8gl Privacy Policy

1. Who We Are

8gl is the operator of the online gaming platform accessible at 8gl.one, licensed by the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of Philippine data protection law, 8gl is the personal information controller in respect of all personal data collected through the Platform.

If you have any questions about how 8gl handles your personal data, or wish to exercise any of your data subject rights, you may contact our Data Protection Officer at the address provided in Section 12 of this Policy.

2. Personal Data We Collect

2.1 Registration & Account Data

When you register an 8gl account, we collect the following information:

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — access is restricted to individuals 21 years of age and older);
• Philippine mobile number and/or email address;
• Username and encrypted password credentials;
• Residential address in the Philippines.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR requirements and applicable anti-money laundering regulations, 8gl may collect:

• Copies of government-issued identification documents (e.g., Philippine passport, driver's license, UMID, SSS/GSIS ID, PhilSys National ID);
• Proof of address documents;
• Source of funds documentation for high-value accounts;
• Facial biometric data collected during liveness verification checks, where applicable.

2.3 Transaction & Financial Data

8gl records all financial transactions associated with your account, including deposit amounts, withdrawal requests, payment method details (e-wallet identifiers, bank account last digits), and transaction timestamps. Full payment instrument numbers are not stored by 8gl — financial transactions are processed by third-party payment providers who maintain their own PCI-compliant data environments.

2.4 Gaming Activity Data

8gl logs all gaming activity on your account, including games played, bet amounts, game outcomes, session duration, and bonus utilization. This data is necessary for game integrity, dispute resolution, PAGCOR reporting, and responsible gaming monitoring.

2.5 Technical & Device Data

When you access the 8gl Platform, we automatically collect:

• IP address and approximate geolocation (country/region level);
• Device type, operating system, and browser version;
• Session logs, access timestamps, and page interaction data;
• Cookie identifiers and similar tracking technology data (see Section 8).

2.6 Communications Data

If you contact 8gl's support team by live chat, email, or any other channel, we retain records of those communications, including the content of your messages and any files you share, for the purposes of resolving your query and improving our service quality.

3. How We Use Your Personal Data

8gl uses your personal data for the following purposes:

• Account administration: Creating, managing, and maintaining your 8gl account, processing your login credentials, and communicating account-related updates;
• Payment processing: Facilitating deposits and withdrawals through your chosen Philippine payment method (GCash, Maya, BPI, BDO, Metrobank, etc.);
• Regulatory compliance: Meeting 8gl's obligations under PAGCOR regulations, the Anti-Money Laundering Act, and the Philippine Data Privacy Act — including identity verification, transaction monitoring, and regulatory reporting;
• Game integrity and dispute resolution: Investigating disputed game outcomes, detecting and preventing cheating, collusion, and fraud;
• Responsible gaming: Monitoring account activity for indicators of problem gambling behavior and administering self-exclusion and limit tools in accordance with PAGCOR's responsible gaming framework;
• Customer support: Responding to your inquiries, resolving complaints, and improving the quality of our support services;
• Platform security: Detecting and preventing unauthorized account access, fraud, and other security threats;
• Service improvement: Analyzing aggregated and anonymized usage data to improve platform performance, game selection, and user experience;
• Promotions and communications: Sending you bonus offers, promotional updates, and platform news — where you have consented to receive such communications or where we have a legitimate interest in contacting you as an existing customer. You may opt out of marketing communications at any time via your account settings or by contacting support.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, 8gl processes your personal data on the following legal bases:

• Performance of contract: Processing necessary to provide the 8gl Platform services to you under the Terms and Conditions you have accepted;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, anti-money laundering obligations, tax reporting, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and optional features where you have given specific, informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

8gl does not sell your personal data to third parties. We share your data only in the following circumstances:

• Payment service providers: GCash, Maya, BPI, BDO, Metrobank, GrabPay, and other Philippine payment processors receive the minimum data necessary to process your financial transactions;
• Game content providers: Game software providers (such as Pragmatic Play, PG Soft, and Evolution Gaming) may receive your session identifiers and bet data necessary to operate their games within the 8gl platform. These providers are contractually bound to data confidentiality obligations;
• Identity verification providers: Third-party KYC service providers process your identity documents on 8gl's behalf under strict data processing agreements;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory or law enforcement bodies where disclosure is required by law or court order;
• Professional advisers: Legal counsel, auditors, and accountants where necessary for the conduct of 8gl's business, under confidentiality obligations.

