abc8a9 Privacy Policy

1 Introduction and Scope

abc8a9 ("abc8a9," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("Player," "you," or "your") who access or use the abc8a9 online gaming platform at abc8a9.cam and all associated services (collectively, the "Platform").

This Privacy Policy has been prepared in accordance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission of the Philippines. It governs the collection, use, storage, sharing, and protection of personal data that abc8a9 processes in connection with your use of the Platform.

This policy applies to all registered players, prospective registrants, and any individual who visits or interacts with the abc8a9 Platform, regardless of whether they hold an active account. It covers personal data collected online through the Platform as well as data collected through customer support interactions via email and live chat.

2 Data Controller Information

For the purposes of the Data Privacy Act of 2012, abc8a9 acts as the Personal Information Controller (PIC) in respect of all personal data collected and processed through the abc8a9 Platform. As PIC, abc8a9 determines the purposes for which and the means by which personal data is processed.

abc8a9 has appointed a designated Data Protection Officer (DPO) in accordance with Section 21 of the DPA IRR. The DPO is responsible for overseeing abc8a9's data protection compliance program, acting as the primary point of contact for data subjects exercising their rights, and liaising with the National Privacy Commission on data protection matters.

3 Personal Data We Collect

abc8a9 collects personal data from players through several channels, including the account registration process, ongoing platform use, payment processing, customer support interactions, and automated technical collection methods. The categories of personal data we collect are set out below.

3.1 Registration and Account Data

• Full legal name (as it appears on a Philippine government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address in the Philippines (including barangay, city or municipality, and province)
• Valid Philippine mobile number
• Email address
• Username and encrypted password
• Security questions and answers (where applicable)

3.2 Identity Verification (KYC) Data

• Copies of Philippine government-issued identification documents (e.g., PhilSys ID, LTO Driver's License, Philippine Passport, UMID, Voter's ID)
• Selfie photographs submitted for identity verification purposes
• Source of funds documentation where required by anti-money laundering regulations

3.3 Financial and Transaction Data

• GCash mobile number and account reference details
• PayMaya account reference details
• Bank account name, account number, and bank name (for bank transfer transactions)
• Visa or Mastercard type and last four digits (full card numbers are not stored by abc8a9)
• Deposit and withdrawal history
• Wagering history, game play records, and bonus usage records

3.4 Technical and Usage Data

• IP address and approximate geolocation data derived from IP
• Device type, operating system, and browser information
• Session timestamps, login history, and session duration
• Pages visited within the Platform and features accessed
• Referral source data (how you found abc8a9)

3.5 Communications Data

• Records of emails, live chat transcripts, and other communications with abc8a9 customer support
• Feedback, complaints, and dispute submissions
• Responses to surveys or promotions where you voluntarily participate

4 How We Use Your Personal Data

abc8a9 uses the personal data we collect for the following specific purposes. We do not use your personal data for any purpose that is incompatible with those for which it was originally collected without first obtaining your additional consent or as otherwise permitted by law.

5 Legal Basis for Processing

abc8a9 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing your personal data is necessary to perform our contractual obligations to you as a registered abc8a9 player — including account management, game provision, and processing your deposits and withdrawals.
• Legal Obligation: abc8a9 is required by PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws to collect, retain, and in certain circumstances disclose your personal data.
• Legitimate Interests: abc8a9 processes certain data on the basis of its legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improvement of the Platform. We balance these interests against your privacy rights at all times.
• Consent: Where abc8a9 processes personal data for marketing communications or other non-essential purposes, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing and Disclosure

abc8a9 does not sell, rent, or trade your personal data to third parties for their own commercial use. We share your personal data only in the following circumstances:

6.1 Regulatory and Law Enforcement Authorities

abc8a9 is required by law to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where required by law, court order, or lawful request. Such disclosures are made in strict compliance with applicable legal requirements.

6.2 Service Providers (Personal Information Processors)

abc8a9 engages third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under the DPA. These include payment processing partners (GCash, PayMaya, bank partners), identity verification providers, cloud hosting and infrastructure providers, and customer support platform providers. All PIPs are bound by contractual data processing agreements that impose data protection obligations consistent with the DPA.

