8c99 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") sets out the basis upon which 8c99 ("8c99," "we," "us," or "our") collects, processes, stores, and shares personal information about individuals ("you," "your," or "Data Subject") who access and use the 8c99 online gaming platform at 8c99.club, including any associated interfaces, mobile browsers, and customer support channels (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC") of the Philippines. By creating an account or using any part of the 8c99 Platform, you acknowledge that you have read, understood, and accepted the terms of this Privacy Policy.

This Policy applies to all personal data collected by 8c99 in connection with its online casino, sportsbook, bingo, slot, and sabong services. It does not apply to third-party websites or services that may be linked to or from our Platform, which are governed by their own privacy policies.

2. Data Controller Information

8c99 acts as the Data Controller in respect of personal data processed under this Policy. As Data Controller, 8c99 determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that such processing is lawful, fair, and transparent.

8c99 has designated a Data Protection Officer ("DPO") as required under the Data Privacy Act. Inquiries regarding this Policy or your rights as a Data Subject may be directed to:

• Data Protection Officer, 8c99
• Email: [email protected] (plain text — not a clickable link)
• Response time: We aim to acknowledge privacy-related inquiries within 72 hours and resolve them within 15 business days.

3. Personal Data We Collect

8c99 collects the following categories of personal data from members and platform users:

8c99 does not intentionally collect sensitive personal information as defined by the DPA (such as race, health, religion, or political affiliation) unless specifically required for a regulatory purpose and with your explicit consent.

4. How We Collect Your Data

8c99 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to promotions.
• Automated collection: Technical and gaming activity data collected automatically through your use of the Platform, including cookies, log files, and session tracking.
• Third-party sources: Identity verification data received from licensed Philippine KYC service providers; payment confirmation data from GCash, PayMaya, and banking partners; fraud detection signals from third-party security vendors.
• Regulatory reporting: Data received from or reported to PAGCOR and other Philippine government agencies in accordance with applicable law.

5. Purposes and Legal Bases for Processing

8c99 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Performance of a contract: Processing necessary to create and manage your account, process deposits and withdrawals, provide games and services, and enforce our Terms & Conditions.
• Compliance with a legal obligation: Processing required by PAGCOR regulations, the Anti-Money Laundering Act (AMLA), RA 10173, and other applicable Philippine laws — including KYC verification, transaction monitoring, and regulatory reporting.
• Legitimate interests: Fraud prevention, security monitoring, platform abuse detection, responsible gaming enforcement, and improvement of platform services.
• Consent: For marketing communications (e.g., promotional SMS or email), where we will request your explicit, specific, and informed consent and provide you with an easy means to withdraw it at any time.

6. How We Use Your Personal Data

8c99 uses the personal data we collect for the following purposes:

• To create, verify, and manage your 8c99 account, including identity verification in compliance with PAGCOR's KYC requirements.
• To process deposits, withdrawals, and financial transactions via GCash, PayMaya, BPI, BDO, Metrobank, and other payment channels in PHP.
• To provide, maintain, and improve all games and services available on the 8c99 Platform, including slots, live casino, bingo, sports betting, and sabong.
• To detect, prevent, and investigate fraud, money laundering, multi-accounting, bonus abuse, and other prohibited activities.
• To enforce 8c99's responsible gaming commitments, including age verification, self-exclusion management, and player welfare monitoring.
• To communicate with you regarding your account, transactions, security alerts, and (where consented) promotional offers.
• To meet reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities.
• To respond to your support inquiries, complaints, and feedback submitted via live chat or email.
• To analyze aggregated, anonymized gaming and usage data to improve the platform experience for all Philippine players.

7. Cookies and Tracking Technologies

8c99 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you access 8c99.club. We use the following types:

• Essential cookies: Required for basic platform functionality, user authentication, and session security. These cannot be disabled without affecting your ability to use the Platform.
• Performance cookies: Collect anonymized data about how users interact with 8c99 (page load times, error rates, feature usage) to help us improve the platform for all Filipino players.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and last-used payment method.
• Security cookies: Used for fraud detection, bot prevention, and login session integrity verification.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing 8c99, but may affect certain features. 8c99 does not use third-party advertising cookies or cross-site tracking for advertising purposes.

