868k8 Privacy Policy

1 Scope & Application

This Privacy Policy applies to all personal information collected by 868k8 through the 868k8.club website, its mobile-optimised browser interface, and any associated customer support channels (including live chat). It applies to all registered Players, prospective Players who initiate but do not complete registration, and visitors who browse 868k8.club without registering.

For the purposes of this Policy, "personal information" means any information from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual, as defined under Republic Act No. 10173 (Data Privacy Act of 2012).

868k8 acts as the Personal Information Controller (PIC) in respect of all personal data processed under this Policy. Where 868k8 engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors (PIPs) subject to contractual data processing agreements consistent with the requirements of the DPA.

2 Personal Data We Collect

868k8 collects the following categories of personal data from Players and platform users:

868k8 does not collect sensitive personal information as defined under the DPA (such as health records, sexual orientation, or political affiliations) except where expressly required for responsible gaming or legal compliance purposes.

3 How We Collect Your Data

868k8 collects personal data through the following mechanisms:

• Direct Collection: Information you provide during account registration, KYC submission, deposit and withdrawal requests, and customer support interactions.
• Automated Collection: Technical data collected automatically when you access the 868k8 platform, including IP addresses, device identifiers, browser fingerprints, and session activity logs.
• Cookies and Tracking Technologies: First-party cookies and similar technologies used to maintain session state, remember platform preferences, and analyse platform performance. See Section 7 for full cookie details.
• Payment Processor Data: Confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment processors upon deposit or withdrawal transaction completion. 868k8 does not receive or store full financial account credentials — only transaction reference data.
• Identity Verification Services: Where 868k8 uses third-party KYC verification services to validate government ID documents, those services may provide verification result data to 868k8 pursuant to data processing agreements.

4 Purposes of Processing

868k8 processes personal data for the following purposes:

4.1 Contractual Necessity

• Account creation, maintenance, and authentication;
• Processing deposits and withdrawals via supported Philippine payment methods;
• Providing access to games, sports betting markets, and promotional offers;
• Administering the VIP loyalty program and bonus systems;
• Customer support provision and complaint resolution.

4.2 Legal & Regulatory Compliance

• Identity and age verification pursuant to PAGCOR requirements (21+ age restriction);
• Anti-Money Laundering (AML) and Know Your Customer (KYC) compliance under Republic Act No. 9160 (AMLA) and its amendments;
• Responding to lawful requests from PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory and law enforcement authorities;
• Fraud detection, prevention, and investigation;
• Responsible gaming monitoring and intervention pursuant to PAGCOR guidelines.

4.3 Legitimate Interests

• Platform security monitoring and intrusion detection;
• Analysis of gaming activity patterns to identify problem gambling indicators;
• Platform performance optimisation for Philippine mobile network conditions;
• Internal reporting, analytics, and business intelligence.

4.4 Consent-Based Processing

• Sending promotional SMS communications about 868k8 offers (opt-in, withdrawable at any time);
• Personalisation of game recommendations based on playing history (where enabled in account settings).

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 868k8 relies on the following lawful bases for processing personal data:

• Contractual Necessity (Section 12(b), DPA): Processing required to perform our contract with you as a registered Player, including account management, payments, and game provision.
• Legal Obligation (Section 12(c), DPA): Processing necessary for compliance with applicable Philippine law, including PAGCOR regulations, AMLA obligations, and tax reporting requirements.
• Legitimate Interests (Section 12(f), DPA): Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your fundamental rights and freedoms.
• Consent (Section 12(a), DPA): Processing for marketing communications and personalisation features, where you have provided explicit opt-in consent. This consent may be withdrawn at any time without affecting other processing activities.

6 Data Sharing & Disclosure

868k8 may share your personal data with the following categories of recipients:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and other payment service providers solely for the purpose of processing your financial transactions;
• KYC / Identity Verification Providers: Third-party services engaged to verify the authenticity of government-issued identity documents submitted during KYC;
• Game Software Providers: JILI, PG Soft, Pragmatic Play, and other licensed game providers may receive anonymised or pseudonymised session data for game integrity monitoring and RNG certification purposes;
• Regulatory Authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law, court order, or regulatory direction;
• Law Enforcement: Philippine National Police (PNP), National Bureau of Investigation (NBI), or other authorities where 868k8 is legally compelled to disclose data or where disclosure is necessary to prevent or report criminal activity;
• Professional Advisers: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations;
• Corporate Transactions: In the event of a merger, acquisition, or business restructuring, personal data may be disclosed to prospective acquirers under appropriate confidentiality agreements.

All third-party Personal Information Processors engaged by 868k8 are contractually required to process personal data only on documented instructions from 868k8 and to implement appropriate technical and organisational security measures consistent with the DPA's Implementing Rules and Regulations.

7 Cookies & Tracking Technologies

868k8 uses the following types of cookies and similar tracking technologies on 868k8.club:

868k8 does not use third-party advertising or behavioural tracking cookies. You may manage functional and analytics cookies through your browser settings. Disabling strictly necessary cookies will prevent platform access.

