Privacy Policy

1. Introduction

1.1 8k8o takes the privacy of its players seriously. As a PAGCOR-licensed online gaming platform serving Filipino players, we handle personal information every day as part of normal platform operations — from account registration through to payment processing and regulatory compliance. This Policy explains transparently how that information is managed.

1.2 By registering an account with 8k8o or using any of our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not create an account or use the 8k8o platform.

1.3 This Policy should be read alongside the 8k8o Terms and Conditions and the Responsible Gaming Policy, both of which are available on this website.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, the data controller responsible for the personal information processed in connection with the 8k8o platform is the legal entity operating 8k8o under its PAGCOR license.

2.2 A designated Data Protection Officer (DPO) has been appointed in compliance with the requirements of the National Privacy Commission. You may contact the DPO using the details set out in Section 15 of this Policy.

3. Categories of Personal Data We Collect

3.1 Registration and Identity Data. When you create an 8k8o account, we collect: full legal name; date of birth; nationality; residential address; Philippine mobile number; email address (if provided); and government-issued ID details when required for Know Your Customer (KYC) verification. This may include your Philippine National ID (PhilSys), passport number, driver's licence, or UMID card details.

3.2 Financial Data. We collect information necessary to process deposits and withdrawals, including: GCash or PayMaya account reference information; bank account details for BPI, BDO, Metrobank, or UnionBank transfers; transaction amounts; and transaction timestamps. We do not store full card numbers, CVV codes, or online banking passwords.

3.3 Gaming Activity Data. We maintain records of your activity on the 8k8o platform, including: games played; bets placed and their outcomes; session durations; game preferences; and bonus redemptions. This data is used for regulatory compliance, responsible gaming monitoring, and service improvement.

3.4 Technical and Device Data. We automatically collect certain technical data when you access 8k8o, including: IP address; device type and operating system; browser type and version; unique device identifiers; access timestamps; and referral URLs. This data is used for security, fraud prevention, and platform performance purposes.

3.5 Communications Data. We retain records of communications between you and the 8k8o support team, including live chat transcripts, email correspondence, and support ticket records. These records are maintained for dispute resolution, training, and quality assurance purposes.

3.6 Responsible Gaming Data. If you voluntarily set deposit limits, loss limits, session time limits, or request self-exclusion, we maintain records of these instructions and their effective dates. This data is processed to fulfil our responsible gaming obligations and cannot be deleted at your request while it is operationally required.

4. How We Collect Your Data

8k8o collects personal data through the following means:

• Directly from you — when you complete the registration form, submit verification documents, make deposits or withdrawals, contact customer support, or complete any other interactive form on the 8k8o platform;
• Automatically — through cookies, server logs, and analytics tools when you browse or interact with the 8k8o platform (see Section 7);
• From third-party payment processors — GCash, PayMaya, and bank partners may share transaction confirmation data with 8k8o to facilitate payment settlement;
• From identity verification providers — where 8k8o uses third-party KYC services to verify government-issued identification documents;
• From regulatory bodies — PAGCOR or other Philippine regulatory authorities may provide information relevant to your compliance status.

5. Purpose and Legal Basis for Processing

8k8o processes personal data only where a valid legal basis exists. The following table summarises the primary processing activities, their purposes, and applicable legal bases under RA 10173:

Processing Activity	Purpose	Legal Basis
Account registration & management	Create and maintain your 8k8o player account	Performance of contract
Identity verification (KYC)	Verify age, identity, and source of funds	Legal obligation (PAGCOR / AMLA)
Payment processing	Process GCash, bank deposits and withdrawals	Performance of contract
Game and betting operations	Facilitate gameplay and settle bets fairly	Performance of contract
Fraud and AML monitoring	Detect and prevent money laundering and fraud	Legal obligation (AMLA, PAGCOR)
Responsible gaming monitoring	Monitor for signs of problem gambling	Legal obligation (PAGCOR RG rules)
Customer support	Respond to enquiries and resolve disputes	Legitimate interests / contract
Platform analytics	Improve platform performance and UX	Legitimate interests
Promotional communications	Send relevant offers and news (opt-in only)	Consent
Regulatory reporting	Meet PAGCOR and government reporting obligations	Legal obligation

6. Data Sharing and Disclosure

6.1 We Do Not Sell Your Data. 8k8o does not sell, rent, license, or trade your personal information to any third party for their own commercial or marketing purposes. This is an absolute commitment.

6.2 Service Providers. 8k8o shares personal data with carefully selected third-party service providers who process data on our behalf, solely as necessary to deliver the services they provide. These include: payment gateway operators (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank); KYC and identity verification providers; game content providers (who receive only the data necessary for game operation); cloud hosting and data centre operators; and customer support platform providers. All third-party processors are bound by data processing agreements that require them to handle your data in accordance with RA 10173 standards.

6.3 Regulatory and Legal Disclosure. 8k8o is obligated under Philippine law to share certain information with: PAGCOR, in connection with its licensing and regulatory oversight functions; the Anti-Money Laundering Council (AMLC), in connection with suspicious transaction reporting under the Anti-Money Laundering Act; and other competent Philippine government authorities where lawfully required by court order, subpoena, or equivalent legal process.

6.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of 8k8o's business assets, your personal data may be transferred to the acquiring or successor entity. You will be notified of any such transfer and the applicable privacy terms via your registered contact details before the transfer takes effect.

