Privacy Policy

1 Overview

8k8 apk ("we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of the 8k8 apk website, mobile application, and all related services (collectively, the "Platform").

This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. Where applicable, we also observe internationally recognized data protection principles.

We encourage you to read this Policy carefully and in full. If you do not agree with any part of this Policy, please discontinue your use of the Platform and contact us to request account closure.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for your personal information is 8k8 apk, the operator of the Platform accessible at 8k8apk.org.

As data controller, 8k8 apk determines the purposes and means of processing your personal data. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection practices and serving as the primary point of contact for data privacy matters. Contact details for our DPO are provided in Section 15 of this Policy.

3 Data We Collect

8k8 apk collects personal data that is necessary to provide our services, comply with legal obligations, and improve the user experience. The categories of personal data we collect include:

3.1 Identity & Contact Information

Full legal name as it appears on a government-issued ID.
Date of birth (for age verification — you must be 21 or older).
Philippine mobile number and email address.
Residential address (province, city/municipality, barangay, ZIP code).
Government-issued ID type and number (e.g., PhilSys ID, passport, driver's license, UMID).

3.2 Financial Information

GCash or PayMaya mobile wallet number (registered in your name).
Bank account details for withdrawal processing (bank name, account name, account number).
Debit card details where applicable (card type, last four digits, expiry date).
Transaction history, including deposit amounts, withdrawal amounts, dates, and payment methods used.

3.3 Gaming Activity Data

Game history, wager amounts, win/loss records, and session durations.
Bonus and promotion usage history.
Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

3.4 Technical & Device Data

IP address and approximate geolocation (city/region level).
Device type, operating system, browser type and version.
Mobile device identifiers (where applicable, for the 8k8 apk mobile app).
Log data including access times, pages visited, and features used.

3.5 Communications Data

Records of your communications with our customer support team, including live chat transcripts and email correspondence.
Survey responses and feedback you voluntarily provide.

Data Category	Examples	Required?
Identity & Contact	Name, DOB, mobile number, address, government ID	Mandatory
Financial	GCash number, bank account, transaction history	Mandatory for transactions
Gaming Activity	Game history, wagers, session data	Automatically collected
Technical & Device	IP address, device type, browser, log data	Automatically collected
Communications	Support chat logs, email records, feedback	When you contact us

4 How We Collect Your Data

We collect personal data through the following means:

Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a survey.
Automatically: When you access and use the Platform, our systems automatically collect technical and device data, including IP addresses, session logs, and usage patterns, through cookies and similar tracking technologies (see Section 11).
From third-party payment providers: When you make a deposit or withdrawal via GCash, PayMaya, or a Philippine bank, we receive transaction confirmation data from the relevant payment provider.
From identity verification services: Where we use third-party KYC or age verification services to confirm your identity and age, we may receive verification results and associated data from those providers.
From regulatory authorities: In limited circumstances, we may receive data from PAGCOR or other regulatory bodies in connection with compliance obligations.

5 Purposes of Processing

8k8 apk processes your personal data for the following specific, legitimate purposes:

Account management: Creating, maintaining, and managing your registered account on the Platform.
Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity as required by law and our KYC obligations.
Transaction processing: Processing deposits, withdrawals, and other financial transactions in Philippine Peso (₱).
Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other illegal conduct on the Platform.
Regulatory compliance: Meeting our obligations under Philippine law, including the Data Privacy Act, Anti-Money Laundering Act (AMLA), and PAGCOR regulations.
Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance.
Responsible gaming: Monitoring gaming activity to identify potential problem gambling behavior and administering responsible gaming tools such as deposit limits and self-exclusion.
Marketing and promotions: Sending you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may opt out at any time.
Platform improvement: Analyzing usage patterns and feedback to improve the functionality, performance, and user experience of the Platform.

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 8k8 apk processes your personal data on the following legal bases:

Contractual necessity: Processing required to perform our contract with you — i.e., to provide the gaming services you have registered for, including account management and transaction processing.
Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including KYC, AML, and PAGCOR compliance requirements.
Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

We will never process your personal data for purposes incompatible with those stated in this Policy without first obtaining your explicit consent or as otherwise required by law.

