ki88 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ki88 ("ki88," "we," "us," or "our"), the operator of the online gaming platform at ki88.onl, collects, uses, stores, discloses, and protects the personal information of users ("you" or "your") who access or register on the ki88 platform.

ki88 is committed to protecting your personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. This Policy also reflects the data protection obligations imposed on ki88 as a PAGCOR-licensed online gaming operator.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, ki88 is the personal information controller in respect of all personal data collected through the ki88.onl platform. Our designated Data Protection Officer (DPO) oversees compliance with this Policy and with applicable data protection legislation. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration and Identity Data

When you register for a ki88 account, we collect: your full legal name, date of birth, Philippine mobile number, email address, and login credentials (username and hashed password). We do not store your password in recoverable form.

3.2 Identity Verification (KYC) Data

In compliance with PAGCOR licensing requirements and AMLC regulations, we collect copies of government-issued Philippine identification documents (e.g., PhilSys National ID, UMID, SSS card, driver's license, or passport), selfie photographs for liveness verification, and proof of address where required.

3.3 Financial Data

We collect records of your deposit and withdrawal transactions, including the payment method used (e.g., GCash account reference, Maya wallet reference, bank account details), transaction amounts in Philippine Peso, and timestamps. ki88 does not store full card numbers or bank login credentials.

3.4 Gaming Activity Data

We maintain logs of all games played on ki88, including game type, bet amounts, outcomes, session duration, and bonus usage. This data is retained for regulatory audit purposes and for the administration of responsible gaming tools.

3.5 Technical and Device Data

We automatically collect technical information when you access ki88, including: IP address, device type and operating system, browser type and version, mobile network provider (e.g., Smart, Globe, DITO), session timestamps, and page interaction data.

3.6 Communications Data

We retain records of communications between you and ki88 customer support, including live chat transcripts, email correspondence, and any documents or screenshots you submit in support of a complaint or account query.

4. How We Use Your Personal Data

ki88 processes your personal data for the following purposes:

• Account creation and management — to register your account, authenticate your identity at login, and maintain your account in good standing.
• Identity verification and KYC compliance — to verify your age (21+ requirement) and identity in accordance with PAGCOR and AMLC obligations.
• Payment processing — to facilitate deposits and withdrawals via GCash, Maya, BPI, BDO, and other accepted Philippine payment methods.
• Game delivery and fairness — to provide access to our game lobby, record game results, and maintain audit logs as required by PAGCOR.
• Responsible gaming — to monitor gaming patterns, apply deposit limits you have set, enforce self-exclusion periods, and identify potentially problematic gambling behaviour.
• Customer support — to respond to your queries, resolve disputes, and administer formal complaint procedures.
• Marketing and promotions — to send you bonus offers and promotional communications where you have consented to receive them. You may withdraw marketing consent at any time via your account settings or by contacting support.
• Legal and regulatory compliance — to meet our obligations to PAGCOR, the AMLC, the NPC, and other Philippine regulatory bodies, and to respond to lawful requests from law enforcement authorities.
• Platform security and fraud prevention — to detect and investigate suspected fraud, collusion, money laundering, underage access, and other prohibited conduct.

5. Legal Bases for Processing

ki88 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our obligations under your account agreement with ki88 (Sections 12(b) and 13(b) of RA 10173).
• Legal obligation — processing necessary for compliance with PAGCOR licensing conditions, AMLC reporting requirements, and other applicable Philippine law (Section 12(c) and 13(c)).
• Legitimate interests — processing for fraud detection, platform security, and responsible gaming monitoring, where ki88's interests do not override your fundamental rights (Section 12(f) and 13(f)).
• Consent — processing for marketing communications and optional analytics features, where you have given specific, informed, and freely given consent (Section 12(a) and 13(a)). Consent may be withdrawn at any time without prejudice to the lawfulness of prior processing.

