k8k8 Casino
Privacy Policy

k8k8 Casino ("k8k8," "we," "us," "our") operates the online gaming and sports betting platform accessible at k8k8.biz. k8k8 is the personal information controller responsible for the personal data collected through this platform from players and visitors located in the Philippines and from Philippine nationals accessing the platform from abroad.

k8k8 processes personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission ("NPC"). Where k8k8's operations extend to other jurisdictions, applicable local data protection frameworks are additionally observed.

This Privacy Policy applies to all personal data collected by k8k8 in connection with:

• Registration for and use of a k8k8 player account;
• Deposits, withdrawals, and payment transactions processed through the k8k8 platform;
• Participation in any gaming activity, including casino games, sports betting, bingo, and e-sabong available on k8k8;
• Use of k8k8 customer support channels, including live chat and email;
• Visits to the k8k8.biz website, including browsing activity and interactions with the platform without a registered account;
• Participation in k8k8 promotions, surveys, or marketing communications.

This Policy should be read together with k8k8's Terms & Conditions and Responsible Gaming Policy, both of which incorporate additional commitments relevant to data handling.

k8k8 collects the following categories of personal data from players and platform visitors:

3.1 Identity & Registration Data Required

Full legal name Date of birth Gender Username Email address Philippine mobile number Account password (hashed)

This data is collected at the point of account registration and is required to create and maintain a k8k8 player account. Date of birth is collected specifically to enforce the mandatory 21+ age restriction on all real-money gaming activities on the platform.

3.2 Identity Verification Data KYC / AML

Government-issued ID (front & back) Proof of address Selfie / facial verification image Tax Identification Number (TIN)

Identity verification documents are collected when required to complete know-your-customer (KYC) checks, age verification, or anti-money laundering (AML) compliance obligations. Not all players will be required to submit all categories of verification document — this depends on transaction volumes and regulatory requirements applicable to your account.

3.3 Financial & Payment Data Required for Transactions

GCash account number PayMaya account details Bank account name & number Transaction history Deposit & withdrawal records Wallet balance history

k8k8 does not store full payment card numbers. Payment processing for GCash, PayMaya, BPI, BDO, and Metrobank transactions is handled via secure integrations with those respective financial institutions. k8k8 retains records of transaction amounts, timestamps, and account identifiers for financial and regulatory purposes.

3.4 Gaming Activity Data Operational

Game session records Wager amounts & outcomes Bonus claims & usage Sports betting selections Session duration & timing Responsible gaming tool settings

3.5 Technical & Device Data Automatic

IP address Device type & model Operating system Browser type & version Screen resolution Login timestamps Session cookies Geolocation (approximate)

Technical and device data is collected automatically when you access the k8k8 platform. This data is used for platform security, fraud prevention, technical support, and compliance with jurisdictional access restrictions.

3.6 Communications Data

When you contact k8k8 support via live chat or email, we retain records of those communications — including your support queries, the responses provided, and any documents shared during support interactions. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

k8k8 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make deposits or withdrawals, contact support, respond to surveys, or participate in promotions;
• Automatically through the platform — when you access k8k8.biz, technical and device data including IP addresses, browser identifiers, and session cookies are collected automatically via standard web technologies;
• From payment service providers — GCash, PayMaya, BPI, BDO, and Metrobank may share transaction confirmation data with k8k8 as part of deposit and withdrawal processing flows;
• From identity verification services — where k8k8 uses third-party KYC providers to verify identity documents or perform age verification checks, those providers may share verification outcomes and related data with k8k8;
• From fraud prevention and security services — k8k8 may receive signals from third-party fraud detection services to help identify suspicious account activity or unauthorized access attempts.

k8k8 processes your personal data for the following purposes:

