Privacy Policy - 98k8 Data Protection and Security

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal information by 98k8 ("we," "us," "our," or the "Platform"), an online gaming platform operating under license from the Philippine Amusement and Gaming Corporation (PAGCOR). This Policy applies to all users ("you," "your," or "User") who access or use our services through the website located at https://98k8.cam, mobile applications, or any related platforms.

By creating an account, accessing our services, or providing personal information to 98k8, you acknowledge that you have read, understood, and consent to the practices described in this Privacy Policy. If you do not agree with our data collection and processing practices, you must immediately cease using our services.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the 98k8 platform. Where there is any inconsistency between this Policy and our Terms & Conditions, the provisions of this Privacy Policy shall prevail with respect to privacy and data protection matters.

2. Information We Collect

2.1 Personal Information Provided Directly by You

When you register for a 98k8 account, we collect personal information that you voluntarily provide to us, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (passport, driver's license, postal ID, or other valid Philippine identification);
• Contact Information: Email address, mobile phone number, residential address, and postal code;
• Financial Information: Bank account details, e-wallet account information (GCash, PayMaya), payment card numbers, transaction history, deposit and withdrawal records;
• Account Credentials: Username, password, security questions and answers, and authentication tokens;
• Verification Documents: Copies of government-issued identification, proof of address (utility bills, bank statements), and selfie photographs for identity verification;
• Communication Data: Content of messages sent through our customer support channels, live chat transcripts, and email correspondence.

2.2 Information Collected Automatically

When you access or use the 98k8 platform, certain information is collected automatically through technological means, including:

• Device Information: Device type, operating system, browser type and version, device identifiers (IMEI, MAC address), screen resolution, and mobile network information;
• Usage Data: Pages visited, features accessed, games played, time spent on the platform, click patterns, navigation paths, and interaction with promotional materials;
• Location Information: IP address, geographic location derived from IP address, and GPS coordinates (when you grant location permissions on mobile devices);
• Gaming Activity: Bets placed, games played, win/loss records, jackpot participations, bonus claims, and tournament entries;
• Technical Data: Log files, error reports, system diagnostics, and performance metrics;
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and similar tracking technologies that enable functionality and analytics.

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions that facilitate deposits and withdrawals;
• Identity verification service providers conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks;
• Affiliate partners and marketing platforms that referred you to 98k8;
• Social media platforms if you choose to link your accounts or participate in social media promotions;
• Credit reference agencies and fraud prevention services;
• PAGCOR and other regulatory authorities providing compliance-related information.

3. How We Use Your Information

3.1 Primary Purposes

The personal information collected by 98k8 is processed for the following legitimate business purposes:

1. Account Management: Creating and maintaining your user account, authenticating your identity, managing your profile settings, and providing customer support services;
2. Service Provision: Enabling you to access games, place bets, participate in tournaments, claim bonuses, and utilize all features of the 98k8 platform;
3. Payment Processing: Facilitating deposits, processing withdrawals, maintaining transaction records, preventing payment fraud, and reconciling financial accounts;
4. Regulatory Compliance: Fulfilling obligations under PAGCOR licensing requirements, conducting KYC and AML verification, reporting suspicious transactions, maintaining audit trails, and cooperating with law enforcement investigations;
5. Security and Fraud Prevention: Detecting and preventing fraudulent activity, unauthorized account access, bonus abuse, collusion, money laundering, and other prohibited conduct;
6. Responsible Gaming: Monitoring gambling behavior patterns, identifying signs of problem gambling, implementing self-exclusion requests, enforcing deposit limits, and providing responsible gaming resources;
7. Communications: Sending transactional notifications, account updates, promotional offers, newsletters, and important service announcements;
8. Platform Improvement: Analyzing usage patterns, conducting market research, testing new features, optimizing user experience, and developing new products and services;
9. Legal Obligations: Responding to legal process, complying with court orders, protecting our legal rights, and enforcing our Terms & Conditions.

3.2 Marketing and Promotional Communications

With your consent, 98k8 may use your contact information to send marketing communications regarding:

• New game launches and platform features;
• Exclusive bonuses, promotions, and special offers;
• VIP program benefits and loyalty rewards;
• Tournament announcements and event invitations;
• Industry news and platform updates.

