slot8 Privacy Policy

slot8 ("we," "us," "our," "the Platform") is the operator of the online gaming platform accessible at slot8.bio ("the Website"). slot8 is a PAGCOR-licensed online gaming operator providing casino games, live dealer games, bingo, sports betting, and related services to eligible players located in the Republic of the Philippines.

For the purposes of the Data Privacy Act of 2012, slot8 is the Personal Information Controller ("PIC") with respect to the personal data of players, account holders, and Website visitors. slot8 determines the purposes and means by which personal data collected through the Platform is processed.

Questions, concerns, and data subject rights requests relating to this Privacy Policy should be directed to our Data Privacy Officer ("DPO") at the contact details set out in Section 15 of this Policy.

This Privacy Policy applies to all personal data collected and processed by slot8 in connection with:

• Registration and maintenance of a slot8 player account.
• Use of any games, services, or features available through the Website.
• Deposits, withdrawals, and any other financial transactions conducted through the Platform.
• Participation in promotions, bonus programs, loyalty schemes, or tournaments offered by slot8.
• Communications between you and slot8 support, including live chat, email, and in-platform messaging.
• Visits to the Website, including browsing behavior captured through cookies and similar technologies.

This Policy does not apply to the data practices of third-party game providers, payment processors, or other external services accessed through the Platform. Those third parties operate under their own privacy policies, and slot8 is not responsible for their data handling practices.

slot8 collects personal data through several channels, including information you provide directly, data generated by your use of the Platform, and information received from third-party verification and payment service providers.

slot8 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

1. Contractual Necessity: Processing is necessary to perform the contract between slot8 and you — specifically, to provide your account, process transactions, deliver games, and administer your participation in promotional programs. Without this processing, slot8 cannot provide the Platform services.
2. Legal Obligation: Processing is required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, the requirements of the Anti-Terrorism Financing Act, the Data Privacy Act record-keeping requirements, and other applicable Philippine laws and regulations.
3. Legitimate Interests: slot8 processes certain data based on its legitimate interests, including fraud prevention, information security, responsible gaming monitoring, platform analytics, and service improvement — provided those interests are not overridden by your privacy rights.
4. Consent: Where processing is based on consent — principally for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect processing carried out on other legal bases.

slot8 uses the personal data collected from you for the following specific purposes:

• Account Administration: Creating, verifying, and maintaining your player account, including processing account changes, password resets, and security verifications via OTP.
• Identity & Age Verification: Verifying that you are who you claim to be and that you meet the minimum age requirement of 21 years as mandated by PAGCOR. This includes processing your government-issued Philippine ID during KYC.
• Payment Processing: Processing deposits and withdrawals through supported payment channels including GCash, PayMaya, BDO, BPI, Metrobank, and UnionBank. Your financial data is used solely for transaction processing and AML monitoring.
• Game Delivery: Providing access to games, recording game outcomes, calculating and crediting winnings, and maintaining your game history.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the Platform.
• Responsible Gaming: Monitoring gaming patterns for indicators of problem gambling, enforcing deposit limits and self-exclusion settings, and fulfilling slot8's PAGCOR-mandated responsible gaming obligations.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance through live chat, email, and other support channels.
• Regulatory Compliance: Maintaining transaction records, player activity logs, and identity verification records as required by PAGCOR, the AMLC, the NPC, and other Philippine regulatory bodies.
• Marketing (with consent): Sending you information about promotions, bonuses, and new games available at slot8, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve Platform features, game offerings, user experience, and overall service quality.

slot8 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the following limited circumstances, and only to the extent necessary for the specific purpose:

1. Payment Service Providers: Financial data is shared with payment processors (GCash, PayMaya, and banking partners) solely to process your deposits and withdrawals. These providers are bound by their own regulatory obligations and contractual data processing agreements with slot8.
2. Game Software Providers: Gameplay data including session identifiers and game results is transmitted to the relevant game provider's servers to facilitate game operation. Game providers operate under agreements that restrict data use to game delivery purposes.
3. Identity Verification Services: KYC data, including copies of your government-issued Philippine ID, may be shared with regulated third-party identity verification service providers for the purpose of fulfilling PAGCOR and AMLA compliance obligations.
4. Regulatory Authorities: slot8 is required by law to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies upon valid request or as required by applicable regulation. Such disclosures are mandatory and are carried out without requiring your additional consent.
5. Professional Advisors: Lawyers, auditors, and compliance consultants engaged by slot8 may access personal data to the extent necessary to provide their professional services, subject to strict confidentiality obligations.
6. Corporate Transactions: In the event of a merger, acquisition, or sale of all or a material part of slot8's business, personal data may be transferred to the successor entity, subject to that entity assuming the obligations of this Policy.

