Privacy Policy

01 About This Policy

8oklotto ("we," "us," "our," "the Platform") is committed to protecting the personal information of all players and users who access our online gaming services. This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations as enforced by the National Privacy Commission (NPC).

As a platform operating within the PAGCOR regulatory framework, 8oklotto is also subject to anti-money laundering (AML) obligations under the Anti-Money Laundering Act (AMLA) and related regulations, which require us to collect and retain certain personal data. This policy explains how those obligations interact with your privacy rights.

We act as the Personal Information Controller for all data collected through the 8oklotto platform. This means we determine the purposes and means of processing your personal data and are responsible for ensuring that processing is carried out lawfully, fairly, and transparently.

02 Data We Collect

2.1 Information You Provide Directly

When you register an account with 8oklotto, we collect the following personal information:

• Identity data: Full legal name, date of birth, nationality, and gender.
• Contact data: Email address, mobile number, and residential address (including city, province, and ZIP code).
• Verification documents: Copies of government-issued Philippine identification (e.g., passport, driver's license, SSS ID, PhilHealth ID, UMID, or Postal ID) and proof of address submitted during KYC verification.
• Financial data: GCash account number, PayMaya account details, bank account information (BPI, BDO, Metrobank, UnionBank, or other Philippine banks), and transaction history.
• Account credentials: Username and encrypted password. We do not store your password in plain text.

2.2 Information Collected Automatically

When you use the 8oklotto platform, we automatically collect certain technical and behavioral data:

• Device data: IP address, device type, operating system, browser type and version, and device identifiers.
• Usage data: Pages visited, games played, session duration, bet history, win/loss records, and feature interactions.
• Location data: Approximate geolocation derived from your IP address, used to verify that you are accessing the platform from within the Philippines.
• Log data: Server logs recording access times, error reports, and platform activity.

2.3 Information from Third Parties

We may receive personal data about you from third-party sources, including:

• Payment processors (GCash, PayMaya, and Philippine banks) for transaction verification and fraud prevention.
• Identity verification service providers used to validate your KYC documents.
• Regulatory bodies (PAGCOR, NPC, AMLC) when required by law or in response to lawful requests.

03 How We Use Your Data

8oklotto processes your personal data for the following purposes:

• Account management: To create, maintain, and secure your player account.
• Transaction processing: To process deposits, withdrawals, and payment transactions via GCash, PayMaya, and Philippine banks.
• Identity verification: To comply with KYC and AML obligations under Philippine law, including verifying your age (21+), identity, and address.
• Regulatory compliance: To fulfill obligations under PAGCOR regulations, the Data Privacy Act, AMLA, and other applicable laws.
• Fraud prevention: To detect and prevent fraudulent activity, bonus abuse, multi-accounting, money laundering, and other prohibited conduct.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing communications: To send promotional offers, bonuses, and updates about 8oklotto services (only with your consent, and you may opt out at any time).
• Platform improvement: To analyze usage patterns, improve game offerings, optimize user experience, and develop new features.
• Responsible gaming: To monitor gameplay patterns, enforce deposit limits, and support self-exclusion tools.

04 Legal Basis for Processing

Under the Data Privacy Act of 2012, we process your personal data based on the following legal grounds:

• Consent: You have given explicit consent for us to process your data for specific purposes (e.g., marketing communications).
• Contractual necessity: Processing is necessary to perform our obligations under the Terms & Conditions you agreed to when registering your account.
• Legal obligation: Processing is required to comply with Philippine laws, including PAGCOR regulations, AMLA, and the Data Privacy Act.
• Legitimate interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, platform security, and service improvement), provided those interests do not override your fundamental rights.

05 Data Sharing and Disclosure

8oklotto does not sell, rent, or trade your personal data to third parties for marketing purposes. However, we may share your data with the following categories of recipients:

5.1 Service Providers

We engage trusted third-party service providers to support platform operations, including:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank) for transaction processing.
• KYC verification providers for identity document validation.
• Cloud hosting and data storage providers.
• Customer support and live chat platforms.
• Game providers for slot, live dealer, and bingo content.

All service providers are contractually bound to process your data only as instructed by 8oklotto and to implement appropriate security measures.

5.2 Regulatory and Law Enforcement Authorities

We may disclose your personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), the Philippine National Police (PNP), or other government agencies when required by law, court order, or regulatory request. This includes disclosures for AML investigations, tax compliance, and criminal investigations.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this policy.

06 Cookies and Tracking Technologies

8oklotto uses cookies, web beacons, and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze platform usage.

6.1 Types of Cookies We Use

• Essential cookies: Required for platform functionality, including login sessions, account security, and transaction processing. These cannot be disabled.
• Performance cookies: Collect anonymous data about how you use the platform, helping us improve performance and user experience.
• Functional cookies: Remember your preferences (e.g., language, game favorites) to personalize your experience.
• Marketing cookies: Track your activity across the platform to deliver targeted promotions and measure campaign effectiveness (only with your consent).

6.2 Managing Cookies

You can manage cookie preferences through your browser settings. However, disabling essential cookies may prevent you from accessing certain features of the platform. Most browsers allow you to block third-party cookies while still accepting first-party cookies.

07 Data Retention

8oklotto retains your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Specific retention periods include:

• Account data: Retained for the duration of your active account, plus 5 years after account closure to comply with PAGCOR and AMLA record-keeping requirements.
• Transaction records: Retained for 5 years from the date of the transaction, as required by AMLA.
• KYC documents: Retained for 5 years after account closure or the end of the business relationship.
• Marketing data: Retained until you withdraw consent or request deletion, whichever comes first.
• Log data: Retained for 12 months for security and troubleshooting purposes.

After the applicable retention period expires, we securely delete or anonymize your data so that it can no longer be associated with you.

08 Data Security

8oklotto implements industry-standard technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. Sensitive data at rest (e.g., passwords, financial information) is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized personnel only, based on role-based access controls and the principle of least privilege.
• Regular audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential risks.
• Incident response: We maintain an incident response plan to detect, respond to, and recover from data breaches or security incidents.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

09 Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights:

• Right to be informed: You have the right to know how your personal data is being collected, used, and shared.
• Right to access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data, subject to legal retention obligations.
• Right to object: You may object to the processing of your data for direct marketing purposes or other legitimate interests.
• Right to data portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You may file a complaint with the National Privacy Commission if you believe your privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 12 below. We will respond to your request within 15 calendar days, as required by the Data Privacy Act.

10 Children's Privacy

8oklotto is strictly intended for users who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected data from a minor, we will take immediate steps to delete that data and terminate the associated account. If you believe a minor has registered an account with 8oklotto, please contact us immediately at [email protected].

11 Changes to This Privacy Policy

8oklotto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. Any changes will be effective immediately upon posting to this page. We will notify you of material changes by email (to the address associated with your account) or by displaying a prominent notice on the platform. Your continued use of 8oklotto after changes have been posted constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer:

Data Protection Officer
8oklotto
Email: [email protected]
Support: Available 24/7 via live chat on the platform

You may also contact the National Privacy Commission (NPC) if you wish to file a complaint or seek guidance on data privacy matters:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila, Philippines
Email: [email protected]
Website: privacy.gov.ph