8k8win Privacy
Policy

8k8win is a premier online gaming platform serving Filipino players across the Philippines. We operate in accordance with applicable Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the relevant issuances of the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy governs the collection, use, storage, disclosure, and disposal of personal data provided to or collected by 8k8win through the following channels:

• The 8k8win website at 8k8win.net and all associated subdomains.
• The 8k8win mobile platform and any downloadable application.
• Customer support interactions via live chat, email, or any other communication channel operated by 8k8win.
• Third-party integrations — such as payment processors and KYC verification services — acting on behalf of 8k8win.

This Policy does not apply to third-party websites, services, or game providers that may be accessible via links or integrations on the 8k8win platform. Those parties operate under their own privacy policies, which we encourage you to review independently.

8k8win collects personal data that is necessary and proportionate to the purposes outlined in this Policy. The categories of data we collect include the following:

8k8win collects personal data through the following means:

• Direct submission: Information you voluntarily provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or participating in promotions.
• Automated collection: Technical and behavioural data collected automatically when you access the 8k8win platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for full details on cookies.
• Third-party sources: Identity verification data from NPC-compliant KYC service providers; fraud risk signals from payment processors; geolocation data from IP address lookup services used to enforce geographic access restrictions.
• Regulatory sources: Information received from PAGCOR, law enforcement agencies, or other Philippine regulatory bodies in the context of compliance obligations.

8k8win processes personal data for the following clearly defined purposes:

Under the Data Privacy Act of 2012, 8k8win processes personal data on one or more of the following lawful bases:

• Consent: Where you have provided freely given, specific, informed, and unambiguous consent — for example, when opting in to receive marketing communications or agreeing to this Privacy Policy upon registration.
• Contractual Necessity: Where processing is necessary to perform the contract between you and 8k8win — specifically, to operate your account, process deposits and withdrawals, and deliver gaming services.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to 8k8win under Philippine law — including KYC/AML requirements, PAGCOR licensing conditions, and data breach notification obligations.
• Legitimate Interests: Where processing is necessary for 8k8win's legitimate business interests — such as fraud prevention, platform security, and responsible gaming monitoring — provided those interests are not overridden by your fundamental rights and freedoms.

8k8win does not sell, rent, or trade your personal data to unaffiliated third parties for their own independent marketing or commercial purposes. Data is shared only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: GCash (GXI), Maya (PayMaya Philippines), BPI, BDO, Metrobank, Coins.ph, and other payment partners — to process deposits and withdrawals. These parties receive only the minimum data required to complete the transaction.
• KYC & Identity Verification Providers: Third-party NPC-compliant identity verification services that process government ID scans and selfies to confirm your age (21+) and identity on our behalf.
• Game Providers: Third-party online casino game studios and live dealer providers whose games are hosted on the 8k8win platform. These providers may receive your username and session token but not your full personal profile.
• Cloud & Infrastructure Providers: Hosting, database, and CDN service providers that store and process platform data under contractual data processing agreements that bind them to equivalent data protection standards.
• Fraud & AML Services: Specialist fraud detection and anti-money laundering screening services that analyse transaction patterns to protect the platform from financial crime.
• Legal & Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, and courts — where 8k8win is legally obligated or required by court order to disclose information.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by 8k8win, where disclosure is necessary for professional advice or legal proceedings, under strict confidentiality obligations.

8k8win retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, 8k8win securely deletes or anonymises personal data in a manner that prevents reconstruction or re-identification, unless retention beyond the standard period is required by a specific legal obligation, regulatory directive, or court order.

8k8win uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by a web server. The following types of cookies are used on the 8k8win platform:

• Strictly Necessary Cookies: Essential for platform functionality — including session authentication, login state persistence, and security token management. These cookies cannot be disabled without impairing platform usability.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming configurations to provide a more personalised experience.
• Analytics Cookies: Collect aggregated and anonymised data about how players navigate and interact with the platform, enabling 8k8win to identify usability improvements. These cookies do not identify you personally.
• Security & Fraud Prevention Cookies: Used to detect and mitigate fraudulent activity, identify suspicious login patterns, and protect your account from unauthorised access.

8k8win does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on the platform for purposes unrelated to 8k8win's own services.

8k8win implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the 8k8win platform is encrypted using TLS 1.2 or higher, ensuring that your login credentials, financial data, and personal information cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal data stored in 8k8win's databases — including KYC documents and financial records — is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to personal data is restricted to 8k8win staff and authorised third parties on a strict need-to-know basis. All staff with access to personal data undergo data privacy training and are bound by confidentiality obligations.
• Multi-Factor Authentication: 8k8win requires OTP-based authentication for sensitive account actions including withdrawals, password changes, and linked payment method modifications.
• Intrusion Detection & Monitoring: 8k8win's infrastructure is monitored 24/7 for anomalous activity, potential intrusions, and security incidents. Automated alerts are configured for unusual login patterns and suspicious transactions.
• Regular Security Audits: 8k8win engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of the platform.
• Data Breach Response: In the event of a personal data breach that poses a real risk to your rights and freedoms, 8k8win will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players as required by RA 10173 and NPC Circular 16-03.

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 8k8win. These rights are subject to applicable legal exceptions and may be exercised by contacting our Data Protection Officer at the details in Section 13:

To exercise any of these rights, contact 8k8win's Data Protection Officer as described in Section 13. 8k8win will respond to verified requests within fifteen (15) business days, consistent with NPC timelines. We may require proof of identity before fulfilling a data subject rights request to ensure your data is not disclosed to an unauthorised party.

The 8k8win platform is strictly intended for adults aged 21 years and above, in compliance with the minimum gambling age prescribed under Philippine law and applicable PAGCOR regulations. 8k8win does not knowingly collect personal data from individuals under 21 years of age.

The following age-protection measures are built into the 8k8win registration and verification process:

• Date of birth is a mandatory field during account registration. Users who indicate an age below 21 are prevented from completing registration.
• KYC verification requires submission of a government-issued photo ID that confirms the account holder's date of birth. Accounts where the verified age falls below 21 are immediately closed.
• Payment method verification ensures that the account holder and the payment method owner are the same adult individual.

8k8win reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or platform features. All changes are effective upon publication of the updated Policy on the 8k8win platform.

For material changes — defined as changes that significantly affect how 8k8win collects, uses, or shares your personal data — 8k8win will notify registered players via the email address on file at least fourteen (14) days before the changes take effect. The updated Policy will carry a revised effective date and version number at the top of this page.

Your continued use of the 8k8win platform following the publication of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you must cease using the platform and may request account closure in accordance with Section 11 of our Terms & Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights under RA 10173, you may contact 8k8win's Data Protection Officer through the following channels: