pk78 Privacy Policy

1.1 The data controller responsible for your personal information is pk78 ("pk78", "we", "us", "the Company"), the operator of the online gaming platform available at pk78.asia, operating under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR).

1.2 pk78 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. You may contact the DPO at [email protected] (plain text — not a clickable link). The DPO is required to respond to data privacy inquiries within ten (10) business days.

1.3 pk78 is registered with the National Privacy Commission (NPC) of the Philippines as required under RA 10173 and its Implementing Rules and Regulations.

2.1 pk78 collects the following categories of personal data from registered players and visitors to pk78.asia:

2.2 pk78 does not knowingly collect sensitive personal information (as defined under RA 10173, such as health data, religious beliefs, or political affiliations) except where specifically required by law or where you voluntarily provide such information in the context of a responsible gaming disclosure.

3.1 Directly from you: When you register a pk78 account, complete KYC verification, make deposits or withdrawals, contact pk78 support, or update your account settings.

3.2 Automatically: Through technical means including server logs, session cookies, and device fingerprinting when you access pk78.asia, regardless of whether you are logged in. Technical data collection is necessary for platform security and fraud prevention.

3.3 From third-party payment processors: pk78 receives transaction confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank when you make deposits or withdrawals. This data is limited to transaction reference numbers, amounts, and timestamps.

3.4 From identity verification services: Where pk78 uses third-party identity verification providers to assist with KYC compliance, those providers may return verification results (pass/fail and document validity status) to pk78. pk78 does not receive raw biometric data from these providers.

4.1 pk78 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your pk78 player account;
• Transaction processing: Processing deposits, withdrawals, and bet settlements in Philippine Peso;
• Identity verification (KYC): Verifying your identity and age (21+) as required by PAGCOR and Philippine AML regulations;
• Regulatory compliance: Meeting pk78's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and related Philippine legislation;
• Fraud prevention and platform security: Detecting and preventing fraud, money laundering, account takeover, and other prohibited activity;
• Responsible gaming: Monitoring gameplay patterns to identify and reach out to players who may be experiencing gambling-related harm;
• Customer support: Responding to your queries, complaints, and requests;
• Platform improvement: Analysing aggregated, anonymised usage data to improve pk78's product, performance, and game library;
• Marketing communications: Sending promotional offers and bonuses to registered players who have not opted out of marketing communications (opt-out available in account settings at any time).

5.1 Under the Data Privacy Act of 2012, pk78 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and pk78 (i.e., operating your account, processing transactions, and delivering gaming services);
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA, Philippine tax laws, and other applicable Philippine legislation;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement, where those interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, where you have given explicit opt-in consent. You may withdraw consent at any time via your account settings without affecting the lawfulness of prior processing.

6.1 pk78 does not sell your personal data. pk78 shares your data only in the following circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposit or withdrawal transaction;
• Identity verification providers: Third-party KYC/AML providers receive identity data strictly for the purpose of regulatory verification;
• Game software providers: Licensed game providers may receive anonymised session identifiers to facilitate game delivery; they do not receive your identity or financial data;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government authorities may receive data as required by law or regulatory directive;
• Legal proceedings: Courts, law enforcement agencies, or legal advisors where disclosure is required or permitted by applicable Philippine law.

6.2 All third-party service providers who process personal data on pk78's behalf are bound by data processing agreements that require them to handle your data in compliance with RA 10173 and to use it only for the specified purpose.

7.1 pk78 uses cookies and similar tracking technologies on pk78.asia for the following purposes:

• Essential cookies: Required for the platform to function, including authentication session management, security tokens, and fraud detection signals. These cannot be disabled without impairing platform functionality;
• Functional cookies: Remember your preferences such as language settings, last-visited game category, and responsible gaming settings;
• Analytics cookies: Collect anonymised data about how visitors use pk78.asia to help us improve platform performance and the overall player experience. pk78 uses first-party analytics only — no third-party analytics scripts that transmit data to external advertising networks.

7.2 pk78 does not use advertising or retargeting cookies. No pk78 user data is transmitted to external advertising platforms.

