Privacy Policy – 8k8k

1 Scope & Application

This Policy applies to all individuals who interact with the 8k8k platform, including registered players, visitors who browse the website without registering, and any person who contacts 8k8k through its support channels. It governs the collection, storage, use, disclosure, and disposal of personal data whether provided directly by you or collected through your use of the platform.

The 8k8k platform is operated for and directed at residents of the Philippines and Filipino nationals accessing the platform from jurisdictions where online gaming is lawfully permitted. All data processing activities described in this Policy are subject to the Data Privacy Act of 2012, National Privacy Commission (NPC) issuances, and where applicable, the requirements of PAGCOR and other relevant Philippine regulatory bodies.

2 Personal Data We Collect

8k8k collects only the personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is processed. The categories of personal data we collect include:

We do not knowingly collect sensitive personal information — such as health or medical records, religious beliefs, political opinions, or racial or ethnic origin — unless specifically required to fulfill a legal obligation (for example, processing a medical self-exclusion request). Where such data is collected, it is treated with the highest level of protection under the Data Privacy Act.

3 How We Collect Your Data

8k8k collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your profile;
• Automated Technical Collection: Data collected automatically when you access the 8k8k platform — including IP addresses, device identifiers, browser characteristics, and session activity — through server logs, cookies, and similar tracking technologies;
• Payment Processors: Transaction references and confirmation data provided by GCash, PayMaya, and banking partners upon completion of deposit or withdrawal instructions;
• Identity Verification Services: Confirmation data returned by third-party KYC and identity verification providers engaged by 8k8k for document authentication purposes;
• Fraud Prevention Systems: Risk signals and pattern analysis data generated by automated fraud detection systems operating in connection with the platform;
• Correspondence: Personal information contained in emails, live chat transcripts, or other communications you initiate with 8k8k.

4 Purpose of Data Processing

8k8k processes your personal data for the following specific, legitimate, and clearly defined purposes:

• Account Registration and Management: To create, maintain, and administer your 8k8k Account, including verifying your identity and eligibility to use the platform;
• KYC and Age Verification: To confirm that you are 21 years of age or older and to comply with identity verification obligations under Philippine gaming regulations;
• Transaction Processing: To process deposits, withdrawals, and bonus credits, and to maintain an accurate record of your financial activity on the platform;
• Game Delivery: To provide and personalize your gaming experience, including tracking in-game activity, managing session data, and delivering game features correctly;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other forms of abuse or illegal conduct;
• Regulatory Compliance: To fulfill obligations under the Data Privacy Act of 2012, Anti-Money Laundering Act (RA 9160, as amended), and applicable PAGCOR-related requirements, including record-keeping and mandatory reporting;
• Customer Support: To respond to your inquiries, process complaints, and provide assistance in connection with your account or any game dispute;
• Responsible Gaming: To administer and enforce responsible gaming settings you have elected, including deposit limits, self-exclusion periods, and session reminders;
• Marketing Communications: Where you have expressly opted in, to send you promotional offers, bonus notifications, and platform news relevant to your interests — you may opt out at any time;
• Platform Improvement: To analyze aggregate usage patterns, identify technical issues, and improve the performance, security, and user experience of the 8k8k platform.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its implementing rules, 8k8k processes personal data on the following legal bases:

• Consent: For marketing communications and non-essential cookie placement, where you have provided an express, informed, and freely given consent that may be withdrawn at any time without detriment to your account;
• Contractual Necessity: For processing necessary to perform the 8k8k service agreement with you — including account management, game delivery, and payment processing — which cannot reasonably be provided without the data;
• Legal Obligation: For processing required to comply with the Data Privacy Act, Anti-Money Laundering Act, and other Philippine laws to which 8k8k is subject, including mandatory identity verification and transaction reporting obligations;
• Legitimate Interests: For fraud detection, platform security, abuse prevention, and responsible gaming enforcement — where 8k8k's legitimate interest in protecting its players and the integrity of the platform overrides any minimal impact on your privacy.

6 Data Sharing & Disclosure

8k8k does not disclose your personal data to third parties except in the circumstances described below. All third-party service providers engaged by 8k8k who handle personal data are subject to contractual data processing agreements that obligate them to maintain appropriate security standards and process data only on 8k8k's documented instructions.

• Payment Processors: GCash (GXI), Maya Philippines, and participating banks (BPI, BDO, Metrobank) receive transaction data strictly necessary to execute deposits and withdrawals;
• KYC / Identity Verification Providers: Third-party verification services receive your submitted identity documents and return a verification status result to 8k8k — they are prohibited from retaining your data beyond the verification period;
• Game Software Providers: Game vendors (such as Pragmatic Play, PG Soft, JILI, and others) receive session data necessary to deliver and log game outcomes — they do not receive your financial or identity data;
• Fraud Prevention Services: Automated risk and fraud detection providers receive technical session data (IP address, device fingerprint) to generate risk scores — they are not provided your identity or financial details;
• Regulatory and Law Enforcement Authorities: 8k8k will disclose personal data to the National Privacy Commission, Anti-Money Laundering Council (AMLC), PAGCOR, or law enforcement agencies where required to do so by Philippine law, court order, or valid regulatory demand;
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of 8k8k's assets, personal data may be transferred to the successor entity — registered players will be notified in advance of any such transfer that materially affects this Policy.

