8k85 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is issued by 8k85, the operator of the online gaming platform accessible at 8k85.cam (the "Platform"). This Policy governs the collection, use, storage, disclosure, and protection of personal data relating to individuals who access or use the 8k85 Platform ("Players" or "you").

1.2 8k85 is committed to processing personal data responsibly, transparently, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

1.3 By registering an account on 8k85, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, please discontinue use of the Platform and contact our support team to close your account.

1.4 This Policy should be read in conjunction with the 8k85 Terms and Conditions, which are available at 8k85 Terms & Conditions.

2. Who We Are (Data Controller)

2.1 For the purposes of RA 10173, 8k85 acts as the Personal Information Controller with respect to the personal data of its registered Players. This means that 8k85 determines the purposes and means of processing your personal data.

2.2 8k85 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to all PAGCOR regulations regarding player data management, anti-money laundering compliance, and responsible gaming obligations. Our data processing activities are carried out within the Philippines.

2.3 8k85 has designated a Data Protection Officer (DPO) in accordance with the requirements of RA 10173. The DPO is responsible for overseeing the Platform's compliance with data privacy obligations and is accessible through our primary support channel at [email protected].

3. Personal Data We Collect

3.1 8k85 collects personal data only to the extent necessary for the purposes described in this Policy. The categories of personal data we collect include:

3.1 Registration and Identity Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (required to verify the 21+ age requirement);
• Gender;
• Home address, including city and province;
• Philippine mobile number;
• Email address.

3.2 KYC Verification Data

• Copies of government-issued photo identification (SSS ID, UMID, PhilHealth card, driver's license, or Philippine passport);
• Proof of payment method ownership (e.g., screenshot of GCash account registered in your name);
• Selfie or liveness verification image where required for enhanced KYC;
• Source of funds declarations for large deposits, as required by AMLC regulations.

3.3 Financial Transaction Data

• Deposit amounts, timestamps, and payment method identifiers;
• Withdrawal requests, amounts, and destination payment method identifiers;
• Transaction reference numbers from GCash, Maya, BPI, BDO, and other payment channels;
• Account balance history.

3.4 Gaming Activity Data

• Game sessions played, including game title, duration, amounts wagered, and outcomes;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status);
• Support interaction history.

3.5 Technical and Device Data

• IP address at the time of login and gaming sessions;
• Device type, operating system, and browser or app version;
• Mobile network operator (Globe, Smart, DITO, etc.);
• Geolocation data (country-level, for compliance verification only);
• Cookie identifiers and session tokens (see Section 10).

4. How We Collect Your Data

4.1 8k85 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, contact support, or update your account profile;
• Automatically during platform use: Technical and device data is collected automatically as you browse and use the 8k85 Platform, through cookies, log files, and session tracking (see Section 10);
• From payment service providers: When you transact via GCash, Maya, BPI, BDO, or other payment channels, we receive confirmation data from these providers confirming the transaction amount, timestamp, and reference number. We do not receive your full payment account credentials;
• From identity verification services: Where we use third-party KYC verification tools to assist in document validation, those services return a verification result to 8k85. The underlying ID document data remains with us, encrypted, as your KYC record.

5. How We Use Your Personal Data

5.1 8k85 uses your personal data for the following purposes:

5.2 8k85 does not use personal data for automated decision-making that produces significant legal effects on Players without human review. Where automated systems flag accounts for review (e.g., unusual transaction patterns), a member of our compliance team reviews the flagged account before any action is taken.

6. Legal Bases for Processing

6.1 Under RA 10173, every personal data processing activity requires a lawful basis. 8k85 processes your personal data on the following lawful bases:

• Contractual Necessity: Processing required to create and manage your account, process financial transactions, and deliver gaming services pursuant to the 8k85 Terms and Conditions;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine laws and regulations;
• Legitimate Interests: Processing necessary for fraud prevention, security monitoring, and platform integrity, where such processing does not override your fundamental rights and freedoms;
• Consent: Processing for optional purposes, specifically promotional and marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing conducted before withdrawal.

