km88ph Privacy Policy

01 Introduction

km88ph ("km88ph", "we", "us", "our") is committed to protecting and respecting the privacy of every Filipino player who uses our platform. This Privacy Policy describes how km88ph collects, uses, stores, shares, and safeguards personal information in connection with the online casino and sports betting services available at km88ph.cam.

This Policy is drafted in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). The DPA grants Philippine residents a comprehensive set of rights over their personal data, all of which are honored by km88ph as described in this document.

This Policy should be read together with the km88ph Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

02 Data Controller Identity

For the purposes of the Philippine Data Privacy Act and this Privacy Policy, the personal data controller is km88ph, the operator of the online gaming platform accessible at km88ph.cam. As the data controller, km88ph determines the purposes and means by which personal data collected through the platform is processed.

km88ph has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and related NPC regulations. The DPO can be contacted at the email address listed in Section 14 of this Policy. All data subject requests, privacy concerns, and breach reports should be directed to the DPO in the first instance.

03 Personal Data We Collect

3.1 Registration and Identity Data

When you create a km88ph account, we collect the following information to establish and verify your identity as required by our Know Your Customer (KYC) obligations:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify the mandatory 21+ age requirement);
• Residential address in the Philippines;
• Email address;
• Philippine mobile number;
• Government-issued identification number and document (e.g., Philippine National ID, passport, driver's license, SSS/GSIS ID);
• Selfie or photo verification image (for remote identity verification).

3.2 Financial Data

To process deposits and withdrawals in Philippine Peso, km88ph collects:

• GCash or PayMaya mobile wallet number;
• Bank account details (account name, account number, bank name) where bank transfer is selected;
• Transaction history including deposit amounts, withdrawal amounts, dates, and reference numbers;
• Source of funds documentation (requested for large transactions as part of AML compliance).

3.3 Platform Usage Data

km88ph automatically records certain technical data when you use the platform:

• IP address and approximate geographic location;
• Device type, operating system, and browser type and version;
• Session data including login timestamps, session duration, and logout events;
• Game history, wagering activity, bet amounts, and win/loss records;
• Navigation paths, feature usage patterns, and interaction logs within the km88ph platform.

3.4 Communications Data

When you contact km88ph's support team, we collect:

• Content of live chat conversations, emails, and any support tickets submitted;
• Metadata associated with those communications (date, time, support agent identifier);
• Feedback, surveys, and voluntary submissions you make to km88ph.

04 How We Use Your Personal Data

km88ph processes your personal data for the following specific purposes:

km88ph does not use your personal data for automated decision-making that produces significant legal effects on you without human review, except where such processing is required for AML compliance.

05 Legal Basis for Processing

km88ph processes personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual Necessity: Processing necessary to perform the contract between you and km88ph — including account operation, payment processing, and game access — is grounded in the contractual relationship established when you accept the km88ph Terms & Conditions.
• Legal Obligation: Processing required to comply with the Anti-Money Laundering Act, PAGCOR regulations, tax laws, and other applicable Philippine legal obligations.
• Legitimate Interests: Processing undertaken for km88ph's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests do not override your rights and freedoms.
• Consent: Processing for optional purposes such as marketing communications, where km88ph relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting prior processing.

06 Data Sharing and Disclosure

6.1 Service Providers and Partners

km88ph may share your personal data with trusted third-party service providers who process data on our behalf under written data processing agreements that require them to maintain appropriate security and confidentiality standards. These include:

• Payment processors and electronic money service providers (GCash, PayMaya, InstaPay operators, participating Philippine banks) — for transaction processing only;
• KYC and identity verification service providers — for document validation and age verification;
• Game software providers — who may receive anonymized session data for technical support and game audit purposes;
• Cloud infrastructure and hosting providers — for platform data storage under appropriate security agreements;
• Customer support platform providers — for management of support ticket systems.

6.2 Regulatory and Legal Disclosure

km88ph will disclose personal data to Philippine regulatory authorities, law enforcement agencies, and courts where required by law or a valid legal process, including but not limited to:

• The Anti-Money Laundering Council (AMLC) pursuant to Republic Act No. 9160;
• PAGCOR in connection with its oversight functions;
• The National Privacy Commission in connection with data breach notifications or investigations;
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) where a valid lawful order is presented.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of km88ph's business or assets, personal data held by km88ph may be transferred to the acquiring entity as part of that transaction. Affected players will be notified of any such transfer and any material changes to the applicable privacy policy.

