8c99 Privacy Policy

1. Who We Are

8c99 operates the online gaming platform accessible at 8c99.org (the "Platform"). For the purposes of the Data Privacy Act of 2012, 8c99 acts as the Personal Information Controller (PIC) in respect of the personal data of its registered players and website visitors. Our designated Data Protection Officer (DPO) can be contacted at the details provided in Section 14 of this Policy.

2. Personal Data We Collect

8c99 collects the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name, date of birth, nationality;
• Government-issued ID number (e.g., PhilSys National ID, passport, SSS ID, driver's license);
• Email address, mobile number, and residential address;
• Selfie or photograph for identity verification purposes.

2.2 Financial Data

• GCash or PayMaya/Maya account details (mobile number associated with the e-wallet);
• Bank account details (account name, account number, bank name) for withdrawal processing;
• Transaction history, deposit amounts, withdrawal amounts, and account balances.

2.3 Gaming & Behavioral Data

• Game history, bet amounts, win/loss records, and session duration;
• Responsible gaming settings, including deposit limits and self-exclusion status;
• Customer support interactions and correspondence.

2.4 Technical Data

• IP address, device type, operating system, and browser type;
• Geolocation data (country/region level) for compliance purposes;
• Login timestamps, session tokens, and access logs.

3. How We Collect Your Data

8c99 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings;
• Automatically — through cookies, web beacons, and server logs when you access the Platform (see Section 7 for details);
• From third parties — including identity verification service providers, payment processors (GCash, PayMaya, banks), and fraud prevention services, where necessary to verify your identity or process transactions.

4. Why We Use Your Personal Data

8c99 uses your personal data for the following purposes:

• To create and manage your 8c99 account and verify your identity;
• To process deposits, withdrawals, and other financial transactions;
• To comply with anti-money laundering (AML), counter-terrorism financing (CTF), and Know Your Customer (KYC) obligations under Philippine law;
• To detect, investigate, and prevent fraud, cheating, and other prohibited conduct;
• To provide customer support and respond to your enquiries;
• To administer bonuses, promotions, and loyalty programs;
• To enforce our Terms & Conditions and other platform policies;
• To send you service-related communications (e.g., account notifications, security alerts);
• To improve the Platform through analytics and user experience research;
• To comply with any applicable legal or regulatory obligation.

8c99 will not use your personal data for purposes incompatible with those listed above without first obtaining your consent or establishing a separate lawful basis.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 8c99 processes your personal data on the following legal bases:

• Contractual necessity — processing is required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management and transaction processing;
• Legal obligation — processing is necessary to comply with applicable Philippine laws, including AML/CTF regulations, PAGCOR licensing requirements, and the Data Privacy Act of 2012;
• Legitimate interests — processing is necessary for the legitimate interests of 8c99, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights;
• Consent — where we rely on your consent (e.g., for marketing communications), you may withdraw that consent at any time by contacting us or updating your account preferences.

6. Sharing Your Personal Data

8c99 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including identity verification providers, payment processors (GCash, PayMaya/Maya, and Philippine banking partners), cloud hosting providers, and customer support platforms. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

6.2 Regulatory & Law Enforcement Authorities

8c99 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 8c99's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations. You will be notified of any such transfer in advance.

6.4 Fraud Prevention

We may share data with fraud prevention agencies and industry bodies where necessary to detect and prevent fraudulent activity, money laundering, or other illegal conduct affecting the Platform.

7. Cookies & Tracking Technologies

8c99 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies may be set when you visit 8c99.org:

• Strictly necessary cookies — essential for the Platform to function, including session management and security tokens. These cannot be disabled;
• Functional cookies — remember your preferences such as language settings and login state;
• Analytics cookies — collect aggregated, anonymized data about how players use the Platform to help us improve performance and user experience;
• Security cookies — used to detect and prevent fraudulent activity and unauthorized access.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. 8c99 does not use third-party advertising or behavioral tracking cookies.

8. Data Retention

8c99 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and KYC data — retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Customer support records — retained for three (3) years from the date of the interaction;
• Technical and access logs — retained for twelve (12) months from the date of generation;
• Marketing consent records — retained until consent is withdrawn, plus one (1) year thereafter for compliance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 8c99's data disposal procedures.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by 8c99:

• Right to be informed — you have the right to know what personal data 8c99 collects and how it is used, as set out in this Policy;
• Right of access — you may request a copy of the personal data 8c99 holds about you;
• Right to rectification — you may request correction of any inaccurate or incomplete personal data;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to object — you may object to the processing of your personal data where we rely on legitimate interests as the legal basis;
• Right to data portability — you may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within fifteen (15) business days. We may require proof of identity before processing your request.

10. Children's Privacy

The 8c99 Platform is strictly intended for persons aged 21 years and above, in accordance with Philippine gambling regulations. 8c99 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from an underage individual, we will immediately suspend the associated account, delete the data, and report the matter to the appropriate authorities where required.

If you believe that a minor has registered on the 8c99 Platform, please contact us immediately at the details provided in Section 14.

11. International Data Transfers

Some of 8c99's service providers and infrastructure partners may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection, 8c99 will implement appropriate safeguards, such as contractual clauses approved by the National Privacy Commission, to ensure that your data remains protected to the standard required by Philippine law.

8c99 will not transfer your personal data to any jurisdiction that is subject to sanctions or that lacks adequate data protection frameworks without your explicit consent or a lawful basis under RA 10173.

12. Security Measures

8c99 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored in our databases;
• Multi-factor authentication (MFA) for all administrative access to systems holding personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Role-based access controls ensuring that only authorized personnel can access personal data on a need-to-know basis;
• Comprehensive audit logging of all access to and modifications of personal data;
• Staff training on data protection obligations and security best practices.

While 8c99 takes all reasonable steps to protect your data, no system is completely immune to security risks. You are encouraged to use a strong, unique password for your 8c99 account and to enable any available two-factor authentication options.

13. Changes to This Privacy Policy

8c99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, we will notify registered players via email or an in-platform notification at least fourteen (14) days before the changes take effect. The effective date at the top of this Policy will be updated accordingly.

Your continued use of the 8c99 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 8c99, please contact our Data Protection Officer: