Privacy Policy — bk8rp Online Casino

bk8rp ("we", "us", "our") is an online gaming and sports betting platform serving players in the Philippines. We are committed to protecting the privacy and personal data of all our registered users ("you", "your", "the player") in accordance with applicable Philippine law.

This Privacy Policy sets out in clear terms what personal data bk8rp collects from you when you access or use our platform, the purposes for which that data is collected and processed, how long we retain it, who we share it with, and the rights available to you under the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.

This policy applies to all personal data collected through the bk8rp website, mobile-optimized platform, live chat support interactions, email communications, and any other channel through which you interact with bk8rp. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

bk8rp collects personal data through several means: directly from you when you register or interact with the platform, automatically through technical systems as you browse and play, and occasionally from third-party providers such as payment processors and identity verification services.

The categories of personal data we collect include:

bk8rp processes your personal data only for specific, legitimate purposes. We do not use your data in ways that are incompatible with the original purpose of collection. The key purposes for which we use your personal data are as follows:

• Account Creation & Management: To register your account, verify your identity through our KYC process, maintain your account in good standing, and authenticate your logins to the bk8rp platform.
• Processing Transactions: To process deposits and withdrawals via GCash, Maya, GrabPay, BPI, BDO, Metrobank, USDT, CLiQQ, and other supported Philippine payment methods.
• Regulatory Compliance: To fulfil our obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act of 2012 (RA 10173). This includes conducting Enhanced Due Diligence on high-value accounts and filing Suspicious Transaction Reports where required.
• Platform Delivery & Improvement: To operate, maintain, and improve the bk8rp platform, including personalizing your gaming experience, optimizing page performance, and developing new features based on aggregated usage analytics.
• Customer Support: To respond to your enquiries, resolve disputes, and assist with technical issues through live chat and email support channels.
• Responsible Gaming: To monitor gaming behavior and intervene where patterns suggest problematic play, in accordance with our obligations under PAGCOR's responsible gaming framework. This may include applying deposit limits or initiating welfare checks.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, collusion, multiple account abuse, money laundering, and unauthorized account access.
• Marketing Communications: Where you have given explicit consent, to send you promotional offers, bonus notifications, and platform updates via email or SMS. You may withdraw this consent at any time by contacting support.
• Bonus & Promotion Administration: To verify eligibility, track wagering progress, and administer the terms of bonuses and promotional campaigns offered by bk8rp.

Under the Data Privacy Act of 2012, bk8rp processes your personal data on the following lawful grounds:

• Contractual Necessity: Processing is necessary to perform the contract between you and bk8rp — i.e., to operate your gaming account, process transactions, and deliver the services you have signed up for.
• Legal Obligation: Processing is required to comply with applicable laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: bk8rp processes certain data — such as technical usage data and fraud signals — in pursuit of its legitimate interests in maintaining platform security, preventing financial crime, and improving service quality. We have assessed that these interests do not override your fundamental privacy rights.
• Consent: For optional processing activities such as marketing communications, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting any prior processing that was based on your consent.

bk8rp does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: GCash (Mynt), Maya (PayMaya Philippines), GrabPay, BPI, BDO, Metrobank, and other payment service providers require transaction data to process your deposits and withdrawals securely.
• Identity Verification Providers: Third-party KYC and identity verification partners assist bk8rp in verifying government-issued IDs and proof of address. These partners are bound by data processing agreements and may not use your data for their own purposes.
• Fraud & AML Compliance Partners: Risk screening and transaction monitoring providers help bk8rp detect suspicious activity in compliance with the Anti-Money Laundering Council (AMLC) and PAGCOR requirements.
• Game Content Providers: Third-party game studios that supply casino games, live dealer tables, and fishing games may receive limited session data necessary for gameplay delivery. These providers do not receive your full identity or payment data.
• Regulatory Authorities: bk8rp is required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or law enforcement agencies where required by law or valid legal process.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access personal data on a strictly confidential and need-to-know basis.

