680k.com Casino — Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how 680k.com Casino ("680k.com," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of individuals ("you," "your," or "data subject") who access or use the 680k.com Casino platform, including its website, mobile interface, and all associated services.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). It also reflects our obligations under PAGCOR's data governance requirements for licensed online gaming operators.

By registering an account or using the 680k.com Casino platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the platform and contact us to request account closure.

2. Data Controller

680k.com Casino acts as the personal information controller ("PIC") in respect of the personal data collected through the platform. As PIC, 680k.com determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with the DPA and all applicable regulations.

We have appointed a Data Protection Officer ("DPO") who is responsible for overseeing our data protection practices and serving as the point of contact for data privacy inquiries and complaints. Contact details for our DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

680k.com Casino collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, government-issued identification number (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS number)
• Contact Data: Email address, mobile number, residential address (including barangay, city/municipality, province)
• Account Data: Username, account ID, account creation date, login history, session data
• Financial Data: GCash number, PayMaya/Maya account details, bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), transaction history, deposit and withdrawal records
• Gaming Data: Game history, wagering activity, bonus usage, win/loss records, session duration
• Technical Data: IP address, device type, browser type and version, operating system, referring URLs, pages visited, time and date of access
• Communications Data: Records of your interactions with our support team, including live chat transcripts and Messenger conversations
• Responsible Gaming Data: Self-exclusion requests, deposit and loss limit settings, cooling-off period records

We do not collect sensitive personal information (as defined under the DPA) unless strictly required for identity verification or regulatory compliance purposes, in which case we will seek your explicit consent.

4. How We Collect Your Data

680k.com Casino collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification (KYC), making deposits or withdrawals, contacting support, or participating in promotions
• Automated collection: Technical data collected automatically when you access the platform, including through cookies, web beacons, and server logs
• Third-party sources: Identity verification data from KYC service providers; fraud detection data from anti-money laundering (AML) screening services; payment data from GCash, PayMaya, and banking partners
• Regulatory sources: Data received from PAGCOR or other competent authorities in connection with regulatory compliance obligations

5. Purposes of Processing

680k.com Casino processes your personal data for the following purposes:

• To create, manage, and maintain your player account
• To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations
• To process deposits, withdrawals, and other financial transactions
• To provide customer support and respond to your inquiries
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities
• To comply with our legal and regulatory obligations, including PAGCOR reporting requirements and AML/CTF obligations
• To administer bonuses, promotions, and loyalty programs
• To enforce our Terms and Conditions and Responsible Gaming Policy
• To improve the platform, personalise your experience, and conduct analytics
• To send you service-related communications (e.g., account notifications, security alerts)
• To send you marketing communications, where you have provided consent

6. Legal Basis for Processing

680k.com Casino processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you (i.e., to provide the gaming platform and associated services)
• Legal obligation: Processing required to comply with applicable Philippine law, PAGCOR regulations, and AML/CTF obligations
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

680k.com Casino does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya/Maya, and banking partners, for the purpose of processing financial transactions
• KYC and AML service providers: Third-party identity verification and anti-money laundering screening providers engaged to assist with regulatory compliance
• Game content providers: Licensed game studios and live dealer operators whose games are hosted on the 680k.com platform, to the extent necessary for game delivery and integrity monitoring
• IT and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers operating under strict data processing agreements
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where required by law
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations

All third-party service providers engaged by 680k.com are required to process personal data only in accordance with our instructions and applicable data protection law, and are bound by appropriate contractual safeguards.

8. International Data Transfers

Some of our third-party service providers may be located outside the Philippines. Where personal data is transferred to recipients in other countries, 680k.com Casino ensures that appropriate safeguards are in place to protect your data, including contractual clauses that meet the standards required by the National Privacy Commission.

We will not transfer your personal data to a foreign country or international organisation unless we are satisfied that adequate levels of protection are in place, or unless the transfer is required by Philippine law or PAGCOR regulation.

9. Data Retention

680k.com Casino retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AML/CTF record-keeping requirements
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act
• Gaming activity data: Retained for a minimum of three (3) years from the date of the relevant gaming session
• Support communications: Retained for two (2) years from the date of the last interaction
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

10. Security Measures

680k.com Casino implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored in our databases
• Multi-factor authentication requirements for account access and administrative systems
• Regular penetration testing and vulnerability assessments conducted by independent security specialists
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• 24/7 security monitoring and intrusion detection systems
• Regular staff training on data protection and information security obligations
• Documented incident response and data breach notification procedures

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is entirely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately of any suspected unauthorised access to your account.

11. Cookies and Tracking Technologies

680k.com Casino uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use our platform.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly, including session management and security features. These cannot be disabled.
• Functional cookies: Remember your preferences and settings to personalise your experience, such as language and display preferences.
• Analytics cookies: Help us understand how players interact with the platform so we can improve performance and usability. Data collected is aggregated and anonymised where possible.
• Marketing cookies: Used to deliver relevant promotional content. These are only placed with your explicit consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 680k.com platform.

12. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 680k.com Casino:

• Right to be informed: The right to know what personal data we collect, how it is used, and with whom it is shared
• Right of access: The right to request a copy of the personal data we hold about you
• Right to rectification: The right to request correction of inaccurate or incomplete personal data
• Right to erasure: The right to request deletion of your personal data, subject to our legal and regulatory retention obligations
• Right to object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests
• Right to data portability: The right to receive your personal data in a structured, commonly used format
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. We will respond to all verified requests within fifteen (15) business days, or within such extended period as permitted by the DPA where the request is complex.

Please note that certain rights may be limited where processing is required for compliance with legal obligations, regulatory requirements, or the establishment, exercise, or defence of legal claims.

13. Children's and Minors' Privacy

680k.com Casino strictly prohibits the use of its platform by individuals under 21 years of age, in accordance with Philippine law and PAGCOR regulations. We do not knowingly collect personal data from persons under 21.

If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the platform or accessed your account, please contact our support team immediately.

Account holders are responsible for ensuring that no person under 21 accesses the 680k.com Casino platform through their account or device.

14. Amendments to This Policy

680k.com Casino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material, we will notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the 680k.com Casino platform following the effective date of any amendment constitutes your acknowledgement of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

15. Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

• Data Protection Officer: 680k.com Casino DPO
• Email: privacy@680kcom.org
• Live Chat: Available 24 hours a day, 7 days a week via the platform
• Messenger Support: Available daily from 8:00 AM to 12:00 midnight (Philippine Standard Time)

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through their official channels.