All third parties with whom 8gl shares personal data are contractually required to process that data only for specified purposes, to maintain adequate security, and to comply with applicable data protection law.

6. Data Retention

8gl retains your personal data for as long as your account is active and for a period thereafter as required by law and regulatory obligations. Specific retention periods include:

• Account registration and KYC data: retained for a minimum of 5 years following account closure, in compliance with PAGCOR and AMLC requirements;
• Financial transaction records: retained for a minimum of 5 years from the date of each transaction;
• Gaming activity logs: retained for a minimum of 3 years for dispute resolution and audit purposes;
• Customer support communications: retained for 2 years from the date of the interaction;
• Marketing consent records: retained for the duration of the consent and 1 year thereafter.

Where retention beyond these minimum periods is required for ongoing legal proceedings, regulatory investigations, or other legitimate purposes, data will be retained until those purposes are resolved.

7. Security Measures

8gl implements technical and organizational security measures appropriate to the risk associated with processing your personal data. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 8gl Platform;
• Encrypted storage of password credentials using industry-standard hashing algorithms — 8gl staff cannot view your password in plaintext;
• Two-factor authentication (2FA) available to all users via SMS OTP;
• Role-based access controls limiting employee access to personal data to those with a documented operational need;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Incident response procedures for detecting and responding to personal data breaches, including notification to the National Privacy Commission (NPC) and affected users as required under the Data Privacy Act.

Notwithstanding these measures, no data transmission over the internet can be guaranteed to be 100% secure. You are responsible for maintaining the security of your 8gl login credentials on your own devices.

8. Cookies & Tracking Technologies

The 8gl Platform uses cookies and similar tracking technologies to operate core platform functions and to improve your experience. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function — session authentication, security tokens, and load balancing. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Remember your language preference, display settings, and logged-in state across sessions;
• Analytics cookies: Collect anonymized data about how users interact with the Platform to help us identify performance issues and improve the user experience. This data is aggregated and does not identify individual users;
• Marketing cookies: Used to deliver relevant promotions and to measure the effectiveness of 8gl's marketing campaigns. These are only activated where you have provided consent.

You can manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the Platform.

9. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 8gl:

• Right to be informed: To be notified of the data that 8gl collects about you and how it is used — as described in this Privacy Policy;
• Right of access: To request a copy of the personal data that 8gl holds about you;
• Right to rectification: To request correction of inaccurate or incomplete personal data. Some data (such as your registered name and date of birth) can only be corrected through the KYC verification process;
• Right to erasure: To request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal obligation requires its retention;
• Right to object: To object to processing based on legitimate interests, including the processing of your data for direct marketing purposes;
• Right to data portability: To receive your personal data in a structured, commonly used format where processing is based on consent or contract;
• Right to lodge a complaint: To submit a complaint to the National Privacy Commission (NPC) of the Philippines if you believe that 8gl has not handled your personal data in accordance with the Data Privacy Act.

To exercise any of these rights, please contact 8gl's Data Protection Officer using the contact details in Section 12. 8gl will respond to your request within 15 business days. Some requests may be subject to identity verification before processing.

10. Children's Privacy

The 8gl Platform is not directed at children or at individuals under the age of 21. 8gl does not knowingly collect personal data from individuals under 21 years of age. If 8gl becomes aware that personal data has been collected from an underage individual, that account will be closed immediately, associated personal data will be deleted except where retention is required by applicable law, and any winnings generated will be forfeited. If you believe that a minor has registered on the 8gl Platform, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

8gl may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered users via the mobile number or email address on file at least 7 days before taking effect. The "Last updated" date at the top of this Policy reflects the most recent revision. Continued use of the 8gl Platform after the effective date of any revision constitutes your acknowledgment of the updated Policy.

12. Contact & Complaints

For questions about this Privacy Policy, to exercise your data subject rights, or to raise a data privacy complaint, please contact 8gl's Data Protection Officer:

If you are not satisfied with 8gl's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (privacy.gov.ph).