8k87 Casino Privacy Policy

1.1 8k87 is committed to protecting the privacy and personal data of every individual who uses our online gaming and sports betting platform. This Privacy Policy ("Policy") sets out how 8k87 ("the Company," "we," "us," or "our") collects, processes, stores, shares, and protects personal information relating to registered players ("you," "User," or "Player") and visitors to the Platform.

1.2 This Policy applies to all personal data collected through the 8k87 website at https://8k87.one, associated subdomains, mobile-optimised interfaces, and any other channels through which you interact with the Company — including customer support communications, promotional participation, and KYC verification processes.

1.3 This Policy should be read together with 8k87's Terms & Conditions, which are available at 8k87 Terms & Conditions. Where this Policy and the Terms & Conditions address the same matter, this Policy governs with respect to personal data processing.

1.4 We respect the rights of Filipino players under the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission. We also recognise internationally recognised data protection standards as they apply to our operations.

2.1 For the purposes of applicable data protection law, 8k87 is the data controller responsible for personal data collected through the Platform. As data controller, 8k87 determines the purposes for which, and the means by which, your personal data is processed.

2.2 Where 8k87 engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or customer support platforms), those providers act as data processors under written data processing agreements that mandate compliance with applicable data protection standards.

3.1 8k87 collects the following categories of personal data from and about our Players:

3.2 8k87 does not intentionally collect or process special categories of personal data (such as health data, political opinions, or religious beliefs) unless specifically required by a regulatory obligation and with appropriate safeguards in place.

4.1 Directly from You: The majority of personal data 8k87 holds about you is provided directly by you at registration, during KYC verification, when making deposits or withdrawals, when contacting our support team, or when participating in promotions.

4.2 Automatically: When you access or use the 8k87 platform, we automatically collect technical and usage data through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser information, session timestamps, and in-platform navigation patterns. See Section 11 for detailed information on our cookie practices.

4.3 From Third Parties: We may receive personal data about you from third parties in limited circumstances, including:

• Identity verification providers engaged for KYC compliance (e.g., document verification services);
• Payment processors and e-wallet providers (e.g., GCash, PayMaya) providing transaction confirmation data;
• Anti-fraud and anti-money laundering screening services;
• Regulatory bodies or law enforcement where disclosure is legally required or authorised.

4.4 We do not purchase personal data lists from data brokers or engage in unsolicited data collection from social media platforms without your explicit consent.

5.1 8k87 processes your personal data for the following purposes:

• Account creation and management: To register your 8k87 account, verify your identity, and maintain your account in a secure and accurate state;
• Service delivery: To provide access to the gaming platform, process bets, administer game outcomes, and enable account features;
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, bank transfer, card, and cryptocurrency channels, and to maintain accurate financial records;
• KYC and AML compliance: To verify your identity, age, and source of funds in compliance with applicable anti-money laundering, counter-terrorism financing, and know-your-customer regulatory obligations;
• Fraud prevention and platform security: To detect, investigate, and prevent fraudulent activity, collusion, multi-accounting, and other prohibited conduct;
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behaviour, administer self-exclusion and limit tools, and fulfil our duty of care obligations;
• Customer support: To respond to your enquiries, complaints, and support requests through live chat and email channels;
• Personalisation: To customise your platform experience, including game recommendations and interface settings, based on your usage history;
• Marketing and promotions: To send promotional communications, bonus offers, and platform updates where you have consented or where we have a legitimate interest (see Section 13);
• Legal and regulatory compliance: To comply with applicable laws, regulatory requirements, PAGCOR obligations, court orders, and legal proceedings;
• Platform analytics and improvement: To analyse aggregate usage patterns, identify technical issues, and improve the performance and features of the 8k87 platform.

6.1 8k87 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and applicable data protection frameworks:

• Contractual necessity: Processing required to perform our contract with you (the 8k87 Terms & Conditions), including account management, gaming services, and payment processing;
• Legal obligation: Processing required to comply with legal requirements, including KYC/AML obligations, PAGCOR reporting, tax compliance, and responses to lawful regulatory or court orders;
• Legitimate interests: Processing for our legitimate interests where those interests are not overridden by your data protection rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement;
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of direct marketing communications. You may withdraw consent at any time.

7.1 8k87 does not sell, rent, or trade your personal data to third parties for their independent commercial purposes. We share personal data only in the following circumstances and with the following categories of recipients:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and cryptocurrency processing partners — to process deposits and withdrawals and confirm transaction status;
• Identity verification providers: Third-party KYC and document verification platforms engaged to assist with identity and age verification for regulatory compliance;
• Fraud and AML screening services: Providers who assist us in screening transactions and accounts against sanctions lists, fraud databases, and AML watchlists;
• Platform infrastructure providers: Cloud hosting, content delivery, and technical infrastructure providers who process data on our behalf under contractual data processing agreements;
• Customer support platforms: Live chat and ticketing system providers used to manage your support interactions;
• Regulatory authorities: PAGCOR, the National Privacy Commission, and other applicable regulatory bodies where disclosure is required by law or regulation;
• Law enforcement and legal proceedings: Where disclosure is required by a lawful court order, subpoena, or legal obligation.

