WK8PH Privacy Policy

1 Introduction

WK8PH ("wk8ph," "the Company," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use the wk8ph platform, including the website at wk8ph.app and any associated mobile applications (collectively, "the Platform" or "the Service").

This Privacy Policy describes the types of personal information we collect from players and visitors, the purposes for which that information is used, the circumstances under which it may be shared with third parties, and the rights available to you as a data subject under applicable Philippine law.

This Privacy Policy should be read in conjunction with the wk8ph Terms and Conditions and Responsible Gaming Policy, both of which are available on the Platform. By registering on wk8ph or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, WK8PH is the data controller responsible for the personal information collected through the Platform. As data controller, wk8ph determines the purposes and means of processing your personal data.

wk8ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection laws and for handling data subject requests and complaints. Enquiries relating to data privacy may be directed to our support team, who will route them to the appropriate internal contact.

3 Personal Data We Collect

3.1 Registration and Account Data

When you create a wk8ph account, we collect the personal information you provide during the registration process. This includes your full legal name, date of birth, residential address, email address, and mobile number. This information is required to verify your identity, confirm your eligibility to use the Platform, and maintain your account.

3.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations under Philippine anti-money laundering regulations, wk8ph may collect copies of government-issued identification documents (such as a Philippine passport, PhilSys National ID, SSS ID, or driver's licence), proof of residential address, and proof of ownership of payment methods used on the Platform.

3.3 Financial and Transaction Data

wk8ph collects records of all financial transactions conducted through the Platform, including deposit amounts, withdrawal requests, payment method details (excluding full card numbers, which are not stored by wk8ph), transaction timestamps, and account balance history. This data is necessary for the operation of the Platform and for compliance with financial regulations.

3.4 Gaming Activity Data

We collect data relating to your gaming activity on wk8ph, including the games you play, bet amounts, game outcomes, session durations, and wagering history. This data is used to operate the Platform, resolve disputes, detect fraud, and support responsible gaming monitoring.

3.5 Technical and Device Data

When you access the wk8ph platform, we automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, referring URLs, and pages visited. This data helps us maintain platform security, optimise performance, and detect suspicious activity.

3.6 Communications Data

If you contact wk8ph support, participate in surveys, or communicate with us through any channel, we retain records of those communications, including the content of messages and any attachments provided.

4 How We Collect Your Data

wk8ph collects personal data through the following means:

• Directly from you: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions on wk8ph.
• Automatically: Technical and device data collected automatically when you access the Platform, through cookies, web beacons, log files, and similar tracking technologies.
• From third parties: Identity verification data from KYC service providers; fraud detection signals from security partners; payment confirmation data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank.
• From publicly available sources: Where permitted by law, wk8ph may supplement your profile with information from publicly available sources for the purposes of fraud prevention and regulatory compliance.

5 How We Use Your Personal Data

wk8ph uses the personal data we collect for the following purposes:

• Account creation and management: To register your wk8ph account, verify your identity and eligibility, and maintain your account throughout your relationship with us.
• Platform operation: To provide access to games, process bets and payouts, manage your account balance, and deliver the core services of the wk8ph platform.
• Payment processing: To process deposits and withdrawals via your chosen payment method, including GCash, PayMaya, and Philippine bank transfers.
• Legal and regulatory compliance: To fulfil our obligations under Philippine anti-money laundering laws, PAGCOR regulatory requirements, and the Data Privacy Act of 2012, including KYC verification and transaction monitoring.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats to the wk8ph platform.
• Responsible gaming: To monitor gaming patterns, identify potentially problematic behaviour, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance with your wk8ph account.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications.
• Platform improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the wk8ph platform.

