ph8k8 Casino – Privacy Policy

1. Introduction

1.1 ph8k8 Casino is committed to protecting the privacy and personal data of all players, visitors, and individuals who interact with the ph8k8 platform. This Privacy Policy is intended to provide clear, transparent, and comprehensive information about our personal data practices in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA"), its Implementing Rules and Regulations (IRR), and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

1.2 ph8k8 recognizes that Filipino players entrust us with sensitive personal information when they register, verify their identities, make financial transactions, and engage with the platform. We treat this trust as a fundamental responsibility and design our data practices accordingly.

1.3 If you have questions or concerns about how ph8k8 processes your personal data at any time, please contact our Data Protection Officer using the details provided in Section 14 of this Policy.

2. Data Controller

2.1 For the purposes of the Philippine Data Privacy Act, ph8k8 Casino acts as the personal information controller with respect to the personal data of registered players and platform visitors.

2.2 ph8k8 has designated a Data Protection Officer (DPO) responsible for overseeing data privacy compliance and serving as the point of contact for player data rights requests and inquiries. The DPO may be reached via the contact information provided in Section 14 of this Policy.

3. Information We Collect

3.1 ph8k8 collects personal data that is necessary to provide its services securely and in compliance with applicable gaming and financial regulations. The categories of information we collect include:

3.1 Registration and Identity Data

When you create a ph8k8 account, we collect: full legal name, date of birth (to verify 21+ age requirement), email address, Philippine mobile number, residential address, and chosen username.

3.2 Identity Verification (KYC) Data

To fulfill our obligations under applicable AML (anti-money laundering) regulations and PAGCOR compliance requirements, ph8k8 requires players to submit government-issued identification documents. These may include a PhilSys National ID, passport, driver's license, SSS ID, GSIS ID, PRC ID, or Voter's ID, along with supporting proof of address documents where required.

3.3 Financial and Transaction Data

ph8k8 records all financial transactions associated with your account, including deposit amounts and timestamps, withdrawal requests and processing records, GCash and Maya wallet reference numbers, bank account or card details (where applicable), and bonus issuance and wagering records. Full payment card numbers are never stored by ph8k8; card processing is handled by certified third-party payment processors.

3.4 Gaming Activity Data

ph8k8 maintains records of game sessions, bet histories, win/loss records, game preferences, session durations, and responsible gaming tool usage (e.g., deposit limit activations, self-exclusion requests). This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical and Device Data

When you access ph8k8, we automatically collect certain technical information including: IP address, device type and operating system, browser type and version, session timestamps and duration, pages visited within the platform, and referral source data. This information is used to maintain platform security, detect fraud, and optimize the player experience.

3.6 Communications Data

ph8k8 retains records of communications between players and our support team, including live chat transcripts, email correspondence, and complaint records. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

3.7 Marketing Preferences

Where players have opted in to receive promotional communications, ph8k8 records marketing consent, communication preferences, and interaction data (e.g., whether a promotional email was opened or a bonus was claimed from a campaign).

4. How We Use Your Personal Data

4.1 ph8k8 uses the personal data we collect for the following purposes:

Purpose	Description
Account Creation and Management	To register your ph8k8 account, maintain your player profile, and administer your account balance, bonuses, and preferences.
Identity Verification (KYC)	To verify your identity, age (21+ requirement), and eligibility to use the ph8k8 platform in compliance with PAGCOR and AML obligations.
Payment Processing	To process deposits, withdrawals, and refunds in PHP via GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment channels.
Platform Security and Fraud Prevention	To detect, investigate, and prevent unauthorized access, suspicious transactions, multi-accounting, and other fraudulent or prohibited activity.
Legal and Regulatory Compliance	To meet obligations under the Philippine DPA, PAGCOR regulations, AML laws, and other applicable legal requirements including law enforcement requests.
Customer Support	To respond to account inquiries, resolve disputes, process complaints, and provide technical assistance to players.
Responsible Gaming	To monitor gaming activity for signs of problem gambling, enforce self-exclusion and limit settings, and deliver responsible gaming interventions where appropriate.
Marketing Communications	To send promotional offers, bonus notifications, and platform news to players who have provided explicit marketing consent. Players may opt out at any time.
Platform Improvement	To analyze aggregated usage data, improve platform features, optimize the mobile experience, and refine the game library based on player behavior patterns.

5. Legal Bases for Processing

5.1 ph8k8 processes your personal data only where a lawful basis exists under the Philippine Data Privacy Act. The applicable legal bases for our data processing activities are:

• Contractual Necessity: Processing required to fulfill our obligations under the ph8k8 Terms and Conditions, including account management, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, PAGCOR compliance requirements, and data retention mandates.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed, and freely given consent. Consent may be withdrawn at any time.

