ki88 Privacy Policy

1. Who We Are

ki88 ("ki88," "we," "us," or "our") operates the online casino platform accessible at ki88.one, offering live dealer games, slots, sports betting, bingo, and related gaming services to players based in the Philippines. ki88 acts as the Personal Information Controller in respect of the personal data collected through the Platform, as defined under the Data Privacy Act of 2012 (Republic Act No. 10173).

We take our obligations as a Personal Information Controller seriously. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. Please read this policy carefully to understand our practices regarding your personal data and how we will treat it.

2. Personal Data We Collect

ki88 collects personal data that is necessary for the provision of our services, compliance with legal obligations, and the protection of our legitimate business interests. The categories of personal data we collect include:

We do not collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for regulatory compliance, and only with your explicit consent where applicable.

3. How We Collect Your Data

ki88 collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated Technologies: As you interact with the Platform, we automatically collect Technical Data and Usage Data through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for more details on our cookie practices.
• Third-Party Sources: We may receive data about you from third parties, including identity verification service providers, payment processors (such as GCash and Maya), fraud prevention agencies, and publicly available sources, where permitted by law.
• Regulatory Sources: In certain circumstances, we may receive data from PAGCOR or other regulatory bodies in connection with our compliance obligations.

4. How We Use Your Personal Data

ki88 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your ki88 player account, including processing your registration and verifying your identity.
• Service Delivery: To provide you with access to our games, live dealer tables, sports betting, bingo, and all other Platform features.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card, and to maintain accurate financial records.
• Legal and Regulatory Compliance: To comply with our obligations under Philippine law, including the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and PAGCOR regulatory requirements. This includes conducting KYC checks, filing suspicious transaction reports where required, and maintaining records for the legally mandated retention periods.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to enforce deposit limits and self-exclusion orders, and to provide responsible gaming support in accordance with our Responsible Gaming policy.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, cheating, and other prohibited conduct.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing and Promotions: To send you information about ki88 promotions, bonuses, and new features, where you have consented to receive such communications. You may withdraw your marketing consent at any time by contacting support.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, features, and user experience of the Platform.
• Legal Claims: To establish, exercise, or defend legal claims in connection with the Platform or your account.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, ki88 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of our contract with you (i.e., the ki88 Terms & Conditions), including account management, game provision, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including AML obligations, PAGCOR requirements, and tax reporting duties.
• Legitimate Interests: Processing is necessary for ki88's legitimate interests, including fraud prevention, platform security, and business analytics, provided these interests are not overridden by your data protection rights.
• Consent: For certain processing activities, such as marketing communications and the use of non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

ki88 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and banking partners require certain personal and financial data to process your transactions securely.
• Identity Verification Providers: Third-party KYC and AML service providers who assist us in verifying your identity and complying with regulatory requirements.
• Game Providers: Licensed game software providers whose games are hosted on the ki88 Platform may receive limited technical data necessary for game delivery and integrity monitoring.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where we are legally required to disclose information.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by law or court order, or where we reasonably believe disclosure is necessary to prevent fraud, illegal activity, or harm.
• Professional Advisors: Lawyers, auditors, and accountants who provide professional services to ki88, subject to confidentiality obligations.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.

7. Data Retention

ki88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR requirements and AML obligations under Philippine law.
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and its implementing regulations.
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Communications Data: Support correspondence and chat transcripts are retained for two (2) years from the date of the interaction.
• Technical and Usage Data: Retained for up to twelve (12) months for security and analytics purposes.

Where personal data is no longer required, ki88 will securely delete or anonymize it in accordance with our data disposal procedures.

8. Cookies and Tracking Technologies

ki88 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security functions. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. These are only set with your consent.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Marketing Cookies: Used to deliver relevant promotional content about ki88 offers and features. These are only set with your explicit consent and can be withdrawn at any time.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies in your browser, refer to your browser's help documentation.

9. Data Security

ki88 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the ki88 Platform is encrypted using industry-standard SSL/TLS protocols.
• Access Controls: Access to personal data is restricted to authorized ki88 personnel and service providers on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Secure Data Storage: Personal data is stored on secure servers with physical and logical access controls, firewalls, and intrusion detection systems.
• Regular Security Audits: ki88 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ki88 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ki88:

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children's Privacy

The ki88 Platform is strictly intended for adults aged 21 years and older in accordance with Philippine gambling regulations. ki88 does not knowingly collect personal data from individuals under the age of 21. If we become aware that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered on the ki88 Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

12. Updates to This Privacy Policy

ki88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Privacy Policy was most recently revised. Your continued use of the ki88 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this page periodically to stay informed about how we protect your data.

13. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or ki88's data processing practices, please contact our designated Data Protection Officer (DPO):

You also have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.