• Account creation and management — to register, maintain, and provide access to your k8k8 player account;
• Age verification and eligibility checks — to enforce the mandatory 21+ age restriction on all real-money gaming activities and to verify jurisdictional eligibility;
• Payment processing — to facilitate deposits into your k8k8 wallet and withdrawals to your GCash, PayMaya, or bank account;
• Gaming services delivery — to operate and deliver the games, sports betting, bingo, and other services available on the k8k8 platform;
• Anti-money laundering and fraud prevention — to monitor for and investigate suspicious transactions, unauthorized account access, and fraudulent activity, in compliance with applicable financial crime prevention regulations;
• Regulatory compliance — to fulfil obligations under PAGCOR regulations, the Philippine DPA, AML reporting requirements, and other applicable laws;
• Customer support — to respond to your queries, resolve disputes, and improve service quality;
• Responsible gaming — to administer deposit limits, session reminders, self-exclusion, and other player protection tools; to identify indicators of problem gambling; and to facilitate referrals to support resources where appropriate;
• Platform security — to detect, investigate, and prevent security threats, account takeovers, and unauthorized platform access;
• Platform improvement — to analyze aggregated usage patterns and improve the performance, features, and user experience of the k8k8 platform;
• Marketing communications — to send you promotional offers, bonus notifications, and relevant platform updates, subject to your communication preferences and applicable opt-out rights.

k8k8 processes your personal data on the following legal bases as provided under the Philippine Data Privacy Act of 2012:

• Contractual necessity — Processing required to fulfil our contractual obligations to you under the k8k8 Terms & Conditions, including account management, payment processing, and service delivery;
• Legal obligation — Processing required to comply with applicable legal obligations, including PAGCOR regulatory requirements, AML reporting obligations, and tax compliance;
• Legitimate interests — Processing necessary for k8k8's legitimate operational interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights;
• Consent — Processing of personal data for marketing communications and optional platform features, where we rely on your specific, informed consent which may be withdrawn at any time;
• Vital interests — In limited circumstances, processing necessary to protect the vital interests of a data subject, including in connection with responsible gaming interventions.

k8k8 does not sell your personal data. k8k8 may share your personal data with the following categories of recipients where necessary and permitted under applicable law:

7.1 Payment Service Providers

GCash (G-Xchange Inc.), PayMaya Philippines, BPI, BDO Unibank, Metrobank, and other Philippine financial institutions involved in processing your deposits and withdrawal requests. Data shared with payment providers is limited to what is necessary to process the specific transaction.

7.2 Identity Verification and KYC Providers

Third-party identity verification service providers engaged to perform document verification, facial verification, and age verification checks. These providers are bound by data processing agreements requiring them to process your data solely for the purposes of completing k8k8's KYC requirements.

7.3 Game Content Providers

Game studios and providers — including but not limited to PG Soft, Pragmatic Play, JILI, Evolution Gaming, and others — may receive limited technical data (such as session identifiers) necessary to deliver their games through the k8k8 platform. These providers do not receive your full identity or payment data.

7.4 Regulatory and Law Enforcement Authorities

PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory and law enforcement authorities, where k8k8 is legally required or legally permitted to make such disclosures. k8k8 will notify affected players of disclosures to regulatory authorities where legally permitted to do so.

7.5 Professional Advisers

Legal, accounting, and compliance advisers engaged by k8k8 in connection with the operation of the platform, subject to applicable professional confidentiality obligations.

k8k8 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention periods:

• Account and identity data — retained for the duration of your k8k8 account plus a minimum of 5 years following account closure, in accordance with AML record-keeping obligations;
• Financial transaction records — retained for a minimum of 5 years from the date of each transaction, as required by Philippine AML regulations;
• KYC and identity verification documents — retained for a minimum of 5 years following the completion of verification, or for the duration of the account plus 5 years if the account remains active;
• Gaming activity records — retained for a minimum of 2 years for operational and dispute resolution purposes, and longer where required by regulatory obligations;
• Support communications — retained for a minimum of 2 years from the date of the most recent interaction;
• Technical and device data — retained for rolling periods appropriate to security and fraud prevention purposes, typically 12 months.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized. Where data must be retained beyond standard periods due to ongoing legal proceedings, regulatory investigations, or dispute resolution processes, it will be retained until those processes are concluded.

k8k8 implements technical and organizational security measures designed to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• TLS/SSL encryption for all data transmitted between your device and k8k8 servers;
• Password hashing using industry-standard algorithms — k8k8 does not store plaintext passwords;
• Two-factor authentication (2FA) available to all players via SMS OTP to their registered Philippine mobile number;
• Access controls limiting access to personal data to authorized k8k8 personnel on a need-to-know basis;
• Regular security audits and penetration testing of the k8k8 platform infrastructure;
• Encrypted storage for sensitive personal data including identity documents and financial records;
• Automated fraud detection systems monitoring for unusual login patterns and suspicious account activity in real time.

