Privacy Policy — 8ki Casino Philippines

1. Overview

This Privacy Policy ("Policy") is issued by 8ki Casino ("8ki," "we," "us," "our") and applies to all personal data collected through the 8ki platform at 8ki.onl, including its games, customer support channels, promotional communications, and payment processing interfaces. This Policy is written in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account with 8ki or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree to this Policy, please discontinue use of the 8ki platform and contact us to close your account.

8ki processes personal data as a Personal Information Controller (PIC) under RA 10173. This Policy is designed to give you clear, plain-English (and where needed, Filipino-context) explanations of what data we hold, why we hold it, who we share it with, and what your rights are. Maganda ang transparency — and we believe you deserve to know exactly how 8ki handles your information.

2. Data Controller Information

The Personal Information Controller responsible for your data is 8ki Casino, operating the platform at 8ki.onl under a PAGCOR license. Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with RA 10173 and all NPC regulations. The DPO can be contacted via the contact details in Section 15 of this Policy.

8ki is registered with the National Privacy Commission of the Philippines as required for personal information controllers processing data of Philippine residents. Our registration confirms that our data processing activities have been disclosed to and are subject to oversight by the NPC.

3. Personal Data We Collect

3.1 Registration Data

When you create an 8ki account, we collect the following personal data:

• Full legal name (as it appears on your Philippine government ID);
• Date of birth (to verify the 21+ age requirement under PAGCOR regulations);
• Philippine mobile number (Globe, Smart, or DITO);
• Email address;
• Username and encrypted password;
• Residential address in the Philippines.

3.2 KYC / Identity Verification Data

For Know Your Customer (KYC) compliance required by PAGCOR and Philippine anti-money laundering law, we may collect:

• Copy of a valid Philippine government-issued ID (SSS, PhilHealth, UMID, driver's license, or passport);
• Selfie photograph for liveness verification;
• Proof of address document (utility bill, bank statement, barangay certificate);
• Proof of payment method ownership (screenshot of GCash, Maya, or bank account).

3.3 Financial Data

We collect transaction records including deposit amounts, withdrawal requests, bonus usage, and betting history. We do not store full GCash PINs, bank account passwords, or complete card numbers. Payment processing is handled through PCI-DSS compliant third-party processors.

3.4 Technical & Usage Data

We automatically collect the following data when you access 8ki.onl:

• IP address and approximate geographic location;
• Device type, operating system, and browser;
• Session timestamps (login time, session duration, logout time);
• Pages visited, games played, and in-game actions;
• Referral source (how you arrived at 8ki.onl).

3.5 Communications Data

When you contact 8ki via live chat, email, or our support system, we retain records of those communications, including the content of messages, timestamps, and the support agent involved. This data is used for quality assurance, dispute resolution, and compliance purposes.

4. How We Collect Your Data

8ki collects your personal data through the following methods:

• Directly from you — when you register, complete KYC, make deposits, submit support tickets, or update your account information;
• Automatically — through cookies, server logs, and analytics tools as you navigate and play on 8ki.onl;
• From third parties — our KYC verification partners, payment processors (GCash, Maya, BPI, BDO, Metrobank), fraud detection services, and PAGCOR reporting systems where required by law;
• From public sources — publicly available Philippine government databases where permitted for identity verification or fraud prevention purposes.

5. How We Use Your Personal Data

8ki uses your personal data for the following purposes:

• Creating, maintaining, and securing your 8ki account;
• Processing deposits and withdrawals via GCash, Maya, and other payment channels;
• Verifying your age (21+), identity, and eligibility to use the 8ki platform under PAGCOR rules;
• Complying with Philippine anti-money laundering (AML) laws and PAGCOR reporting obligations;
• Delivering and personalizing the 8ki gaming experience, including game recommendations and lobby customization;
• Administering bonuses, promotions, and loyalty rewards;
• Providing customer support and resolving disputes;
• Sending account-related communications (security alerts, transaction confirmations, policy updates);
• Sending promotional communications where you have opted in to receive them;
• Detecting, preventing, and investigating fraud, collusion, and other prohibited conduct;
• Fulfilling 8ki's responsible gaming obligations under the PAGCOR framework, including monitoring for problem gambling indicators;
• Improving the 8ki platform through aggregated, anonymized usage analytics.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act, 8ki processes your personal data on the following lawful bases:

• Consent — you have given explicit consent at registration for specific processing activities such as marketing communications;
• Contractual necessity — processing is necessary to perform the 8ki account agreement, including operating your account and processing transactions;
• Legal obligation — processing is required to comply with PAGCOR licensing conditions, Philippine AML laws, tax obligations, and NPC requirements;
• Legitimate interests — processing is necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.