7.3 You may manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from logging into or using the pk78 platform.

8.1 pk78 retains personal data for the following periods:

• Account and identity data: For the duration of your account plus five (5) years after account closure, as required by PAGCOR regulations and AMLA record-keeping obligations;
• Financial transaction data: Ten (10) years from the date of the transaction, as required under Philippine AML and tax legislation;
• Gaming data (bet history, session records): Five (5) years from the date of the session, as required by PAGCOR;
• KYC verification documents: Five (5) years from account closure or from the date of the last transaction, whichever is later;
• Customer support communications: Three (3) years from the date of the communication, unless the matter is subject to ongoing legal proceedings.

8.2 After the applicable retention period, personal data is securely deleted or anonymised in accordance with pk78's data retention and disposal procedures.

9.1 pk78 implements the following technical and organisational security measures to protect your personal data:

• TLS 1.3 encryption for all data transmitted between your device and pk78.asia;
• AES-256 encryption for sensitive data stored at rest, including identity documents and payment details;
• Strict role-based access controls — only pk78 personnel with a documented operational need may access personal data;
• Multi-factor authentication required for all pk78 staff accessing internal data systems;
• Automated anomaly detection and intrusion prevention systems monitoring platform activity 24/7;
• Regular third-party security penetration testing and vulnerability assessments;
• Formal data breach response procedures aligned with NPC notification requirements.

9.2 In the event of a personal data breach that is likely to result in harm to you, pk78 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected players without undue delay, as required by RA 10173.

10.1 Under the Data Privacy Act of 2012, as a data subject you have the following rights with respect to your personal data held by pk78:

• Right to be informed: The right to know that pk78 is collecting and processing your personal data and for what purposes — addressed in this Privacy Policy;
• Right of access: The right to request a copy of the personal data pk78 holds about you;
• Right to rectification: The right to correct inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to pk78's legal retention obligations under PAGCOR regulations and Philippine law;
• Right to object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to data portability: The right to receive your personal data in a structured, commonly-used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

10.2 To exercise any of the above rights, contact pk78's Data Protection Officer at [email protected] (plain text). pk78 will respond to all verified data subject requests within ten (10) business days.

11.1 pk78 is strictly an adult platform for persons aged 21 and above, as required by PAGCOR regulations. pk78 does not knowingly collect personal data from persons under 21 years of age.

11.2 If pk78 discovers or is notified that it has collected personal data from a person under the age of 21, pk78 will immediately close the relevant account, delete all associated personal data (subject to any mandatory AML record-keeping obligations), and take appropriate action consistent with its obligations to PAGCOR.

11.3 If you have reason to believe that a minor has registered on pk78, please notify pk78 immediately via live chat or at [email protected].

12.1 pk78's primary data processing infrastructure is located in the Philippines. Where it is operationally necessary to transfer personal data outside the Philippines — for example, to a licensed game software provider with servers outside the country — pk78 ensures that:

• The recipient jurisdiction provides an adequate level of data protection equivalent to that required under RA 10173, or;
• Appropriate contractual safeguards (such as standard contractual clauses) are in place binding the recipient to equivalent data protection standards, and;
• The transfer is disclosed to the NPC where required.

12.2 pk78 does not transfer personal data to jurisdictions that do not provide adequate protections under Philippine data privacy standards.

13.1 pk78 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via notification to their registered mobile number or email address, and by prominent notice on pk78.asia, at least fourteen (14) days before the change takes effect.

13.2 The "Last Updated" date at the top of this Policy indicates when the most recent version was published. We encourage you to review this Policy periodically. Your continued use of pk78 following publication of an updated Policy constitutes your acceptance of the revised terms.

14.1 For all data privacy inquiries, requests to exercise your data subject rights, or complaints relating to pk78's data processing practices, contact pk78's Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the live chat widget on pk78.asia
• Response time: Within ten (10) business days of receipt

14.2 If you are not satisfied with pk78's response to your data privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent supervisory authority responsible for enforcing RA 10173 and its implementing regulations in the Philippines.