Privacy Policy — cf8bet Philippines

1.1 Data Controller. cf8bet ("we," "us," or "our") is the data controller responsible for the personal information collected through the cf8bet platform accessible at cf8bet.cam. cf8bet operates under a valid PAGCOR license and in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

1.2 Scope of This Policy. This Privacy Policy applies to all personal data collected through the cf8bet website, mobile browser interface, customer support channels, and any other means by which you interact with cf8bet as a registered or prospective player. It covers residents of the Philippines and any individual whose personal data is processed by cf8bet in connection with providing gaming and sports betting services.

1.3 Relationship to Terms and Conditions. This Privacy Policy forms part of the binding agreement between you and cf8bet, alongside the Terms & Conditions. Terms not separately defined herein carry the meanings assigned in the Terms and Conditions.

2.1 Registration Data. When you create a cf8bet account, we collect the information you provide during the registration process, which includes:

• Full legal name as it appears on a government-issued Philippine identification document;
• Date of birth (for age verification — must confirm you are 21 years or older);
• Residential address in the Philippines;
• Email address;
• Philippine mobile number;
• Chosen username and encrypted account password.

2.2 Identity Verification (KYC) Data. To comply with PAGCOR's Know Your Customer requirements and the Anti-Money Laundering Act (Republic Act No. 9160, as amended), we may collect copies of:

• Government-issued photo identification (Philippine passport, driver's license, SSS card, UMID, Philsys National ID, or equivalent);
• Proof of residential address (utility bill, bank statement, or government correspondence not older than three months);
• Selfie or photograph for facial verification where required;
• Source of funds documentation where transaction volumes trigger AML review thresholds.

2.3 Financial Transaction Data. cf8bet records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method details (e-wallet identifiers, masked card numbers), transaction timestamps, and processing outcomes.

2.4 Gaming Activity Data. We collect records of your gaming activity on the cf8bet platform, including games played, wager amounts, session durations, bonus usage, and win/loss outcomes. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory reporting.

2.5 Technical and Device Data. cf8bet automatically collects certain technical data when you access the platform, including IP address, device type and operating system, browser type and version, session timestamps, and approximate geographic location derived from IP address.

2.6 Customer Support Communications. Records of your interactions with cf8bet's customer support team — including live chat transcripts, email correspondence, and any documentation submitted during support requests — are retained for quality assurance, dispute resolution, and legal compliance purposes.

cf8bet uses your personal data only for the purposes described in this Policy. The following table summarizes the primary uses of data collected from cf8bet players:

3.1 Marketing Communications. cf8bet may send you promotional emails or SMS notifications about offers, bonuses, and platform updates where you have consented to receive such communications at the time of registration or subsequently via your account settings. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings or by contacting support.

3.2 No Automated Decision-Making with Legal Effect. cf8bet does not use fully automated decision-making processes that produce legal or similarly significant effects against individual players without human review. Account suspension decisions based on automated fraud detection are reviewed by a member of cf8bet's compliance team before enforcement.

Under the Data Privacy Act of 2012 and its implementing rules, cf8bet processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and cf8bet — i.e., operating your gaming account, processing deposits and withdrawals, and delivering platform services;
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended by RA 10365), the Terrorism Financing Prevention and Suppression Act, and NPC regulations;
• Legitimate Interests: Processing necessary for cf8bet's legitimate business interests where these do not override your fundamental rights — specifically, fraud detection, platform security, abuse prevention, and aggregated analytics for service improvement;
• Consent: Processing based on your explicit, freely given consent, specifically in relation to marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5.1 Regulatory Authorities. cf8bet is legally required to share certain player data with Philippine regulatory bodies, including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC), upon lawful request or as part of mandatory regulatory reporting obligations.

5.2 Payment Service Providers. Your financial transaction data is shared with payment processors — including GCash, PayMaya, DragonPay, and card network processors — solely to the extent necessary to execute your deposit and withdrawal requests. Each payment partner operates under its own privacy policy and applicable Philippine financial regulations.

5.3 Gaming Software Providers. cf8bet's games are delivered under license from third-party software providers. Certain technical and gaming activity data may be shared with these providers for game integrity verification, dispute resolution, and regulatory audit purposes. These providers are bound by data processing agreements requiring them to handle your data only as directed by cf8bet.

5.4 Identity Verification Services. Where cf8bet uses third-party KYC and identity verification services to process your identification documents, those providers handle your data under strict contractual obligations consistent with Philippine data privacy law.

5.5 Law Enforcement. cf8bet may disclose personal data to law enforcement or judicial authorities in the Philippines where required to do so by court order, legal process, or where cf8bet reasonably believes disclosure is necessary to prevent crime or protect the rights, property, or safety of cf8bet, its players, or the public.

6.1 Use of Cookies. cf8bet uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser. They allow cf8bet to recognize your device, maintain your login session, remember your preferences, and collect analytics data.

6.2 Types of Cookies Used. cf8bet uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function — including session management, authentication state, and security tokens. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Remember your platform preferences such as language settings, display options, and notification preferences;
• Analytics Cookies: Collect anonymized data about how players use cf8bet, including pages visited, session duration, and feature usage, to help us improve the platform experience;
• Security Cookies: Used to detect and prevent fraud, unauthorized access, and bot activity on the platform.