7. Data Sharing & Disclosure

8ki does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients:

• PAGCOR — as required by our operating license, including reporting on player activity and AML obligations;
• Payment processors — GCash, Maya, BPI, BDO, Metrobank, and other payment partners, for the purpose of processing your deposits and withdrawals;
• KYC and identity verification partners — to fulfill PAGCOR's Know Your Customer requirements;
• Fraud prevention and security services — to protect the integrity of the 8ki platform and all registered players;
• Game technology providers — JILI, PG Soft, Pragmatic Play, and others, who receive only the minimum data necessary to deliver their games within the 8ki environment;
• Philippine law enforcement and courts — where 8ki is required or legally permitted to disclose information in response to a lawful order, warrant, or legal process;
• Auditors and legal advisers — under strict confidentiality obligations for compliance and regulatory purposes.

All third-party service providers who process personal data on behalf of 8ki are bound by data processing agreements that require them to protect your data in accordance with RA 10173 standards.

8. Data Retention

8ki retains your personal data for as long as your account is active and for a period thereafter as required by law and regulatory obligations. Specifically:

• Account registration and KYC data — retained for a minimum of five (5) years after account closure, as required by Philippine AML regulations;
• Transaction records — retained for a minimum of five (5) years for AML and tax compliance;
• Customer support communications — retained for three (3) years for dispute resolution purposes;
• Technical and session logs — retained for up to twelve (12) months for security and fraud investigation purposes;
• Marketing consent records — retained until you withdraw consent or for three (3) years after your last interaction, whichever is earlier.

After the applicable retention period expires, personal data is securely deleted or anonymized so that it can no longer be linked to any individual player.

9. Data Security

8ki implements technical and organizational measures designed to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 8ki servers;
• Encryption at rest for sensitive data including KYC documents and financial records;
• Role-based access controls ensuring staff can only access data necessary for their specific function;
• Two-factor authentication available for all registered 8ki accounts;
• Regular penetration testing and security audits by independent third-party security firms;
• DDoS protection and intrusion detection systems on all 8ki infrastructure.

While 8ki takes data security seriously and implements industry-standard protections, no digital system is entirely immune to security incidents. In the event of a personal data breach that poses a risk to your rights and freedoms, 8ki will notify you and the National Privacy Commission in accordance with the NPC's breach notification requirements under RA 10173.

10. Your Data Rights

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by 8ki:

To exercise any of these rights, contact 8ki's Data Protection Officer via the contact details in Section 15. 8ki will respond to all valid data rights requests within fifteen (15) business days, free of charge.

11. Cookies & Tracking Technologies

8ki uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyze usage patterns. The following categories of cookies are used:

• Essential cookies — required for account login, session management, and platform security. These cannot be disabled without affecting platform functionality;
• Performance cookies — collect anonymized data about how players navigate 8ki.onl to help us improve page speed, game loading times, and overall usability;
• Functional cookies — remember your preferences (language, game lobby filters, display settings) so you don't have to reconfigure them every visit;
• Analytics cookies — used with first-party analytics tools to understand aggregate player behavior trends without identifying individual players.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging into your 8ki account.

12. Minors and Age Verification

The 8ki platform is strictly prohibited for use by individuals under the age of 21, as required by PAGCOR. 8ki does not knowingly collect personal data from anyone under 21. Age verification is conducted as part of the KYC process. If 8ki becomes aware that personal data has been collected from a person under 21, the account will be immediately suspended and the data deleted or reported to appropriate Philippine authorities as required by law.

13. Cross-Border Data Transfers

Some of 8ki's technology infrastructure and third-party service providers (including certain game providers and payment technology companies) may process data on servers located outside the Philippines. Where such cross-border transfers occur, 8ki ensures that adequate safeguards are in place — including contractual obligations requiring the recipient to protect your data to the same standard as required under RA 10173. Cross-border transfers are only made where necessary for the provision of 8ki's services and in compliance with NPC guidelines on international data transfers.

14. Changes to This Privacy Policy

8ki may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or operational changes. Material changes will be communicated to registered players via the mobile number or email address associated with their account, with a minimum of seven (7) days' notice before changes take effect. The current, up-to-date version of this Policy is always available at 8ki.onl/privacy-policy, with the effective date shown at the top of the document. Continued use of the 8ki platform after the effective date constitutes your acceptance of the updated Policy.

15. Contact & Data Protection Officer

For any questions, concerns, or data rights requests regarding this Privacy Policy or 8ki's data processing practices, please contact our Data Protection Officer through the following channels:

8ki's DPO will acknowledge all data rights requests within three (3) business days and provide a substantive response within fifteen (15) business days, as required by RA 10173.