8.1 Some of the third-party service providers engaged by 8k87 may be located in, or process data in, jurisdictions outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, 8k87 implements appropriate safeguards to protect the transferred data.

8.2 Applicable safeguards for international transfers include: standard contractual clauses approved by relevant regulatory authorities; data processing agreements incorporating binding data protection obligations; and transfer to jurisdictions that have been deemed adequate by the National Privacy Commission or comparable authority.

8.3 By using the 8k87 Platform, you acknowledge that your personal data may be transferred to, stored, or processed in countries other than the Philippines in connection with the services described in this Policy.

9.1 8k87 implements a layered set of technical, organisational, and administrative security measures designed to protect your personal data against unauthorised access, disclosure, alteration, destruction, and loss. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and 8k87 servers;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls limiting internal access to personal data to personnel with a documented business need;
• Two-factor authentication options for all registered player accounts;
• Automated session timeout for inactive sessions to reduce risk on shared devices;
• Real-time monitoring and alerting for suspicious account access patterns and anomalous transaction activity;
• Regular security assessments and vulnerability testing of the Platform;
• Incident response procedures for the management and notification of any personal data breach.

9.2 While 8k87 takes data security seriously and applies industry-standard measures, no digital platform is completely immune to security risks. You are responsible for maintaining the security of your own account credentials and are encouraged to enable two-factor authentication on your 8k87 account.

9.3 In the event of a personal data breach that poses a risk to your rights and freedoms, 8k87 will notify the affected individuals and the National Privacy Commission in accordance with applicable breach notification requirements under the Data Privacy Act of 2012.

10.1 8k87 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law or regulation. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable financial record-keeping obligations;
• KYC verification documents: Retained for five (5) years from the completion of the verification process, or longer where required by specific regulatory instruction;
• Customer support communications: Retained for up to three (3) years from the date of the interaction, unless the communication is required as evidence in an ongoing dispute;
• Technical and usage logs: Retained for up to twelve (12) months, unless retention is required for security investigation or legal purposes;
• Self-exclusion and responsible gaming records: Retained for the duration of the self-exclusion period and for five (5) years thereafter, to prevent circumvention of exclusion arrangements.

10.2 At the end of the applicable retention period, personal data is securely deleted or anonymised (so that it can no longer identify you) in accordance with our internal data lifecycle procedures.

11.1 The 8k87 Platform uses cookies and similar tracking technologies (including web beacons and session identifiers) to enable platform functionality, maintain your session state, analyse usage patterns, and deliver a personalised experience.

11.2 The following categories of cookies are used on the Platform:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cannot be disabled without significantly impairing Platform functionality.
• Functional cookies: Remember your preferences and settings (such as language preference and game display settings) to provide a more personalised experience on return visits.
• Analytical cookies: Collect aggregated data about how Players use the Platform — pages visited, time spent, and features used. This helps us identify technical issues and improve the Platform. Data collected by analytical cookies does not identify individual users.
• Marketing cookies: Used where you have consented to receive personalised promotional communications. These cookies help us deliver relevant offers based on your platform activity.

11.3 You can manage cookie preferences through your browser settings. Note that disabling certain categories of cookies may impair your ability to use some features of the 8k87 Platform. Most modern browsers allow you to view, manage, and delete stored cookies from within the browser's settings or privacy controls.

12.1 As a data subject under the Data Privacy Act of 2012 and applicable data protection law, you have the following rights with respect to your personal data held by 8k87. To exercise any of these rights, please contact us at the details in Section 16:

12.2 You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 8k87 has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012. We encourage you to contact us first to allow us to address your concern directly.

13.1 With your consent, 8k87 may send you promotional communications regarding new games, bonuses, special events, and other 8k87 offers via SMS to your registered Philippine mobile number, email, and in-platform notifications.

13.2 You may opt out of marketing communications at any time by: (a) updating your communication preferences in your 8k87 account settings; (b) clicking the unsubscribe link in any marketing email; or (c) contacting the 8k87 support team and requesting to be removed from marketing lists.

13.3 Please note that opting out of marketing communications does not affect transactional or service communications, which are sent in connection with account management, deposit and withdrawal confirmations, security alerts, and regulatory notifications. These communications are sent based on contractual necessity and cannot be fully opted out of while your account remains active.

13.4 Players who have activated a self-exclusion period are automatically excluded from all promotional marketing communications for the duration of the exclusion period.

14.1 The 8k87 platform is strictly prohibited for use by persons under 21 years of age, in accordance with PAGCOR's responsible gaming regulations. 8k87 does not knowingly collect personal data from individuals under 21 years of age.

14.2 Where the Company becomes aware that personal data has been collected from an individual who is under 21 years of age, it will immediately close the associated account and delete all associated personal data, subject to any mandatory legal retention obligations.

15.1 8k87 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. We will provide advance notice of material changes to registered Players via email or SMS to their registered contact details.

15.2 The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically to remain informed of how your personal data is being handled.

15.3 Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure.

16.1 If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a privacy complaint, please contact 8k87 through the following channels:

16.2 If you are not satisfied with the Company's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the designated supervisory authority for data protection matters under the Data Privacy Act of 2012.