6 Legal Basis for Processing

wk8ph processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your wk8ph account, process transactions, and deliver the services you have registered for.
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations, PAGCOR licensing requirements, and tax reporting duties.
• Legitimate interests: Processing carried out for the legitimate interests of wk8ph, including fraud prevention, platform security, and improving our services, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Personal Data

7.1 Service Providers

wk8ph shares personal data with carefully selected third-party service providers who assist in operating the Platform. These include payment processors (such as GCash and PayMaya), identity verification and KYC providers, fraud detection and cybersecurity partners, cloud hosting and infrastructure providers, and customer support platform providers. All service providers are contractually bound to process your data only on wk8ph's instructions and in accordance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities

wk8ph may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent authorities where required to do so by applicable law, court order, or regulatory directive. Such disclosures will be made only to the extent required and in accordance with applicable legal procedures.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of wk8ph's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

7.4 No Sale of Personal Data

wk8ph does not sell, rent, or otherwise transfer your personal data to third parties for their own independent marketing or commercial purposes. Any sharing of data is limited to what is necessary for the purposes described in this Privacy Policy.

8 Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit the wk8ph platform. They allow the Platform to recognise your device, remember your preferences, maintain your session, and collect analytical data about how the Platform is used.

8.2 Types of Cookies Used by wk8ph

• Strictly necessary cookies: Essential for the operation of the wk8ph platform, including maintaining your login session and enabling secure transactions. These cannot be disabled.
• Functional cookies: Used to remember your preferences and settings on wk8ph, such as language preferences and display options.
• Analytical cookies: Used to collect aggregated, anonymised data about how players use the wk8ph platform, helping us identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats on the Platform.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the wk8ph platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate correctly.

9 Data Security

wk8ph implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the wk8ph platform;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls limiting internal access to personal data to authorised personnel only;
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform;
• Multi-factor authentication options for player accounts;
• Continuous monitoring for suspicious activity and potential data breaches.

While wk8ph takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, wk8ph will notify you and the National Privacy Commission (NPC) in accordance with the requirements of the Data Privacy Act of 2012.

10 Data Retention

wk8ph retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your wk8ph account and for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• Gaming activity data: Retained for the duration of your account and for a period thereafter as required by PAGCOR regulatory obligations.
• Communications data: Retained for up to three (3) years from the date of the communication, unless a longer period is required for dispute resolution or legal proceedings.
• Technical and device data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.

When personal data is no longer required for any of the above purposes, wk8ph will securely delete or anonymise it in accordance with our data retention and disposal procedures.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights with respect to your personal data held by wk8ph:

• Right to be informed: The right to be informed of how your personal data is being collected and processed by wk8ph, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data wk8ph holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data wk8ph holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to wk8ph's legal and regulatory retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on wk8ph's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe wk8ph has processed your personal data in violation of applicable law.

To exercise any of the above rights, please contact the wk8ph support team. We will respond to all data subject requests within thirty (30) days of receipt, or within such other timeframe as required by applicable law. We may need to verify your identity before processing your request.

12 Children's Privacy

The wk8ph platform is strictly intended for individuals who are at least twenty-one (21) years of age. wk8ph does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is a firm condition of registration and use of the Platform, in compliance with Philippine gambling regulations.

If wk8ph becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on wk8ph or that wk8ph holds personal data relating to a minor, please contact our support team immediately.

13 International Data Transfers

wk8ph primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and certain KYC and fraud detection partners — may process data in other countries. Where personal data is transferred outside the Philippines, wk8ph ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and its implementing rules.

Such safeguards may include contractual clauses requiring the recipient to maintain data protection standards equivalent to those applicable in the Philippines, or reliance on the recipient's participation in recognised data protection frameworks. By using the wk8ph platform, you acknowledge and consent to such transfers where necessary for the operation of the Service.

14 Changes to This Privacy Policy

wk8ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or the features of the Platform. The date of the most recent revision is indicated at the top of this document.

Where changes are material, wk8ph will provide reasonable advance notice via the Platform or by email to your registered address. Your continued use of the wk8ph platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you should cease using the Platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how wk8ph is protecting your personal information.

15 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way wk8ph processes your personal data, please contact our support team through the following channel:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that wk8ph has processed your personal data in a manner that violates the Data Privacy Act of 2012. Information about the NPC and its complaint procedures is publicly available through official Philippine government channels.