a8club Privacy Policy

This Privacy Policy ("Policy") is published by a8club ("a8club", "we", "us", or "our"), the operator of the online casino and sports betting platform accessible at https://a8club.net. This Policy applies to all registered players, visitors, and users of the a8club platform, website, mobile interface, and any related services (collectively, the "Platform").

a8club is committed to protecting the privacy and personal data of every user in strict accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. Where applicable, we also align our practices with internationally recognised data protection principles.

This Policy explains:

• What personal data a8club collects from you and why;
• How that data is processed, stored, and protected;
• With whom your data may be shared and under what conditions;
• How long we retain your data; and
• What rights you hold over your personal data and how to exercise them.

By registering an account or continuing to use the a8club Platform, you acknowledge that you have read, understood, and consented to this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.

a8club collects only the personal data that is necessary for the operation of a licensed online gaming platform, the fulfilment of our regulatory obligations, and the delivery of a safe, personalised player experience. The categories of personal data we collect are described in the table below.

We do not collect sensitive personal data beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data except where a selfie-with-ID is specifically requested during KYC review.

a8club collects personal data through the following channels:

• Direct submission: Information you provide during account registration, KYC document upload, deposit and withdrawal requests, live chat, email support correspondence, and promotional opt-in forms.
• Automated collection: Technical and behavioural data collected automatically when you access or use the Platform, including via cookies, web beacons, server logs, and similar tracking technologies (see Section 7).
• Third-party sources: Identity verification data from licensed KYC service providers; transaction data from payment processors such as GCash, Maya, and partner banks; fraud-screening data from security service providers.
• Game providers: Aggregated gaming activity data from licensed third-party game providers whose software operates on the a8club Platform.
• Regulatory sources: Self-exclusion lists and player watch lists maintained by PAGCOR or other recognised gaming authorities.

a8club processes your personal data only for legitimate, specified purposes that are proportionate to the data collected. We use your data for the following purposes:

1. Account creation and management: To register your a8club account, verify your identity and age (21+ requirement), maintain your account settings, and process account closure requests.
2. Platform operation: To provide access to casino games, sports betting, and all features of the a8club Platform in accordance with your registered account.
3. Payment processing: To process deposits via GCash, Maya, BPI, BDO, Metrobank, and other supported methods, and to fulfil withdrawal requests to your registered payment accounts.
4. Regulatory compliance: To fulfil our obligations under PAGCOR licensing conditions, the Data Privacy Act of 2012, the Anti-Money Laundering Act, and all other applicable Philippine laws and regulations.
5. Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, money laundering, and other prohibited conduct on the Platform.
6. Responsible gaming: To monitor gaming activity patterns, enforce deposit limits and self-exclusion requests, identify potentially problematic gambling behaviour, and provide appropriate support and interventions.
7. Customer support: To respond to your queries, resolve disputes, process complaints, and maintain records of your support interactions.
8. Marketing and promotions: To send you promotional offers, bonus notifications, tournament invitations, and platform updates — but only where you have provided explicit consent to receive such communications. You may withdraw this consent at any time.
9. Platform improvement: To analyse aggregated usage data, conduct A/B testing, optimise the user experience, and develop new platform features.
10. Legal proceedings: To establish, exercise, or defend legal claims in the event of disputes, regulatory investigations, or court proceedings.

Under the Data Privacy Act of 2012, a8club processes your personal data on one or more of the following lawful bases:

• Consent: You have given clear, freely provided, specific, and informed consent to the processing of your personal data for one or more specific purposes — primarily for marketing communications and optional platform features.
• Contractual necessity: Processing is necessary for the performance of the Terms & Conditions contract between you and a8club — including account registration, payment processing, and game access.
• Legal obligation: Processing is required for a8club to comply with its obligations under Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate interests: Processing is necessary for the purposes of a8club's legitimate interests — such as fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your fundamental rights and freedoms.
• Vital interests: In limited circumstances, processing may be necessary to protect interests that are essential to your safety or the safety of another person, particularly in the context of responsible gaming interventions.

a8club does not share your personal data with third parties except in the following specific and controlled circumstances:

• Payment processors: Your payment details are shared with licensed payment service providers (e.g., GCash, Maya, Visa/Mastercard networks, BancNet) solely for the purpose of processing your deposit and withdrawal transactions.
• KYC and identity verification providers: Your identity documents and verification data are shared with licensed third-party KYC service providers operating under binding data processing agreements with a8club.
• Game providers: Technical identifiers (not your full personal profile) may be shared with licensed game providers to facilitate game session management and dispute resolution.
• Regulatory authorities: a8club is obligated to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities when required by law, court order, or regulatory direction.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by a8club may access player data strictly as necessary for the provision of their professional services, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or transfer of a8club's business operations, player data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.

