pk8 Privacy Policy – Your Data, Safe Full Transparency DPA Compliant You're in Control

1. Introduction

pk8 ("pk8," "we," "us," "our") is committed to protecting the privacy and personal data of all users ("you," "Player," "User") of the pk8 online gaming platform accessible at pk8.one. This Privacy Policy ("Policy") describes how pk8 collects, uses, stores, shares, and protects your personal information when you access or use the pk8 platform.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC") of the Philippines. By registering for a pk8 account or using any part of the pk8 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with the pk8 Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions with respect to data privacy matters, this Policy shall prevail.

2. Personal Data We Collect

pk8 collects personal data through various means, including directly from you during registration and account use, automatically through your use of the platform, and from third parties where permitted by law. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued Philippine ID;
• Date of birth (to verify you are 21 years of age or older);
• Philippine mobile number and email address;
• Username and encrypted password;
• Residential address in the Philippines.

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID, Voter's ID);
• Selfie or facial image for liveness verification where required;
• Proof of address documents where applicable.

2.3 Financial & Transaction Data

• GCash or PayMaya account details used for deposits and withdrawals;
• Philippine bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) where applicable;
• Transaction history including deposit amounts, withdrawal requests, and game wagering records;
• Account balance information.

2.4 Technical & Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Pages visited, features used, and time spent on the pk8 platform;
• Login timestamps and session duration;
• Cookies and similar tracking technologies (see Section 6).

2.5 Communications Data

• Records of your communications with pk8 customer support, including live chat transcripts and email correspondence;
• Feedback, complaints, and survey responses you submit to pk8.

3. How We Use Your Personal Data

pk8 uses the personal data we collect for the following purposes:

• Account Creation & Management: To register your pk8 account, verify your identity, and manage your account settings and preferences;
• Age Verification: To confirm that you are at least 21 years of age, as required under Philippine gaming regulations;
• Transaction Processing: To process deposits, withdrawals, and other financial transactions on your pk8 account via GCash, PayMaya, and Philippine bank transfers;
• Regulatory Compliance: To comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the pk8 platform;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Platform Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the pk8 platform;
• Responsible Gaming: To monitor gaming behavior and provide responsible gaming tools, including deposit limits, session reminders, and self-exclusion options;
• Marketing Communications: To send you promotional offers, bonuses, and updates about pk8 — only where you have provided consent and subject to your right to opt out at any time.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, pk8 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and pk8 (i.e., the Terms & Conditions), including account management and transaction processing;
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA obligations, and KYC requirements;
• Legitimate Interests: Processing is necessary for pk8's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights;
• Consent: For marketing communications and certain non-essential data processing activities, pk8 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

pk8 does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients only to the extent necessary and permitted by law:

5.1 Service Providers

pk8 engages trusted third-party service providers to assist in operating the platform, including payment processors (GCash, PayMaya, Philippine banks), identity verification providers, cloud hosting services, and customer support platforms. These providers are contractually bound to process your data only on pk8's instructions and in accordance with the DPA.

5.2 Regulatory & Law Enforcement Authorities

pk8 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law, court order, or regulatory directive. pk8 will notify you of such disclosures where legally permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of pk8's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new entity prior to the transfer taking effect.

5.4 With Your Consent

pk8 may share your personal data with other third parties where you have provided explicit consent for such sharing.

6. Cookies & Tracking Technologies

pk8 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain your login session, and analyze platform usage. The types of cookies used by pk8 include:

• Essential Cookies: Required for the platform to function correctly, including session management and security features. These cannot be disabled without affecting platform functionality;
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the pk8 platform, helping us identify areas for improvement;
• Preference Cookies: Used to remember your settings and preferences, such as language and display options;
• Marketing Cookies: Used to deliver relevant promotional content — only where you have consented to receive marketing communications from pk8.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the pk8 platform. For more information on managing cookies, refer to your browser's help documentation.

7. Data Retention

pk8 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations. Specific retention periods include:

• Account Data: Retained for the duration of your active pk8 account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AMLA obligations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the transaction for which verification was required;
• Communications Data: Customer support records retained for three (3) years from the date of the interaction;
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, whichever is earlier.

Upon expiry of the applicable retention period, pk8 will securely delete or anonymize your personal data in accordance with the DPA and NPC guidelines.

8. Data Security

pk8 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the pk8 platform is protected using industry-standard TLS/SSL encryption. Sensitive data at rest, including passwords and financial information, is stored using strong encryption algorithms;
• Access Controls: Access to personal data within pk8 is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations;
• Firewalls & Intrusion Detection: pk8's infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems;
• Regular Security Audits: pk8 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities;
• Two-Factor Authentication: pk8 offers two-factor authentication (2FA) for player accounts to provide an additional layer of security.

While pk8 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, pk8 will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the DPA.

9. Your Rights Under the DPA

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pk8:

• Right to Be Informed: You have the right to be informed of how your personal data is collected, used, and processed by pk8, as described in this Policy;
• Right of Access: You have the right to request a copy of the personal data pk8 holds about you, along with information about how it is being processed;
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data pk8 holds about you;
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pk8's legal retention obligations;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on pk8's legitimate interests;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe pk8 has violated your data privacy rights.

To exercise any of the above rights, please contact pk8's Data Protection Officer (DPO) using the contact details provided in Section 13 of this Policy. pk8 will respond to all verified data subject requests within thirty (30) days of receipt, as required by the DPA.

10. Children's Privacy & Age Restriction

The pk8 platform is strictly intended for individuals who are twenty-one (21) years of age or older, in accordance with Philippine gaming regulations. pk8 does not knowingly collect personal data from individuals under the age of 21.

pk8 employs age verification measures during the registration process to prevent underage access. If pk8 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any deposited funds will be returned to the original payment method.

If you are a parent or guardian and believe that a minor has registered on the pk8 platform, please contact our support team immediately at [email protected] so that we can take prompt action.

11. International Data Transfers

pk8 primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or technology partners operating in other jurisdictions.

Where personal data is transferred outside the Philippines, pk8 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the DPA. These safeguards may include contractual data processing agreements incorporating the NPC's standard contractual clauses, or transfers to jurisdictions recognized by the NPC as providing adequate data protection.

By using the pk8 platform, you consent to the transfer of your personal data outside the Philippines where necessary, subject to the safeguards described above.

12. Updates to This Privacy Policy

pk8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, pk8 will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect.

The updated Policy will be posted on this page with a revised "Last Updated" date. Your continued use of the pk8 platform after the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how pk8 protects your personal data.

If you do not agree with any changes to this Policy, you may request account closure in accordance with the pk8 Terms & Conditions.

13. Contact Us & Data Protection Officer

pk8 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Policy, please contact the pk8 DPO through the following channels:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through your pk8 account dashboard
• Response Time: Within thirty (30) days for formal data subject requests; within twenty-four (24) hours for general privacy inquiries

If you are not satisfied with pk8's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available through official Philippine government channels.