k8k8 Privacy Policy – How We Protect Your Data

1. Data We Collect

k8k8 collects personal information in several ways: directly from you when you register or interact with the platform, automatically through your device and browser as you navigate the site, and from third-party services such as identity verification providers and payment processors.

1.1 Information You Provide Directly

• Registration details: Full legal name, date of birth, email address, mobile number, and residential address.
• Identity documents: Government-issued photo ID (e.g., Philippine National ID, passport, driver's licence), proof of address, and selfie images uploaded as part of the KYC process.
• Payment information: GCash or Maya account numbers, bank account details (for InstaPay or PESONet transfers), and partial card numbers when using Visa or Mastercard. k8k8 does not store full card numbers.
• Support communications: Messages, emails, and chat transcripts exchanged with the k8k8 support team.
• Responsible gaming submissions: Limit selections, self-exclusion requests, and any information shared voluntarily in support of a responsible gaming concern.

1.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version, and screen resolution.
• Usage data: Pages visited, features used, game sessions played, bet and transaction history, session start and end times, and click paths within the k8k8 platform.
• Cookies and similar technologies: Session identifiers, preference tokens, analytics tags, and fraud-detection signals. See Section 5 for full details.
• Geolocation: Approximate location derived from your IP address, used to verify eligibility and comply with jurisdictional restrictions. k8k8 does not request GPS-level location access.

1.3 Information from Third Parties

k8k8 may receive additional information about you from identity verification partners (for document authenticity checks), payment processors (for transaction confirmation), fraud-detection services, and, where applicable, publicly available sources used for compliance screening.

2. How We Use Your Data

k8k8 uses your personal data only for the purposes listed below. We do not use it for any purpose that is incompatible with these stated reasons without giving you prior notice and, where required, obtaining your consent.

• Account creation and management: Setting up your k8k8 account, verifying your identity, maintaining your profile, and enabling login access.
• Transaction processing: Handling deposits, withdrawals, bonus credits, and VIP cashback payments in Philippine Peso through your selected payment method.
• Legal and regulatory compliance: Meeting obligations under the Philippine Data Privacy Act (RA 10173), anti-money laundering regulations, and any applicable gaming licensing requirements.
• Fraud prevention and security: Detecting duplicate accounts, unusual transaction patterns, bonus abuse, collusion, and other activities that may harm the platform or other players.
• Customer support: Responding to your queries, resolving disputes, and processing account-related requests.
• Platform improvement: Analysing aggregated usage data to improve the k8k8 interface, game offering, and overall player experience.
• Responsible gaming: Monitoring play patterns to identify potential problem gaming behaviour and administering limits, cooling-off periods, and self-exclusion tools.
• Communications: Sending account notifications, transaction confirmations, and — where you have opted in — promotional messages about k8k8 offers.

3. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), k8k8 processes your personal data on the following legal grounds:

• Contractual necessity: Most processing is required to fulfil the agreement between you and k8k8 — for example, processing a withdrawal cannot happen without verifying your identity and payment details.
• Legal obligation: Some processing is required by law, including anti-money laundering record-keeping, age verification, and regulatory reporting.
• Legitimate interests: k8k8 may process data for fraud detection, security improvement, and platform analytics where these interests do not override your rights.
• Consent: For optional processing — such as sending promotional communications or using non-essential cookies — k8k8 will ask for your explicit consent and will not proceed without it.

4. Sharing Your Data

k8k8 does not sell your personal data. We may share it with the following categories of recipients only to the extent necessary for the stated purpose:

4.1 Service Providers

We work with carefully selected third-party vendors who process data on our behalf under strict contractual data processing agreements. These include identity verification providers, payment processors (for GCash, Maya, BDO, BPI, InstaPay, and card transactions), cloud hosting providers, and customer support tooling platforms. These vendors are not permitted to use your data for any purpose beyond delivering the service to k8k8.

4.2 Regulatory and Legal Authorities

k8k8 may disclose your information to government agencies, law enforcement bodies, or regulatory authorities when required to do so by Philippine law, a valid court order, or a legitimate regulatory inquiry. We will notify you of such a disclosure unless prohibited from doing so by law.

4.3 Fraud and Security Partners

Where a fraud investigation involves another platform or a shared fraud-detection network, k8k8 may exchange limited account identifiers — such as hashed email addresses or device fingerprints — with trusted industry partners for the sole purpose of preventing financial crime. No payment credentials or full personal data are shared in this context.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of k8k8's business, personal data held by the platform may be transferred to the acquiring entity. We will notify affected players in advance and provide options consistent with their rights under RA 10173.

5. Cookies and Tracking Technologies

k8k8 uses cookies and similar technologies — including browser local storage and session tokens — to operate the platform, maintain your login session, remember your preferences, detect fraud, and analyse platform usage.

5.1 Types of Cookies Used

You can manage cookie preferences through the cookie settings panel accessible from the k8k8 footer. Note that disabling strictly necessary cookies will prevent you from logging in or using core platform features.

6. Data Retention

k8k8 keeps your personal data only for as long as it is needed for the purpose for which it was collected, or as required by applicable law. The table below gives a general guide to our retention periods. After the retention period expires, data is securely deleted or anonymised so that it can no longer be linked to you.

If you request deletion of your account and data under Section 8, k8k8 will action the request within 30 days except where retention is required by law — in which case we will explain the specific legal basis and provide an estimated date for full deletion.

7. Security Measures

k8k8 applies a layered approach to protecting your personal data. Our security controls include — but are not limited to — the following:

• Encryption in transit: All data exchanged between your device and k8k8 servers is encrypted using TLS (Transport Layer Security).
• Encryption at rest: Sensitive data fields are encrypted in storage using AES-256 or equivalent.
• Access control: Staff access to personal data is role-based and logged. Only personnel who need the data to perform their function can access it.
• Multi-factor authentication: k8k8 supports and encourages the use of multi-factor authentication (MFA) on player accounts. Our internal systems require MFA for all staff with data access.
• Vulnerability management: k8k8 conducts regular security assessments and applies security patches promptly.
• Incident response: k8k8 maintains a data breach response procedure that includes player notification within 72 hours of becoming aware of a qualifying incident, consistent with RA 10173 requirements.

8. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal information held by k8k8. These rights are free to exercise and k8k8 will respond within 30 days of receiving a valid request.

To exercise any of these rights, send an email to support@k8k8.fun with the subject line "Data Rights Request" and a description of your request. We may need to verify your identity before actioning the request. You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

9. Children's Privacy

k8k8 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under 21 years of age (or the applicable legal gaming age in their jurisdiction). Age verification is part of the registration process, and k8k8 applies additional checks before processing a first withdrawal.

If we become aware that a minor has registered an account, we will immediately close the account, delete all associated personal data, and forfeit any balance in accordance with our Terms and Conditions. If you believe a minor has registered on k8k8, please contact us immediately at support@k8k8.fun so we can investigate and act.

10. Contact and Complaints

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a concern about how k8k8 handles your personal information, please reach out through the channels below.

k8k8 may update this Privacy Policy from time to time. When we do, the updated version will be published on this page with a revised effective date. We will notify active players of material changes via their registered email address. Continued use of k8k8 after a policy update constitutes acceptance of the revised terms.