All third parties with whom a8club shares personal data are required to handle that data in accordance with applicable Philippine data privacy laws and under contractual obligations that provide a standard of protection at least equivalent to that described in this Policy.

a8club uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the a8club website. We use the following types of cookies:

You may manage your cookie preferences at any time through the cookie settings panel available on the a8club Platform. Please note that disabling strictly necessary or functional cookies may impair the operation of certain Platform features, including your ability to log in and maintain an active game session.

a8club retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR licensing conditions. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with a8club's data destruction procedures. Anonymised and aggregated data may be retained indefinitely for statistical and analytical purposes, as it no longer constitutes personal data.

a8club takes the security of your personal data seriously and implements a comprehensive range of technical and organisational security measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction.

Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmissions between your device and the a8club Platform, ensuring that your login credentials, payment details, and personal information are never transmitted in plain text.
• Encrypted data storage for sensitive personal data and KYC documents stored on a8club's secure servers, including encryption at rest using industry-standard algorithms.
• Access controls limiting access to personal data to only those a8club personnel and authorised third parties who have a legitimate need to process it, governed by role-based access permissions.
• Multi-factor authentication (MFA) available for player accounts to provide an additional layer of protection beyond your password.
• Intrusion detection and prevention systems monitoring the a8club Platform for suspicious activity, DDoS attacks, and unauthorised access attempts on a continuous basis.
• Regular security audits and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities.
• Staff training on data privacy obligations and security protocols for all a8club employees who handle personal data.

While a8club implements robust security controls, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying a8club immediately if you suspect any unauthorised access to your account.

As a data subject under the Data Privacy Act of 2012, you hold the following rights in respect of your personal data held by a8club. You may exercise any of these rights by contacting our Data Protection Officer (see Section 15).

a8club will respond to all data subject rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you of the extension and reasons.

We may need to verify your identity before fulfilling any data subject rights request to prevent unauthorised access to your personal data by third parties.

a8club implements robust age verification measures at the point of registration and during KYC review to prevent underage individuals from accessing the Platform. If a8club discovers or is notified that a registered account belongs to a person under 21 years of age, the account will be immediately suspended and all associated funds will be handled in accordance with our Terms & Conditions and applicable PAGCOR guidelines.

If you are a parent or guardian and believe that your child has registered an account on the a8club Platform, please contact our support team immediately at [email protected]. We will investigate and take prompt action to close the account.

The a8club Platform may display links to or integrate with third-party services, including licensed game providers, payment processors, and customer support tools. These third-party services operate under their own privacy policies, which are separate from and independent of this Policy.

a8club is not responsible for the privacy practices or content of any third-party service provider. We encourage you to review the privacy policies of any third-party services you use in connection with the a8club Platform, particularly your chosen payment provider (e.g., GCash, Maya) and the game developers whose titles you play.

Where a8club shares data with third-party processors (as described in Section 6), we do so under contractual data processing agreements that bind those processors to handle your data in a manner consistent with this Policy and applicable Philippine data privacy law.

As a Philippine-based online gaming platform, a8club primarily stores and processes your personal data on servers located within the Philippines or in jurisdictions that the National Privacy Commission recognises as providing adequate data protection standards.

Where personal data is transferred to a third-party service provider located outside the Philippines — for example, a game software provider or a cloud infrastructure partner — a8club ensures that such transfers are subject to appropriate safeguards, including:

• Binding data processing agreements incorporating standard contractual clauses recognised under RA 10173 and NPC guidelines;
• Transfer only to jurisdictions with data protection laws deemed adequate by the NPC; or
• Your explicit consent to the transfer where no other adequate safeguard is available.

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting our Data Protection Officer at the details provided in Section 15.

a8club reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine laws and regulations, PAGCOR licensing requirements, or the structure of the a8club Platform.

When we make material changes to this Policy, we will:

• Update the "Last Updated" date displayed at the top of this page;
• Post a prominent notice on the a8club Platform notifying registered players of the change; and
• Where required by law or where changes significantly affect your rights, provide direct notification via your registered email address or mobile number.

Your continued use of the a8club Platform following the effective date of any updated Policy constitutes your acknowledgment of and agreement to the revised terms. We encourage you to review this Policy periodically to stay informed of how a8club protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by a8club, you may contact our designated Data Protection Officer (DPO) using the details below.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that a8club has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012. The NPC can be reached through their official government channels.

a8club is committed to resolving all privacy-related concerns fairly and transparently. We aim to acknowledge all written complaints within 5 business days and to resolve them fully within 30 calendar days, unless the matter requires further investigation.