You may opt out of marketing communications at any time by adjusting your account preferences, clicking unsubscribe links in emails, or contacting customer support. Please note that even if you opt out of marketing communications, you will continue to receive essential transactional and account-related notifications.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, 98k8 processes your personal information based on the following legal grounds:

• Consent: You have provided explicit, informed, and voluntary consent for specific processing activities, particularly for marketing communications and optional features;
• Contract Performance: Processing is necessary to fulfill our contractual obligations under the Terms & Conditions, including providing gaming services, processing payments, and managing your account;
• Legal Obligation: Processing is required to comply with Philippine laws, PAGCOR regulations, anti-money laundering requirements, tax obligations, and other legal mandates;
• Legitimate Interests: Processing serves legitimate business interests such as fraud prevention, security maintenance, service improvement, and business operations, provided such interests do not override your fundamental rights and freedoms;
• Protection of Vital Interests: In rare circumstances, processing may be necessary to protect your life, health, or safety, or that of another person.

5. Information Sharing and Disclosure

5.1 Third-Party Service Providers

98k8 may share your personal information with carefully selected third-party service providers who assist us in operating our platform and delivering services, including:

• Payment Processors: GCash, PayMaya, banking institutions, and cryptocurrency payment gateways that facilitate financial transactions;
• Game Providers: JILI Games and other software providers whose games are featured on our platform;
• Identity Verification Services: Third-party KYC and AML compliance vendors that verify player identities and screen for fraud;
• Cloud Hosting Providers: Infrastructure providers that host our servers and store data securely;
• Customer Support Tools: Live chat platforms and ticketing systems that enable customer service;
• Marketing and Analytics: Email service providers, analytics platforms, and marketing automation tools;
• Security Services: Fraud detection systems, DDoS protection, and cybersecurity monitoring.

All third-party service providers are contractually obligated to maintain confidentiality, process data only for specified purposes, implement appropriate security measures, and comply with applicable data protection laws.

5.2 Regulatory and Legal Disclosures

We may disclose your personal information to regulatory authorities, law enforcement agencies, and other governmental bodies when required by law or when we believe disclosure is necessary to:

• Comply with PAGCOR reporting requirements and regulatory audits;
• Respond to court orders, subpoenas, or other legal processes;
• Report suspicious transactions under anti-money laundering regulations;
• Cooperate with criminal investigations or civil litigation;
• Protect the rights, property, or safety of 98k8, our users, or the public;
• Enforce our Terms & Conditions and prevent violations;
• Comply with tax obligations and financial reporting requirements.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to successor entities or acquiring parties, subject to continued compliance with this Privacy Policy and applicable data protection laws.

5.4 Aggregate and Anonymized Data

We may share aggregate, de-identified, or anonymized data that cannot reasonably be used to identify you with third parties for research, analytics, marketing, or business purposes. Such data sharing does not involve personal information and is not subject to the restrictions outlined in this Policy.

6. Data Security and Protection Measures

The 98k8 platform implements comprehensive technical, organizational, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction, including:

• Encryption: All data transmissions between your device and our servers are protected using 256-bit SSL/TLS encryption protocols;
• Access Controls: Strict authentication and authorization mechanisms limit employee access to personal data on a need-to-know basis;
• Secure Infrastructure: Data is stored on enterprise-grade servers with redundant backups, firewalls, and intrusion detection systems;
• Regular Security Audits: Independent security assessments and penetration testing to identify and remediate vulnerabilities;
• Employee Training: Mandatory data protection and cybersecurity training for all personnel handling personal information;
• Incident Response: Documented procedures for detecting, investigating, and responding to data breaches;
• Payment Security: PCI DSS compliance for credit card data handling and secure tokenization of payment information.

While we employ industry-standard security measures, no system is completely impervious to attack. You acknowledge that internet transmissions are never entirely secure or error-free, and you use our services at your own risk. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us of any unauthorized account access.

