Privacy Policy
At ph8k8, we take your privacy seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, and what your rights are as a Filipino player under Philippine data privacy law.
How ph8k8 Keeps Your Data Safe
These highlights summarise our core privacy commitments. The complete legal details are in the full policy below — please read both sections carefully.
Encrypted Data Storage
All personal and financial data on the ph8k8 platform is encrypted at rest and in transit using industry-standard TLS and AES-256 encryption. Your ph8k8 account credentials and payment details are never stored in plain text.
KYC Done Right
ph8k8 collects identity documents solely for PAGCOR-mandated KYC verification and anti-money laundering compliance. Your ID is never shared with third-party marketers or sold to data brokers — period.
No Third-Party Ad Tracking
ph8k8 does not sell, rent, or trade your personal data to advertisers or external data brokers. Any analytics tools we use are configured to anonymise your data before processing — your browsing habits stay private.
Your Rights Are Respected
Under the Data Privacy Act of 2012 (R.A. 10173), you have the right to access, correct, and request deletion of your personal data held by ph8k8. We honour every valid data request within 15 business days.
GCash & Banking Privacy
Payment transactions via GCash, PayMaya, BPI, BDO, and Metrobank are processed through encrypted payment gateways. ph8k8 stores only a reference token — never your full account number or banking credentials.
Breach Notification
In the unlikely event of a data security incident, ph8k8 will notify affected players and the National Privacy Commission (NPC) within the timeframes prescribed by Philippine law — no cover-ups, no delays.
1. Introduction
ph8k8 ("ph8k8," "we," "us," "the Company") operates the online gaming platform accessible at ph8k8.org and all associated mobile and web interfaces. We are committed to protecting the privacy and security of all personal information entrusted to us by our players and visitors across the Philippines — from Manila and Makati to Cebu, Davao, and every other region in between.
This Privacy Policy describes the types of personal data ph8k8 collects, the purposes for which that data is processed, the parties with whom it may be shared, the measures we take to keep it secure, and the rights available to you under Philippine law. It applies to all registered players, prospective players who browse the ph8k8 platform, and any other individuals whose data ph8k8 processes in the course of providing its services.
This Privacy Policy should be read together with ph8k8's Terms & Conditions, which govern your use of the platform as a whole. By registering a ph8k8 account or continuing to use the platform after any update to this policy, you acknowledge that you have read and understood the terms described here.
2. Data Controller
ph8k8 acts as the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012. This means ph8k8 determines the purposes and means by which your personal data is collected and processed in connection with the ph8k8 gaming platform.
ph8k8 operates under the regulatory authority of PAGCOR (Philippine Amusement and Gaming Corporation). Our data processing activities are subject to PAGCOR's licensing conditions, relevant PAGCOR circulars, and applicable provisions of Philippine law — including the Anti-Money Laundering Act and its implementing regulations.
ph8k8 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. Contact details for the DPO are provided in Section 15 of this policy.
3. Personal Data We Collect
ph8k8 collects only the personal data necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we collect are set out in the table below:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (passport, driver's licence, UMID) | Mandatory (KYC) |
| Contact Data | Email address, mobile number, residential address (barangay, city/municipality, province) | Mandatory |
| Account Data | Username, hashed password, account preferences, language and time zone settings | Mandatory |
| Financial Data | GCash reference numbers, PayMaya tokens, bank account name and last-4 digits, transaction history, deposit and withdrawal records | Mandatory |
| Verification Documents | Scanned or photographed copies of government IDs, utility bills, bank statements (for KYC and AML compliance) | Mandatory (KYC) |
| Gaming Activity Data | Game history, bet amounts, wins/losses, session durations, bonus usage, responsible gaming tool activity | Automatic |
| Technical Data | IP address, device type, browser type and version, operating system, approximate geolocation | Automatic |
| Communications Data | Records of Live Chat, email, and Messenger/Viber support interactions; survey responses | When applicable |
| Marketing Preferences | Opt-in/opt-out status for promotional emails, SMS, and push notifications | Optional |
4. How We Collect Your Data
4.1 Directly From You
ph8k8 collects personal data directly from you when you:
- Register for a ph8k8 account
- Complete the KYC identity verification process
- Make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, or Metrobank
- Contact our support team via Live Chat, email, or Messenger/Viber
- Participate in promotions, surveys, or bonus campaigns
- Update your account profile or communication preferences
- Use responsible gaming tools such as deposit limits or self-exclusion
4.2 Automatically Through Platform Use
When you access and use the ph8k8 platform, certain technical and behavioural data is collected automatically through cookies, server logs, and similar technologies. This includes IP address, device identifiers, session duration, pages visited, and game activity. This data helps ph8k8 maintain platform security, detect fraud, and improve the player experience.