Some of slot8's service providers and game technology partners operate servers and infrastructure located outside the Philippines. Where personal data is transferred to countries that may not have data protection laws equivalent to the Philippine DPA, slot8 implements appropriate safeguards to protect your data, including:

• Contractual data processing agreements incorporating data protection obligations consistent with the DPA and NPC requirements.
• Technical security controls including end-to-end encryption for data transmitted across borders.
• Vendor due diligence to confirm adequate security and privacy practices before engaging international processors.

By using the slot8 Platform, you acknowledge that your data may be transferred to and processed in countries outside the Philippines in connection with the services described in this Policy, subject to the safeguards described above.

slot8 uses cookies and similar technologies (collectively "Cookies") to operate the Website, remember your preferences, maintain your session, prevent fraud, and analyze Platform usage. The following categories of Cookies are used:

You may manage your Cookie preferences through your browser settings. Note that disabling Strictly Necessary Cookies will prevent you from using the Platform. Disabling Functional Cookies may reduce the quality of your experience. Analytics and Fraud Prevention Cookies serve distinct purposes — analytics Cookies may be disabled, while Fraud Prevention Cookies are operationally required for regulatory compliance.

slot8 retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, comply with legal obligations, and resolve any disputes. The following retention schedules apply as a general guide:

• Identity & KYC Records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in accordance with AMLC and PAGCOR record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of ninety (90) days for dispute resolution purposes; anonymized aggregates may be retained indefinitely for analytics.
• Customer Support Records: Retained for two (2) years following the closure of a support ticket or formal complaint.
• Marketing Consent Records: Retained until consent is withdrawn plus a further one (1) year to demonstrate compliance.
• Account Data (Active Accounts): Retained throughout the period the account remains active and for five (5) years following account closure.

Upon expiry of the applicable retention period, personal data is securely deleted using industry-standard deletion methods or irreversibly anonymized so that it can no longer be associated with an identified or identifiable individual.

slot8 implements a comprehensive set of technical and organizational security measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Key measures include:

• Encryption: All personal data transmitted between your device and slot8 servers is protected using 256-bit SSL/TLS encryption. Data at rest is encrypted using AES-256 or equivalent.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. slot8 staff access personal data only as required to perform their job functions, and all access is logged and audited.
• Two-Factor Authentication: All new device logins require OTP verification via your registered Philippine mobile number, reducing the risk of unauthorized account access.
• Penetration Testing: The Platform undergoes regular security assessments, including penetration testing and vulnerability scanning by independent security professionals.
• Data Breach Response: slot8 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, slot8 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by slot8. Requests to exercise any of these rights should be submitted to our Data Privacy Officer using the contact details in Section 15. slot8 will respond to all rights requests within ten (10) business days of receipt.

The slot8 Platform is strictly intended for individuals who are twenty-one (21) years of age or older. This is a non-negotiable regulatory requirement imposed by PAGCOR on all online gaming operators in the Philippines. slot8 does not knowingly collect, process, or store personal data of individuals under the age of 21.

All account registrations are subject to identity and age verification through KYC procedures, which require submission of a valid Philippine government-issued ID. Accounts found to belong to individuals under 21 years of age will be immediately suspended and any associated personal data will be deleted following the conclusion of the required regulatory reporting.

If you believe that slot8 has inadvertently collected personal data from an individual under the minimum age, please contact our DPO immediately at the details set out in Section 15, and we will take prompt corrective action.

With your prior consent, slot8 may send you marketing communications about promotions, bonuses, new games, and other slot8 offers via SMS to your registered Philippine mobile number, email to your registered address, and in-platform notifications.

You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in your slot8 account settings.
• Clicking the unsubscribe link in any marketing email received from slot8.
• Contacting slot8 customer support via live chat or email and requesting removal from marketing lists.

Withdrawal of marketing consent does not affect service communications — slot8 will continue to send you transactional messages necessary to the operation of your account, such as deposit confirmations, withdrawal notifications, and account security alerts, regardless of your marketing preferences.

slot8 does not use personal data for behavioral advertising on third-party platforms or share data with advertising networks for retargeting purposes.

slot8 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The effective date of the most current version is displayed at the top of this document.

Material changes to this Policy — meaning changes that significantly affect your rights or how we process your data — will be communicated to registered players via email to the address on record, with a minimum of fourteen (14) days' notice before the changes take effect. For non-material updates (such as typographical corrections or clarifications that do not change the substance of the Policy), notice will be given by updating the effective date on this page.

Your continued use of the slot8 Platform after the effective date of any revised Policy constitutes your acknowledgment of and agreement to the revised terms. If you do not accept the revised Policy, you should close your account and cease using the Platform before the effective date.

slot8 has designated a Data Privacy Officer ("DPO") responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO is your primary point of contact for all data privacy matters, including data subject rights requests, privacy concerns, and complaints.