KM888 Privacy Policy for Filipino Players

01 About This Policy

This Privacy Policy describes how KM888 ("we", "us", or "our"), operator of km888.org, collects, processes, stores, and discloses personal information when you use our online gaming platform. This policy applies to all Filipino players who register an account, browse our website, or interact with any of our services.

KM888 is committed to protecting the privacy of all users in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By accessing or using km888.org, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein.

This policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, which together form the full agreement between you and KM888.

02 Data We Collect

KM888 collects several categories of personal data in order to provide you with a safe, fair, and enjoyable gaming experience. The categories of data we collect are described in the table below.

KM888 only collects data that is necessary, relevant, and proportionate to the purposes for which it is processed. We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health data unless legally required to do so.

03 How We Collect Data

KM888 collects your personal data through the following means:

• Direct interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey.
• Automated technologies: As you use km888.org, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See the Cookies section for more details.
• Third-party sources: We may receive identity verification data from accredited verification service providers, or fraud-risk signals from payment processors such as GCash and Maya, in order to protect both you and KM888.
• KM888 mobile app: If you download and use the KM888 app, we may collect device identifiers, push notification tokens, and app usage data in addition to the data listed above.

04 How We Use Your Data

KM888 uses your personal data for the following purposes, each of which has a lawful basis under the Philippine Data Privacy Act:

• Account management: Creating and maintaining your player account, verifying your identity and age (21+ only), and communicating account-related information.
• Transaction processing: Facilitating deposits in Philippine Peso via GCash, Maya, or bank transfer, and processing withdrawal requests to your registered payment method.
• Legal compliance: Meeting obligations under Philippine law, including anti-money laundering regulations, know-your-customer requirements, and data retention mandates.
• Fraud and security: Detecting and preventing fraudulent activity, account takeovers, money laundering, and bonus abuse through automated monitoring and human review.
• Responsible gaming: Monitoring play patterns to identify potential problem gambling behaviour and delivering responsible gaming interventions where appropriate.
• Platform improvement: Analysing aggregated usage data to improve game offerings, website performance, and the overall player experience.
• Marketing communications: Sending you promotional offers, bonus updates, and news about KM888 — only where you have provided consent or where a legitimate interest applies.
• Customer support: Resolving disputes, answering queries, and maintaining records of support interactions for quality and compliance purposes.

05 Sharing Your Data

KM888 does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your data only in the following limited circumstances:

• Payment processors: We share transaction-related data with GCash, Maya, and Philippine banking partners solely to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine regulations.
• Identity verification providers: We use accredited third-party services to verify player identities and ages. These providers receive only the minimum data necessary to complete the verification.
• Technology and hosting partners: Our platform infrastructure relies on cloud and software providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: KM888 will disclose personal data to Philippine government agencies, law enforcement, or regulatory bodies when required to do so by law, court order, or lawful request.
• Fraud prevention networks: Where permitted by law, we may share fraud signals with industry fraud-prevention bodies to protect the broader online gaming community.

All third parties with whom KM888 shares data are required to handle it securely, use it only for the specified purpose, and comply with the Philippine Data Privacy Act. KM888 remains responsible for ensuring that any data shared with processors is handled appropriately.

06 Payment Data

When you deposit or withdraw funds via GCash, Maya, or Philippine bank transfer, the transaction is processed directly through the relevant payment provider's secure infrastructure. KM888 stores only the payment method reference (for example, your registered mobile number associated with GCash or Maya) and transaction identifiers — never full wallet credentials, PINs, or bank account passwords.

All financial transactions on km888.org are denominated in Philippine Peso (₱). KM888 does not process or store foreign currency payment credentials. For the security of your funds, please ensure that the payment method you register with KM888 is in your own name. Third-party payment methods are not accepted and may trigger an account security review.

07 Cookies and Tracking

KM888 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and understand how players use the site. A cookie is a small text file stored on your device when you visit a website.

• Essential cookies: Required for the platform to function. These include session authentication, security tokens, and load-balancing cookies. You cannot opt out of essential cookies without stopping use of the platform.
• Analytics cookies: Help us understand page visit patterns, game preferences, and session lengths so we can improve the platform. These are aggregated and do not identify individual players.
• Preference cookies: Remember your language, display, and notification preferences so you do not need to re-set them on each visit.
• Marketing cookies: Used to show you relevant promotions within km888.org. These are activated only where you have given marketing consent.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect how some features of km888.org perform. KM888 does not use third-party advertising networks to track you across unrelated websites.

08 Data Retention

KM888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. The following general retention periods apply:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in line with anti-money laundering record-keeping requirements under Philippine law.
• Transaction records: Financial transaction logs are retained for a minimum of five (5) years from the date of the transaction.
• Support and communications records: Chat logs and email records are retained for up to three (3) years from the date of the last interaction.
• Marketing data: Consent records and marketing preference data are retained until you withdraw consent or for three (3) years after your last marketing interaction, whichever is earlier.
• Identity verification documents: Copies of government-issued ID and verification results are retained for five (5) years after account closure.

When data is no longer required, KM888 securely deletes or anonymises it so that it can no longer be linked to you as an individual. Anonymised and aggregated data may be retained indefinitely for analytical purposes.

09 Security Measures

KM888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Encryption in transit: All data exchanged between your browser or app and our servers is encrypted using TLS 1.3, ensuring that your information cannot be intercepted in transit.
• Encryption at rest: Sensitive personal and financial data stored in our databases is encrypted using AES-256 encryption.
• Access controls: KM888 employees and contractors access player data only on a strict need-to-know basis. All access is logged and regularly audited.
• Two-factor authentication: Players are strongly encouraged to enable 2FA on their KM888 accounts. KM888 staff accounts require 2FA as mandatory.
• Penetration testing: Our platform undergoes regular independent security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: KM888 maintains a documented data breach response plan. In the event of a breach that affects your personal data, we will notify you and the National Privacy Commission as required by Philippine law.

While KM888 takes every reasonable precaution to secure your data, no system is completely immune to risk. We encourage players to use strong, unique passwords and to keep their login credentials confidential.

10 Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by KM888. You may exercise any of these rights by contacting our support team through live chat on km888.org.

KM888 will respond to all data rights requests within 30 calendar days. In complex cases, we may extend this period by a further 30 days, with prior notification to you. We will not charge a fee for processing reasonable requests.

11 Minors and Age Policy

KM888 strictly prohibits the use of its platform by any person under the age of 21. Our platform is designed exclusively for Filipino adults aged 21 years old and above. We do not knowingly collect personal data from persons under 21.

During account registration, all players are required to confirm that they are at least 21 years of age and to submit valid government-issued identification for age verification. If KM888 discovers that personal data has been collected from a person under 21, we will immediately close the account, delete the data, and refund any deposits where possible.

12 Policy Changes

KM888 may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or business operations. When material changes are made, we will notify registered players by email to the address on file and display a prominent notice on km888.org for at least 14 days before the updated policy takes effect.

The date of the most recent revision is displayed at the top of this document. We encourage you to review this Privacy Policy periodically. Continued use of the KM888 platform after the effective date of any revision constitutes your acceptance of the updated policy.

13 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please reach out to the KM888 Data Protection team. We are available 24 hours a day, 7 days a week.

• Live Chat: The fastest way to reach us — click the chat icon on any page of km888.org.
• Email (plain text only): [email protected]
• FAQ: Visit our FAQ page for answers to common data and account questions.

For formal data subject access requests, please use the live chat channel and state clearly that you are submitting a data rights request under the Philippine Data Privacy Act. Our team will guide you through the process and respond within the statutory timeframe.