k888 Privacy Policy

This Privacy Policy ("Policy") is issued by k888 ("k888," "we," "us," or "our") and applies to all personal data collected through the k888 online gaming platform available at k888.one, including all associated websites, mobile interfaces, applications, and services (collectively, the "Platform").

k888 is committed to protecting the privacy and personal data of all users of the Platform ("you," "your," or "Player"). This Policy describes in clear terms what personal data we collect, the purposes for which we process it, the legal bases on which we rely, how long we retain it, who we share it with, and the rights available to you under applicable Philippine law.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. By registering for a k888 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy.

k888 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

k888 does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive data is collected (such as government ID numbers), it is handled with heightened security controls and access restrictions.

k888 collects personal data through the following means:

• Direct Collection: Data you provide when registering for an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the Platform, including through cookies, web beacons, and server logs. See Section 7 for more details on cookies.
• Third-Party Sources: Data received from payment processors (such as GCash and PayMaya), identity verification service providers, fraud prevention partners, and publicly available sources, where permitted by applicable law.
• Device Permissions: Where you access k888 through a mobile device and grant relevant permissions, we may collect device identifiers and location data at the city or province level (e.g., Metro Manila, Cebu, Davao) for fraud prevention and geographic compliance purposes.

k888 uses your personal data only for legitimate, specified purposes. The primary purposes for which we process your data are:

• Account Management: Creating, maintaining, and managing your k888 player account, including processing registration, verifying your identity, and managing your account settings and preferences.
• Transaction Processing: Processing deposits, withdrawals, and bonus credits; reconciling financial records; and communicating transaction confirmations and status updates.
• Regulatory Compliance: Fulfilling our obligations under applicable Philippine law, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and responsible gaming regulations.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, collusion, and other prohibited conduct on the Platform.
• Responsible Gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling behavior, and administering responsible gaming tools such as deposit limits, session limits, and self-exclusion.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance through our live chat and email support channels.
• Platform Improvement: Analyzing aggregated usage data to improve the performance, features, and user experience of the k888 Platform.
• Marketing Communications: Sending you promotional offers, bonus notifications, and news about k888 — but only where you have provided your consent to receive such communications. You may withdraw consent at any time.
• Legal Proceedings: Establishing, exercising, or defending legal claims, and complying with court orders or regulatory instructions from competent Philippine authorities.

k888 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have provided explicit consent.

Under the Philippine Data Privacy Act of 2012, k888 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing that is necessary to perform our contract with you — specifically, to operate your k888 account, process transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, KYC requirements, tax reporting, and instructions from regulatory authorities.
• Legitimate Interests: Processing necessary for k888's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional data collection beyond what is strictly necessary. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

k888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification service providers who assist k888 in verifying player identities and complying with AML obligations.
• Fraud Prevention Partners: Specialist fraud detection and prevention service providers who help k888 identify and investigate suspicious activity on the Platform.
• Technology Service Providers: Cloud hosting providers, software vendors, and IT service providers who support the operation and maintenance of the k888 Platform, subject to strict data processing agreements.
• Regulatory Authorities: Philippine government agencies, law enforcement bodies, and regulatory authorities (including PAGCOR and the National Privacy Commission) where disclosure is required by law, court order, or regulatory instruction.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by k888, subject to professional confidentiality obligations.

k888 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, and gather analytical data. A cookie is a small text file placed on your device when you visit a website. The types of cookies used by k888 include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that help protect against fraud. These cookies cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences and settings (such as language and display preferences) to provide a more personalized experience on return visits.
• Analytical Cookies: Collect aggregated, anonymized data about how players use the Platform — such as which pages are visited most frequently and how long sessions last — to help k888 improve the Platform's performance and content.
• Security and Fraud Prevention Cookies: Help k888 detect and prevent fraudulent activity, unauthorized access, and other security threats by identifying unusual patterns of behavior.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies may prevent you from accessing certain features of the Platform, including your account login.

k888 does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements on external websites.

k888 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and KYC regulatory requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a specific regulatory instruction or legal proceeding.
• Customer Support Records: Live chat transcripts and support correspondence are retained for up to three (3) years from the date of the interaction.
• Technical and Usage Data: Server logs and usage analytics data are retained for up to twelve (12) months, after which they are anonymized or deleted.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account and for three (3) years following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with k888's data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for analytical purposes, as it can no longer be used to identify you.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by k888. You may exercise any of these rights by contacting our Data Protection Officer via the contact details in Section 14.

k888 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and k888 is encrypted using 256-bit SSL/TLS technology. Sensitive data stored in our systems is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorized k888 personnel on a strict need-to-know basis. All staff with data access are subject to background checks and confidentiality agreements.
• Network Security: k888's infrastructure is protected by firewalls, intrusion detection systems, and regular security monitoring to detect and respond to potential threats in real time.
• Vulnerability Management: k888 conducts regular security assessments, penetration testing, and vulnerability scans to identify and remediate potential weaknesses in our systems.
• Incident Response: k888 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and interests, k888 will notify the National Privacy Commission and affected players within the timeframes required by the DPA.

The k888 Platform is strictly intended for adults aged 21 years and above. k888 does not knowingly collect personal data from individuals under the age of 21. The minimum age requirement of 21 years is a strict legal requirement under Philippine gaming regulations and is enforced through our mandatory age verification process at registration.

If k888 discovers or is notified that personal data has been collected from a person under the age of 21, we will immediately close the associated account, delete the personal data in question, and take appropriate steps to prevent recurrence. Any funds associated with an underage account will be handled in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered on k888 or provided personal data to us, please contact our support team immediately via live chat or email so that we can take prompt action.

The k888 Platform may contain references to or integrations with third-party services, such as payment processors and identity verification providers. These third parties operate under their own privacy policies, which are independent of this Policy. k888 is not responsible for the privacy practices of third-party service providers beyond the data processing agreements we have in place with them.

When you interact with a third-party payment provider such as GCash, PayMaya, BPI, BDO, or Metrobank to process a transaction, your interaction with that provider is governed by their own terms and privacy policy. k888 recommends that you review the privacy policies of any third-party services you use in connection with your k888 account.

k888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify you by posting a prominent notice on the Platform and, where appropriate, by sending a notification to your registered email address.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. We encourage you to review this Policy periodically to stay informed about how k888 protects your personal data. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the changes.

If you do not agree with any changes to this Policy, you should stop using the Platform and contact our support team to close your account.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way k888 handles your personal data, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing k888's compliance with the Philippine Data Privacy Act and is your primary point of contact for all data privacy matters.

You can reach the k888 Data Protection Officer by email at: [email protected]

For general customer support inquiries, our support team is available 24 hours a day, 7 days a week via the live chat function on the Platform. You may also reach general support at: [email protected]

For formal data rights requests, please email our DPO directly and include "Data Rights Request" in the subject line, along with your full name and registered email address so we can locate your account. We will acknowledge receipt of your request within five (5) business days and respond in full within thirty (30) calendar days.