8k9 Casino Privacy Policy

1.1 This Privacy Policy ("Policy") describes the personal data practices of 8k9 Casino ("8k9," "we," "us," "our") in connection with the operation of the online gaming platform available at 8k9.asia and all associated services, features, and communications channels.

1.2 This Policy applies to all natural persons who interact with the 8k9 platform, including registered Players, prospective registrants, and individuals who contact 8k9 customer support. It governs the collection, use, storage, sharing, and protection of personal data processed by 8k9.

1.3 This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission of the Philippines ("NPC"). Where applicable, 8k9 also adheres to PAGCOR's data handling requirements for licensed online gaming operators.

1.4 This Policy should be read together with 8k9's Terms & Conditions and Responsible Gaming Policy, all of which collectively govern your relationship with the 8k9 platform.

1.5 The English version of this Policy is the authoritative text. Any translations provided for convenience are non-binding.

2.1 For the purposes of the Data Privacy Act of 2012, 8k9 Casino is the Personal Information Controller in respect of personal data collected from Players and other individuals in connection with the 8k9 platform.

2.2 As a PAGCOR-licensed online gaming operator, 8k9 is subject to regulatory oversight that includes compliance with data protection requirements imposed by PAGCOR in addition to those mandated by the NPC.

2.3 Where 8k9 engages third-party service providers to process personal data on its behalf — such as payment processors, game providers, identity verification services, and customer support tools — those providers act as Personal Information Processors under the DPA. 8k9 ensures that appropriate data processing agreements and security requirements are in place with all such providers.

2.4 For all data-related inquiries, requests, or complaints, Players may contact 8k9 through the customer support channel available at 8k9.asia. Data Subject Rights requests may be submitted in writing to: [email protected]

3.1 The following categories of personal data are collected and processed by 8k9 in the course of providing the platform and its associated services:

3.2 8k9 does not collect sensitive personal information as defined under the DPA (such as health data, political affiliations, or religious beliefs) unless specifically required by applicable regulation or law enforcement order.

4.1 Directly from you: 8k9 collects data that you actively provide during account registration, KYC document submission, payment transactions, responsible gaming settings configuration, customer support interactions, and any other direct communication with the platform.

4.2 Automatically during platform use: When you access and use the 8k9 platform, technical data is automatically collected through server logs, session cookies, and analytics tools. This includes your IP address, device information, browser type, pages visited, features accessed, and timestamps of activity.

4.3 From third-party service providers: 8k9 may receive data from:

• Payment providers (GCash, Maya, BPI, BDO, Metrobank) — transaction confirmation, payment method identifiers, and fraud signals;
• Identity verification services — KYC approval status, document authenticity signals, age verification results;
• Game providers (e.g., PG Soft, Pragmatic Play, JILI) — game session data, RNG certification results, and gameplay records relevant to bet settlement;
• Fraud detection and AML screening services — risk scoring, watchlist status, and suspicious activity indicators as required under Philippine AML law.

4.4 8k9 does not purchase personal data lists from data brokers or marketing companies.

5.1 Under the Data Privacy Act of 2012, 8k9 processes personal data on the following legal grounds:

• Contractual necessity: Processing required to register your Account, verify your identity, process deposits and withdrawals, settle bets, and provide customer support — all of which are necessary to perform the contract between you and 8k9;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Philippine Anti-Money Laundering Act (RA 9160 as amended), AMLC reporting requirements, Tax Code obligations, and NPC data protection requirements;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improvement of platform services, where such interests are not overridden by your data protection rights;
• Consent: For optional processing such as direct marketing communications and optional analytics features, where your consent is obtained separately and may be withdrawn at any time.

5.2 Where processing is based on consent, withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal, nor does it affect processing undertaken on other legal grounds.

6.1 8k9 uses your personal data for the following purposes:

• Account creation and management — registering your account, authenticating your identity at login, maintaining account records, and communicating account-related updates;
• KYC and age verification — verifying that you are 21 years of age or older and that your identity matches your registration information, as required by PAGCOR and Philippine law;
• Payment processing — processing GCash, Maya, and bank deposits and withdrawals; matching payment instructions to your account; preventing duplicate or fraudulent transactions;
• Game provision and bet settlement — delivering gaming services, recording bet history, calculating and crediting winnings, and maintaining accurate gaming ledgers;
• Responsible gaming — applying deposit limits, loss limits, session timers, cooling-off periods, and self-exclusion instructions; monitoring for problem gambling indicators;
• Fraud prevention and AML compliance — screening transactions against AML watchlists, detecting unusual betting patterns, reporting suspicious transactions to AMLC as required by law, and preventing platform abuse;
• Customer support — investigating complaints, resolving disputes, and responding to service inquiries;
• Legal and regulatory compliance — responding to lawful requests from PAGCOR, AMLC, NPC, law enforcement, and courts of competent jurisdiction in the Philippines;
• Platform improvement and analytics — analyzing aggregate usage patterns to improve game selection, platform performance, and user experience;
• Direct marketing — sending promotional offers, bonus notifications, and platform updates to Players who have not opted out, where consistent with applicable law.

6.2 8k9 does not use automated decision-making that produces legal or similarly significant effects on Players without human review. Account restrictions applied by automated fraud detection systems are subject to manual review upon Player request.

7.1 8k9 does not sell, rent, or trade your personal data to third parties for their independent marketing or commercial purposes. Personal data is shared only in the following circumstances:

• Service providers (Personal Information Processors): Third-party companies engaged by 8k9 to provide services on its behalf, including payment gateway operators (GCash, Maya, BPI, BDO, Metrobank), identity verification providers, game software providers (PG Soft, Pragmatic Play, JILI, and others), cloud hosting providers, customer support platform operators, and cybersecurity services. All such providers are contractually bound to use personal data solely for the purposes specified by 8k9 and to maintain appropriate security standards;
• PAGCOR: As a licensed operator, 8k9 is required to make certain player and transaction records available to PAGCOR upon request or as part of regular regulatory reporting. Such disclosures are mandatory and form part of 8k9's licensing obligations;
• Anti-Money Laundering Council (AMLC): 8k9 is required to file Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) with the AMLC as mandated by the Anti-Money Laundering Act. These reports include personal and transaction data;
• Law enforcement and courts: Personal data will be disclosed in response to a lawful court order, warrant, or formal request from a Philippine law enforcement agency or PAGCOR, to the extent required by law;
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by 8k9, subject to professional confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or transfer of 8k9's operating license, player data may be transferred to the successor entity subject to the same data protection obligations.

7.2 In all cases, 8k9 limits data sharing to the minimum information necessary for the stated purpose.

8.1 Some of 8k9's third-party service providers — particularly game software providers and cloud hosting infrastructure — may be located outside the Philippines. When personal data is transferred to entities in other countries, 8k9 takes steps to ensure that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act of 2012 and NPC regulations on cross-border data transfers.

8.2 These safeguards may include contractual clauses requiring the recipient to maintain data protection standards equivalent to those mandated by Philippine law, or reliance on the recipient's compliance with an internationally recognized privacy framework.

8.3 Personal data transferred internationally is processed only for the purposes outlined in Section 6 of this Policy and is not used by recipient third parties for their own independent purposes.

9.1 8k9 retains personal data for as long as necessary to fulfill the purposes outlined in this Policy and to comply with applicable Philippine legal, regulatory, and PAGCOR requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account plus a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and AML record-keeping obligations under RA 9160;
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC record-keeping requirements;
• KYC documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later;
• Gaming activity records: Retained for five (5) years to support dispute resolution, regulatory audits, and responsible gaming monitoring;
• Customer support communications: Retained for three (3) years from the date of the last interaction;
• Technical and log data: Retained for up to twelve (12) months from collection, unless required longer for security investigations or legal proceedings.

9.2 Where retention is required by law beyond the periods stated above, 8k9 will retain data for the legally mandated period. Upon expiry of the applicable retention period, personal data is securely deleted or anonymized.

