8k820 Privacy Policy

1. Introduction

8k820 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every Filipino player who registers, deposits, plays, or otherwise interacts with our online casino and sports betting platform at https://8k820.net. This Privacy Policy ("Policy") has been prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and the implementing rules and regulations issued by the National Privacy Commission.

This Policy describes: the categories of personal data we collect from you; the purposes and legal bases for which we process that data; how long we retain it; with whom we share it; the security measures we apply to protect it; and the rights you hold as a data subject under Philippine law.

By registering an account on 8k820, completing your 8k820 login, depositing funds, or accessing any part of the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, you must not use the 8k820 platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, 8k820 is the personal information controller ("PIC") in respect of all personal data processed in connection with the 8k820 platform. This means we determine the purposes and means by which your personal data is processed.

In certain circumstances — for example where we engage third-party payment processors, identity verification providers, or live game studios — those parties may act as personal information processors ("PIPs") and process your data strictly on our documented instructions. We ensure that all PIPs engaged by 8k820 are bound by data processing agreements consistent with the requirements of the DPA.

Our designated Data Protection Officer (DPO) can be contacted at [email protected] for any privacy-related queries, requests, or complaints.

3. Categories of Personal Data We Collect

8k820 collects only the minimum personal data necessary to provide you with a safe, compliant, and high-quality gaming experience. The categories of data we process are as follows:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — players must be 21 years or older)
• Gender (optional, for personalisation)
• Nationality and country of residence
• Username chosen at registration

3.2 Contact Data

• Email address
• Philippine mobile number
• Residential address (barangay, city/municipality, province)

3.3 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued IDs (Philippine passport, PhilSys National ID, SSS/UMID, driver's licence, or PRC ID)
• Proof of address documents (utility bills, bank statements, or Barangay clearance)
• Selfie or liveness verification images collected during KYC review
• Proof of payment method ownership (e.g., GCash or Maya account screenshot)

3.4 Financial & Transaction Data

• Deposit and withdrawal amounts and timestamps
• Payment method type (e.g., GCash, Maya, BPI, BDO, Metrobank, InstaPay)
• Transaction reference numbers
• Account balance history
• Bonus and promotional redemption records

3.5 Gaming Activity Data

• Game session logs including game titles played, bet amounts, and win/loss outcomes
• Sports betting selections, odds accepted, and settlement results
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.6 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser type
• Session timestamps and duration
• Cookies and similar tracking identifiers (see Section 9)

3.7 Communications Data

• Records of live chat, email, and support ticket interactions with the 8k820 team
• Feedback, survey responses, and promotional opt-in preferences

4. How We Collect Your Personal Data

8k820 collects personal data through the following channels:

• Directly from you — when you complete the registration form, perform your 8k820 login, submit KYC documents, make a deposit or withdrawal, contact customer support, or respond to a promotional survey.
• Automatically — through cookies, server logs, and device fingerprinting technologies as you browse and interact with the 8k820 platform.
• From third-party service providers — identity verification agencies conducting KYC checks; payment processors (GCash, Maya, BPI, BDO, Metrobank, InstaPay) confirming transaction status; fraud detection and AML screening services.
• From public sources — publicly available sanctions lists, politically exposed persons (PEP) databases, or adverse media sources consulted as part of our AML obligations.

5. Purpose & Legal Basis for Processing

We process your personal data only where we have a lawful basis to do so under the Data Privacy Act of 2012. The table below sets out our primary processing purposes and the applicable legal basis for each:

6. Data Sharing & Third-Party Disclosure

8k820 does not sell, rent, or trade your personal data to any third party for their own commercial or marketing purposes. We share your personal data only in the following limited circumstances:

6.1 Payment Processors

We share transaction-related data (name, mobile number, transaction amount) with GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, QR Ph, and 7-Eleven CLiQQ solely to process your deposits and withdrawals. These providers process your payment data under their own privacy policies and are independently regulated financial institutions in the Philippines.

6.2 Identity Verification Providers

We engage licensed third-party KYC and identity verification providers to assist in confirming the authenticity of documents you submit. These providers act as personal information processors under binding data processing agreements and are permitted to use your data only for the specific verification task.

6.3 Game Content Providers

Live casino games on 8k820 are operated by licensed third-party game studios. Minimal game session data (player ID, bet amounts, game round results) is shared with these studios for the purpose of game delivery, dispute resolution, and auditing. No sensitive personal data such as your full name, national ID number, or financial account details is shared with game studios.

6.4 Regulatory and Law Enforcement Authorities

8k820 may be required to disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where disclosure is required by law, court order, or regulatory direction.

6.5 Professional Advisers

We may share personal data with our legal advisers, auditors, and compliance consultants on a strictly need-to-know basis, subject to professional confidentiality obligations.

6.6 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 8k820's business, your personal data may be transferred to the relevant successor entity as part of that transaction. We will notify registered players by email in advance of any such transfer and ensure that the successor entity is bound by data protection obligations consistent with this Policy.

7. Data Retention Periods

8k820 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of your identity. Where data must be retained beyond these periods due to an active legal dispute, investigation, or regulatory direction, 8k820 will retain the data until that matter is resolved.

