pk888 Privacy Policy

This Privacy Policy ("Policy") describes how pk888 ("pk888," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "Member," or "User") who access or use the pk888 online gaming platform at pk888.asia and any associated mobile interfaces (collectively, the "Platform"). This Policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations. By registering an Account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

1. Who We Are

pk888 is an online casino and sports betting platform operating under applicable Philippine gaming regulations and PAGCOR licensing requirements. For the purposes of the DPA, pk888 acts as the Personal Information Controller with respect to the personal data of its Members. Our designated Data Protection Officer ("DPO") can be contacted via our support channels for any privacy-related concerns.

2. Personal Data We Collect

pk888 collects the following categories of personal data from Members and prospective Members:

pk888 does not collect sensitive personal information as defined under the DPA (such as health data, political opinions, or religious beliefs) unless specifically required for responsible gaming assessments or legal compliance, and only with your explicit consent where required.

3. How We Collect Your Data

pk888 collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment data from GCash, PayMaya, BPI, BDO, and Metrobank in connection with transaction processing.

4. How We Use Your Personal Data

pk888 uses your personal data for the following purposes:

• Account management: Creating, maintaining, and administering your pk888 Account, including processing deposits, withdrawals, and wagers.
• Identity and age verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity in accordance with PAGCOR KYC requirements.
• Legal and regulatory compliance: Fulfilling our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the DPA, including reporting obligations to relevant Philippine authorities.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, cheating, money laundering, and unauthorized access to the Platform.
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering self-exclusion and deposit limit tools.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out mechanism.
• Platform improvement: Analyzing usage data to improve the performance, design, and content of the Platform.

5. Legal Basis for Processing

pk888 processes your personal data on the following legal bases under the DPA:

• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

pk888 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• KYC and identity verification providers: Third-party service providers engaged to verify your identity and age in compliance with PAGCOR requirements.
• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing your deposits and withdrawals.
• AML and fraud screening providers: Compliance technology providers engaged to screen transactions for money laundering and fraud indicators.
• IT and platform service providers: Cloud hosting, cybersecurity, and software providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal, compliance, or financial purposes, subject to professional confidentiality obligations.

All third-party service providers who process personal data on behalf of pk888 are required to implement appropriate technical and organizational security measures and to process data only in accordance with our instructions.

7. Cookies and Tracking Technologies

pk888 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

• Strictly necessary cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Performance cookies: Used to collect anonymized data about how Members use the Platform, helping us identify and fix performance issues.
• Functional cookies: Used to remember your preferences, such as language settings and display options.
• Analytics cookies: Used to understand aggregate usage patterns and improve the Platform experience. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

8. Data Retention

pk888 retains your personal data for as long as your Account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following Account closure, in accordance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• KYC documentation is retained for a minimum of five (5) years following the completion of the business relationship, as required by the AMLA Implementing Rules.
• Marketing consent records are retained for the duration of your Account and for three (3) years thereafter.
• Technical and usage data is retained for up to two (2) years for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

9. Data Security

pk888 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• Incident response procedures for detecting, reporting, and managing personal data bre aches.

While pk888 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pk888 will notify the National Privacy Commission (NPC) and affected Members in accordance with the DPA's breach notification requirements.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by pk888:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed — which is the purpose of this Policy.
• Right of access: You may request a copy of the personal data pk888 holds about you, along with information about how it is being used.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances warrant it.
• Right to data portability: You may request that pk888 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our support team via live chat, available 24/7 on the Platform. We will respond to all data subject requests within thirty (30) days of receipt, in accordance with the DPA's requirements.

11. Children's Privacy

The pk888 Platform is strictly intended for individuals aged 21 years and above. pk888 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated Account. If you believe a minor has registered on the Platform, please notify us immediately via live chat.

12. International Data Transfers

pk888 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services — pk888 ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses that provide a level of protection equivalent to that required under the DPA. pk888 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

13. Changes to This Privacy Policy

pk888 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. Where changes are material, we will notify you via email or a prominent notice on the Platform at least seven (7) days before the changes take effect. The date of the most recent update is displayed at the top of this Policy. Your continued use of the Platform following the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the pk888 Data Protection Officer via our 24/7 live chat support on the Platform. You may also reach us by email at [email protected] — please note this is a plain text address and is not a clickable link. For formal data subject requests, please include your full name, registered email address, and a clear description of your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).