7. Cookies and Tracking Technologies

7.1 8k8o uses cookies and similar tracking technologies (such as web beacons and pixel tags) to operate the platform, personalise your experience, and gather analytics. Cookies are small text files placed on your device by the 8k8o platform when you visit.

7.2 Types of Cookies We Use.

• Essential cookies — required for login sessions, account security, and core platform functionality. These cannot be disabled without impairing the platform.
• Analytics cookies — help us understand how players navigate the 8k8o platform so we can improve it. Data collected is aggregated and not personally identifiable.
• Preference cookies — remember settings such as your preferred language, game lobby view, and responsible gaming notification preferences.
• Security cookies — used for fraud detection and to protect accounts from unauthorised access.

7.3 You can control cookie settings through your browser. Disabling non-essential cookies will not prevent you from using the 8k8o platform, though some personalisation features may be less effective.

8. Data Retention

8.1 8k8o retains personal data for as long as necessary to fulfil the purposes described in this Policy, and in accordance with applicable legal retention obligations. The key retention periods are:

• Account data — retained for the duration of your active account, plus a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act.
• KYC and identity verification documents — retained for five (5) years after account closure or termination of the business relationship.
• Customer support communications — retained for two (2) years from the date of the most recent interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records — retained for as long as you maintain your 8k8o account or until you withdraw consent, whichever is earlier.

8.2 When personal data is no longer required and the applicable retention period has expired, it is securely deleted or anonymised in accordance with recognised data destruction standards.

9. Data Security

9.1 8k8o implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 8k8o servers;
• Encryption of sensitive data at rest, including KYC documents and payment-related information;
• Role-based access controls limiting employee access to personal data strictly to what is required for their job function;
• Multi-factor authentication for internal staff accessing production systems;
• Regular vulnerability assessments and penetration testing of platform infrastructure;
• Intrusion detection and monitoring systems operating 24/7.

9.2 Data Breach Response. In the event of a personal data breach that poses a real risk to your rights and freedoms, 8k8o will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, as required by RA 10173. Notifications will be sent to your registered mobile number and/or email address.

10. International Data Transfers

10.1 Some of 8k8o's third-party service providers — including game content providers and cloud infrastructure operators — may be located outside the Philippines. Where personal data is transferred to a jurisdiction that does not provide an equivalent level of data protection to RA 10173, 8k8o implements appropriate safeguards including contractual data processing agreements aligned with NPC-approved standard clauses.

10.2 By using the 8k8o platform, you consent to cross-border transfers of your personal data where necessary for the provision of the Services, subject always to the safeguards described above.

11. Minors and Age Restriction

11.1 The 8k8o platform is restricted to individuals aged twenty-one (21) years and above. 8k8o does not knowingly collect personal data from persons under 21 years of age. If we become aware that a user under 21 has provided personal data, we will immediately close the account, delete the associated personal data, and report the matter to PAGCOR as required.

11.2 If you believe that a minor has registered with 8k8o, please contact our support team or DPO immediately using the details in Section 15.

12. Exercising Your Data Subject Rights

12.1 To exercise any of your rights under RA 10173 — including the right to access, correct, delete, object to, or obtain a copy of your personal data — you may submit a written request to the 8k8o Data Protection Officer using the contact details in Section 15.

12.2 We will acknowledge receipt of your request within five (5) working days and provide a substantive response within fifteen (15) working days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further fifteen (15) working days, in which case we will notify you of the extension and the reasons for it.

12.3 We may request proof of identity before processing a data subject rights request to ensure that we do not disclose or alter data belonging to a different individual.

12.4 If you are dissatisfied with our response to any data subject rights request, you have the right to escalate the matter to the National Privacy Commission of the Philippines.

13. Marketing Communications and Consent

13.1 8k8o will only send you marketing communications — including promotional offers, bonus notifications, and platform news — where you have provided your explicit consent to receive such communications at the time of registration or through your account settings.

13.2 You may withdraw consent to marketing communications at any time by: updating your communication preferences in your 8k8o account settings; or contacting the 8k8o support team via live chat and requesting to be removed from marketing communications. Withdrawal of marketing consent will be processed within five (5) working days.

13.3 Withdrawal of marketing consent does not affect your ability to use the 8k8o platform or receive essential service communications such as deposit confirmations, security alerts, and account notifications, which are necessary for platform operations.

14. Updates to This Privacy Policy

14.1 8k8o reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or our data processing practices. When material changes are made, we will notify registered Players via their registered mobile number and/or email address, and by placing a prominent notice on the 8k8o platform, no less than seven (7) days before the changes come into effect.

14.2 The date of the most recent update to this Policy is always displayed at the top of this page. Your continued use of the 8k8o platform after the effective date of any update constitutes your acceptance of the revised Policy.

15. Contact Us and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 8k8o, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the 8k8o platform. Response time under 5 minutes.
• Support Email (plain text): support at 8k8o.co
• Data Protection Officer: Contact via the support email above with the subject line "DPO Request — Data Privacy"
• Languages: English and Tagalog
• National Privacy Commission: For unresolved complaints, you may file a report with the NPC through their official website.

For responsible gaming support or self-exclusion requests, visit the Responsible Gaming page on this site. For general terms of use, see our Terms and Conditions.