8k85 Casino Privacy Policy

1 Definitions and Scope

1.1 Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "8k85," "we," "us," "our" refers to the operator of the 8k85 gaming Platform at 8k85.org.
• "Personal Data" means any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual.
• "Sensitive Personal Data" means personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic information, sexual life, or any proceeding for any offense committed or alleged to have been committed.
• "Processing" refers to any operation or set of operations performed upon personal data, including collection, recording, organization, storage, updating, retrieval, consultation, use, consolidation, blocking, erasure, or destruction.
• "Data Subject" means a natural person whose personal data is processed — in the context of this Policy, this refers to registered 8k85 Players.
• "NPC" means the National Privacy Commission of the Philippines.
• "DPA" means Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines.

1.2 Scope

This Privacy Policy applies to:

• All registered 8k85 Account holders, whether active or inactive;
• All visitors to 8k85.org, regardless of whether they have registered an Account;
• All individuals who communicate with 8k85 through any official channel (live chat, email, or other support channels).

This Policy does not apply to third-party websites, applications, or services that may be linked from the Platform. 8k85 is not responsible for the privacy practices of any third-party service.

2 Personal Data We Collect

2.1 Data You Provide Directly

When you register an Account, complete KYC verification, or contact support, 8k85 collects the following categories of personal data:

Category	Specific Data Points	When Collected
Identity Data	Full legal name, date of birth, government-issued ID type and number	KYC verification
Contact Data	Philippine mobile number, email address (if provided)	Registration
Authentication Data	Hashed password, 2FA configuration	Registration / Security settings
Financial Data	GCash/Maya account name, BPI/BDO account name, transaction history	Deposits & withdrawals
Document Data	Scanned or photographed government ID, proof of payment method	KYC verification
Communications	Support chat transcripts, email correspondence	When you contact support

2.2 Data Collected Automatically

When you access the 8k85 Platform, we automatically collect certain technical data to ensure the security and integrity of the service:

• Device and browser information: browser type and version, operating system, device type (mobile, tablet, desktop);
• Network data: IP address, approximate geographic location derived from IP, internet service provider;
• Session data: login timestamps, session duration, pages visited within the Platform;
• Gaming activity: game history, wager amounts, win/loss data, bonus activity — retained as part of your Account record and required for regulatory compliance;
• Cookie and tracking data: as described in Section 6 of this Policy.

3 How We Use Your Personal Data

8k85 processes your personal data only on lawful grounds under the DPA. The following table sets out the purposes for which we use your data and the legal basis for each:

Purpose	Data Used	Legal Basis
Account registration and management	Identity, contact, authentication	Performance of contract
Identity verification (KYC / AML)	Identity, document, financial	Legal obligation (PAGCOR/AMLC)
Processing deposits and withdrawals	Financial, identity	Performance of contract
Fraud prevention and security monitoring	Device, network, session, gaming	Legitimate interest
Customer support	Contact, communications, account	Performance of contract
Regulatory reporting	Identity, financial, gaming activity	Legal obligation
Responsible gaming monitoring	Gaming activity, financial	Legitimate interest / legal obligation
Platform analytics and improvement	Session, device, gaming (aggregated)	Legitimate interest
Promotional communications (opt-in only)	Contact, gaming preferences	Consent

8k85 will not use your personal data for any purpose not listed in this Policy without first obtaining your explicit consent or establishing a separate lawful basis.

4 Sharing Your Personal Data

4.1 No Sale of Data

8k85 does not sell, rent, exchange, or otherwise trade your personal data to third parties for commercial or marketing purposes under any circumstances whatsoever.

4.2 Service Providers

8k85 engages third-party service providers who process personal data on our behalf in order to deliver the Platform. These include:

• Payment processors: GCash (GXI), Maya (PayMaya Philippines, Inc.), GrabPay, BPI, BDO, Metrobank, and other payment partners receive transaction data necessary to process deposits and withdrawals;
• Game providers: third-party game studios receive the minimum data required to provide gameplay sessions (typically a pseudonymous player ID, currency, and bet amount — not your full identity);
• KYC verification partners: identity document verification services that assist in validating government-issued IDs submitted during KYC;
• Cloud infrastructure providers: server and database hosting services that store Platform data on encrypted infrastructure;
• Fraud detection services: third-party services that assist in identifying suspicious login patterns, unusual wagering behavior, and potential Account fraud.

All third-party service providers who process personal data on behalf of 8k85 are contractually bound to process such data only on our instructions, to maintain confidentiality, and to implement appropriate security measures.

4.3 Regulatory and Legal Disclosure

8k85 may be required to disclose personal data to regulatory bodies, law enforcement agencies, or courts of competent jurisdiction under the following circumstances:

• Compliance with PAGCOR reporting obligations;
• Compliance with Anti-Money Laundering Council (AMLC) reporting obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments;
• Response to a valid court order, subpoena, or lawful request by Philippine law enforcement;
• Prevention or detection of crime, fraud, or threats to national security where permitted by law.

5 Data Security

5.1 Technical Measures

8k85 implements and maintains the following technical security measures to protect your personal data:

• Encryption in transit: all data transmitted between your device and the 8k85 Platform is encrypted using TLS 1.3;
• Encryption at rest: personal data stored in 8k85 databases is encrypted using AES-256 encryption;
• Password security: passwords are hashed using bcrypt with a sufficient work factor and are never stored in plaintext;
• Access controls: internal access to personal data is restricted using role-based access controls (RBAC) and requires multi-factor authentication for all administrative personnel;
• Security monitoring: the Platform is monitored for unusual access patterns, intrusion attempts, and data exfiltration indicators on a continuous basis.