8. Sharing Your Personal Data

8c99 does not sell your personal data to third parties. We share your data only in the following circumstances and with the following categories of recipients:

• Payment processors: GCash (Globe Fintech Innovations), Maya Philippines, BancNet, and partner banks — to process your PHP deposits and withdrawals.
• KYC and identity verification providers: Licensed Philippine identity verification services engaged to fulfill PAGCOR-mandated KYC requirements.
• Game content providers: Third-party game studios and live casino providers whose games are integrated into the 8c99 Platform, to the extent necessary to operate those games.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement agencies — as required by Philippine law or upon receipt of a lawful order.
• Professional advisors: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers operating under data processing agreements that comply with the DPA.

All third parties who receive personal data from 8c99 are required to process such data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific service they provide to 8c99.

9. International Data Transfers

Some of 8c99's third-party service providers — particularly cloud infrastructure and game content providers — may process data outside the Philippines. Where personal data is transferred internationally, 8c99 ensures that such transfers comply with Section 21 of the Data Privacy Act and NPC guidelines, including the requirement that receiving countries afford an adequate level of data protection. Appropriate contractual safeguards are in place for all cross-border transfers of Philippine residents' personal data.

10. Data Retention

8c99 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum periods required by Philippine law:

• Account and identity data: Retained for a minimum of five (5) years from account closure, in compliance with PAGCOR and AMLA requirements.
• Financial transaction records: Retained for a minimum of ten (10) years in accordance with AMLA obligations applicable to covered persons.
• Gaming activity data: Retained for five (5) years for regulatory reporting and dispute resolution purposes.
• Support and communications data: Retained for three (3) years from the date of last communication.
• Marketing consent records: Retained for as long as you remain a consenting member plus three (3) years, or until consent is withdrawn.

Upon expiry of applicable retention periods, personal data will be securely deleted, anonymized, or archived in a manner that prevents further identification, in accordance with NPC-approved disposal procedures.

11. Security of Your Personal Data

8c99 implements technical and organizational security measures appropriate to the risk and nature of the personal data processed, including:

• SSL/TLS encryption for all data transmitted between your device and 8c99 servers.
• Encryption of stored sensitive personal data including financial information and government ID details.
• Role-based access controls ensuring that only authorized 8c99 personnel access personal data on a need-to-know basis.
• Multi-factor authentication for all internal staff accessing data systems.
• Regular penetration testing and vulnerability assessments of the 8c99 Platform infrastructure.
• Formal data breach response procedures compliant with NPC notification requirements (72-hour notification for breaches likely to result in serious harm).
• Annual data privacy awareness training for all 8c99 staff who handle personal data.

While 8c99 takes all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for notifying us immediately if you suspect unauthorized access to your account.

12. Your Rights Under the Data Privacy Act

As a Data Subject under RA 10173, you have the following rights with respect to your personal data held by 8c99:

• Right to be Informed: The right to be notified of how your personal data is collected, processed, and used — which this Policy fulfils.
• Right of Access: The right to request confirmation of whether 8c99 holds personal data about you and to receive a copy of such data.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update basic account information directly through your 8c99 account settings.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to Object: The right to object to the processing of your personal data on grounds of legitimate interest or for direct marketing purposes.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 8c99 has violated your data privacy rights.

To exercise any of the above rights, please contact the 8c99 Data Protection Officer at [email protected]. We will respond within fifteen (15) business days of receiving a verifiable request.

13. Children's Privacy

The 8c99 Platform is strictly for persons aged 21 years or older. 8c99 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and report the incident to relevant authorities in accordance with PAGCOR underage gambling prevention protocols. Parents or guardians who believe a minor may have created an 8c99 account should contact our support team immediately.

14. Changes to This Privacy Policy

8c99 may update this Privacy Policy from time to time to reflect changes in our data processing practices, new Philippine regulatory requirements, or platform enhancements. Material changes will be communicated to registered members via SMS to your registered mobile number and via a notification within the Platform at least seven (7) calendar days before the changes take effect.

The date at the top of this page indicates when the Policy was most recently updated. Continued use of the 8c99 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you should close your account before the effective date.

15. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by 8c99, please contact us through the following channels:

• Data Protection Officer, 8c99
• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 within the 8c99 Platform after login
• Response timeframe: Privacy requests acknowledged within 72 hours; resolved within 15 business days.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. Information on how to file a complaint with the NPC is available on the NPC's official website.