kn88 Privacy Policy

This Privacy Policy ("Policy") is issued by kn88 ("kn88," "we," "us," "our"), the operator of the online casino and sports betting platform accessible at kn88.bio. This Policy applies to all personal data processed by kn88 in connection with the registration, operation, and closure of player accounts and the provision of all services on the kn88 platform, including casino games, sports betting, bingo, live dealer games, fishing games, payment processing, and customer support.

This Policy is prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and issuances of the National Privacy Commission ("NPC") of the Philippines. It also reflects applicable PAGCOR data handling requirements for licensed online gaming operators.

By registering a kn88 account, you acknowledge that you have read, understood, and agreed to the collection, use, and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, please do not register an account or use the kn88 platform.

kn88 collects the following categories of personal data from players and prospective players:

kn88 collects your personal data through the following means:

• Direct Submission: Data you provide directly during account registration (name, mobile number, date of birth), KYC document upload, deposit and withdrawal requests, and customer support interactions.
• Automated Technical Collection: Data collected automatically by the kn88 platform when you access kn88.bio or use our services, including device identifiers, IP address, browser information, and session activity logs — collected via server logs, cookies, and similar tracking technologies.
• Payment Processing Partners: Transaction confirmation data received from GCash, PayMaya, BDO, BPI, and Metrobank when you initiate or complete a deposit or withdrawal.
• KYC Verification Partners: Identity verification data from third-party identity verification service providers used to confirm your name, date of birth, and document authenticity during KYC processing.
• Game Software Providers: Game session data, round outcomes, and bet records transmitted from third-party game providers (Evolution Gaming, Pragmatic Play, PG Soft, and others) through integrated APIs.
• Publicly Available Sources: In exceptional circumstances where required for AML or fraud prevention, kn88 may reference publicly available information such as official government registries or court records to verify identity or assess risk.

kn88 processes your personal data for the following specific, declared purposes:

• Account Registration and Management: To create, verify, operate, and close your kn88 account, including enforcement of the 21+ age restriction.
• Service Delivery: To provide access to games, sports betting, bingo, live dealer tables, and all other kn88 platform features you access after logging in.
• Payment Processing: To process deposits from and withdrawals to your GCash, PayMaya, BDO, BPI, or Metrobank account, and to maintain accurate transaction records in PHP.
• KYC and Identity Verification: To verify your identity and age as required by PAGCOR regulations and Philippine AML law (Republic Act No. 9160, as amended) before processing withdrawals and in response to regulatory requests.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, collusion, unauthorized account access, and other prohibited conduct on the kn88 platform.
• Legal and Regulatory Compliance: To comply with PAGCOR reporting obligations, NPC requirements, Philippine AML/CTF obligations, and any lawful orders from competent Philippine courts or government agencies.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through live chat, email, and other support channels.
• Responsible Gaming: To implement and monitor deposit limits, session time limits, self-exclusion requests, and other responsible gaming tools on your account.
• Platform Improvement: To analyze aggregate and anonymized usage data to improve the kn88 platform, user experience, game selection, and payment processes.
• Marketing Communications: To send you promotional offers, bonus notifications, and relevant updates, subject to your marketing preferences and your ability to opt out at any time.

kn88 processes your personal data on the following lawful bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules:

• Contractual Necessity: Processing necessary to perform the kn88 Terms and Conditions to which you are a party — including account creation, game access, payment processing, and customer support.
• Legal Obligation: Processing required to comply with kn88's obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act.
• Legitimate Interests: Processing necessary for kn88's legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and service improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential analytics, where we rely on your express consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

kn88.bio uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for core platform functionality, including maintaining your login session, remembering your account preferences, and ensuring the security of your session. These cannot be disabled without impairing platform function.
• Functional Cookies: Remember your interface preferences (language, display settings) and support features like live chat widget state. Disabling these may affect your user experience.
• Analytics Cookies: Collect anonymized and aggregated data about how players use kn88 — pages visited, time spent, error occurrences — to help kn88 identify improvement opportunities. These are subject to your consent.
• Security Cookies: Used for fraud detection and prevention purposes, including identifying unusual login patterns and flagging potentially compromised sessions.