6. Data Sharing and Disclosure

ki88 does not sell your personal data. We may share your data with the following categories of recipients for the purposes described in Section 4:

• Game technology providers (e.g., JILI, PG Soft, Fachai) — limited to the game session data required to deliver and audit game results.
• Payment processors — your payment reference data is shared with GCash, Maya, BPI, BDO, and other payment gateways solely to process financial transactions.
• Identity verification providers — KYC document data is shared with third-party verification services engaged by ki88 to conduct identity and document checks.
• Regulatory authorities — PAGCOR, the AMLC, the NPC, and other Philippine government agencies, where disclosure is required by law or regulation or pursuant to a lawful order.
• Law enforcement — in response to a valid subpoena, court order, or other lawful demand from Philippine law enforcement authorities.
• Professional advisers — lawyers, auditors, and compliance consultants engaged by ki88, subject to professional confidentiality obligations.

All third parties with whom ki88 shares personal data are required to maintain appropriate technical and organisational security measures and to process data only in accordance with ki88's instructions.

7. Cookies and Tracking Technologies

ki88.onl uses cookies and similar technologies to operate the platform, maintain your logged-in session, and analyse site usage. The categories of cookies we use are:

• Strictly necessary cookies — required for the platform to function, including session authentication tokens. These cannot be disabled.
• Performance cookies — anonymous analytics data used to understand how users navigate ki88.onl and identify technical issues.
• Functional cookies — cookies that remember your preferences (e.g., language, display settings) to improve your experience on ki88.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the ki88 platform, including the ability to remain logged in.

8. Data Retention

ki88 retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by Philippine law and regulation:

• Account and KYC records — retained for a minimum of five (5) years after account closure, as required by AMLC regulations.
• Transaction records — retained for a minimum of five (5) years from the date of each transaction.
• Gaming logs — retained for a minimum of three (3) years, or longer where required by PAGCOR audit obligations.
• Support and communications records — retained for two (2) years from the date of the last communication, or until a dispute is fully resolved.

Upon expiry of applicable retention periods, ki88 securely deletes or anonymises personal data in accordance with NPC guidelines.

9. Security Measures

ki88 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and ki88.onl
• Hashing of all stored passwords using industry-standard cryptographic algorithms (bcrypt)
• Two-factor authentication (2FA) available to all ki88 account holders
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of the ki88 platform
• Intrusion detection and monitoring systems

While ki88 takes all reasonable steps to protect your data, no internet-based platform can guarantee absolute security. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ki88 will notify the NPC and affected users in accordance with the Data Privacy Act's breach notification requirements.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ki88:

• Right to be informed — the right to receive clear information about how ki88 processes your personal data (fulfilled by this Policy).
• Right of access — the right to request a copy of the personal data ki88 holds about you.
• Right to rectification — the right to request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking — the right to request deletion or suspension of processing of your personal data, subject to overriding legal obligations (including regulatory retention requirements).
• Right to object — the right to object to processing based on legitimate interests, including direct marketing. Objection to marketing processing will be acted upon immediately.
• Right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to damages — the right to claim compensation for damages sustained as a result of a violation of your data privacy rights under RA 10173.

To exercise any of the above rights, contact ki88's Data Protection Officer using the details in Section 14. ki88 will respond to verifiable data subject requests within thirty (30) days.

11. Children's Privacy

The ki88 platform is strictly restricted to individuals aged 21 years and above. ki88 does not knowingly collect personal data from persons under 21 years of age. Any account found to belong to a minor will be immediately closed and all associated personal data deleted, subject to any mandatory retention obligations. If you believe that a minor has registered on ki88, please contact our support team immediately.

12. Cross-Border Data Transfers

Some of the third parties with whom ki88 shares data (including game technology providers and cloud infrastructure providers) may process personal data outside of the Philippines. Where such transfers occur, ki88 ensures that appropriate safeguards are in place as required by Section 21 of the Data Privacy Act and the NPC's guidelines on cross-border data transfers, including contractual data processing agreements incorporating the NPC's standard contractual clauses or equivalent protections.

13. Changes to This Policy

ki88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered ki88 account holders via their registered contact details with reasonable prior notice. The effective date at the top of this document indicates when the current version entered into force. We encourage you to review this Policy periodically. Continued use of the ki88 platform following the effective date of any update constitutes acceptance of the revised Policy.

14. Contact the Data Protection Officer

For all data privacy enquiries, data subject rights requests, or to report a suspected data breach, please contact ki88's Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that ki88 has violated your data privacy rights. NPC complaint procedures are available through the NPC's official channels.