers or has reasonable grounds to believe that personal data has been submitted by an individual under 21, the associated account will be immediately suspended, the data will be deleted in accordance with our data minimisation obligations, and any funds held in the account will be handled in line with our Terms and Conditions and applicable Philippine regulations.

Parents and guardians who believe that a minor may have registered on the 8k8app2 platform are encouraged to contact our Data Protection Officer immediately at the details provided in Section 14. We take reports of underage account activity very seriously and will investigate all such reports promptly.

12 International Data Transfers

The 8k8app2 platform is operated primarily within the Philippines and processes data in accordance with Philippine law. However, some of our third-party service providers — including cloud infrastructure providers and game software suppliers — may process personal data in servers or facilities located outside the Philippines.

Where personal data is transferred internationally, 8k8app2 ensures that appropriate safeguards are in place as required by the Data Privacy Act and the NPC's regulations on cross-border data transfers. These safeguards include:

• Entering into data transfer agreements that incorporate standard contractual clauses approved by the NPC;
• Verifying that the recipient country or organisation provides an adequate level of data protection equivalent to that required under Philippine law;
• Conducting transfer impact assessments where required and implementing additional technical safeguards such as end-to-end encryption where appropriate.

13 Changes to This Privacy Policy

8k8app2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or the features and services offered on the platform. When material changes are made to this policy, we will notify registered users by posting a prominent notice on the platform and, where appropriate, by sending an email notification to the address associated with your account.

The effective date at the top of this page will always reflect when the most recent version of the policy came into force. We encourage you to review this Privacy Policy periodically. Your continued use of the 8k8app2 platform after the effective date of any updated policy constitutes your acknowledgement of the changes.

If you disagree with any material changes to this Privacy Policy, you have the right to close your account and request deletion of your personal data, subject to any retention obligations that apply under Philippine law.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 8k8app2 handles your personal data, you are encouraged to reach out to our dedicated Data Protection Officer (DPO). The DPO is responsible for overseeing compliance with the Data Privacy Act and for handling all data subject requests and privacy-related enquiries.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that your data protection rights have been violated and your concern has not been adequately addressed by 8k8app2. The NPC is the independent government authority responsible for administering and enforcing the Data Privacy Act of 2012.

All formal data subject requests must be submitted in writing and accompanied by sufficient information to allow us to verify your identity before processing the request. This is necessary to protect your data from being accessed or altered by unauthorised individuals.