6.3 Game Software Providers

Certain gaming providers whose content is available on the abc8a9 Platform may receive limited technical data necessary for game delivery and fair play monitoring. No financial or sensitive personal data is shared with game providers beyond what is strictly necessary.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of abc8a9 or its assets, your personal data may be transferred to the acquiring entity. abc8a9 will provide reasonable notice of any such transfer and ensure that the acquiring entity is bound by data protection obligations no less protective than those set out in this policy.

7 Cookies and Tracking Technologies

abc8a9 uses cookies and similar tracking technologies to operate and improve the Platform, maintain session security, and analyze usage patterns. Cookies are small text files stored on your device when you visit the abc8a9 Platform.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly, including session authentication and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and display options to improve your experience.
• Analytics Cookies: Help us understand how players use the Platform so we can improve its features and performance. Data collected is aggregated and anonymised where possible.
• Security Cookies: Used for fraud detection and to identify unusual or potentially harmful account activity.

You can manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the abc8a9 Platform. abc8a9 does not use cookies to serve third-party advertising on the Platform.

8 Data Retention

abc8a9 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements under Philippine law.

The following general retention periods apply:

• Active account data: Retained for the duration of your abc8a9 account and for five (5) years following account closure, as required by PAGCOR and AMLC regulations.
• Transaction and financial records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with AMLA and PAGCOR record-keeping requirements.
• KYC and identity verification documents: Retained for five (5) years following account closure or the last transaction, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the interaction unless a longer period is required for legal proceedings or regulatory compliance.
• Marketing data (consent-based): Retained until you withdraw consent or for up to two (2) years of inactivity, whichever is earlier.

When personal data is no longer required, abc8a9 will securely delete or anonymise it in accordance with industry best practices and NPC guidelines.

9 Data Security

abc8a9 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and abc8a9 servers
• Encryption of sensitive data fields (including passwords, which are stored as salted cryptographic hashes and never in plain text) in abc8a9 databases
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need
• Comprehensive audit logging of all access to personal data by abc8a9 personnel
• Regular vulnerability assessments and penetration testing of the Platform infrastructure
• Multi-factor authentication requirements for access to abc8a9 administrative systems
• Employee data protection training and strict confidentiality obligations in all staff contracts

10 Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights in respect of your personal data held by abc8a9:

• Right to be Informed: The right to be informed of how your personal data is being or will be processed, including the purpose of collection and the identity of the data controller (abc8a9).
• Right to Access: The right to obtain a copy of the personal data that abc8a9 holds about you, together with information about how it is being processed.
• Right to Correction: The right to have inaccurate, incomplete, outdated, or misleading personal data corrected without undue delay.
• Right to Erasure or Blocking: The right to have your personal data erased or blocked where it is no longer necessary for the purpose it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to abc8a9's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data, particularly for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller where technically feasible.
• Right to Damages: The right to claim compensation for any damages suffered as a result of abc8a9's inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact abc8a9's Data Protection Officer at [email protected] with the subject line "Data Privacy Rights Request." We will respond to all verified rights requests within fifteen (15) business days as required by the DPA IRR.

11 Children's Privacy

The abc8a9 Platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations. abc8a9 does not knowingly collect personal data from any person under the age of 21. Age verification is conducted as part of the account registration and KYC process to enforce this restriction.

12 Changes to This Privacy Policy

abc8a9 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine laws and regulations, or the features of the abc8a9 Platform. The effective date at the top of this page will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how we collect or use your personal data or reduce your privacy rights — abc8a9 will notify registered players via email to the address on file and via a notice displayed upon your next login to the Platform. Your continued use of the abc8a9 Platform after notification of changes constitutes your acknowledgment of the updated Privacy Policy.

abc8a9 encourages all players to periodically review this Privacy Policy to stay informed about how their personal data is being protected.

13 Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by abc8a9, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. Information on how to file a complaint with the NPC is available through the National Privacy Commission's official government channels.