4.3 From Third Parties
ph8k8 may receive limited personal data from the following third-party sources:
- Payment processors (e.g., GCash, PayMaya) — transaction confirmation and reference data
- Identity verification services — for cross-checking KYC documents
- PAGCOR and regulatory bodies — compliance-related disclosures
- Fraud prevention and AML screening services — to protect the platform and its players
5. How We Use Your Personal Data
ph8k8 uses your personal data only for the following purposes:
- Account management: Creating, maintaining, and securing your ph8k8 account
- Identity verification (KYC): Confirming your age (21+), identity, and eligibility to play
- Payment processing: Facilitating deposits and withdrawals via GCash and local bank channels
- Regulatory compliance: Meeting PAGCOR licensing requirements, anti-money laundering obligations, and tax reporting duties under Philippine law
- Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, and platform abuse
- Customer support: Responding to enquiries, resolving disputes, and managing complaints
- Responsible gaming: Administering deposit limits, cooling-off periods, self-exclusion requests, and related player protection tools
- Platform improvement: Analysing aggregated, anonymised usage data to improve ph8k8's games, features, and user experience
- Marketing communications: Sending promotional offers and updates — only where you have opted in and subject to your right to opt out at any time
- Legal proceedings: Enforcing ph8k8's Terms & Conditions and defending against legal claims where necessary
6. Legal Basis for Processing
Under the Data Privacy Act of 2012, ph8k8 must have a lawful basis for processing your personal data. Our processing activities rely on the following legal bases:
- Contractual necessity: Processing required to perform the contract between you and ph8k8 — including account registration, payment processing, and game provision.
- Legal obligation: Processing required for ph8k8 to comply with PAGCOR regulations, the Anti-Money Laundering Act (R.A. 9160 as amended), and other applicable Philippine laws.
- Legitimate interests: Processing necessary for ph8k8's legitimate business interests, including fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights and freedoms.
- Consent: Processing for marketing communications and optional features — only where you have given explicit, informed consent, which you may withdraw at any time.
7. Data Sharing & Disclosure
7.1 When We Share Your Data
ph8k8 does not sell or rent your personal data to third parties. We may share your data only in the following circumstances:
- Payment service providers: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and is bound by applicable Philippine financial regulations.
- PAGCOR and regulatory authorities: ph8k8 is required by law to report certain player activity data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government bodies upon lawful request.
- Identity verification and KYC service providers: Third-party KYC and fraud-screening vendors who process identity documents strictly on ph8k8's behalf, under data processing agreements and confidentiality obligations.
- Game content providers: Some game providers may receive limited, anonymised session data for game performance monitoring purposes only. No personally identifiable information is shared with game providers for marketing purposes.
- Legal and law enforcement: Where required by a court order, subpoena, or lawful directive from Philippine law enforcement or regulatory authorities, ph8k8 will disclose personal data as required by law.
7.2 What We Never Do
- Sell your personal data to third-party advertisers or data brokers
- Share your data with other online gaming operators for marketing purposes
- Disclose your financial data beyond what is strictly necessary for transaction processing
- Transfer your complete identity documents outside of verified KYC partners
8. Data Retention
ph8k8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements under Philippine law.
As a guide, ph8k8's standard retention periods are:
- Account and identity data: Retained for the duration of your account plus a minimum of 5 years after account closure, in line with AMLC record-keeping requirements.
- Transaction and financial records: Minimum 5 years from the date of the transaction, as required by the Anti-Money Laundering Act.
- KYC documents: Retained for the period required by PAGCOR and AMLC regulations — typically 5 years after the end of the business relationship.
- Communications and support records: Up to 3 years from the date of the communication, for dispute resolution and quality assurance purposes.
- Technical and log data: Up to 12 months, after which it is anonymised or deleted.
- Marketing preferences: Until you withdraw consent or request deletion, subject to any overriding legal retention obligation.
When personal data is no longer required, ph8k8 will securely delete or anonymise it in accordance with our internal data disposal procedures.
9. Security Measures
ph8k8 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- TLS encryption for all data transmitted between your device and ph8k8's servers
- AES-256 encryption for sensitive data stored at rest, including identity documents and financial records
- Two-factor authentication (2FA) options for player accounts to prevent unauthorised login
- Role-based access controls limiting ph8k8 staff access to personal data strictly on a need-to-know basis
- Regular security audits and penetration testing by independent third-party security firms
- 24/7 intrusion detection and monitoring on ph8k8's server infrastructure
- Secure data centres with physical access controls and redundancy measures
10. Cookies & Tracking Technologies
10.1 What Are Cookies?
Cookies are small text files placed on your device when you visit the ph8k8 platform. They help us recognise your device on return visits, maintain your session, and remember your preferences. ph8k8 uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).
