j8abc Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected, processed, stored, or transmitted by j8abc ("j8abc," "we," "us," "our") in connection with the operation of the online gaming platform accessible at j8abc.app and all associated mobile interfaces, subdomains, and support channels (collectively, the "Platform").

This Policy applies to:

• All registered j8abc account holders, regardless of account status (active, suspended, or closed)
• Visitors to j8abc.app who have not registered an account
• Individuals who contact j8abc support without holding a registered account
• Former account holders whose data is retained pursuant to legal or regulatory obligations

By accessing the Platform, creating an account, or submitting personal data through any j8abc channel, you acknowledge that you have read and understood this Policy and that j8abc's collection and processing of your personal data will be conducted in accordance with its terms.

For the purposes of the Philippine Data Privacy Act, j8abc is the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. As the PIC, j8abc determines the purposes for which personal data is processed and the means by which that processing is carried out.

j8abc has designated a Data Protection Officer (DPO) responsible for overseeing the Platform's compliance with applicable data privacy laws, handling data subject requests, and serving as the primary point of contact with the National Privacy Commission. The DPO is reachable at [email protected] with the subject line "Data Privacy — DPO."

Where j8abc engages third-party service providers (such as payment processors, game providers, or cloud infrastructure operators) to process personal data on its behalf, those providers act as Personal Information Processors (PIPs) under data processing agreements that impose equivalent data protection obligations.

3.1 Data You Provide Directly

j8abc collects personal data that you actively provide during registration, account management, KYC verification, financial transactions, and support interactions. This includes:

• Identity data: Full legal name, date of birth, nationality, and government ID details (as provided during KYC verification)
• Contact data: Philippine mobile number, email address, and residential address
• Financial data: GCash account number, bank account details, transaction records, and source-of-funds documentation where requested
• Authentication data: Usernames, encrypted password hashes, and security question responses (passwords are never stored in plaintext)
• KYC documentation: Copies of government-issued identification, selfie photographs, and proof-of-address documents

3.2 Data Collected Automatically

When you access j8abc.app, certain technical data is collected automatically by the Platform's servers and analytics systems:

• IP address and approximate geolocation (country and region level)
• Browser type, version, and language settings
• Operating system and device type (mobile, tablet, desktop)
• Pages visited, navigation paths, and session duration
• Referring website (where applicable)
• Cookie identifiers and local storage data (see Section 5)

3.3 Gaming Activity Data

j8abc's systems automatically record comprehensive gaming activity data for every registered player, including game session logs, bet amounts and outcomes, bonus transactions, wallet balance changes, responsible gaming tool activations, and any wagering history required for regulatory reporting. This data is retained in accordance with the schedule in Section 8.

j8abc uses your personal data exclusively for defined, legitimate purposes. The table below maps the primary processing activities to their purposes and legal bases:

j8abc uses cookies and similar tracking technologies (collectively, "Cookies") on j8abc.app to provide essential functionality, maintain session security, and understand how players interact with the Platform. Cookies are small data files stored on your device by your browser.

5.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication tokens, CSRF protection tokens, and security cookies. These cannot be disabled without breaking core Platform functionality.
• Performance Cookies: Collect anonymous, aggregated data about how visitors use j8abc.app — including which pages are visited most frequently and any error messages encountered. This data helps j8abc improve the Platform experience.
• Functional Cookies: Remember preferences such as your language setting, time zone, and selected game lobby view to provide a more personalized experience on return visits.
• Responsible Gaming Cookies: Track session duration data to enable in-session time reminders and cooling-off period enforcement tools.

5.2 Managing Cookies

You may control cookie settings through your browser's privacy settings or through j8abc's Cookie Preference Center. Disabling strictly necessary cookies will prevent you from logging in or using core Platform features. Disabling performance or functional cookies will reduce personalization but will not prevent access to games or account features.

j8abc does not sell, rent, or share your personal data with third parties for their own commercial purposes. Personal data is shared only in the following defined circumstances:

6.1 Service Providers (Personal Information Processors)

j8abc engages third-party service providers that process personal data on j8abc's behalf under contractual data processing agreements. These include: payment processors (GCash/GXI, Maya/Voyager Innovations, Philippine bank partners), game software providers (who receive only anonymized player session identifiers, not full personal data), cloud infrastructure providers, KYC verification partners, and customer support platform operators. All processors are bound by data protection obligations equivalent to those applicable to j8abc.