While k8k8 takes significant steps to protect your data, no online platform can guarantee absolute security. You play an important role in keeping your account secure — please use a strong, unique password and enable 2FA on your k8k8 account. See our Terms & Conditions (Section 4) for your account security responsibilities.

k8k8 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and analyze platform performance. The categories of cookies used by k8k8 are as follows:

10.1 Strictly Necessary Cookies

These cookies are essential for the k8k8 platform to function. They manage your login session, maintain your wallet state between pages, and enable core security features. These cookies cannot be disabled without preventing the platform from functioning correctly.

10.2 Performance and Analytics Cookies

k8k8 uses analytics tools to collect aggregated, anonymized data about how players use the platform — which games are most accessed, how players navigate between sections, and where technical errors occur. This data is used exclusively to improve platform performance and user experience. Where third-party analytics tools are used, they are configured to anonymize IP addresses.

10.3 Preference Cookies

These cookies remember your platform settings and preferences, such as your selected language, display preferences, and notification settings, so they persist between sessions.

10.4 Managing Cookies

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the k8k8 platform. Disabling performance or preference cookies will not prevent you from accessing k8k8 but may affect your experience.

Under the Philippine Data Privacy Act of 2012, k8k8 players have the following rights with respect to their personal data:

To exercise any of the above rights, please contact k8k8's Data Protection Officer via email at [email protected] with the subject line "Data Privacy Request" or via live chat. k8k8 will respond to data subject rights requests within 15 business days. Requests may require identity verification before processing.

The k8k8 platform is strictly for individuals aged 21 years and above in the Philippines, in accordance with PAGCOR regulations. k8k8 does not knowingly collect personal data from individuals under the age of 21 in the Philippines, or under the minimum legal gambling age in any other jurisdiction.

If k8k8 becomes aware that personal data has been collected from an individual below the required minimum age, that data will be deleted and the associated account will be closed immediately. If you believe a minor has registered a k8k8 account using false age information, please contact our support team immediately via live chat.

Age verification is a required step in the k8k8 account verification process. k8k8 may request government-issued identity documents at any time to confirm that a player meets the minimum age requirement.

k8k8 primarily stores and processes personal data within servers located in the Philippines and/or in Asian jurisdictions with data protection standards comparable to those required under the Philippine DPA.

Where personal data is transferred outside the Philippines — for example, to game content providers or KYC verification service providers with infrastructure in other jurisdictions — k8k8 ensures that such transfers are subject to appropriate safeguards, including contractual protections requiring the recipient to handle the data in accordance with the standards required under Philippine law.

k8k8 may amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, k8k8 will notify registered players via email to their registered email address and/or via a notice on the k8k8 platform no less than 14 days before the amended Policy takes effect.

Your continued use of the k8k8 platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of the changes. If you object to any amended provisions, you should cease using the platform and may request account closure before the amended Policy takes effect.

The current version of this Privacy Policy is always available on this page at k8k8.biz/privacy-policy. The "Effective Date" shown in the page header reflects the date the current version entered into force.

k8k8 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act. You may contact the k8k8 DPO through the following channels:

• Email: [email protected] — subject line: "Data Privacy Request" or "DPO Inquiry"
• Live Chat: Available 24/7 via the k8k8 platform — indicate that your query is a data privacy matter for priority routing to the DPO team

k8k8 will acknowledge all formal data privacy inquiries within 3 business days and will provide a substantive response within 15 business days, unless the complexity of the request requires additional time, in which case k8k8 will inform you of the extended timeline.

If you are not satisfied with k8k8's response to a data privacy concern, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC). Information about filing a complaint with the NPC is available on the NPC's official website.