6.3 Cookie Management. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use cf8bet's gaming features. cf8bet does not use third-party advertising cookies or behavioral tracking for marketing purposes not directly related to platform operations.

7.1 Technical Security. cf8bet implements industry-standard technical security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and cf8bet's servers;
• Encrypted storage of sensitive personal data at rest, including financial records and identity documents;
• Multi-factor authentication options for player accounts, including SMS OTP and TOTP-based 2FA;
• Regular penetration testing and vulnerability assessments of platform infrastructure;
• Intrusion detection and real-time security monitoring systems.

7.2 Organisational Security. Access to personal data within cf8bet is restricted on a strict need-to-know basis. Employees and contractors with access to personal data are bound by confidentiality obligations. cf8bet conducts regular data privacy training for personnel handling personal information.

7.3 Data Breach Response. In the event of a personal data breach that poses a real risk to your rights and freedoms, cf8bet will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

8.1 Retention Principles. cf8bet retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. We apply the following retention guidelines:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as mandated by the Anti-Money Laundering Act and its implementing regulations;
• KYC Documents: Retained for the account lifecycle plus five (5) years post-closure, consistent with AMLC reporting requirements;
• Customer Support Communications: Retained for two (2) years from the date of the interaction, unless the subject matter involves an active legal dispute or regulatory investigation;
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution, responsible gaming monitoring, and regulatory audit purposes;
• Technical and Device Data: Retained for twelve (12) months, after which it is anonymized or deleted.

8.2 Deletion Upon Account Closure. Following the expiry of applicable mandatory retention periods after account closure, cf8bet will securely delete or irreversibly anonymize your personal data so that it can no longer be associated with you.

As a data subject under the Data Privacy Act of 2012, you hold the following rights in relation to your personal data processed by cf8bet. These rights may be exercised by contacting cf8bet's Data Protection Officer through the channels described in Section 13.

9.1 Response Timeframes. cf8bet will acknowledge data subject requests within five (5) business days and will endeavor to fulfil substantiated requests within fifteen (15) business days. Complex or volume requests may require up to thirty (30) business days, in which case cf8bet will inform you of the extended timeline.

9.2 Complaints to the NPC. If you believe cf8bet has failed to handle your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. cf8bet will cooperate fully with any NPC investigation.

10.1 Age Restriction. cf8bet is strictly limited to individuals who are twenty-one (21) years of age or older in accordance with PAGCOR's licensing conditions. cf8bet does not knowingly collect personal data from individuals under 21 years of age.

10.2 Underage Registration. If cf8bet discovers or has reasonable grounds to believe that a registered account belongs to an individual under 21 years of age, the account will be suspended immediately, all associated data will be reviewed, and any deposits will be refunded to the source payment method following verification. The account will then be permanently closed.

10.3 Parental Notification. If you are a parent or guardian and believe that a minor under your care has registered on cf8bet, please contact our support team immediately via live chat or email. cf8bet will investigate and take appropriate action with priority.

11.1 Transfer Circumstances. In the course of providing platform services, certain personal data may be processed by cf8bet's third-party service providers — including gaming software providers, payment processors, and cloud infrastructure partners — whose servers may be located outside the Philippines.

11.2 Safeguards. Where personal data is transferred outside the Philippines, cf8bet ensures that appropriate safeguards are in place, including contractual data processing agreements incorporating data protection standards consistent with those required by the Data Privacy Act of 2012 and NPC regulations. cf8bet will not transfer personal data to jurisdictions that do not provide an adequate level of protection without implementing appropriate safeguards.

11.3 Player Notification. You may request information about the specific countries to which your data may be transferred and the safeguards in place by contacting cf8bet's Data Protection Officer. Such requests will be responded to in accordance with the timelines specified in Section 9.1.

12.1 Right to Amend. cf8bet reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. Material changes will be communicated to registered players via email notification to the registered address or via prominent notice on the cf8bet platform no less than seven (7) days prior to the effective date.

12.2 Continued Use. Your continued use of the cf8bet platform following the effective date of any update to this Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not accept the updated Policy, please discontinue use of the platform and contact us to close your account.

12.3 Version Control. The effective date displayed at the top of this document identifies the current version of the Privacy Policy. Prior versions are available upon request by contacting cf8bet's Data Protection Officer.

For all data privacy inquiries, data subject access requests, consent withdrawals, or complaints, please contact cf8bet's Data Protection Officer through the following channels:

• Live Chat Support: Available 24/7 directly on the cf8bet platform. Identify your inquiry as a "Data Privacy Request" and a DPO-qualified team member will handle your case. Agents are fluent in Tagalog and English.
• Email: [email protected] — please include "Privacy Policy" or "Data Subject Request" in your email subject line to ensure priority routing to the DPO team. Responses are provided within two (2) business hours during standard operating hours.

For regulatory complaints and escalations beyond cf8bet's internal resolution process, you may contact:

• National Privacy Commission (NPC): The NPC oversees data privacy compliance in the Philippines. Information on filing complaints is published on the NPC's official website.
• PAGCOR Player Complaints: Gaming-related disputes may be escalated to PAGCOR under its published player complaint resolution procedures.