8kk Privacy Policy

8kk is committed to protecting the privacy and personal data of every individual who interacts with the platform. This Privacy Policy describes how 8kk collects, uses, stores, discloses, and otherwise processes personal information obtained from users of the 8kk online casino and sports betting platform, including registered players, visitors to the site who have not registered, and any other individuals who communicate with 8kk.

This Privacy Policy applies to all data processing activities conducted by 8kk in connection with the 8kk.bio platform, including account registration and management, deposit and withdrawal processing, gameplay and betting activity, promotional participation, customer support interactions, and website browsing data collected through cookies and similar technologies.

This Policy applies to data subjects who are predominantly Filipino residents accessing the 8kk platform from within the Philippines. 8kk processes personal data in accordance with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission.

For the purposes of the Philippine Data Privacy Act of 2012 and related regulations, the data controller responsible for the personal information collected through the 8kk platform is the operating entity behind 8kk.bio.

As data controller, 8kk determines the purposes and means of processing your personal data. 8kk is responsible for ensuring that data processing activities are conducted in a lawful, fair, and transparent manner in accordance with applicable Philippine data protection law.

If you have any questions about how 8kk processes your personal data, you may contact us at any time using the contact details provided in Section 14 of this Policy. For matters specifically relating to data privacy and the exercise of your data subject rights, please direct your correspondence to our Data Protection Officer at the email address provided in Section 14.

8kk collects different categories of personal data depending on how you interact with the platform. The following table sets out the categories of data 8kk may collect and the context in which each category is typically obtained.

8kk does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. In particular, 8kk does not collect health information, religious affiliation, or political opinions.

8kk collects personal data through several distinct channels, depending on the nature of your interaction with the platform:

• Directly from you: Information you voluntarily provide when registering an account, completing the KYC verification process, submitting a withdrawal request, contacting customer support, or participating in a promotion.
• Automatically through platform use: Technical and usage data collected automatically when you visit the 8kk website or use the platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 6).
• From payment service providers: Transaction confirmation data and limited payment reference information received from GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment processing partners when you conduct a deposit or withdrawal.
• From identity verification providers: Results and risk assessments from third-party KYC and anti-money laundering screening services used to verify your identity and comply with regulatory obligations.
• From regulatory or law enforcement authorities: In limited circumstances, 8kk may receive information about individuals from PAGCOR or other Philippine regulatory or law enforcement bodies in connection with compliance obligations.

Under the Philippine Data Privacy Act of 2012, 8kk must have a lawful basis for each category of personal data it processes. The following table summarizes the primary purposes for which 8kk processes your personal data and the corresponding legal basis for each.

8kk uses cookies and similar technologies on the platform to ensure proper functionality, maintain your session state, detect fraud, and improve the user experience. The following categories of cookies may be placed on your device when you access the 8kk platform:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly and cannot be disabled. They include session authentication tokens, security cookies, and load balancing cookies. No personal data beyond technical session identifiers is stored in these cookies.
• Functional Cookies: These cookies remember your preferences — such as your preferred language or display settings — to provide a more personalized experience on the 8kk platform. These cookies do not track browsing activity outside of 8kk.
• Analytics Cookies: 8kk uses anonymized analytics data to understand how players navigate the platform, identify performance issues, and improve the user experience. Analytics processing uses aggregated data that does not identify individual users.
• Security & Fraud Detection Cookies: These cookies assist in identifying suspicious patterns of access, detecting bot activity, and protecting the integrity of user accounts and the platform.

You may control or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 8kk platform and your ability to log in or complete transactions.

8kk does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Personal data is shared only in the specific circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment processors and e-wallet providers: Financial data is shared with GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment service providers solely for the purpose of processing your transactions. Each of these providers is subject to their own privacy and data security obligations.
• Identity verification and KYC providers: Identity documents and personal data may be shared with authorized third-party KYC verification service providers to complete required identity checks in accordance with PAGCOR regulations and anti-money laundering obligations under the AMLA (Republic Act 9160).
• Game providers: Limited technical data (such as session identifiers and bet records) may be shared with licensed game content providers — including JILI, PG Soft, and Pragmatic Play — for the purpose of game operation, fairness auditing, and dispute resolution.
• Regulatory and law enforcement authorities: 8kk is obligated to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Philippine National Police, or other authorized Philippine government bodies where required by law or by a valid legal order.
• Professional advisors: Personal data may be disclosed to 8kk's legal, accounting, and auditing advisors where strictly necessary for the provision of professional services, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of 8kk's business or assets, personal data held by 8kk may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations being assumed by the acquirer.