8 Data Retention

868k8 retains personal data only for as long as necessary for the purposes for which it was collected, consistent with applicable Philippine legal retention requirements:

• Active Account Data: Retained for the duration of the active account relationship and for a period of five (5) years following account closure, consistent with PAGCOR and AMLA record-keeping requirements.
• KYC Documentation: Retained for a minimum of five (5) years following the termination of the account relationship, or longer if required by AMLC or regulatory directive.
• Financial Transaction Records: Retained for a minimum of five (5) years pursuant to AMLA requirements and applicable Philippine tax regulations.
• Customer Support Communications: Retained for two (2) years from the date of the interaction, or longer if the communication is relevant to an ongoing dispute or regulatory investigation.
• Anonymised Analytics Data: May be retained indefinitely in anonymised or aggregated form that does not identify individual players.

Upon expiry of the applicable retention period, 868k8 will securely delete or anonymise personal data using methods that prevent reconstruction of the original personal information.

9 Data Security

868k8 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your browser and 868k8 servers is encrypted using TLS 1.2 or higher (256-bit SSL), the same standard used by Philippine banks and GCash.
• Encryption at Rest: Sensitive personal data stored on 868k8 infrastructure is encrypted at the database level.
• Access Controls: Personal data access is restricted on a need-to-know basis using role-based access controls. 868k8 staff cannot access player passwords — these are stored as irreversible cryptographic hashes.
• OTP Authentication: Account logins may be secured with SMS-based two-factor authentication to verify identity at point of access.
• Security Monitoring: Continuous monitoring for anomalous access patterns, potential intrusions, and unusual transaction activity.
• Regular Security Assessment: Periodic review of security controls and procedures consistent with evolving cybersecurity standards.

10 Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by 868k8:

• Right to be Informed: The right to be informed of how your personal data is being processed, which this Privacy Policy fulfils.
• Right of Access: The right to obtain a copy of the personal data 868k8 holds about you, along with information about how it is processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. Some corrections (e.g., name or date of birth) require KYC documentation.
• Right to Erasure: The right to request deletion of your personal data, subject to 868k8's legal retention obligations under PAGCOR and AMLA requirements. Erasure requests may result in account closure.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes. Objections to legitimate-interest processing will be assessed on a case-by-case basis.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated. Contact information for the NPC is available at privacy.gov.ph.

To exercise any of the above rights, contact 868k8's Data Protection Officer (DPO) via live chat or at the contact details provided in Section 15. 868k8 will respond to valid rights requests within fifteen (15) business days, consistent with NPC guidelines.

11 Children's Privacy & Minors

If you believe a minor has registered an account on 868k8, please contact our support team immediately via live chat. 868k8 takes underage access seriously and will act promptly upon notification.

12 Cross-Border Data Transfers

868k8's primary operations and data infrastructure serve the Philippine market. In the course of operating the platform, personal data may be processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software vendors with servers in other jurisdictions.

Where personal data is transferred outside the Philippines, 868k8 ensures that such transfers are subject to appropriate safeguards consistent with Section 21 of the DPA and its implementing rules, including: contractual data processing agreements that impose DPA-equivalent obligations on overseas processors; and selection of processors located in jurisdictions with data protection frameworks deemed adequate by the NPC.

In all cases, cross-border transfers of 868k8 player personal data are limited to what is strictly necessary for the platform's operational purposes and are not made to jurisdictions on the NPC's restricted transfer list without appropriate safeguards.

13 Marketing Communications

868k8 may send promotional SMS messages to your registered Philippine mobile number regarding bonuses, game releases, sporting event betting markets, and platform updates. These communications are sent only with your prior consent, which is requested at the time of registration.

You may opt out of promotional SMS communications at any time by:

• Updating your communication preferences in your 868k8 account settings;
• Requesting opt-out via 868k8 live chat support.

Opt-out requests are processed within 48 hours. Note that opting out of marketing communications does not affect transactional SMS messages (such as OTP codes, withdrawal confirmations, and security alerts), which are sent as necessary for account operation and security.

14 Amendments to This Policy

868k8 reserves the right to amend this Privacy Policy at any time to reflect changes in Philippine law, regulatory requirements, platform operations, or data processing practices. Material amendments will be communicated to registered Players via SMS notification to the registered mobile number or by prominent notice on the 868k8 platform at least seven (7) days before the amended policy takes effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. Your continued use of the 868k8 platform following notification of an amendment constitutes your acknowledgment of the updated policy. If you do not accept a material amendment, you may close your account by contacting 868k8 support before the amendment's effective date.

15 Contact & Data Protection Officer

For all data privacy inquiries, rights requests, or complaints regarding 868k8's processing of your personal data, please contact us through the following channels:

868k8 targets a response to all privacy-related inquiries within fifteen (15) business days of receipt. For complaints that cannot be resolved directly with 868k8, you have the right to escalate to the National Privacy Commission (NPC) of the Philippines.