Privacy Policy – 8k8o

1 Introduction

8k8o is committed to protecting the privacy and personal data of all players who use our online gaming platform. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable PAGCOR data handling guidelines for licensed gaming operators.

This Policy applies to all personal information collected through the 8k8o website at 8k8o.app, our mobile-optimized platform, customer support channels, and any other services we provide. It covers how we collect, use, disclose, store, and protect your personal data, as well as the rights you have over your information.

We encourage you to read this Policy carefully. If you have any questions or concerns about how we handle your personal data, please contact our Data Protection Officer (DPO) using the details provided in Section 15 of this Policy.

2 Personal Data We Collect

8k8o collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of our platform. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Gender;
• Nationality and country of residence;
• Government-issued identification number (e.g., PhilSys ID, passport, driver's license);
• Username and account credentials (password stored in encrypted form only).

2.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (including barangay, city, province, and ZIP code).

2.3 Financial Data

• Payment method details (e.g., GCash account number, PayMaya account, BPI, BDO, or Metrobank account details);
• Transaction history, including deposits, withdrawals, and bonus credits;
• Account balance information.

2.4 Gaming & Activity Data

• Game history, including bets placed, games played, and outcomes;
• Session duration and login timestamps;
• Bonus and promotion participation records;
• Responsible gaming settings and self-exclusion records.

2.5 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Cookies and similar tracking technologies (see Section 7);
• Referring URLs and navigation behavior on the 8k8o platform.

2.6 Communications Data

• Records of your communications with 8k8o customer support, including live chat transcripts and email correspondence;
• Feedback, complaints, and dispute records.

3 How We Collect Your Data

We collect personal data through the following means:

3.1 Directly From You

Most of the personal data we hold is provided directly by you when you register for an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in promotions. You are responsible for ensuring that all information you provide is accurate and up-to-date.

3.2 Automatically

When you access the 8k8o platform, we automatically collect certain technical data about your device and browsing behavior through cookies, web beacons, and similar technologies. This data helps us maintain platform security, analyze usage patterns, and improve the overall user experience.

3.3 From Third Parties

We may receive personal data about you from third-party identity verification providers, payment processors, fraud prevention services, and regulatory bodies. This data is used solely to verify your identity, process transactions, and comply with our legal obligations.

4 How We Use Your Personal Data

8k8o uses your personal data for the following purposes:

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 8k8o processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — that is, to provide the 8k8o gaming services you have registered for, including account management, game access, and payment processing;
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) laws, know-your-customer (KYC) requirements, PAGCOR licensing conditions, and tax reporting obligations;
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and freedoms;
• Consent: For certain processing activities, such as sending promotional communications or using non-essential cookies, we rely on your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

8k8o does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the 8k8o platform. These include payment processors (such as GCash, PayMaya, and banking partners), identity verification providers, cloud hosting services, customer support platforms, and analytics providers. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

6.2 Regulatory & Law Enforcement Authorities

We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other government bodies where required by law, court order, or regulatory directive.

6.3 Game Providers

Certain technical data, such as session identifiers and game activity records, may be shared with our licensed third-party game providers to facilitate gameplay and resolve disputes. These providers are prohibited from using this data for any purpose other than providing their services to 8k8o.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 8k8o's business, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Policy.

7 Cookies & Tracking Technologies

8k8o uses cookies and similar tracking technologies to enhance your experience on our platform, maintain session security, and analyze usage patterns. A cookie is a small text file placed on your device when you visit a website.

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling essential cookies may affect the functionality of the 8k8o platform and prevent you from accessing certain features. For non-essential cookies, you may withdraw your consent at any time through our cookie preference center.

8 Data Retention

8k8o retains your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with AML and KYC regulatory requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations;
• Gaming activity records: Retained for a minimum of three (3) years from the date of the activity;
• Customer support communications: Retained for a minimum of two (2) years from the date of the last communication;
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent.

When personal data is no longer required, it is securely deleted or anonymized in accordance with our data disposal procedures.

9 Data Security

8k8o implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive data, including passwords (hashed and salted) and financial information;
• Access controls limiting data access to authorized personnel on a strict need-to-know basis;
• Regular security audits and penetration testing of our platform infrastructure;
• Two-factor authentication (2FA) available for all player accounts;
• Intrusion detection systems and real-time monitoring for suspicious activity;
• Secure data centers with physical access controls and redundant backup systems.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 8k8o:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as described in this Policy;
• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. We will respond to all valid requests within thirty (30) days. In some cases, we may need to verify your identity before processing your request.

11 Children's Privacy

8k8o does not knowingly collect, use, or store personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has provided personal data to 8k8o, please contact our Data Protection Officer immediately so that we can take appropriate action.

12 International Data Transfers

8k8o primarily stores and processes your personal data within the Philippines. However, some of our third-party service providers, including cloud hosting and analytics providers, may process data in other countries. Where personal data is transferred outside the Philippines, we ensure that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to provide an equivalent level of data protection;
• Transfers only to countries or organizations recognized as providing adequate data protection;
• Compliance with the cross-border data transfer requirements of the Data Privacy Act of 2012 and NPC guidelines.

By using the 8k8o platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

13 Third-Party Links

The 8k8o platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies only to the 8k8o platform and does not cover the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit.

8k8o is not responsible for the privacy practices, content, or security of any third-party websites linked from our platform.

14 Updates to This Privacy Policy

8k8o reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Any material changes to this Policy will be communicated to you via email or through a prominent notice on the 8k8o platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the 8k8o platform following any updates constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using the platform and close your account.

We recommend reviewing this Privacy Policy periodically to stay informed of how 8k8o protects your personal data.

15 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 8k8o handles your personal data, please contact our Data Protection Officer (DPO). We are committed to addressing all privacy-related inquiries promptly and transparently.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.

We aim to resolve all privacy-related concerns within thirty (30) days of receipt. For complex requests, we will keep you informed of progress and any expected delays.