All third parties with whom bk8rp shares personal data are required to comply with applicable data protection laws and to handle your information with a standard of security no less than our own.

bk8rp uses cookies, web beacons, pixel tags, and similar tracking technologies to operate and improve the platform. Below is a summary of the types of cookies we use:

You can manage your cookie preferences at any time through your browser's settings. Please note that disabling analytics or functional cookies will not prevent you from using the bk8rp platform, but it may affect the personalization of your experience. Disabling essential or security cookies may impair core platform functionality.

bk8rp retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your active account relationship with bk8rp, plus a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction, as required under RA 9160 (as amended).
• KYC Documents: Identity and verification documents are retained for the duration of the account relationship and for five (5) years following account closure.
• Support Communications: Live chat logs and email correspondence related to account or compliance matters are retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Records of your consent to receive marketing communications are retained for as long as we continue to send you marketing, plus one (1) year following withdrawal of consent.
• Technical & Log Data: Server logs and security event logs are typically retained for twelve (12) months unless a security incident requires extended retention for investigation purposes.

When personal data is no longer required, bk8rp will securely delete, anonymize, or pseudonymize it in accordance with our internal data disposal procedures and applicable NPC guidelines.

bk8rp implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our key security controls include:

• TLS/SSL Encryption: All data in transit between your device and bk8rp servers is encrypted using Transport Layer Security (TLS 1.2 or higher), ensuring your login credentials and payment information cannot be intercepted in transit.
• AES-256 Encryption at Rest: Sensitive personal data stored in bk8rp databases — including KYC documents and financial data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. bk8rp staff are granted the minimum level of access necessary to perform their role. Access rights are reviewed periodically and revoked promptly upon role change or employment termination.
• Two-Factor Authentication (2FA): bk8rp strongly encourages all players to enable 2FA on their accounts to add an additional layer of protection against unauthorized access.
• Regular Security Audits: bk8rp conducts regular internal and third-party security assessments, including vulnerability scanning and penetration testing, to identify and remediate potential security weaknesses.
• Incident Response Plan: We maintain a documented data breach response procedure that includes containment, notification, and remediation steps aligned with NPC Circular 16-03 requirements.

While bk8rp takes all reasonable measures to protect your data, no system is entirely immune to risk. We encourage you to use a strong, unique password for your bk8rp account and to contact our support team immediately if you suspect any unauthorized activity.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bk8rp:

The bk8rp platform is strictly for adults aged 21 years and older, in accordance with Philippine gaming regulations. We do not knowingly collect, solicit, or process personal data from individuals under the age of 21.

During the registration process, all applicants are required to declare that they are at least 21 years of age and to submit a government-issued ID that confirms their date of birth. Any account found to have been registered by a person under 21 years of age will be immediately suspended, all funds will be frozen pending further review, and the matter will be reported to PAGCOR as required.

Some of bk8rp's technology and service providers — including cloud hosting infrastructure, game content servers, and fraud prevention systems — may be located outside the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, bk8rp ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173.

Such safeguards may include contractual clauses in data processing agreements that impose data protection obligations on the recipient, or reliance on jurisdictions that have been assessed as providing an adequate level of data protection. bk8rp will not transfer your personal data to a third country where adequate protections cannot be guaranteed without your explicit consent.

For specific information about the countries to which your data may be transferred and the safeguards in place, you may contact our Data Protection Officer at the contact details provided in Section 13 of this policy.

bk8rp reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent in-platform notice at least seven (7) days before the revised policy takes effect.

The effective date at the top of this page will always reflect the date on which the current version of the policy came into force. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

Your continued use of the bk8rp platform following the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised terms, you must stop using the platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by bk8rp, please contact us through the following channels:

• Live Chat Support: Available 24/7 directly on the bk8rp platform via the chat widget. This is the fastest way to reach us for urgent data privacy concerns.
• Email: [email protected] — please include "Data Privacy Request" in the subject line so your message is routed directly to the Data Protection Officer's queue. (Plain text — not a clickable link.)
• Data Protection Officer: bk8rp has appointed an internal Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173. All formal data subject requests are handled by the DPO team.
• Response Time: We will acknowledge all privacy-related requests within three (3) business days and provide a full response within fifteen (15) calendar days in line with NPC guidelines.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC can be reached through their official government website and handles complaints from data subjects regarding violations of RA 10173.