Your Privacy Matters at j8.com

j8.com ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every player who uses our online gaming services. This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines (DPA), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

As a PAGCOR-licensed online gaming operator, j8.com is also subject to PAGCOR's data governance requirements, which complement the protections afforded under the DPA. We process your personal data only to the extent necessary to provide you with a safe, fair, and enjoyable gaming experience — and never for purposes that are incompatible with those stated in this policy.

This policy covers all personal data collected through the j8.com website, mobile platform, customer support channels, and any other touchpoints through which you interact with us. It does not cover third-party websites or services that may be linked from our platform — those are governed by their own privacy policies.

The categories of personal data we collect depend on how you interact with j8.com. Below is a comprehensive breakdown of the data types we may process:

We do not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless it is strictly necessary for a specific legal or regulatory purpose and you have given your explicit consent.

j8.com collects personal data through the following channels:

Direct Collection

You provide data directly to us when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, respond to a survey, or participate in a promotion. This is the primary source of identity, contact, and financial data.

Automated Collection

When you access j8.com through any device, our systems automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data helps us maintain platform security, detect fraud, and improve the user experience. See Section 6 for more detail on our cookie practices.

Third-Party Sources

In certain circumstances, we may receive data about you from third parties, including:

• Payment processors (e.g., GCash, PayMaya, BPI, BDO) who confirm transaction details.
• Identity verification service providers who assist with KYC and anti-money laundering (AML) checks.
• PAGCOR and other regulatory bodies, including national self-exclusion registries.
• Fraud prevention and credit reference agencies.

Under the Data Privacy Act of 2012, j8.com must have a lawful basis for processing your personal data. The table below outlines the purposes for which we process your data and the corresponding legal basis for each:

j8.com does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances and only to the extent necessary:

Service Providers

We engage trusted third-party service providers to help us operate the j8.com platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, cloud hosting and infrastructure providers, customer support software vendors, and analytics platforms. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

Regulatory and Legal Authorities

We are required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities when lawfully requested. We may also disclose data to law enforcement agencies in connection with the investigation of fraud, money laundering, or other criminal activity.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of j8.com's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Privacy Policy.

With Your Consent

We may share your data with third parties in other circumstances where you have given your explicit consent to do so.

j8.com uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. A cookie is a small text file placed on your device when you visit a website. The following types of cookies are used on j8.com:

• Strictly Necessary Cookies: These are essential for the platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional Cookies: These remember your preferences — such as language settings, responsible gaming tool configurations, and display preferences — to personalise your experience.
• Analytics Cookies: These help us understand how players use j8.com — which pages are visited most, where users drop off, and how features are used. This data is aggregated and anonymised where possible.
• Security Cookies: These assist in fraud detection and prevention by identifying unusual patterns of behaviour that may indicate account compromise or bot activity.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the j8.com platform. For strictly necessary cookies, no opt-out is available as they are required for the platform to operate securely.

j8.com retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and PAGCOR regulations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR's record-keeping requirements and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLC regulations.
• Gaming activity data: Retained for the duration of your account and for three (3) years after account closure.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing preference data: Retained until you withdraw consent or close your account.
• Technical and usage data: Typically retained for thirteen (13) months from collection.

After the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

j8.com implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and j8.com's servers.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their role.
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent security professionals.
• Multi-factor authentication (MFA) for internal systems and encouraged for player accounts.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

As a data subject under the Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by j8.com:

To exercise any of the above rights, please contact our Data Protection Officer (DPO) using the details provided in Section 13. We will respond to all verified requests within fifteen (15) business days. In complex cases, we may extend this period by a further fifteen (15) business days, and we will notify you of any such extension.

As part of our registration and KYC process, all players are required to verify their age and identity before accessing real-money games. We use government-issued identification documents — such as a Philippine passport, UMID, PhilSys National ID, or driver's license — to confirm that every player meets the 21+ age requirement.

If we discover or have reason to believe that a registered account belongs to a person under 21 years of age, we will immediately suspend the account, freeze any associated funds pending investigation, and report the matter to PAGCOR as required. Any winnings generated by an underage player will be forfeited.

If you are a parent or guardian and believe that a minor has registered on j8.com or accessed our platform, please contact us immediately at the details provided in Section 13. We take underage gambling extremely seriously and will act swiftly on any such report.

j8.com primarily processes and stores your personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and certain analytics platforms — may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, j8.com ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission.
• Transfers to countries or organisations that the NPC has determined provide an adequate level of data protection.
• Binding corporate rules where applicable within a corporate group.

You may request further information about the specific safeguards in place for any international transfer of your data by contacting our DPO.

j8.com reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When we make material changes to this policy, we will notify you through one or more of the following methods:

• A prominent notice on the j8.com homepage or within your account dashboard.
• An email notification to the address registered on your account.
• An in-platform notification the next time you log in.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how j8.com protects your personal data. Your continued use of the platform after any changes have been posted constitutes your acceptance of the updated policy.

j8.com has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and the National Privacy Commission's guidelines. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact our DPO through the following channels:

If you are not satisfied with our response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines: