868k8 Privacy Policy

1. Who We Are and Scope of This Policy

This Privacy Policy is issued by 868k8 ("868k8," "we," "us," or "our"), the operator of the online gaming platform accessible at 868k8.app. 868k8 is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission (NPC).

This Privacy Policy applies to all personal information collected through the 868k8 website, mobile web application, customer support interactions, and any other channel through which you interact with 868k8. By registering for or using the 868k8 platform, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

868k8 collects the following categories of personal information:

3. How 868k8 Uses Your Personal Data

868k8 uses the personal information we collect for the following purposes:

• Account Creation and Management: To register your account, verify your identity and age (21+ requirement per PAGCOR), and maintain your account settings and preferences.
• Transaction Processing: To process deposits, withdrawals, and bonus credits to and from your 868k8 account via GCash, Maya, BPI, BDO, UnionBank, and other approved payment methods.
• Regulatory Compliance: To fulfil 868k8's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and NPC data privacy regulations, including transaction monitoring and suspicious activity reporting.
• Customer Support: To respond to your inquiries, resolve account issues, and maintain a record of communications for quality assurance and dispute resolution purposes.
• Platform Security: To detect, prevent, and investigate fraud, unauthorized account access, cheating, and other prohibited activities on the 868k8 platform.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior, and to administer voluntary or mandatory self-exclusion and deposit limit tools.
• Service Improvement: To analyse platform usage patterns in aggregate to improve the 868k8 product, game selection, and user experience. Aggregate analytics do not identify individual players.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent. You may withdraw consent at any time through your account notification settings.

4. Legal Bases for Processing

868k8 processes your personal data on one or more of the following legal bases under the Philippine Data Privacy Act:

• Contractual Necessity: Processing required to perform our obligations under the 868k8 Terms and Conditions, including account management and transaction processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing requirements, AMLA reporting obligations, NPC regulations, and other applicable Philippine laws.
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and service quality improvement, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing before withdrawal.

5. Data Sharing and Disclosure

868k8 shares personal data only in the following circumstances:

• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law or regulatory direction.
• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other payment service providers, for the sole purpose of processing your transactions. These providers are bound by their own privacy policies and applicable financial regulations.
• Technology Service Providers: Cloud hosting providers, cybersecurity vendors, analytics platform providers, and customer support software vendors that process data on behalf of 868k8 under binding data processing agreements that require compliance with DPA standards.
• Game Content Providers: Certified game providers supplying live casino, slot, and fishing game content to 868k8 may receive pseudonymous session data as required for game integrity and certification purposes. Full personal identity data is not shared with game providers.
• Law Enforcement: Where 868k8 is required by valid Philippine legal process (court order, subpoena, or law enforcement request) to disclose personal information.

868k8 does not sell personal data to any third party for commercial purposes.

6. Cookies and Tracking Technologies

868k8 uses cookies and similar tracking technologies on the 868k8.app website and mobile web application for the following purposes:

• Strictly Necessary Cookies: Required for core platform functionality, including maintaining your login session, remembering language preferences, and enabling secure transactions. These cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect anonymised data about how players use the 868k8 platform (e.g., pages visited, time on site, error frequencies) to help us identify and resolve technical issues.
• Functional Cookies: Remember your preferences (e.g., preferred game categories, display settings) to provide a more personalised experience on return visits.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the 868k8 platform but may affect personalisation features.

7. Data Security

868k8 implements technical and organisational measures appropriate to the risk of processing personal data, including:

• 256-bit TLS/SSL encryption for all data transmitted between your device and 868k8 servers;
• AES-256 encryption for sensitive data stored at rest in 868k8 databases;
• Multi-factor authentication requirements for 868k8 administrative system access;
• Regular penetration testing and vulnerability assessments by independent cybersecurity firms;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Incident response procedures with NPC breach notification protocols.

No system can guarantee absolute security. If you suspect that your 868k8 account has been compromised, contact us immediately at [email protected].

8. Data Retention

868k8 retains personal data for the following periods:

• Active Account Data: Retained for the full duration of your account and for a minimum of 5 years after account closure, in compliance with AMLA record-keeping requirements applicable to PAGCOR licensees.
• Transaction Records: Retained for a minimum of 5 years as required by the Anti-Money Laundering Act and PAGCOR compliance rules.
• Support Communications: Retained for 2 years from the date of the last communication, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained until consent is withdrawn, plus 1 year thereafter for proof-of-consent audit purposes.

After applicable retention periods expire, personal data is securely deleted or anonymised so that it can no longer be associated with an identified individual.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 868k8:

• Right to Be Informed: The right to know what personal data 868k8 holds about you and how it is being processed — which this Privacy Policy fulfils.
• Right of Access: The right to request a copy of the personal data 868k8 holds about you. Requests may be submitted to [email protected].
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account data directly through your 868k8 account settings; for identity document corrections, contact support.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 868k8's legal retention obligations under AMLA and PAGCOR rules.
• Right to Object: The right to object to processing based on legitimate interest or for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe 868k8 has violated your privacy rights. NPC contact information is available at privacy.gov.ph.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." 868k8 will respond within 30 calendar days.

10. Children and Underage Players

11. Cross-Border Data Transfers

868k8 primarily stores and processes personal data within the Philippines. In cases where data is processed by third-party service providers with infrastructure located outside the Philippines (for example, global cloud hosting providers or international cybersecurity vendors), 868k8 ensures that such transfers comply with NPC cross-border transfer requirements, including the execution of appropriate contractual data protection clauses or verification that the recipient country provides an adequate level of data protection under NPC standards.

12. Changes to This Privacy Policy

868k8 reserves the right to update this Privacy Policy at any time. Where changes are material — meaning they significantly alter how your personal data is collected, used, or shared — 868k8 will provide notice via email to your registered address and/or through an in-account notification at least 14 days before the changes take effect. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

Continued use of the 868k8 platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised policy.

13. Contact Us and Data Protection Officer

For any privacy-related inquiries, data subject rights requests, or concerns about how 868k8 handles your personal data, please contact the 868k8 Data Protection Officer:

• Email: [email protected] (subject: "Data Privacy Request")
• Live Chat: Available 24/7 via the account dashboard
• Response time: Within 30 calendar days of receipt

If you are not satisfied with 868k8's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.