6. Data Sharing and Disclosure

6.1 ph8k8 does not sell, rent, or transfer your personal data to third parties for their own independent marketing or commercial purposes. We share personal data only in the following limited circumstances:

6.1 Service Providers

ph8k8 engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include: payment processors (for GCash, Maya, and bank transfer transaction processing); KYC and identity verification service providers; game technology providers (who may receive session-level data to operate their games); cloud infrastructure and hosting providers; and customer support platform providers. All service providers are contractually bound to process data only on ph8k8's instructions and to maintain appropriate security standards.

6.2 Regulatory and Law Enforcement Authorities

ph8k8 may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Philippine National Police, the National Bureau of Investigation, or other competent authorities where required to do so by law, court order, or regulatory mandate. ph8k8 will take reasonable steps to notify affected players of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving ph8k8, personal data held by ph8k8 may be transferred to the successor entity. Players will be notified of any such transfer and the privacy protections applicable to their data under the new entity prior to any change in data controller.

7. Cookies and Tracking Technologies

7.1 ph8k8 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for platform functionality, including maintaining your login session, remembering your account preferences, and enabling secure transactions. These cannot be disabled without affecting your ability to use ph8k8.
• Performance and Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate the ph8k8 platform. This data is used to identify technical issues and improve the user experience. These cookies do not identify you personally.
• Functional Cookies: Used to remember your preferences, such as language settings, responsible gaming tool configurations, and display preferences. These improve convenience but are not strictly necessary.
• Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content based on your engagement with the platform. You may withdraw consent for marketing cookies at any time via your account settings.

7.2 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the ph8k8 platform.

8. Data Retention

8.1 ph8k8 retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:

• Active Account Data: Retained for the duration of the player's account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML regulations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or account closure (whichever is later), as required by Philippine AML law.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Support Communications: Retained for three (3) years from the date of the last communication or resolution of a dispute, whichever is later.
• Marketing Data: Retained until consent is withdrawn or until the player requests deletion, subject to any mandatory retention requirements.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to an individual player.

9. Data Security

9.1 ph8k8 implements technical and organizational security measures appropriate to the nature and sensitivity of the personal data we process. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and ph8k8 servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Comprehensive audit logging of all access to sensitive player data;
• Two-factor authentication requirements for internal administrative access;
• Regular security assessments and penetration testing of the ph8k8 platform;
• Employee data privacy and security training programs;
• Incident response procedures with defined timelines for breach detection, containment, and notification.

9.2 In the event of a personal data breach that is likely to result in harm to affected players, ph8k8 will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected players without undue delay, in accordance with the Philippine Data Privacy Act and NPC Circular 16-03.

10. Your Rights as a Data Subject

10.1 Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ph8k8:

• Right to Be Informed: The right to be notified of the purposes for which your personal data is being collected and processed — fulfilled by this Privacy Policy.
• Right to Access: The right to obtain a copy of the personal data ph8k8 holds about you, including information about how it is being used.
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated personal data in your ph8k8 account.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ph8k8's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

10.2 To exercise any of your data subject rights, please contact the ph8k8 Data Protection Officer using the contact details in Section 14. ph8k8 will respond to all verified data rights requests within thirty (30) calendar days of receipt, in accordance with NPC guidelines.

10.3 ph8k8 may require you to verify your identity before processing a data rights request to ensure the security and confidentiality of your personal data.

11. Children and Minors

11.1 The ph8k8 platform is strictly intended for adults aged 21 years and above only, consistent with PAGCOR regulations governing online gaming in the Philippines. ph8k8 does not knowingly collect or process personal data of individuals under the age of 21.

11.2 If ph8k8 becomes aware that personal data has been collected from a person under 21, the affected account will be immediately suspended and the data will be deleted or blocked in accordance with the Philippine Data Privacy Act. If you believe a minor has registered on ph8k8, please contact our support team immediately.

11.3 ph8k8 employs age verification measures during the registration process and as part of KYC document review to prevent underage access to the platform.

12. Cross-Border Data Transfers

12.1 In connection with the operation of the ph8k8 platform, certain personal data may be processed by service providers or technical infrastructure located outside the Philippines. Where such cross-border transfers occur, ph8k8 ensures that adequate safeguards are in place to protect your personal data, including contractual data processing agreements that impose data protection obligations equivalent to those required under the Philippine Data Privacy Act.

12.2 ph8k8 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual protections as required by the NPC.

13. Changes to This Privacy Policy

13.1 ph8k8 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable legal requirements, or platform operations. When we make material changes, we will notify registered players via email or an in-platform notification prior to the changes taking effect, and will update the effective date at the top of this page.

13.2 Players are encouraged to review this Privacy Policy periodically. Continued use of the ph8k8 platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised terms, to the extent permitted by applicable law.

14. Contact and Data Protection Officer

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph8k8, please contact us via live chat on the platform, available 24 hours a day, 7 days a week.

14.2 Written inquiries and formal data subject rights requests may be submitted to the ph8k8 Data Protection Officer at: [email protected]. Please include "Data Privacy Request" in your subject line. ph8k8 acknowledges all written inquiries within two (2) business days and provides a substantive response within thirty (30) calendar days.

14.3 Players who are not satisfied with ph8k8's response to a data privacy concern may lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.