m8k8 Privacy Policy

This Privacy Policy ("Policy") is issued by m8k8, the operator of the online casino and sports betting platform available at m8k8.club ("m8k8," "we," "us," "our"). It describes how m8k8 collects, uses, stores, protects, and shares the personal data of registered players and website visitors ("you," "your," "data subject") in connection with the m8k8 platform and all associated services.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines ("NPC"). Where applicable, this Policy also reflects the requirements of the PAGCOR regulatory framework under which m8k8 operates.

By registering an account on m8k8.club, accessing the platform, or otherwise providing personal information to m8k8, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with the m8k8 Terms & Conditions.

For the purposes of the DPA, m8k8 acts as the personal information controller in respect of the personal data of its registered players and platform users. m8k8 determines the purposes and means of processing personal data collected through the m8k8.club platform.

Where m8k8 engages third-party service providers (such as payment processors, KYC verification providers, or game software suppliers) to process personal data on its behalf, such providers act as personal information processors under written agreements that impose data protection obligations consistent with the DPA and this Policy.

For all data privacy inquiries, access requests, and complaints, the m8k8 Data Privacy contact is reachable via the contact information in Section 16 of this Policy.

m8k8 collects the following categories of personal data depending on how you interact with the platform:

m8k8 does not collect sensitive personal information such as health records, racial or ethnic origin, religious beliefs, or political affiliations, except where incidentally disclosed in identity documents submitted for KYC purposes.

m8k8 collects personal data through the following means:

• Direct collection: Information you provide voluntarily when registering an account, completing the KYC process, making a deposit or withdrawal, contacting customer support, or responding to promotions;
• Automated collection: Technical data collected automatically when you access the m8k8 platform, including through cookies, server logs, and similar tracking technologies (see Section 7);
• Payment providers: Financial transaction data received from GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and other integrated payment processors when you deposit or withdraw funds;
• KYC verification providers: Identity verification results and document authentication data from third-party KYC service providers used to verify your identity documents;
• Regulatory sources: Information received from PAGCOR or other competent authorities in connection with regulatory compliance obligations;
• Game providers: Game session data and betting records from integrated game software providers including JILI, Evolution, Pragmatic Play, PG Soft, and others.

m8k8 processes your personal data for the following purposes:

5.1 Account Management & Service Delivery

• Creating and maintaining your m8k8 player account;
• Authenticating your identity when you log in;
• Processing deposits, withdrawals, and bonus credits to and from your account wallet;
• Providing access to casino games, sports betting markets, bingo, and all other m8k8 platform services;
• Responding to your customer support inquiries and resolving disputes.

5.2 Legal & Regulatory Compliance

• Verifying your age and identity in compliance with PAGCOR regulations (minimum age 21 years);
• Conducting anti-money laundering (AML) checks and reporting as required under the Anti-Money Laundering Act of the Philippines (AMLA) and its implementing regulations;
• Complying with data retention requirements under Philippine law;
• Responding to lawful requests from PAGCOR, law enforcement agencies, or courts of competent jurisdiction.

5.3 Responsible Gaming

• Monitoring account activity to identify indicators of problem gambling behaviour;
• Administering deposit limits, session controls, and self-exclusion requests;
• Communicating with players regarding responsible gaming tools and resources.

5.4 Platform Security & Fraud Prevention

• Detecting and preventing fraudulent transactions, account takeovers, and bonus abuse;
• Identifying and blocking prohibited conduct including multi-accounting and collusion;
• Maintaining platform integrity and investigating suspected violations of the m8k8 Terms & Conditions.

5.5 Marketing Communications (Consent-Based)

• Sending promotional offers, bonus notifications, and product updates via SMS and email, where you have provided consent;
• Personalising promotional content based on your gaming preferences and activity;
• Conducting surveys and gathering feedback to improve the m8k8 platform.

Under the DPA, m8k8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract with you (your m8k8 account agreement), including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, AMLA obligations, and NPC requirements;
• Legitimate interests: Processing necessary for m8k8's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and certain cookies, where your explicit consent has been obtained. Consent may be withdrawn at any time without affecting prior lawful processing.

m8k8 uses cookies and similar tracking technologies on the m8k8.club platform. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and provide analytics data.

