8c99 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 8c99 ("the Company," "we," "us," or "our") collects, uses, stores, discloses, and protects personal data provided by users ("you," "the Player") of the 8c99 online gaming platform accessible at https://8c99.co and any associated mobile or web applications (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your registration, use of Platform services, participation in promotions, and any other interaction you have with 8c99. By registering for an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy is to be read in conjunction with the 8c99 Terms and Conditions, which govern your use of the Platform.

2. Data Controller Information

8c99 acts as the data controller in respect of the personal data it collects and processes from Platform users. As data controller, 8c99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

If you have any questions about how 8c99 handles your personal data, you may contact our Data Privacy Officer via the contact details set out in Section 15 of this Policy.

3. Personal Data We Collect

8c99 collects the following categories of personal data from registered players and Platform visitors:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification document details (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS ID).
• Contact Data: Email address, mobile phone number, and residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, or other provinces).
• Account Data: Username, account ID, registration date, login history, and account preferences.
• Financial Data: Payment method details (GCash account number, Maya account, bank account details for BPI, BDO, Metrobank), deposit and withdrawal transaction history, and wallet balances. Full payment card numbers are not stored — payment processing is handled by certified payment service providers.
• Gaming Data: Betting history, game activity, bonus usage, session duration, win and loss records, and responsible gaming settings.
• Technical Data: IP address, device identifiers, browser type and version, operating system, time zone, referring URL, and platform access logs.
• Communication Data: Records of your interactions with 8c99 customer support, including live chat transcripts and email correspondence.
• KYC Documentation: Copies of identity documents, selfies, proof of address, and source-of-funds documentation submitted for account verification purposes.

4. How We Collect Your Data

8c99 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or completing responsible gaming forms.
• Automated collection: Technical and behavioural data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification results from KYC service providers; fraud and sanctions screening results from compliance data providers; payment confirmation data from GCash, Maya, and banking partners.

5. Legal Basis for Processing

8c99 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have provided explicit consent, such as for marketing communications or optional data uses.
• Contractual necessity: Processing required to register your account, manage your wallet, execute deposits and withdrawals, and deliver Platform services you have requested.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) requirements, Know Your Customer (KYC) regulations, and other applicable Philippine laws.
• Legitimate interests: Processing carried out to prevent fraud, ensure Platform security, improve products and services, and protect the rights and interests of 8c99 and its players, where such interests are not overridden by your fundamental rights.

6. How We Use Your Personal Data

8c99 uses collected personal data for the following purposes:

• To register and manage your 8c99 player account.
• To verify your identity and age in compliance with PAGCOR regulations and Philippine law (minimum age: 21 years).
• To process deposits, withdrawals, and in-Platform transactions.
• To provide customer support and respond to queries and complaints.
• To personalise your Platform experience, including game recommendations and promotional offers.
• To send service-related communications, including account notifications, security alerts, and responsible gaming reminders.
• To send marketing communications where you have consented to receive them. You may withdraw marketing consent at any time by contacting support or adjusting your account communication preferences.
• To detect and prevent fraud, money laundering, and other unlawful activities.
• To comply with legal, regulatory, and reporting obligations.
• To analyse Platform usage patterns and improve our services, user interface, and product offerings.

7. Disclosure of Personal Data to Third Parties

8c99 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

• Payment service providers: GCash (GXchange Inc.), Maya (Paymaya Philippines Inc.), BPI, BDO, Metrobank, and cryptocurrency payment processors — for transaction processing only.
• KYC and identity verification providers: Third-party compliance services engaged to verify your identity, age, and source of funds.
• Game content providers: Licensed game studios and live casino operators who power certain games on the 8c99 Platform. These providers may receive limited technical data necessary to deliver their services.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers operating under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, as required by law or court order.
• Professional advisors: Legal, audit, and compliance advisors engaged by 8c99, subject to professional confidentiality obligations.

All third-party data processors are required to handle your personal data in accordance with applicable Philippine data protection law and are bound by contractual data processing agreements with 8c99.

8. Cookies and Tracking Technologies

8c99 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Essential cookies: Required for the Platform to function, including session management and secure login. These cannot be disabled without disrupting Platform access.
• Performance cookies: Collect anonymised data on how players interact with the Platform, used to identify and fix usability issues and improve performance.
• Functional cookies: Remember your preferences, such as language settings and game lobby filters.
• Analytics cookies: Used to understand aggregate Platform usage patterns. Data collected through analytics cookies is not linked to your individual identity.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent access to account-protected areas of the Platform. 8c99 does not use third-party advertising cookies or share tracking data with advertising networks.

9. Data Security

8c99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 8c99 Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls limiting internal data access to authorised personnel only.
• Regular penetration testing and security audits conducted by independent security professionals.
• Multi-factor authentication for internal system access by 8c99 staff.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 8c99 will notify the National Privacy Commission (NPC) and affected players in accordance with Section 20 of the Data Privacy Act of 2012 and its implementing rules.

10. Data Retention

8c99 retains personal data for the period necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required under Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documentation: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support communications: Retained for two (2) years from the date of the interaction, unless required longer for dispute resolution purposes.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year to evidence compliance.

After applicable retention periods have expired, personal data is securely deleted or anonymised in accordance with 8c99's data disposal procedures.

11. Your Rights Under the Data Privacy Act

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in relation to your personal data held by 8c99:

• Right to be Informed: The right to know whether 8c99 processes your personal data and to receive information about how it is processed — as provided in this Policy.
• Right to Access: The right to request a copy of the personal data 8c99 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data, subject to legal and regulatory retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Damages: The right to seek compensation for damages sustained as a result of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data.

To exercise any of the above rights, please contact the 8c99 Data Privacy Officer using the contact details in Section 15. 8c99 will respond to verified data rights requests within 15 business days. Complex requests may require additional time, in which case you will be notified of the expected timeline.

12. Children and Minors

The 8c99 Platform is strictly for persons aged 21 years and older. 8c99 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21, the account will be closed immediately, all associated data will be deleted, and any deposits will be returned to the source payment method following identity verification.

If you are a parent or guardian and believe your child has registered on the 8c99 Platform, please contact support immediately at [email protected].

13. International Data Transfers

Personal data collected from Philippine players is processed and stored primarily within the Philippines or in jurisdictions that provide an adequate level of data protection. Where personal data is transferred to a third-party service provider operating in another jurisdiction, 8c99 ensures that such transfers are governed by data processing agreements that require the recipient to provide protections equivalent to those required under the Philippine Data Privacy Act of 2012.

14. Changes to This Privacy Policy

8c99 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or Platform services. The date of the most recent revision is displayed at the top of this Policy. Material changes will be communicated to registered players via email notification and/or a prominent notice on the Platform. Continued use of the Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes.

15. Contact and Data Privacy Officer

For questions, concerns, data rights requests, or complaints regarding this Privacy Policy or 8c99's data processing practices, please contact:

• Data Privacy Officer, 8c99
• Email: [email protected]
• Live Chat: Available 24/7 via the 8c99 Platform

If you are not satisfied with 8c99's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.