8kk implements a comprehensive range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 8kk platform is encrypted using industry-standard TLS protocols.
• Database encryption: Sensitive personal data stored in 8kk's databases — including identity documents and financial account references — is encrypted at rest using strong encryption standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. 8kk staff do not have access to player passwords (which are stored in hashed, salted form) and can only access account data necessary for their specific role.
• Regular security assessments: 8kk conducts regular internal security reviews and periodic independent penetration tests to identify and remediate potential vulnerabilities before they can be exploited.
• Incident response procedures: 8kk maintains documented data breach response procedures. In the event of a personal data breach that poses a risk to affected data subjects, 8kk will notify the National Privacy Commission and affected users in accordance with the timelines prescribed by Philippine data protection regulations.

While 8kk takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the security of your 8kk account credentials and for promptly notifying 8kk if you suspect any unauthorized access to your account.

8kk retains personal data for the minimum period necessary to fulfill the purposes set out in this Privacy Policy, subject to any longer retention periods required by applicable law or regulation. The following general retention guidelines apply:

• Active account data: Personal data associated with an active 8kk account is retained for the duration of the account relationship and for a period of five (5) years following permanent account closure, in compliance with PAGCOR record-keeping requirements and anti-money laundering regulations.
• Transaction and financial records: Financial transaction records, including deposit and withdrawal histories, are retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLA requirements.
• KYC and identity verification records: Identity verification documents and records are retained for the period required by applicable regulatory obligations, typically five (5) years from the end of the customer relationship.
• Customer support correspondence: Support tickets and communication records are retained for three (3) years from the date of the last correspondence in a given matter.
• Cookie and analytics data: Anonymized analytics data may be retained for up to twenty-four (24) months. Session cookies are deleted upon browser close; persistent functional cookies are retained for no longer than twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with 8kk's data disposal procedures.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 8kk. You may exercise any of these rights by contacting our Data Protection Officer using the details provided in Section 14.

8kk will respond to verified data subject rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case 8kk will notify you of the extension and the reasons for it within the initial thirty-day period.

8kk may request additional verification of your identity before processing a data subject rights request to ensure that personal data is not disclosed to, corrected by, or deleted at the request of an unauthorized party.

The 8kk platform is strictly intended for use by adults aged twenty-one (21) years and above, in compliance with applicable PAGCOR regulations governing online gambling in the Philippines. 8kk does not knowingly collect personal data from individuals under the age of 21.

During account registration and KYC verification, 8kk requires users to confirm that they meet the minimum age requirement and may request government-issued identification to verify date of birth. Accounts where the registered user is found to be under the age of 21 will be immediately terminated, and any personal data collected from such individuals will be securely deleted subject to any mandatory regulatory reporting obligations.

The 8kk platform primarily processes and stores personal data within servers and systems serving the Philippines market. However, certain third-party service providers used by 8kk — including game content providers, KYC verification platforms, and cloud infrastructure providers — may be located outside of the Philippines.

Where personal data is transferred outside of the Philippines to such third-party providers, 8kk ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include contractual data processing agreements incorporating standard data protection clauses, and assessments of the receiving country's data protection laws.

8kk does not transfer personal data to jurisdictions that are not able to provide an adequate level of data protection without implementing appropriate contractual or technical safeguards to compensate for any identified deficiencies.

8kk reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable data protection law, changes in our data processing activities, or changes in regulatory guidance. All amendments will be published on this page with an updated effective date.

Where amendments are material — that is, where they significantly change how 8kk processes your personal data or affect your rights — 8kk will provide advance notice through a prominent notice on the platform and, where appropriate, via email to your registered address. The effective date shown at the top of this Policy will be updated to reflect the date of the most recent revision.

Your continued use of the 8kk platform following the publication of any amended Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any amendment to this Policy, you may request account closure in accordance with the account termination procedure described in the 8kk Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by 8kk, please contact our Data Protection Officer using the following contact details:

Data Protection Officer — 8kk
Email: [email protected]
Subject line for data privacy matters: "Data Privacy Request — [Your Name]"
Response time: within 5 business days for initial acknowledgement; full response within 30 calendar days.

8kk takes all data privacy complaints seriously. When you submit a complaint relating to data privacy, we will:

1. Acknowledge receipt of your complaint within five (5) business days.
2. Assign your complaint to our Data Protection Officer for review.
3. Investigate your complaint thoroughly and fairly.
4. Provide a substantive written response within thirty (30) calendar days, or notify you if additional time is required.

If you are not satisfied with the outcome of your complaint after 8kk has had a reasonable opportunity to resolve it, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the regulatory authority responsible for data protection enforcement in the Philippines.