07 Data Retention

km88ph retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention schedules:

• Account and KYC records: Retained for the lifetime of your km88ph account plus a minimum of 5 years following account closure, in compliance with Philippine AML retention obligations under RA 9160.
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, as required by Philippine tax and AML regulations.
• Platform usage and game history: Retained for 2 years from the date of each session, unless longer retention is required for dispute resolution or regulatory purposes.
• Customer support records: Retained for 3 years from the date of the last interaction.
• Marketing preferences and consent records: Retained for 3 years from the date consent was last given or withdrawn.

Upon expiry of the applicable retention period, km88ph will securely delete or anonymize your personal data in a manner that prevents reconstruction of the original information.

08 Data Security

km88ph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, and disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and km88ph servers is encrypted using TLS 1.2 or higher (HTTPS with 256-bit SSL);
• Encryption at rest: Sensitive data fields including identity documents, payment details, and passwords are encrypted in storage using AES-256 or equivalent standards;
• Access controls: Personal data is accessible only to km88ph personnel who have a legitimate operational need for it, under role-based access controls enforced by authentication systems;
• Two-factor authentication: Available as a security option for all player accounts at km88ph;
• Regular security audits: km88ph conducts periodic vulnerability assessments and penetration tests on its platform infrastructure;
• Staff training: All km88ph personnel with access to personal data receive mandatory privacy and data security training.

In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected players, km88ph will notify the National Privacy Commission and affected individuals within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

09 Cookies and Tracking Technologies

km88ph uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us provide and improve our services. The cookies used by km88ph fall into the following categories:

You can control cookies through your web browser settings. Most browsers allow you to refuse or delete cookies. Disabling strictly necessary cookies will impair your ability to use the km88ph platform. km88ph does not use third-party advertising cookies or cross-site tracking technologies.

10 Minors and Age Policy

If km88ph becomes aware that personal data has been collected from an individual under the age of 21, we will immediately:

• Suspend access to the account pending investigation;
• Delete all personal data collected from the underage individual to the extent permitted by applicable law;
• Return any funds deposited through the account via the original payment method;
• Permanently close the account.

Parents or guardians who believe a minor has created a km88ph account should contact our support team immediately at [email protected]. We will investigate and act on all such reports without delay.

11 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by km88ph. To exercise any of these rights, contact our Data Protection Officer as described in Section 14.

km88ph will respond to all rights requests within 15 business days of receipt. We may request additional identifying information to verify your identity before fulfilling a request. Where a request is refused, we will provide a written explanation stating the grounds for refusal.

12 International Data Transfers

Some of km88ph's service providers — including cloud infrastructure providers and game software vendors — may be located outside the Philippines. Where personal data is transferred to recipients in countries that do not provide an equivalent level of data protection to the Philippine DPA, km88ph ensures appropriate safeguards are in place, which may include:

• Standard contractual clauses approved by the National Privacy Commission or their equivalent;
• Binding corporate rules where the recipient is part of km88ph's corporate group;
• Your explicit consent for the specific transfer.

No such transfer will involve the sale or commercial exploitation of your personal data. Any transfer is limited to what is strictly necessary for the delivery of the km88ph platform services.

13 Changes to This Privacy Policy

km88ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the NPC. When material changes are made, km88ph will:

• Update the "Last Updated" date at the top of this document;
• Post the revised Policy at km88ph.cam/privacy-policy;
• Where appropriate, notify registered players via email or in-platform notification of significant changes.

Continued use of the km88ph platform following publication of a revised Policy constitutes acceptance of the revised terms. If you do not agree to any material changes, you should discontinue use of the platform and contact us to close your account.

14 Contact & Data Protection Officer

For all data privacy queries, rights requests, concerns, or complaints relating to this Privacy Policy or km88ph's data processing practices, please contact our Data Protection Officer through the following channels:

• Email: [email protected] — mark your subject line "DATA PRIVACY REQUEST" for priority routing to the DPO (plain text only — not a clickable link)
• Live Chat: Available 24/7 on the km88ph platform in English and Tagalog — request to speak with the Data Protection team
• Response Time: DPO responses are provided within 5 business days for general queries and within 15 business days for formal rights requests

If you are dissatisfied with km88ph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to contact the NPC is available through official Philippine government channels.