8ki Casino Privacy Policy

This Privacy Policy is issued by 8ki ("we," "us," "our," or "the Platform"), the operator of the online gaming platform accessible at 8ki.one. 8ki acts as the data controller in respect of the personal data of players and visitors to the platform, meaning we determine the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the 8ki website, mobile-optimised platform, and any related communications channels, including our customer support services. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

8ki collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are set out in the table below.

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where this is strictly necessary for responsible gaming purposes (for example, where a player voluntarily discloses a gambling-related health concern to our support team).

8ki collects personal data through the following means:

Direct Collection

You provide data directly to us when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion. This is the primary source of personal data we hold about you.

Automated Collection

When you access the 8ki platform, we automatically collect certain technical and usage data through cookies, web beacons, and similar tracking technologies. This includes your IP address, device identifiers, browser information, and details of your interactions with the platform. Please refer to Section 7 (Cookies & Tracking) for more information.

Third-Party Sources

We may receive personal data about you from third parties in the following circumstances:

• KYC Verification Providers: Identity verification services that confirm the authenticity of the documents you submit during the verification process;
• Payment Processors: E-wallet providers such as GCash and PayMaya, and banking partners including BPI, BDO, and Metrobank, may share transaction confirmation data with us;
• Fraud Prevention Services: Third-party fraud detection platforms that flag suspicious account activity or payment patterns;
• Regulatory Authorities: Where required by law, we may receive information from Philippine regulatory bodies in connection with compliance investigations.

8ki uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your 8ki player account, including processing your registration, verifying your identity, and managing your account settings;
• Payment Processing: To process deposits and withdrawals through your chosen payment method, including GCash, PayMaya, and Philippine bank transfers, and to maintain accurate financial records;
• KYC & AML Compliance: To verify your identity and age (21+ requirement), screen against sanctions lists, and comply with our anti-money laundering obligations under applicable Philippine law;
• Platform Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, and other prohibited conduct;
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through our live chat and email support channels;
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, enforce self-exclusion and deposit limit requests, and provide responsible gaming interventions where appropriate;
• Legal Compliance: To comply with our obligations under applicable law, including data retention requirements, regulatory reporting, and responses to lawful requests from Philippine authorities;
• Service Improvement: To analyse usage patterns, identify technical issues, and improve the features and performance of the 8ki platform;
• Marketing Communications: Where you have given your consent, to send you promotional offers, bonus notifications, and news about 8ki. You may withdraw your consent to marketing communications at any time by updating your account preferences or contacting our support team.

8ki processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable data protection principles:

• Contractual Necessity: Processing that is necessary to perform our contract with you — i.e., to operate your player account, process your transactions, and provide the gaming services you have signed up for;
• Legal Obligation: Processing that is required to comply with our legal obligations, including KYC verification, AML reporting, age verification, and responses to lawful regulatory requests;
• Legitimate Interests: Processing that is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided that these interests are not overridden by your rights and interests;
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8ki does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

Service Providers

We engage trusted third-party service providers to assist us in operating the platform. These include KYC verification providers, payment processors (including GCash, PayMaya, BPI, BDO, and Metrobank), fraud detection services, cloud hosting providers, and customer support platform operators. All service providers are contractually required to process your data only on our instructions and to maintain appropriate security measures.

Regulatory & Law Enforcement Authorities

We may disclose your personal data to Philippine regulatory authorities, law enforcement agencies, or other government bodies where we are required to do so by law, court order, or regulatory direction. This includes disclosures required under anti-money laundering legislation and gaming regulations.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 8ki business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

The 8ki platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and collect usage data for analytics and security purposes.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as session management, login authentication, and security checks. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences, such as your language settings and display preferences, to provide a more personalised experience.
• Analytics Cookies: We use analytics cookies to understand how players interact with the platform — which pages are visited most, where players encounter difficulties, and how the platform can be improved. Analytics data is aggregated and does not identify individual players.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, including account takeover attempts and suspicious login patterns.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 8ki platform. For strictly necessary cookies, no consent is required as they are essential to the service you have requested.

8ki retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule, we retain player account data for a minimum of five (5) years following the closure or deactivation of your account. This retention period reflects our obligations under Philippine anti-money laundering legislation, which requires gaming operators to maintain records of customer transactions and identity verification documents for a minimum period.

Specific retention periods by data category are as follows:

• Identity and KYC Documents: 5 years from account closure;
• Transaction Records: 5 years from the date of the transaction;
• Customer Support Communications: 2 years from the date of the communication;
• Technical and Usage Data: 13 months from collection, unless required for longer for security or fraud investigation purposes;
• Marketing Consent Records: Until consent is withdrawn, plus 1 year thereafter as evidence of the consent.

When personal data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.

8ki implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 8ki platform;
• Encryption of sensitive data at rest, including payment information and identity documents;
• Role-based access controls that restrict access to personal data to authorised personnel only, on a strict need-to-know basis;
• Regular security assessments and penetration testing of the platform infrastructure;
• Two-factor authentication options for player accounts to reduce the risk of unauthorised access;
• Continuous monitoring of platform activity for signs of suspicious behaviour or security incidents;
• Staff training on data protection obligations and security best practices.

While we take all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 8ki will notify you and the relevant Philippine regulatory authority in accordance with our legal obligations.

Under the Data Privacy Act of 2012 and applicable data protection principles, you have the following rights in relation to your personal data held by 8ki:

• Right to Be Informed: You have the right to be informed about how your personal data is collected and used. This Privacy Policy fulfils that obligation.
• Right of Access: You have the right to request a copy of the personal data we hold about you, together with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose for which it was collected. This right is subject to our legal obligations to retain certain records.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, and where you believe your interests override ours.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that your personal data has been processed in a manner that violates your rights under the Data Privacy Act.

To exercise any of the above rights, please contact our Data Protection Officer through the support channels listed in Section 13. We will respond to all verified requests within 30 days. In complex cases, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

The 8ki platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any funds held in an account found to belong to a minor will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that your child has registered an account on 8ki, please contact our support team immediately so that we can investigate and take appropriate action.

8ki reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When we make material changes to this Privacy Policy, we will notify registered players by posting a prominent notice on the platform and, where practicable, by sending a notification to the email address registered to your account. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of the 8ki platform following the posting of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Privacy Policy, you should cease using the platform and may request account closure by contacting our support team.

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how 8ki handles your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 directly through the 8ki platform. This is the fastest way to reach our team for account-related privacy queries.
• Email: [email protected] — please include "Privacy Request" in the subject line so we can route your message to the appropriate team. We aim to respond to all privacy-related email enquiries within 5 business days.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012. Information about how to file a complaint with the NPC is available through official Philippine government channels.