8. Security Measures

8k820 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our key security controls include:

• Encryption in transit: All data transmitted between your browser or app and 8k820 servers is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive data fields — including KYC documents, hashed passwords, and payment identifiers — are encrypted at rest using AES-256.
• Access controls: Internal access to player personal data is restricted on a strict need-to-know basis, enforced through role-based access controls (RBAC) and multi-factor authentication for administrative systems.
• Audit logging: All access to sensitive player records by internal staff is logged and subject to regular audit review.
• Vulnerability management: 8k820 conducts regular penetration testing, vulnerability assessments, and code security reviews of its platform infrastructure.
• Incident response: We maintain a documented data breach response plan with defined escalation procedures, consistent with NPC notification requirements under the DPA.

While 8k820 takes all reasonable measures to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own 8k820 login credentials. Do not share your password with anyone, and use a unique, strong password for your 8k820 account.

9. Cookies & Similar Technologies

8k820 uses cookies and similar technologies (such as local storage and session tokens) to operate the platform, maintain your login session, remember your preferences, and analyse platform performance. We do not use cookies for cross-site advertising or to build third-party marketing profiles.

9.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged into your 8k820 account and security tokens that protect against cross-site request forgery (CSRF). These cannot be disabled.
• Functional cookies: Remember your language preferences, display settings, and responsible gaming tool configurations. Disabling these may reduce platform functionality.
• Analytics cookies: Help us understand how players navigate the 8k820 platform so we can improve performance and content. Data collected is aggregated and does not identify individual players.

9.2 Managing Cookies

You may manage your cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that blocking strictly necessary cookies will prevent you from using the 8k820 platform. For full cookie management instructions, refer to your browser's help documentation.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 8k820. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." We will acknowledge your request within 72 hours and respond within fifteen (15) business days.

• Right to be informed: You have the right to be told how your personal data is being collected and processed — which this Policy fulfils.
• Right of access: You may request a copy of the personal data 8k820 holds about you, along with information on how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under Philippine AML law.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes. Upon a valid objection to marketing, we will cease processing your data for that purpose immediately.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: If you believe 8k820 has violated your data privacy rights, you may file a complaint directly with the National Privacy Commission of the Philippines at www.privacy.gov.ph.

11. Minors and Age Restriction

The 8k820 platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals below the age of 21. This restriction is consistent with Philippine gaming age requirements and our responsible gaming obligations.

During the registration process and KYC review, 8k820 verifies the age of all applicants. Any account found to have been registered by or on behalf of a person under the age of 21 will be immediately closed, all funds will be returned to the deposit source after verification, and any data collected will be deleted or anonymised except to the extent required for legal or compliance purposes.

If you believe that a minor has registered on the 8k820 platform, please contact us immediately at [email protected] so we can take appropriate action.

12. Cross-Border Data Transfers

8k820 is a platform directed at Filipino players and processes the majority of player data within the Philippines. However, certain service providers engaged by 8k820 — including live game studio operators and cloud infrastructure providers — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, 8k820 ensures that appropriate safeguards are in place to provide a level of data protection that is substantially equivalent to that afforded under the Data Privacy Act of 2012. These safeguards include contractual clauses approved by the National Privacy Commission, binding corporate rules, or transfers to jurisdictions that have been assessed as providing adequate data protection.

You may request further information about the specific safeguards applicable to any cross-border transfer by contacting our DPO at [email protected].

13. Data Breach Protocol

In the event of a personal data breach that is likely to result in a real risk of harm to affected data subjects, 8k820 will:

1. Contain and assess the breach as a matter of urgency upon discovery.
2. Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, consistent with Section 20(f) of the Data Privacy Act of 2012.
3. Directly notify affected players via email without undue delay where the breach is likely to cause harm — providing a clear description of what data was affected, what steps we are taking, and what affected players can do to protect themselves.
4. Document all breaches, whether or not they meet the notification threshold, in our internal data breach register.

8k820 maintains a dedicated incident response team and a documented breach response playbook that is reviewed and tested on a regular basis. If you suspect that your 8k820 account or personal data may have been compromised, please contact [email protected] immediately.

14. Amendments to This Privacy Policy

8k820 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the National Privacy Commission. The "Effective Date" at the top of this Policy will be updated whenever a material change is made.

For material changes — such as a new category of data being collected, a new purpose for processing, or changes to data sharing arrangements — 8k820 will notify registered players by email at least fourteen (14) days before the change takes effect. For minor or administrative changes (e.g., updated contact details or typographical corrections), we will post the updated Policy on the 8k820 platform without individual notification.

Your continued use of the 8k820 platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree to the revised Policy, you may close your account in accordance with Section 13.1 of our Terms & Conditions.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data 8k820 holds about you, please contact our Data Protection Officer:

• Data Protection Officer — 8k820
• Email: [email protected] (Subject: "Privacy / Data Subject Request")
• General Inquiries: [email protected]
• Response time: We aim to acknowledge all privacy requests within 72 hours and resolve them within 15 business days (Philippine Standard Time).

If you are not satisfied with our response, you have the right to escalate your concern to the National Privacy Commission of the Philippines.