10.1 The following technical security measures are applied to personal data processed by 8k9:

• 256-bit SSL/TLS encryption on all data in transit between your device and the 8k9 platform;
• Bcrypt password hashing with per-account salts — passwords are never stored in plaintext;
• AES-256 encryption for sensitive data at rest in 8k9's databases;
• OTP (One-Time Passcode) authentication for account login and withdrawal requests;
• Role-based access controls limiting employee access to personal data to those with a legitimate business need;
• Intrusion detection systems and real-time security monitoring;
• Regular security audits and penetration testing by independent cybersecurity professionals.

10.2 In the event of a personal data breach that is likely to result in harm to data subjects, 8k9 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and affected Players will be notified promptly via their registered Philippine mobile number where required by NPC regulations.

10.3 Players are reminded that account security is a shared responsibility. You should use a strong, unique password for your 8k9 account, enable OTP verification, and never share your credentials with third parties. 8k9 will never ask you for your password.

11.1 8k9 uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, analyze platform usage, and support fraud prevention systems. Cookies are small text files stored on your device by your browser.

11.2 The following categories of cookies are used on the 8k9 platform:

• Strictly necessary cookies: Required for core platform functionality, including login session management, wallet access, and game loading. These cannot be disabled without impairing platform functionality;
• Functional cookies: Store your preferences such as language settings, game filter selections, and responsible gaming display options;
• Analytics cookies: Used to collect aggregated, non-personally identifiable information about how Players use the platform, enabling 8k9 to improve game selection and user experience;
• Security cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and suspicious transaction patterns.

11.3 8k9 does not use cookies to serve third-party advertising. No data collected through 8k9 cookies is sold to advertising networks.

11.4 You may configure your browser to reject non-essential cookies. Disabling strictly necessary cookies will impair your ability to use the 8k9 platform, including logging in and accessing your wallet.

12.1 Under the Data Privacy Act of 2012, registered Players as data subjects have the following rights with respect to their personal data held by 8k9:

12.2 To exercise any of the rights above, submit a written request through the 8k9 customer support channel. We will verify your identity before processing any data subject request to prevent unauthorized access to another person's data.

12.3 There is no charge for exercising your data subject rights. Requests that are manifestly unfounded or excessive may be subject to a reasonable administrative fee or may be declined, with written explanation.

13.1 8k9 enforces age verification through mandatory KYC procedures prior to the processing of any withdrawal request. Accounts are monitored for indicators of underage access.

13.2 If 8k9 discovers or is notified that personal data has been collected from an individual under 21 years of age, the Account will be immediately suspended, all personal data associated with that account will be securely deleted, any deposited funds will be refunded to the original payment source, and the incident may be reported to the appropriate authorities.

13.3 If you are a parent or guardian and believe that a person under 21 in your care has registered an account on 8k9, please contact customer support immediately so that the account can be investigated and closed.

14.1 8k9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal or regulatory requirements, or platform features. The updated Policy will be published on this page with a revised "Last Updated" date.

14.2 Where changes are material — meaning they significantly affect how your personal data is used or your rights as a data subject — 8k9 will notify registered Players via SMS to their registered Philippine mobile number no less than 14 calendar days before the changes take effect.

14.3 Your continued use of the 8k9 platform following the effective date of any amendment constitutes acceptance of the revised Policy. If you do not agree with the amended Policy, you should cease using the platform and may request voluntary account closure.

14.4 The current version of this Policy, dated as shown at the top of this page, supersedes all prior versions.

15.1 For all data privacy-related queries, data subject rights requests, or concerns about 8k9's data handling practices, Players may contact the 8k9 Data Protection Officer through the following channel:

15.2 If you are not satisfied with 8k9's response to a data privacy complaint, you have the right to escalate the matter to:

• National Privacy Commission (NPC) of the Philippines — the Philippine government body responsible for enforcing the Data Privacy Act of 2012. The NPC accepts complaints from data subjects regarding alleged violations of the DPA by personal information controllers.

15.3 8k9 cooperates fully with NPC investigations and will provide requested information within the timeframes prescribed by NPC regulations.

This Privacy Policy was last reviewed and updated on January 1, 2026. It is subject to Philippine law including the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and all applicable NPC issuances. The English version of this Policy is the authoritative text.