5.2 Organizational Measures

8k85 maintains organizational security policies that include regular security training for all staff who handle personal data, strict data classification and handling procedures, vendor due diligence for all third parties with data access, and a documented incident response plan.

5.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 8k85 will notify the NPC within 72 hours of becoming aware of the breach, as required by the DPA. Affected players will be notified without undue delay where the breach is likely to result in a high risk to their personal data.

6 Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device by a website when you visit it. 8k85 uses cookies and similar tracking technologies (including local storage and session storage) to operate and improve the Platform.

6.2 Types of Cookies Used

• Essential cookies: strictly necessary for the Platform to function. These include session authentication cookies that keep you logged in to your 8k85 Account. These cannot be disabled without breaking core functionality.
• Functional cookies: remember your preferences such as language settings, last-played games, and display preferences to personalize your experience.
• Analytics cookies: help 8k85 understand how players use the Platform — which game lobbies are most visited, where players encounter friction, and how performance can be improved. All analytics data is aggregated and pseudonymized.
• Security cookies: used for fraud detection and to identify unusual login patterns or suspicious device characteristics.

6.3 Cookie Management

You can manage non-essential cookies through your browser settings. Most modern browsers allow you to refuse, delete, or be notified before cookies are set. Note that disabling cookies may affect the functionality of the 8k85 Platform — in particular, disabling essential cookies will prevent you from logging in to your Account.

7 Data Retention

8k85 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, and in any event for no longer than is required by applicable law. The following retention periods apply:

Data Category	Retention Period	Reason
Account registration data	Duration of account + 5 years after closure	PAGCOR / AMLC regulatory requirement
KYC / identity documents	Duration of account + 5 years after closure	Legal obligation (AML Act)
Financial transaction records	Duration of account + 5 years after closure	Financial regulatory compliance
Gaming activity / bet history	Duration of account + 2 years after closure	Dispute resolution, regulatory reporting
Support communications	3 years from last interaction	Dispute resolution, quality assurance
Server logs (security)	12 months from creation	Security monitoring, fraud investigation

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

8 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 8k85:

8.1 Right to Be Informed

You have the right to be informed of the existence of processing of your personal data — which this Privacy Policy fulfills. You may request additional information about how 8k85 processes your personal data at any time.

8.2 Right of Access

You have the right to request a copy of the personal data that 8k85 holds about you, along with information about how it is processed, who it has been shared with, and how long it will be retained. Access requests will be fulfilled within 30 days of receipt.

8.3 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. For most contact information, you can update this directly through your Account Settings. For identity and KYC data, please contact support — corrections may require re-verification.

8.4 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (for consent-based processing), or where processing is unlawful. Note that this right is subject to 8k85's legal obligations — data required for regulatory compliance under PAGCOR or AMLC requirements cannot be deleted before the applicable mandatory retention period expires.

8.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest grounds, in which case 8k85 will stop processing unless compelling legitimate grounds can be demonstrated. To opt out of marketing communications, you may update your notification preferences in Account Settings or contact support.

8.6 Right to Data Portability

Where processing is based on your consent or on performance of a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV or JSON), and to transmit that data to another service. Data portability requests will be fulfilled within 30 days.

8.7 How to Exercise Your Rights

To exercise any of the above rights, please submit a request to 8k85 via:

• Email: [email protected] with the subject line "Data Privacy Request"
• Live chat: available 24/7 on the Platform

We may require identity verification before processing a data rights request to prevent unauthorized access to another player's data. Responses are provided within 30 calendar days of receiving a verified request.

9 Cross-Border Data Transfers

Some of the third-party service providers engaged by 8k85 — including game providers, cloud infrastructure providers, and security services — may be located outside the Philippines. Where personal data is transferred to a third country, 8k85 ensures that appropriate safeguards are in place as required by the DPA, including contractual clauses that impose data protection obligations equivalent to those applicable in the Philippines. Such transfers are made solely to the extent necessary to provide the Services and are never made for purposes beyond those described in this Policy.

10 Minors and Age Restriction

The 8k85 Platform is strictly intended for individuals aged 21 years and above. 8k85 does not knowingly collect personal data from individuals under the age of 21. If 8k85 discovers or is informed that personal data has been collected from a person under 21 years of age, the relevant Account will be immediately suspended, the data reviewed, and if confirmed, deleted in accordance with our data minimization obligations under the DPA.

Parents or guardians who believe their child may have registered an Account on 8k85 should contact support immediately at [email protected] to report the matter and initiate Account closure.

11 Updates to This Privacy Policy

8k85 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to the Policy will be communicated to registered players via their registered mobile number or email address, and by posting a prominent notice on the Platform, at least 7 days before the changes take effect where practicable.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept any update, you must cease using the Platform and may request Account closure and data deletion through the process described in Section 8.

12 Contact and Data Privacy Officer

For all privacy-related inquiries, data rights requests, or concerns about 8k85's data handling practices, please contact us through the following official channels:

Email: [email protected] — subject line: "Data Privacy Request"
Live Chat: Available 24 hours a day, 7 days a week through the Platform
Response Time: Acknowledgment within 24 hours; substantive response within 30 days for data rights requests

For escalations and complaints that have not been resolved through our internal process, you may contact the National Privacy Commission of the Philippines through their official government channels.