7. Data Sharing and Disclosure

7.1 8k85 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only in the following limited circumstances:

7.1 Regulatory Authorities

We are required by law to share certain data with PAGCOR (for licensing compliance and player dispute purposes), the Anti-Money Laundering Council (AMLC) (for suspicious transaction reporting under RA 9160), the National Privacy Commission (NPC) (in the event of a data breach, as required by RA 10173), and other Philippine government agencies where required by valid legal process.

7.2 Payment Service Providers

We share necessary transactional data with GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment processors solely to facilitate deposit and withdrawal processing. These providers receive only the minimum data necessary to execute the requested transaction and are prohibited from using your data for their own marketing purposes.

7.3 IT and Infrastructure Service Providers

8k85 uses third-party cloud infrastructure, KYC verification tools, fraud detection systems, and customer support software. These providers act as Personal Information Processors under RA 10173, processing data only on our documented instructions and under binding data processing agreements that require them to maintain equivalent data protection standards.

7.4 Game Software Providers

Our game software partners (such as PG Soft, Pragmatic Play, JILI, and Evolution Gaming) may receive anonymized session data (game type, bet amounts, outcomes) for the purpose of game integrity auditing and technical support. No personally identifiable data is shared with game studios beyond what is strictly necessary for technical troubleshooting.

8. Data Retention

8.1 8k85 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the minimum retention periods mandated by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of the account relationship plus five (5) years following account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act;
• KYC documents: Retained for a minimum of five (5) years from the date of collection, as required by the AMLC implementing rules;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC regulations;
• Gaming activity logs: Retained for three (3) years for operational purposes and regulatory reporting requirements;
• Technical and device data: Retained for twelve (12) months for fraud detection and security purposes, after which aggregate analytics data may be retained indefinitely in anonymized form;
• Marketing consent records: Retained for the duration of the account relationship and for three (3) years following opt-out, to demonstrate compliance with consent obligations.

8.2 Upon expiry of the applicable retention period, personal data is either securely deleted or anonymized in a manner that renders re-identification impossible.

9. Data Security

9.1 8k85 implements a comprehensive information security program designed to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. Our security measures include, without limitation:

• TLS 1.2 or higher encryption for all data transmitted between your device and 8k85 servers;
• AES-256 encryption for sensitive personal data stored in our databases;
• Role-based access controls (RBAC) ensuring that only authorized personnel can access player data, and only to the extent required for their specific function;
• Multi-factor authentication for all internal staff accessing player data systems;
• Comprehensive audit logging of all access to and modifications of player account data;
• Regular penetration testing and vulnerability assessments by independent security firms;
• Physical security controls at our data centers, operated in compliance with applicable Philippine data center regulations.

9.2 While 8k85 maintains robust technical and organizational security measures, no online system can guarantee absolute security. You are encouraged to use a strong, unique password for your 8k85 account, enable two-factor authentication where offered, and notify us immediately if you suspect unauthorized access to your account.

10. Cookies and Tracking Technologies

10.1 8k85 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognize you across sessions, maintain your login state, and improve your experience on the Platform.

Categories of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without rendering the Platform non-functional.
• Performance Cookies: Used to collect anonymized data about how players use the Platform (e.g., which games are most popular, which pages load slowly). This data is used solely to improve Platform performance and user experience.
• Functional Cookies: Enable personalization features such as remembering your preferred language, game view settings, and notification preferences.
• Marketing Cookies: Used to identify you across sessions for the purpose of delivering relevant promotional offers within the 8k85 Platform. We do not use marketing cookies to track you across external third-party websites.

10.2 You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your 8k85 account. Instructions for managing cookies are available through your browser's help documentation.

11. Your Data Privacy Rights

11.1 Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data processed by 8k85:

• Right to Be Informed: The right to know whether 8k85 holds personal data about you, and to receive clear information about how it is used — as provided in this Policy;
• Right of Access: The right to request a copy of the personal data 8k85 holds about you, along with information about how it has been processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your 8k85 account;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations;
• Right to Object: The right to object to specific processing activities — particularly processing for marketing purposes — at any time;
• Right to Data Portability: The right to receive a structured, commonly used copy of your personal data for transfer to another service provider, where technically feasible;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines where you believe your data privacy rights have been violated.