7.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function, including session management, authentication, and security features. These cannot be disabled without affecting platform functionality;
• Functional cookies: Remember your preferences such as language settings, display options, and deposit method choices;
• Analytics cookies: Collect anonymised data about how players use the platform to help m8k8 improve its services. This data does not personally identify individual players;
• Marketing cookies: Used (with your consent) to personalise promotional offers and measure the effectiveness of m8k8's marketing activities.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect your experience on the m8k8 platform. Strictly necessary cookies cannot be disabled through browser settings while using the platform.

m8k8 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the circumstances described below:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment providers receive the minimum data necessary to process your deposit and withdrawal transactions;
• KYC verification providers: Third-party identity verification services receive your ID documents and selfie photograph for the purpose of completing KYC checks on behalf of m8k8;
• Game software providers: Game suppliers such as JILI, Evolution, Pragmatic Play, and PG Soft receive session data necessary to deliver their games to your account;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities receive data as required by law or regulatory directive;
• Legal and professional advisers: Lawyers, auditors, and other professional advisers who are bound by confidentiality obligations;
• Business successors: In the event of a merger, acquisition, or sale of substantially all of m8k8's assets, player data may be transferred to the successor entity subject to equivalent privacy protections.

Some of m8k8's third-party service providers (including game software suppliers and certain technical infrastructure providers) may be located outside the Philippines. Where personal data is transferred to a country that the NPC has not deemed to provide an adequate level of data protection, m8k8 implements appropriate safeguards including contractual clauses that impose DPA-equivalent data protection standards on the receiving party.

By using the m8k8 platform and agreeing to this Policy, you acknowledge that your personal data may be processed in countries outside the Philippines as described above. m8k8 takes all reasonable steps to ensure that international transfers are conducted securely and lawfully.

m8k8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR requirements and the AMLA;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLA and tax regulations;
• KYC documents: Retained for the duration of your account and for a minimum of five (5) years after account closure;
• Game session and betting records: Retained for a minimum of three (3) years for dispute resolution and regulatory purposes;
• Support communications: Retained for two (2) years from the date of the last communication;
• Marketing preference data: Retained until you withdraw consent or for two (2) years of inactivity, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes it impossible to identify the data subject.

m8k8 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

All data transmission between your device and the m8k8 platform is encrypted using 256-bit SSL/TLS protocols. Passwords are stored using industry-standard one-way cryptographic hashing — m8k8 does not store your password in readable form. Access to personal data is restricted to authorised m8k8 personnel and processors on a need-to-know basis.

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, m8k8 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the DPA.

Age is verified through the KYC process, which requires submission of a valid Philippine government-issued photo ID showing date of birth. Any account where KYC verification reveals that the holder is under 21 will be immediately suspended and all personal data associated with the account will be scheduled for deletion, subject to any mandatory regulatory retention requirements.

If you are a parent or guardian and believe your child under 21 has registered an m8k8 account, please contact m8k8 support immediately. We will investigate and take appropriate action including account closure and data deletion.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by m8k8:

• Right to be informed: The right to be notified about how your data is processed, as set out in this Policy;
• Right of access: The right to request a copy of all personal data m8k8 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking: The right to request deletion or blocking of personal data where it is unlawfully processed or no longer necessary, subject to legal retention obligations;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to object: The right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to file a complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your rights under the DPA have been violated.

To exercise any of the above rights, please contact m8k8 Data Privacy through the details in Section 16. m8k8 will respond to verified requests within 15 business days. We may require identity verification before processing a data subject request to protect against unauthorised requests.

m8k8 sends promotional communications including bonus offers, game announcements, and special promotions via SMS and email only where you have provided prior consent during registration or through your account preferences settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in the m8k8 account settings;
• Clicking the unsubscribe link in any marketing email;
• Replying STOP to any promotional SMS;
• Contacting m8k8 customer support directly.

Withdrawal of marketing consent does not affect your ability to use the m8k8 platform or access your account. Transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) are not marketing communications and will continue to be sent regardless of marketing opt-out status, as they are necessary for account management.

m8k8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this Policy will be communicated to registered players via SMS or email no less than 14 days before the revised Policy takes effect, except where immediate amendment is required by law.

The current effective version of this Policy is always available at m8k8.club/privacy-policy. The "Last Updated" date at the top of this document indicates when the Policy was most recently revised. Your continued use of the m8k8 platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

For questions about this Privacy Policy, to exercise your data rights, or to raise a data privacy concern, please contact m8k8 through the following:

• Email: [email protected] (plain text only — not a clickable link)
• Live Chat: Available 24/7 inside the m8k8 platform
• Subject line for data requests: "Data Privacy Request — [Your Registered Mobile Number]"
• Response time: Data subject requests are processed within 15 business days of identity verification

If you are not satisfied with m8k8's response to a data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC) through the official NPC website and complaint channels.