km8 Privacy Policy

1.Introduction

km8 ("we," "us," or "our") operates the online gaming platform accessible at km8.org. This Privacy Policy applies to all personal data collected from players, visitors, and prospective users of the km8 Platform, whether accessed via desktop browser or mobile device from anywhere in the Philippines — including Manila, Cebu, Davao, Quezon City, Makati, and beyond.

By registering an account or using any km8 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the km8 Platform.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming policy, which together govern your use of km8.

2.Data We Collect

2.1 Identity & Contact Data

When you register a km8 account, we collect personal information including your full legal name, date of birth, nationality, residential address, Philippine mobile number, and email address. This information is required to verify your identity, comply with PAGCOR KYC requirements, and communicate with you about your account.

2.2 Identity Verification Documents

To comply with anti-money laundering (AML) regulations and PAGCOR licensing requirements, km8 collects copies of government-issued identification documents such as your PhilSys National ID, passport, driver's license, SSS/GSIS ID, or other PAGCOR-accepted identification. We may also collect proof of address documents such as utility bills or bank statements.

2.3 Financial Data

km8 collects information related to your financial transactions on the Platform, including deposit and withdrawal amounts, payment method details (such as GCash account references, PayMaya wallet identifiers, BPI, BDO, or Metrobank account details), transaction history, and account balance information. We do not store full payment card numbers on our servers.

2.4 Gaming Activity Data

We collect data about your gaming activity on km8, including games played, bet amounts, win/loss records, session durations, and responsible gaming tool usage. This data is used to operate the Platform, detect problem gambling patterns, and comply with regulatory reporting obligations.

2.5 Technical & Usage Data

When you access km8, we automatically collect technical data including your IP address, device type, operating system, browser type and version, screen resolution, referring URLs, pages visited, time spent on pages, and clickstream data. This data helps us maintain Platform security, improve user experience, and detect fraudulent activity.

2.6 Communications Data

We retain records of communications between you and km8, including customer support chat logs, emails, and any feedback or complaints you submit. These records are maintained for quality assurance, dispute resolution, and regulatory compliance purposes.

3.How We Collect Data

km8 collects your personal data through the following means:

• Direct interactions: Data you provide when registering, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Cookies, web beacons, pixel tags, and similar tracking technologies that collect technical and usage data when you interact with the km8 Platform.
• Third-party sources: Identity verification providers, payment processors, fraud detection services, and PAGCOR regulatory databases, where permitted by applicable law.

4.How We Use Your Data

km8 uses your personal data for the following purposes:

• To create, verify, and manage your km8 player account.
• To process deposits, withdrawals, and other financial transactions.
• To comply with PAGCOR licensing conditions, AML obligations, and other applicable Philippine laws and regulations.
• To verify your identity and age (you must be 21 years or older to use km8).
• To detect, investigate, and prevent fraud, money laundering, cheating, and other prohibited activities.
• To provide customer support and resolve disputes.
• To send you account-related notifications, security alerts, and service updates.
• To send you promotional communications and bonus offers, where you have consented to receive them.
• To monitor gaming activity for responsible gaming purposes and to apply self-exclusion or limit tools where requested.
• To improve the km8 Platform, develop new features, and conduct internal analytics.
• To comply with court orders, legal processes, or requests from regulatory authorities.

5.Legal Basis for Processing

km8 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (RA 10173):

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legal requirements.
• Legitimate interests: Processing for fraud prevention, Platform security, and internal analytics, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time by contacting [email protected].

6.Data Sharing & Disclosure

km8 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• PAGCOR and regulatory authorities: As required by our gaming license and applicable Philippine law.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers to process your financial transactions.
• Identity verification providers: Third-party KYC and AML compliance service providers who assist us in verifying player identities.
• IT and platform service providers: Cloud hosting, cybersecurity, and technical infrastructure providers who process data on our behalf under strict data processing agreements.
• Law enforcement and courts: Where required by a valid court order, subpoena, or lawful request from Philippine law enforcement or regulatory authorities.

All third-party service providers who process personal data on behalf of km8 are contractually required to maintain appropriate technical and organizational security measures and to process data only in accordance with our instructions.

7.Cookies & Tracking Technologies

km8 uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and content.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You can manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the km8 Platform.

8.Data Retention

km8 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, as required by PAGCOR and AML regulations.
• Financial transaction records are retained for a minimum of five (5) years in accordance with Philippine tax and AML laws.
• Customer support communications are retained for three (3) years from the date of the interaction.
• Technical and usage data is retained for up to two (2) years for security and analytics purposes.

After the applicable retention period, personal data is securely deleted or anonymized in accordance with our data destruction procedures.

9.Data Security

km8 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include SSL/TLS encryption for all data transmitted between your device and our servers, encrypted storage of sensitive data at rest, multi-factor authentication for account access, regular security audits and penetration testing, and strict access controls limiting employee access to personal data on a need-to-know basis.

While km8 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, km8 will notify you and the National Privacy Commission (NPC) in accordance with the requirements of RA 10173 and its implementing rules.

10.Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by km8:

• Right to be informed: The right to know what personal data km8 collects and how it is processed.
• Right of access: The right to request a copy of the personal data km8 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days in accordance with RA 10173.

11.Children's Privacy

The km8 Platform is strictly intended for adults aged 21 years and older, in compliance with Philippine gambling laws and PAGCOR regulations. km8 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and report the matter to PAGCOR as required. If you believe a minor has registered on km8, please contact us immediately at [email protected].

12.International Data Transfers

km8 primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers located outside the Philippines (for example, cloud infrastructure providers), km8 ensures that such transfers are conducted in compliance with RA 10173 and that the recipient provides an adequate level of data protection through contractual safeguards, including standard data protection clauses approved by the National Privacy Commission.

13.Changes to This Privacy Policy

km8 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. The date of the most recent revision is displayed at the top of this page. Where changes are material, km8 will notify registered players via email or in-platform notification prior to the changes taking effect. Your continued use of the km8 Platform following the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

14.Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

Email: [email protected]

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. km8 operates under PAGCOR regulatory oversight and is committed to full compliance with RA 10173 and all applicable data protection laws.