7 Data Retention

8k8k retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with 8k8k and for a period of five (5) years following account closure, to comply with anti-money-laundering record-keeping obligations under RA 9160;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, consistent with AMLC-mandated record retention requirements;
• Transaction Records: Financial transaction logs are retained for a minimum of five (5) years following each transaction in accordance with applicable financial reporting obligations;
• Game Session Logs: Retained for a minimum of two (2) years for dispute resolution and audit purposes;
• Marketing Consent Records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of the consent history;
• Support Correspondence: Retained for three (3) years following the closure of each support interaction, unless the matter is subject to ongoing legal proceedings.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized so that it can no longer be associated with you as an individual.

8 Security Measures

8k8k implements a layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 8k8k platform is encrypted using industry-standard 256-bit TLS — the same level of encryption used by Philippine banking institutions;
• Data-at-Rest Encryption: Personal and financial data stored in 8k8k's databases is encrypted at rest using AES-256 encryption;
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with data access are subject to confidentiality obligations and regular security training;
• Two-Factor Authentication: Available to all 8k8k account holders to protect login sessions against unauthorized access;
• Intrusion Detection: Automated systems monitor platform infrastructure for unusual access patterns, suspected intrusions, and data anomalies;
• Regular Security Audits: 8k8k's security infrastructure is subject to periodic third-party security assessments and penetration testing;
• Incident Response Plan: A documented data breach response protocol is in place. In the event of a personal data breach that poses a risk to your rights, 8k8k will notify the National Privacy Commission within 72 hours and affected individuals as required by the Data Privacy Act.

9 Cookies & Tracking Technologies

8k8k uses cookies and similar technologies (such as local storage objects and session tokens) to operate the platform, maintain your session, and analyze usage patterns. The following categories of cookies are used:

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the 8k8k platform, including logging in and conducting transactions. For functional and analytics cookies, your browser's cookie management tools provide sufficient control.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012 and applicable NPC regulations, you have the following rights with respect to your personal data processed by 8k8k. These rights may be exercised by contacting our Data Protection Officer as described in Section 14:

Requests to exercise data subject rights will be acknowledged within 5 business days and fulfilled within 30 calendar days, or within a longer period where the complexity or volume of requests makes immediate compliance impracticable — in which case you will be notified of the extended timeline. Identity verification is required before any request is processed to protect your data from unauthorized disclosure.

11 Minors & Age Verification

The 8k8k platform is strictly for individuals aged 21 years or older. We do not knowingly collect personal data from any person under the age of 21. The platform implements mandatory KYC verification for all registered accounts to enforce this age restriction.

If 8k8k becomes aware — through any means — that personal data has been collected from a person under the age of 21, the following actions will be taken without delay:

• The associated account will be immediately suspended and access disabled;
• All real-money deposits will be refunded to the original payment method;
• All winnings arising from underage play will be forfeited in accordance with 8k8k's Terms & Conditions;
• Personal data collected in connection with the underage account will be deleted from 8k8k's systems, except where retention is required to document the incident and prevent future re-registration attempts;
• The incident will be documented and, where applicable, reported to relevant Philippine authorities.

If you believe that a person under 21 has registered an account on 8k8k, please contact our support team immediately so we can investigate and take appropriate action.

12 Third-Party Links & Integrations

The 8k8k platform may reference or integrate services provided by third parties — including game software providers, payment gateways, and identity verification services. While these integrations are necessary to deliver the 8k8k service, each third-party provider operates under its own privacy policy and data processing terms.

8k8k is not responsible for the privacy practices of third-party services beyond the contractual data processing obligations imposed through our service agreements. We recommend that you review the privacy policies of GCash, PayMaya, and any banking institution you use for 8k8k transactions, as those entities handle payment data under their own frameworks.

The 8k8k website does not contain links to unaffiliated third-party websites. All navigation from the 8k8k platform remains within the 8k8k domain or navigates directly to the secure portals of its authorized payment and service partners.

13 Changes to This Privacy Policy

8k8k reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance from the National Privacy Commission, or the features of the 8k8k platform. The "Effective Date" at the top of this document will be updated with each revision.

When changes are material — meaning they significantly affect how we process your personal data or your rights under this Policy — 8k8k will provide advance notice via the email address associated with your registered account, and/or through a prominent notice displayed upon login. For minor or clarifying amendments, the updated Policy will be posted without separate individual notification.

Your continued use of the 8k8k platform after the stated effective date of a revised Policy constitutes your acceptance of the changes. If you do not agree with a material revision, you may close your account by contacting 8k8k support and requesting account closure, after which you will receive a refund of any remaining real-money balance in your verified account.

14 Contact & Data Protection Officer

8k8k has appointed a Data Protection Officer (DPO) responsible for overseeing all privacy compliance matters, managing data subject right requests, and serving as the point of contact with the National Privacy Commission of the Philippines.

For any privacy-related inquiry, data subject rights request, or to report a suspected data protection concern, please contact us through the following channels:

• Privacy & DPO Email: [email protected] — mark your subject line "Data Privacy Request — [Your Account Username]" to ensure routing to the DPO team;
• Live Chat: Available 24/7 through the 8k8k platform for logged-in players — use the subject "Privacy Inquiry" when initiating the chat;
• Response Time: Acknowledgment within 5 business days; full response to data subject requests within 30 calendar days (extendable where legally justified with prior notice);
• Escalation: If you are not satisfied with our response to a privacy concern, you may escalate your complaint to the National Privacy Commission of the Philippines (privacy.gov.ph) — the regulatory body responsible for enforcing the Data Privacy Act of 2012.