7 Sharing Your Personal Data

8k8 apk does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

Payment processors: GCash, PayMaya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the minimum data necessary to process your financial transactions.
Identity verification providers: Third-party KYC and age verification services receive identity data solely for the purpose of verifying your eligibility to use the Platform.
Game software providers: Our third-party game developers and live casino operators receive anonymized or pseudonymized session data necessary to deliver game functionality.
Regulatory and law enforcement authorities: We may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities when required by law, court order, or regulatory directive.
Professional advisors: Our legal counsel, auditors, and compliance consultants may access personal data on a strictly need-to-know basis and are bound by confidentiality obligations.
Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom we share your data are contractually required to process it only for the specified purpose, maintain appropriate security measures, and comply with applicable Philippine data privacy laws.

8 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

Data Category	Retention Period	Basis
Account & identity data	Duration of account + 5 years after closure	Legal / regulatory obligation
Financial transaction records	10 years from transaction date	AMLA compliance (RA 9160)
Gaming activity logs	5 years from date of activity	PAGCOR regulatory requirement
Customer support records	3 years from last interaction	Legitimate interest / dispute resolution
Marketing consent records	Until consent is withdrawn + 1 year	Consent / legal obligation
Technical / device logs	12 months from collection	Security / fraud prevention

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

9 Data Security

8k8 apk implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
Access controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data undergo regular data privacy training.
Two-factor authentication (2FA): We offer and encourage the use of 2FA for all registered accounts to add an additional layer of protection against unauthorized access.
Regular security audits: Our systems undergo periodic security assessments, penetration testing, and vulnerability scans conducted by qualified security professionals.
Incident response: We maintain a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within 72 hours and affected individuals without undue delay, as required by the Data Privacy Act.

Your responsibility: While we take every reasonable precaution to protect your data, you are also responsible for keeping your login credentials secure. Never share your password or OTP with anyone — including persons claiming to be 8k8 apk staff. We will never ask for your password.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 8k8 apk:

Right to be Informed

You have the right to be informed of how your personal data is being collected, used, and processed — which is the primary purpose of this Privacy Policy.

Right to Access

You may request a copy of the personal data we hold about you, along with information about how it is being processed.

Right to Rectification

You may request correction of any inaccurate or incomplete personal data we hold about you. You can update basic account information directly in your account settings.

Right to Erasure

You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.

Right to Object

You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your rights override those interests.

Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.

Right to Lodge a Complaint

If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 15. We will respond to all verified requests within fifteen (15) business days, as required by the Data Privacy Act.

11 Cookies & Tracking Technologies

8k8 apk uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security functions. The types of cookies we use are:

Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
Analytics cookies: Collect anonymized data about how users interact with the Platform to help us identify areas for improvement. We use this data in aggregate form only.
Security cookies: Help us detect and prevent fraudulent activity, including identifying unusual login patterns or suspicious transaction behavior.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For the mobile app, equivalent tracking technologies operate in accordance with your device's privacy settings.

We do not use third-party advertising cookies or share cookie data with external advertising networks. Our cookie usage is limited to operational, security, and analytics purposes directly related to the 8k8 apk Platform.

12 Minors and Age Restriction

The 8k8 apk Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with applicable law and our Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered an account on our Platform, please contact us immediately at [email protected] so that we can take prompt action.

13 Third-Party Links

The 8k8 apk Platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies solely to the 8k8 apk Platform and does not cover the privacy practices of any third-party websites or services.

We encourage you to review the privacy policies of any third-party services you access through links on our Platform. 8k8 apk is not responsible for the privacy practices, content, or security of third-party websites.

14 Changes to This Privacy Policy

8k8 apk reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes, we will:

Update the "Last Updated" date at the top of this page.
Display a prominent notice on the Platform informing registered users of the change.
Where required by the Data Privacy Act or NPC regulations, notify affected users directly via their registered mobile number or email address.

Your continued use of the Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this Policy periodically. The current version will always be available at 8k8apk.org/privacy-policy.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 8k8 apk, please contact our Data Protection Officer (DPO):

Email: [email protected] (plain text — not a clickable link)
Live Chat: Available 24/7 within the Platform and mobile app — select "Privacy & Data" as your inquiry category.

We aim to acknowledge all data privacy requests within three (3) business days and to resolve them within fifteen (15) business days, in accordance with the Data Privacy Act of 2012.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act.

Our support team is available around the clock and understands the Philippine data privacy landscape. Whether you're in Manila, Cebu, Davao, Quezon City, or anywhere in the Philippines — we're here to help protect your data.