kh888 Casino – Privacy Policy

1.1 This Privacy Policy ("Policy") describes how kh888 ("kh888," "we," "us," or "the Operator") collects, processes, stores, and protects the personal data of individuals ("Players," "Users," or "you") who access or use the kh888 online gaming platform at kh888.one, including any associated mobile applications and services (collectively, the "Platform").

1.2 kh888 is operated under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC").

1.3 By registering an account on kh888, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must not use the Platform.

2.1 For the purposes of the Data Privacy Act of 2012, kh888 is the Personal Information Controller ("PIC") in respect of the personal data collected from Players via the Platform. kh888 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine privacy law.

2.2 kh888 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and with applicable data protection legislation. The DPO can be contacted at the details set out in Section 13 (Contact) of this Policy.

3.1 kh888 collects the following categories of personal data from Players:

3.2 kh888 does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for PAGCOR-mandated KYC and anti-money-laundering compliance purposes.

4.1 kh888 processes your personal data for the following specific purposes:

• Account Registration & Management: To create and maintain your kh888 player account, including identity verification as required by PAGCOR KYC regulations.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other Philippine payment channels; to detect and prevent payment fraud.
• Legal & Regulatory Compliance: To fulfil kh888's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling, enforce responsible gaming limits set by Players, and support self-exclusion requests.
• Platform Security: To detect and prevent fraud, cheating, multi-accounting, and other prohibited activities that undermine the integrity of the Platform.
• Customer Support: To respond to player enquiries, complaints, and disputes.
• Marketing (With Consent): To send you information about kh888 promotions, new games, and offers — only where you have provided explicit consent, and always with the option to withdraw consent at any time.
• Platform Improvement: To analyse aggregate usage data and improve the kh888 product experience for all Filipino players.

5.1 kh888 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform our contractual obligations to you as a kh888 account holder, including account management, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting requirements, tax obligations, and other applicable Philippine law.
• Legitimate Interests: Processing necessary for kh888's legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and dispute resolution — where such interests are not overridden by your data protection rights.
• Consent: Processing of your personal data for marketing communications and optional personalisation features, where you have given explicit, freely-given consent that can be withdrawn at any time.

6.1 kh888 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with third parties only in the following limited circumstances:

• Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other Philippine payment service providers, to the extent necessary to process your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to fulfil PAGCOR-mandated KYC requirements.
• Game Software Providers: Game content providers who supply slots, live dealer, and other game titles to the kh888 Platform may receive minimum necessary technical data (e.g., session tokens) to deliver game content; they do not receive your identity or financial data.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies, where disclosure is required by law or regulatory obligation.
• Legal Proceedings: Courts, law enforcement agencies, or legal advisers where disclosure is required in connection with legal proceedings, court orders, or the establishment, exercise, or defence of legal claims.

6.2 All third parties who process personal data on kh888's behalf are required to implement appropriate data protection measures and are prohibited from using your personal data for any purpose beyond the specific service they provide to kh888.

7.1 kh888 uses cookies and similar tracking technologies on the Platform to ensure core functionality, maintain your authenticated session, prevent fraud, and analyse aggregate usage patterns. The main types of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled as they are essential for login sessions, security tokens, and payment flow integrity.
• Functional Cookies: Remember your language preferences, game display settings, and other personalisation choices.
• Analytical Cookies: Collect anonymised data about how Players use the Platform, allowing kh888 to identify areas for improvement. No individual player is identifiable from this data.

7.2 kh888 does not use third-party advertising or behavioural tracking cookies. You can control non-essential cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

8.1 kh888 retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, and in any event for no longer than required by applicable Philippine law and PAGCOR licensing conditions.

• Active Accounts: Personal data is retained for the duration of your active kh888 account relationship.
• Closed Accounts: Following account closure, kh888 retains identity, financial, and transaction records for a minimum of five (5) years, as required by PAGCOR licensing conditions and AMLA obligations.
• Marketing Consent Records: Records of consent and withdrawal of consent for marketing communications are retained for the period required to demonstrate compliance with applicable law.

8.2 When personal data is no longer required, kh888 will securely delete or anonymise it in accordance with industry-standard data destruction procedures.

9.1 kh888 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction, including:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the kh888 Platform.
• Encryption at rest for all sensitive personal data and financial records stored on kh888 servers.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Regular third-party security audits and penetration testing as part of kh888's PAGCOR compliance programme.
• Multi-factor authentication requirements for kh888 staff accessing internal systems containing personal data.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kh888 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with NPC Circular 16-03.

10.1 Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by kh888:

• Right to be Informed: You have the right to know what personal data kh888 holds about you and how it is being processed — which is the purpose of this Policy.
• Right of Access: You may request a copy of the personal data kh888 holds about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Certain data (such as your registered name) can be updated by contacting kh888 support with supporting documentation.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kh888's legal retention obligations under PAGCOR and AMLA regulations.
• Right to Object: You may object at any time to the processing of your personal data for direct marketing purposes. Withdrawal of marketing consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Data Portability: You may request your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: If you believe kh888 has processed your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

10.2 To exercise any of the above rights, please contact kh888's Data Protection Officer using the contact details in Section 13. kh888 will respond to all data rights requests within thirty (30) days, and will seek an extension only where permitted and necessary under applicable law.

11.1 The kh888 Platform is strictly intended for persons aged twenty-one (21) years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. kh888 does not knowingly collect, use, or retain personal data from individuals under the age of 21.

11.2 If kh888 discovers or receives credible evidence that a registered account belongs to an individual under 21, the account will be immediately suspended, all personal data associated with the account will be handled in accordance with PAGCOR guidelines, and any funds in the account will be dealt with as required by applicable regulations.

11.3 If you are a parent or guardian and believe that a minor under your care has registered on the kh888 Platform, please contact kh888's Data Protection Officer immediately using the details in Section 13.

12.1 kh888 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, or our data processing practices. Material changes will be communicated to registered Players via email or in-platform notification at least seven (7) days prior to the effective date.

12.2 The current version of this Privacy Policy is always available at kh888.one/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform after the effective date of any change constitutes acceptance of the revised Policy.

13.1 For all data privacy enquiries, access requests, correction requests, erasure requests, or complaints relating to this Privacy Policy, please contact kh888's Data Protection Officer:

13.2 kh888 aims to acknowledge all data privacy correspondence within two (2) business days and to provide a substantive response within thirty (30) calendar days, as required by the Data Privacy Act of 2012 and NPC regulations.

13.3 If you are not satisfied with kh888's response to a privacy complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines via its official channels.