8k9 Privacy Policy

Introduction

This Privacy Policy ("Policy") describes how 8k9 ("the Platform," "we," "us," "our") collects, uses, stores, shares, and protects the personal information of users ("you," "your," "Player") who access or use the 8k9 website and gaming platform at 8k9.net.

This Policy applies to all personal data processed in connection with your use of the 8k9 platform, including data collected during account registration, identity verification, deposits and withdrawals, gameplay, customer support interactions, and marketing communications.

By registering an account or using the 8k9 platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you must not use the 8k9 platform.

This Policy should be read together with our Terms & Conditions, which govern your use of the platform.

Data Controller

8k9 is the data controller responsible for the personal data collected through the platform. As data controller, 8k9 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable Philippine data protection law.

For all privacy-related inquiries, requests, or complaints, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 13 of this Policy.

Personal Data We Collect

8k9 collects personal data through several channels. The categories of data we collect, and the context in which they are collected, are set out below.

3.1 Registration Data. When you create an 8k9 account, we collect:

• Full legal name;
• Date of birth (to verify you are 21 years of age or older);
• Email address;
• Mobile number;
• Username and password (stored in hashed form);
• Residential address (city, province, country).

3.2 Identity Verification (KYC) Data. To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations, we may collect:

• Government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID);
• Proof of address documents (e.g., utility bill, bank statement);
• Selfie or liveness verification image;
• Proof of payment method ownership.

3.3 Financial Data. When you make deposits or withdrawals, we collect:

• GCash or PayMaya account number (last digits only, for verification);
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) where applicable;
• Transaction history, amounts, and timestamps;
• Payment method type and reference numbers.

3.4 Usage & Technical Data. When you use the 8k9 platform, we automatically collect:

• IP address and approximate geolocation;
• Device type, operating system, and browser;
• Session duration, pages visited, and features used;
• Game history, bet amounts, and outcomes;
• Login timestamps and access logs.

3.5 Communications Data. When you contact 8k9 support or respond to surveys, we collect:

• Content of live chat, email, or support ticket communications;
• Survey responses and feedback;
• Records of any complaints or disputes.

How We Use Your Personal Data

8k9 uses your personal data only for the purposes described below. We do not use your data for any purpose incompatible with the original purpose of collection without your prior consent.

• Account Management: To create, maintain, and administer your 8k9 account, including authentication and account security;
• Age & Identity Verification: To verify that you meet the 21+ age requirement and to comply with KYC obligations under Philippine AML regulations;
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods;
• Platform Operation: To provide access to games, record gameplay, calculate winnings, and maintain game integrity;
• Regulatory Compliance: To comply with PAGCOR licensing requirements, AML obligations, tax reporting, and other applicable Philippine legal requirements;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other prohibited conduct;
• Responsible Gaming: To monitor gameplay patterns and enforce responsible gaming tools such as deposit limits, loss limits, and self-exclusion;
• Customer Support: To respond to your inquiries, resolve disputes, and improve our support services;
• Marketing Communications: To send you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may opt out at any time;
• Platform Improvement: To analyse usage patterns and improve the 8k9 platform's features, performance, and user experience.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 8k9 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform our contract with you (i.e., to operate your account and provide gaming services);
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax obligations;
• Legitimate Interests: Processing necessary for our legitimate interests in fraud prevention, platform security, and business analytics, where such interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent, particularly for marketing communications and certain cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Data Sharing & Disclosure

8k9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating the platform, including payment processors (GCash, PayMaya, banks), KYC verification providers, game software providers, cloud hosting providers, and customer support platforms. All service providers are contractually bound to process data only on our instructions and in accordance with applicable data protection law;
• Regulatory Authorities: We disclose data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies where required by law or regulation;
• Law Enforcement: We disclose data to law enforcement agencies where required by a valid legal order, court order, or applicable law;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections;
• With Your Consent: We share data with third parties where you have given your explicit consent to such sharing.

Cookies & Tracking Technologies

8k9 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function, including session management, authentication, and security. These cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limits;
• Analytics Cookies: Collect anonymised data about how players use the platform to help us improve performance and user experience;
• Marketing Cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the 8k9 platform.

Data Retention

8k9 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. Specific retention periods are as follows:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction;
• Game History: Retained for a minimum of three (3) years;
• Support Communications: Retained for two (2) years from the date of the last interaction;
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

Your Rights Under Philippine Data Privacy Law

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by 8k9:

• Right to be Informed: The right to be informed of how your personal data is being processed;
• Right of Access: The right to request a copy of the personal data we hold about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary or lawful;
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified requests within fifteen (15) business days in accordance with NPC guidelines. We may require proof of identity before processing your request.

Data Security

8k9 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the 8k9 platform;
• Encryption of sensitive data at rest, including passwords (hashed with bcrypt) and KYC documents;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing by independent third parties;
• Two-factor authentication (2FA) available for all player accounts;
• Automated fraud detection and anomaly monitoring systems;
• Incident response procedures to detect, contain, and notify affected parties of data breaches within the timeframes required by the NPC.

While 8k9 takes all reasonable steps to protect your data, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any suspected unauthorised access.

Children & Minors

The 8k9 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the account, delete the data, and, where required, report the matter to the relevant authorities. If you believe a minor has registered on the 8k9 platform, please contact us immediately at the details provided in Section 13.

Changes to This Privacy Policy

8k9 reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered players by email or by a prominent notice on the platform at least fourteen (14) days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the 8k9 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 8k9, please contact our Data Protection Officer:

We aim to respond to all privacy-related requests within fifteen (15) business days. For formal complaints that cannot be resolved directly with 8k9, you may contact the National Privacy Commission (NPC) of the Philippines through their official channels.