10.2 Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Maintain your login session, process transactions, keep the platform secure | No — required for the platform to function |
| Functional | Remember your language, timezone, and display preferences | Yes — disabling affects personalisation |
| Analytics | Anonymised data on page usage, session duration, and feature engagement to improve ph8k8 | Yes — opt out via cookie settings |
| Security | Fraud detection, bot prevention, and suspicious activity monitoring | No — required for platform security |
10.3 Managing Cookies
You can control non-essential cookies through your browser settings or through the ph8k8 cookie preference centre accessible from the platform footer. Note that disabling certain cookies may affect the functionality of the ph8k8 platform, including your ability to stay logged in or access certain features.
11. Your Data Privacy Rights
Under the Data Privacy Act of 2012 (R.A. 10173) and its implementing rules and regulations, Filipino players have the following rights with respect to their personal data held by ph8k8:
- Right to be Informed: You have the right to know that ph8k8 is collecting your personal data and the purposes for which it is being used — which is the primary purpose of this Privacy Policy.
- Right of Access: You may request a copy of the personal data ph8k8 holds about you, including information on how it is being processed.
- Right to Correction: If any personal data ph8k8 holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
- Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected — subject to ph8k8's legal retention obligations under Philippine law.
- Right to Object: You may object to the processing of your personal data for marketing purposes at any time. You may also object to processing based on legitimate interests where your rights override those interests.
- Right to Data Portability: Where technically feasible, you may request that ph8k8 provide your personal data in a structured, commonly used, machine-readable format.
- Right to Lodge a Complaint: If you believe ph8k8 has handled your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of the above rights, contact ph8k8's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." ph8k8 will respond to all valid requests within 15 business days.
12. Minors
The ph8k8 platform is strictly for individuals aged 21 years and above, in accordance with PAGCOR regulations and Philippine gaming law. ph8k8 does not knowingly collect personal data from persons under the age of 21.
If ph8k8 discovers that personal data has been collected from a person under the age of 21, that data will be immediately deleted and the associated account will be permanently closed. If you are a parent or guardian and believe that your child has provided personal data to ph8k8, please contact our support team immediately at [email protected].
13. Cross-Border Data Transfers
In some cases, ph8k8 may transfer your personal data to service providers or infrastructure partners located outside the Philippines — for example, cloud hosting providers or international KYC verification services. Where such transfers occur, ph8k8 ensures that appropriate safeguards are in place, including:
- Data processing agreements that require recipients to protect your data to standards equivalent to the Data Privacy Act of 2012
- Standard contractual clauses approved by the National Privacy Commission
- Transfers only to countries or organisations recognised as providing adequate data protection
ph8k8 will never transfer your personal data internationally for the purpose of circumventing Philippine data privacy law or your rights as a data subject.
14. Changes to This Privacy Policy
ph8k8 may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or platform features. When we make material changes, we will:
- Post the updated Privacy Policy on this page with a revised effective date
- Send a notification to your registered email address where the changes are significant
- Display a notice on the ph8k8 platform prompting you to review the updated policy
We encourage you to review this Privacy Policy periodically. Your continued use of the ph8k8 platform after any update constitutes your acceptance of the revised policy. If you do not agree with any changes, you may close your account by contacting our support team.
15. Contact the Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or ph8k8's handling of your personal data, please contact our Data Protection Officer:
Email: [email protected] (Subject: "Data Privacy Request")
Response time: Within 15 business days of receipt
Available: Monday to Friday, 9:00 AM – 6:00 PM PHT
If you are not satisfied with ph8k8's response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.
Your Data Privacy Rights at a Glance
As a Filipino player on ph8k8, the Data Privacy Act of 2012 gives you these key rights over your personal data — all exercisable by contacting our DPO.
Right to Be Informed
Know what data ph8k8 collects, why we collect it, and how it is used — before and during processing.
Right of Access
Request a full copy of the personal data ph8k8 holds about you, including details on how it is processed.
Right to Correction
Ask ph8k8 to correct or update any inaccurate or incomplete personal data held in your account.
Right to Erasure
Request deletion of your personal data where it is no longer needed, subject to legal retention requirements.
Right to Object
Opt out of marketing communications or object to processing based on legitimate interests at any time.
Right to Lodge a Complaint
If you believe ph8k8 has mishandled your data, escalate your complaint directly to the National Privacy Commission.
Your Privacy Is Protected — Now Enjoy the Game
ph8k8 is a PAGCOR-regulated platform built for Filipino players who expect both great gaming and genuine data security. Slots, live casino, bingo, sabong — all in one safe, mobile-friendly place.
21+ only. Play responsibly. PAGCOR regulated.