6.2 Regulatory and Legal Authorities

j8abc is required by Philippine law to disclose certain player data to regulatory and enforcement authorities in specified circumstances, including: PAGCOR for licensing compliance reporting; the Anti-Money Laundering Council (AMLC) for covered and suspicious transaction reports under the AMLA; the Bureau of Internal Revenue (BIR) for applicable tax reporting; and law enforcement agencies acting under a valid Philippine court order or lawful authority.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of j8abc's business operations, player personal data may be transferred to the acquiring entity as part of the transaction. In such circumstances, j8abc will notify affected players via their registered contact information prior to any transfer, and the acquiring entity will be required to honor the data protection commitments in this Policy.

j8abc implements a comprehensive set of technical and organizational security measures designed to protect your personal data from unauthorized access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• Encryption in transit: All data transmitted between your browser or device and j8abc.app is encrypted using TLS 1.2 or TLS 1.3 with 256-bit AES ciphers.
• Encryption at rest: Sensitive personal data — including KYC documents, financial data, and authentication credentials — is stored using industry-standard encryption algorithms.
• Password security: Account passwords are hashed using bcrypt with a cost factor designed to resist brute-force attacks. j8abc staff cannot retrieve plaintext passwords.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based access controls and comprehensive access logging.
• Penetration testing: j8abc's platform undergoes regular third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
• Incident response: A documented data breach incident response plan is maintained and tested regularly to ensure rapid identification, containment, and notification of any security incidents affecting player data.

Notwithstanding these measures, no internet-connected system can guarantee absolute security. You are also responsible for maintaining the security of your account by using a strong, unique password and not sharing your credentials with any other person.

j8abc retains personal data only for as long as necessary to fulfill the purpose for which it was collected or as required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is either permanently deleted from j8abc's systems or irreversibly anonymized so that it can no longer be attributed to any identifiable individual.

j8abc's primary data processing infrastructure is located within the Philippines or in jurisdictions with data protection frameworks evaluated as providing an adequate level of protection for Filipino data subjects. Where personal data is transferred to third-party service providers operating infrastructure outside the Philippines — such as certain cloud hosting regions or game software providers — such transfers are conducted under standard contractual clauses, binding corporate rules, or other appropriate transfer safeguards recognized under the Philippine Data Privacy Act.

j8abc does not transfer personal data to jurisdictions that have not been assessed as providing adequate protection without implementing appropriate transfer mechanisms and obtaining any required approval from the National Privacy Commission where applicable.

j8abc's Platform is strictly intended for adults aged 21 years and older in compliance with PAGCOR regulations governing casino-style gambling in the Philippines. j8abc does not knowingly collect personal data from individuals under the age of 21.

Registration by any person below the age of 21 is expressly prohibited by j8abc's Terms and Conditions. If j8abc discovers, through KYC verification or any other means, that an account has been registered by or on behalf of a person under the age of 21, the account will be immediately closed, all data will be handled in accordance with applicable law, and the matter will be reported to PAGCOR as required.

If you have reason to believe that a person under the age of 21 has created a j8abc account, please notify j8abc immediately at [email protected] with all available details.

To exercise any of your data subject rights described in this Policy and under the Philippine Data Privacy Act, you may submit a request to j8abc using any of the following channels:

• Email: [email protected] — include "Data Privacy Request" in the subject line and describe the specific right you wish to exercise
• Live Chat: Contact j8abc support through the in-Platform live chat system and request to speak with a data privacy representative

To protect against unauthorized requests, j8abc requires all data subject requests to be submitted from the email address or mobile number registered to the account, or to be accompanied by verification of identity through an alternative means acceptable to j8abc's DPO.

j8abc will respond to all data subject requests within thirty (30) calendar days of receipt of a complete, verifiable request. Where the complexity or volume of requests requires additional time, j8abc will notify you of the extension within the initial 30-day period and provide an estimated completion date.

j8abc may update this Privacy Policy from time to time to reflect changes in applicable law, j8abc's data processing practices, or the services offered through the Platform. The revised Policy will be published at j8abc.app/privacy-policy with the updated effective date displayed at the top of the page.

Where updates to the Policy are material — meaning they significantly affect the way j8abc handles your personal data or alter your rights — j8abc will provide advance notice to all registered players via their registered mobile number or email address at least seven (7) days before the changes take effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes and your agreement to be bound by the revised terms. If you do not agree with the updated Policy, you must discontinue use of the Platform and request account closure prior to the effective date.

For all inquiries, requests, and complaints relating to the privacy of your personal data and j8abc's compliance with this Policy and the Philippine Data Privacy Act, please contact j8abc's designated Data Protection Officer:

• Email: [email protected] (subject: "Data Privacy — DPO")
• Response time: Initial acknowledgment within 2 business days; substantive response within 30 calendar days
• Live Chat: Available 24/7 via the in-Platform support system — request routing to a data privacy representative

If you are dissatisfied with j8abc's response to any data privacy request or complaint, or if you believe j8abc has failed to comply with its obligations under the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through the NPC's official complaint process. j8abc will cooperate fully with any NPC investigation or inquiry.

This Privacy Policy is effective as of 1 January 2026 and supersedes all previous privacy notices and policies published by j8abc.