7. Data Retention and Deletion

Personal information collected by 98k8 is retained for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:

• Account Information: Retained for the duration of your active account plus seven (7) years after account closure to comply with PAGCOR record-keeping requirements;
• Transaction Records: Maintained for a minimum of seven (7) years as required by Philippine financial regulations and anti-money laundering laws;
• Identity Verification Documents: Retained for seven (7) years following account closure for regulatory compliance and dispute resolution;
• Gaming History: Preserved for seven (7) years to support audit trails and resolve potential disputes;
• Marketing Communications: Retained until you withdraw consent or request deletion, subject to regulatory retention requirements;
• Security Logs: Maintained for three (3) to seven (7) years depending on the nature of the data and applicable regulations.

Upon expiration of applicable retention periods, personal information is securely deleted or anonymized in accordance with industry best practices. You may request early deletion of certain data by contacting our Data Protection Officer, subject to our legal and regulatory obligations.

8. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information:

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your full name, account details, and specific request. We will respond to verified requests within thirty (30) days as required by Philippine law. Please note that certain requests may be subject to verification procedures to protect against unauthorized access to your information.

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

The 98k8 platform uses cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and deliver personalized content. The cookies we deploy include:

9.2 Managing Cookie Preferences

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored. Please note that disabling essential cookies may impair platform functionality and prevent you from accessing certain features. Marketing and analytics cookies can typically be disabled without affecting core services.

10. Children's Privacy

The 98k8 platform is intended solely for individuals who are twenty-one (21) years of age or older, as required by Philippine gaming regulations. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such data and terminate the associated account. Parents or guardians who believe their child has provided information to 98k8 should contact us immediately.

11. International Data Transfers

Your personal information may be transferred to, stored, and processed in jurisdictions outside the Philippines where our service providers and technology infrastructure are located. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities;
• Adequacy determinations confirming recipient jurisdictions provide adequate protection;
• Binding corporate rules for transfers within corporate groups;
• Your explicit consent where required by law.

All international transfers comply with the Data Privacy Act of 2012 and are conducted only with service providers who commit to protecting your information in accordance with Philippine privacy standards.

12. Changes to This Privacy Policy

The 98k8 platform reserves the right to modify, update, or replace this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Material changes will be communicated through prominent notices on our website, email notifications to registered users, or in-platform announcements. The "Last Updated" date at the top of this Policy indicates when the most recent changes were made.

Your continued use of the 98k8 platform following the posting of changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information. If you do not agree with any modifications, you must cease using our services and may request account closure.

13. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact:

• Data Protection Officer: 98k8 Privacy Team
• Email: [email protected]
• Response Time: We aim to respond to all privacy inquiries within 48 hours

For complaints regarding data protection violations, you may also contact the National Privacy Commission of the Philippines:

• Website: privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228

14. Additional Information for Philippine Users

As a PAGCOR-licensed operator serving primarily Filipino players, 98k8 adheres to enhanced privacy standards specific to the Philippine market, including:

• Compliance with the Data Privacy Act of 2012 and its implementing rules and regulations;
• Registration with the National Privacy Commission as a personal information controller;
• Implementation of appropriate organizational, physical, and technical security measures prescribed by the NPC;
• Mandatory reporting of personal data breaches to the NPC and affected individuals;
• Designation of a Data Protection Officer responsible for privacy compliance;
• Regular privacy impact assessments for high-risk processing activities;
• Transparent privacy notices provided at the point of data collection;
• Strict limitations on cross-border data transfers to ensure adequate protection.

15. Third-Party Links and Services

The 98k8 platform may contain links to third-party websites, applications, or services that are not operated or controlled by us. This Privacy Policy applies only to information collected by 98k8. We are not responsible for the privacy practices of third-party sites, and we encourage you to review their privacy policies before providing any personal information. The inclusion of links does not imply endorsement of third-party services or their data handling practices.

16. Consent and Acknowledgment

By creating an account and using the 98k8 platform, you acknowledge that:

• You have read and understood this Privacy Policy in its entirety;
• You consent to the collection, use, and disclosure of your personal information as described herein;
• You understand your privacy rights under Philippine law;
• You are at least 21 years of age and legally authorized to provide consent;
• The information you provide is accurate, complete, and truthful;
• You will promptly update your information if it changes;
• You accept responsibility for maintaining the confidentiality of your account credentials.

Your continued use of 98k8 services constitutes ongoing consent to this Privacy Policy and its periodic updates. Thank you for trusting 98k8 with your personal information. We are committed to earning and maintaining that trust through transparent, responsible data practices.