11.2 To exercise any of the above rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Rights Request." Please include your full name and registered mobile number so we can verify your identity before processing the request. We respond to all rights requests within fifteen (15) business days.

11.3 Some rights are subject to limitations. For example, the right to erasure cannot override our legal obligation to retain transaction records for five (5) years under AMLC regulations. Where we cannot fulfill a request in full, we will explain the reason in writing.

12. Minors and Age Restrictions

12.1 The 8k85 Platform is strictly restricted to individuals aged 21 years and above, in compliance with PAGCOR regulations governing online gambling in the Philippines. We do not knowingly collect personal data from individuals below this age.

12.2 Where 8k85 discovers or has reason to believe that personal data of a person under 21 has been collected through the Platform, we will take immediate steps to close the associated account, delete the data where legally permissible (subject to any mandatory retention obligations), and report the matter to PAGCOR as required.

12.3 Parents and guardians who believe that a minor has registered on 8k85 are encouraged to contact our support team immediately at [email protected] (plain text — not a clickable link). We treat all such reports as urgent and investigate them within 24 hours.

13. Data Breach Notification

13.1 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected Players, 8k85 will comply with its notification obligations under RA 10173 and the relevant NPC Circular on data breach management.

13.2 8k85 will notify the National Privacy Commission (NPC) of any qualifying breach within seventy-two (72) hours of becoming aware of it, as required by NPC Circular 16-03 and subsequent issuances.

13.3 Affected Players will be notified of a breach without undue delay where the breach is likely to result in high risk to their rights — for example, if KYC documents or financial data are compromised. Notifications will be sent to your registered email address and Philippine mobile number and will include the nature of the breach, the categories of data affected, the steps 8k85 is taking to address it, and the steps you can take to protect yourself.

13.4 8k85 maintains a documented Data Breach Response Plan reviewed by our Data Protection Officer on an annual basis.

14. International Data Transfers

14.1 Where 8k85 engages service providers or data processors located outside the Philippines, any transfer of personal data to those parties is conducted in accordance with Section 21 of RA 10173 and the NPC's guidelines on cross-border data flows.

14.2 Before transferring personal data overseas, 8k85 ensures that: (a) the receiving country provides an adequate level of protection for personal data, or (b) appropriate contractual safeguards are in place between 8k85 and the overseas processor, incorporating data protection obligations equivalent to those required by RA 10173, or (c) you have given your explicit consent to the transfer after being informed of the possible risks.

14.3 Where technically feasible, 8k85 prefers to work with service providers operating within the Philippines to minimize the need for international data transfers. All overseas transfers are documented and registered with the NPC where required by applicable regulations.

15. Changes to This Privacy Policy

15.1 8k85 may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this Policy will be revised accordingly.

15.2 Where a change is material — meaning it significantly affects your rights or the way we process your personal data — we will notify you via your registered email address or Philippine mobile number at least fourteen (14) days before the change takes effect, where operationally practicable.

15.3 Minor changes (such as corrections to typographical errors or clarifications that do not affect meaning) may be made without advance notice and take effect immediately. Continued use of the 8k85 Platform after the effective date of any revision constitutes acceptance of the updated Policy.

15.4 We encourage all Players to review this Policy periodically. The current version is always accessible at 8k85.cam/privacy-policy.

16. Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 8k85 processes your personal data, please contact our Data Protection Officer through the following channel:

Email: [email protected] (plain text only — not a clickable link)
Subject Line: Data Privacy Inquiry / Data Privacy Rights Request

Please include your full legal name and registered mobile number in all data privacy inquiries so we can verify your identity before processing your request. Our Data Protection Officer aims to respond to all privacy inquiries within five (5) business days, and to formal rights requests within fifteen (15) business days.

If you are not satisfied with 8k85's response to your data privacy inquiry or rights request, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines, which oversees enforcement of RA 10173. Information about how to contact the NPC is available through official Philippine government channels.