p898k Privacy Policy

1 Data Controller

p898k, operating at https://p898k.org under a PAGCOR license, is the data controller responsible for the personal information collected through this platform. As a PAGCOR-licensed operator, p898k is bound by both the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules enforced by the National Privacy Commission (NPC). All data practices described in this policy are carried out in accordance with those obligations.

For privacy-related inquiries, including requests to exercise your data subject rights, please contact p898k's Data Protection Officer (DPO) via the contact details in Section 14 of this policy.

2 Personal Data We Collect

p898k collects personal data through your interactions with the platform. The categories of data collected include:

p898k does not collect sensitive personal data beyond what is required for PAGCOR-mandated KYC and AMLA compliance. p898k does not collect payment card numbers; all payment processing for cards (if applicable) is handled by third-party PCI-DSS certified payment processors who do not share full card data with p898k.

3 How We Use Your Personal Data

p898k processes your personal data for the following purposes:

• Account management: Creating and maintaining your p898k account, authenticating your identity at login, and enabling access to all platform features.
• KYC and age verification: Verifying your identity and confirming that you meet the 21+ age requirement mandated by PAGCOR before allowing gameplay.
• Payment processing: Processing deposits via GCash, PayMaya, BPI, BDO, and Metrobank, and disbursing withdrawals to your verified payment method.
• AMLA compliance: Monitoring transactions for anti-money laundering purposes as required of PAGCOR licensees under the Anti-Money Laundering Act.
• Customer support: Responding to queries, resolving disputes, and providing technical assistance via live chat, email, Viber, or Messenger.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviours and enforcing self-exclusion or deposit limit settings you have activated.
• Fraud prevention and security: Detecting and preventing unauthorized account access, bonus abuse, multi-accounting, and other fraudulent activities.
• Platform improvement: Analysing aggregated usage data to improve the p898k platform, game lobby, payment flows, and mobile experience.
• Marketing communications: Sending promotional offers, bonus notifications, and event updates to players who have opted in. You may withdraw consent at any time via your account notification settings.
• Regulatory reporting: Submitting required reports to PAGCOR and the Anti-Money Laundering Council (AMLC) as mandated by Philippine law.

4 Legal Basis for Processing

p898k processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations under the p898k Terms and Conditions you accepted upon registration — including account management, payment processing, and gameplay services.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, NPC data protection requirements, and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming oversight — where our interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications, where you have explicitly opted in. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing & Third Parties

p898k does not sell your personal data to third parties. We share data only in the following limited circumstances:

• Payment processors: GCash (GXI), PayMaya (Voyager Innovations), and banking partners receive the minimum data required to process transactions. These providers are contractually bound to handle data in compliance with Philippine data protection law.
• KYC verification providers: Identity verification platforms that process government ID scans and liveness checks on p898k's behalf. These providers do not retain your documents beyond the verification period.
• Game providers: JILI, PG Soft, and other licensed game providers receive a pseudonymous player identifier and session data for the purpose of delivering game content and calculating outcomes. They do not receive your name, contact details, or financial information.
• Regulatory authorities: PAGCOR, the AMLC, the NPC, and other Philippine government agencies — where legally required to disclose.
• Law enforcement: Where required by valid court order, subpoena, or law enforcement request under Philippine law.

All third-party data processors engaged by p898k are subject to data processing agreements that impose obligations at least equivalent to those in this policy.

6 Data Retention

p898k retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and transaction records: Minimum 5 years from account closure, as required under PAGCOR licensing and AMLA regulations.
• KYC documentation: Minimum 5 years from account closure or last transaction, per AMLC requirements.
• Support correspondence: 3 years from the date of the interaction.
• Marketing consent records: Until consent is withdrawn, plus 1 year for audit purposes.
• Technical and log data: 12 months from the date of collection, unless required for active fraud investigations.

Upon expiry of the applicable retention period, data is securely deleted or anonymised in accordance with NPC-approved data disposal procedures.

7 Data Security

p898k implements technical and organisational security measures appropriate to the sensitivity of the data processed. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the p898k platform.
• Encrypted storage of passwords using industry-standard one-way hashing algorithms. p898k never stores plaintext passwords.
• Role-based access controls ensuring that only authorised personnel can access player data, limited to the minimum necessary for their job function.
• Regular security audits and penetration testing of the p898k platform infrastructure.
• Incident response procedures aligned with NPC breach notification requirements under the Data Privacy Act.
• Two-factor authentication available to all players and required for all p898k administrative accounts.

Despite these measures, no platform can guarantee absolute security. In the event of a data breach affecting your rights, p898k will notify the NPC within 72 hours and affected players without undue delay, in accordance with applicable law.

8 Cookies & Tracking Technologies

p898k uses cookies and similar technologies to operate the platform, remember your preferences, maintain your login session, and analyse platform usage. The types of cookies used include:

• Strictly necessary cookies: Required for the platform to function. These cannot be disabled without breaking core features such as login session management and the game lobby.
• Functional cookies: Remember your language and display preferences across sessions.
• Analytics cookies: Collect aggregated data on how visitors use p898k (pages visited, session duration, error events). This data is used to improve the platform and is not linked to individual identities.
• Marketing cookies: Used only where you have explicitly consented, to personalise promotional offers shown within the p898k platform. p898k does not use third-party advertising networks.

You may manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will prevent p898k login and core platform functionality.

9 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by p898k:

• Right to be informed: To know what personal data p898k holds about you and how it is processed.
• Right of access: To request a copy of the personal data p898k holds about you.
• Right to rectification: To request correction of inaccurate or incomplete personal data.
• Right to erasure: To request deletion of your personal data, subject to overriding legal retention obligations (e.g., AMLA, PAGCOR).
• Right to data portability: To receive your personal data in a structured, commonly used format.
• Right to object: To object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: To withdraw marketing consent at any time without affecting prior lawful processing.
• Right to file a complaint: To lodge a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your data rights have been violated.

To exercise any of the above rights, contact p898k's DPO using the details in Section 14. p898k will respond to verified requests within 15 business days.

10 Minors & Age Restriction

p898k strictly prohibits access by individuals under the age of 21. p898k does not knowingly collect personal data from anyone under 21. If p898k discovers or is notified that a registered account belongs to a person under 21, the account will be immediately suspended, all associated data will be securely deleted (to the extent not required for regulatory retention), and any deposits will be returned via the original payment method after verification.

Parents or guardians who believe a minor has registered at p898k should contact support immediately via Live Chat or the contact details in Section 14.

11 International Data Transfers

Certain third-party service providers engaged by p898k — including game providers and KYC verification platforms — may process data outside the Philippines. In all such cases, p898k ensures that appropriate contractual safeguards are in place, including data processing agreements that require the recipient to maintain data protection standards at least equivalent to those required by Philippine law. p898k does not transfer data to countries or organisations that the NPC has designated as lacking adequate protection without ensuring appropriate additional safeguards.

12 Third-Party Links

The p898k platform may contain links to third-party websites or services (for example, within game content or promotional materials). p898k is not responsible for the privacy practices of any third-party website. This Privacy Policy applies solely to data collected through https://p898k.org and the p898k mobile application. We encourage you to review the privacy policies of any third-party sites you visit.

13 Changes to This Privacy Policy

p898k may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or platform updates. Material changes will be communicated via a prominent notice on the p898k platform at least 7 days before taking effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of p898k after the effective date of a revised policy constitutes your acceptance of the updated terms.

14 Contact & Data Protection Officer

For any privacy-related queries, data subject rights requests, or to contact the p898k Data Protection Officer, please use the following channels:

• Email: [email protected] — subject line: "Privacy / DPO Request"
• Live Chat: Available 24/7 on the p898k platform — ask to be connected to the Privacy/DPO team
• Viber / Messenger: p898k.support

p898k will acknowledge your request within 3 business days and provide a substantive response within 15 business days. For complaints that cannot be resolved directly, you may refer the matter to the National Privacy Commission (NPC) of the Philippines.