You may control non-essential cookies through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in to your kn88 account or using certain platform features.

kn88 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Disclosure of your personal data is limited to the following categories of recipients, solely for the purposes described in this Policy:

• Payment Service Providers: GCash (Mynt / G-Xchange Inc.), PayMaya (Voyager Innovations), BDO Unibank, Bank of the Philippine Islands, and Metrobank — to process your deposits and withdrawals. Each provider is bound by their own privacy policy and Philippine BSP regulations.
• KYC and Identity Verification Providers: Third-party identity verification platforms used to confirm the authenticity of government-issued identification documents submitted during KYC processing.
• Game Software Providers: Evolution Gaming, Pragmatic Play, PG Soft, and other licensed third-party game providers receive game session data through integrated APIs to deliver and record game outcomes. These providers are contractually bound to use this data only for game operation purposes.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and any Philippine court or government body with lawful authority to require disclosure.
• Fraud Prevention and AML Services: Specialized third-party providers engaged by kn88 for AML transaction monitoring, fraud scoring, and responsible gaming risk assessment.
• Technology and Infrastructure Providers: Cloud hosting, database, and cybersecurity service providers who process personal data on kn88's behalf under strict data processing agreements that prohibit independent use of your data.

Some third-party service providers used by kn88, including certain game software providers and cloud infrastructure vendors, may be based in or operate data centers in countries outside the Philippines. Where such transfers occur, kn88 ensures that appropriate safeguards are in place to protect your personal data at a standard equivalent to that required under the Data Privacy Act of 2012.

Safeguards for international data transfers implemented by kn88 include: contractual clauses incorporating DPA-equivalent data protection standards; transfer only to jurisdictions with adequate data protection frameworks; and ongoing vendor assessments to verify continued compliance with contracted security obligations.

kn88 does not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without first implementing the contractual safeguards described above and, where required, obtaining NPC approval for such transfers.

kn88 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law:

• Account and Transaction Records: Retained for a minimum of five (5) years following account closure, in compliance with the record-keeping requirements of the Anti-Money Laundering Act (RA 9160, as amended) and PAGCOR regulations.
• KYC Documentation: Retained for five (5) years after the account relationship ends or the KYC verification was conducted, whichever is later.
• Game and Betting History: Retained for five (5) years for regulatory compliance and dispute resolution purposes. Anonymized aggregate game statistics may be retained indefinitely.
• Customer Support Records: Retained for three (3) years after the closure of the relevant support interaction or complaint.
• Marketing Preferences: Retained while your account remains active or until you withdraw consent for marketing communications, at which point they are updated to reflect opt-out status.
• Technical and Security Logs: Retained for up to twelve (12) months for security investigation, fraud detection, and platform debugging purposes, after which they are deleted or permanently anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized in accordance with kn88's data disposal procedures, unless further retention is required by a court order or regulatory direction.

kn88 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All personal data stored in kn88's databases is encrypted at rest using AES-256 encryption. All data transmitted between your device and kn88 servers is protected using TLS 1.2 or higher, ensuring end-to-end confidentiality of your login credentials and transaction data.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All kn88 personnel with access to player data are subject to background screening, confidentiality obligations, and role-based access controls.
• Two-Factor Authentication: kn88 supports SMS OTP-based two-factor authentication for player accounts, adding a second verification layer that protects against unauthorized login even if credentials are compromised.
• Intrusion Detection and Monitoring: kn88's infrastructure is protected by continuous security monitoring, intrusion detection systems, and automated anomaly alerts that identify and respond to suspicious activity in real time.
• Regular Security Audits: kn88 conducts regular internal and third-party security assessments of its platform and data handling systems to identify and remediate vulnerabilities.
• Data Breach Response: In the event of a personal data breach affecting your rights and freedoms, kn88 will notify the National Privacy Commission within 72 hours of discovery, and will notify affected players without undue delay where required under the DPA and its Implementing Rules.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by kn88. These rights may be exercised by contacting kn88's Data Privacy Officer as described in Section 15:

• Right to Be Informed: The right to be told what personal data kn88 collects, why, how it is used, with whom it is shared, and how long it is kept — as set out in this Policy.
• Right to Access: The right to request a copy of the personal data kn88 holds about you, along with information about the purposes and legal bases for processing.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held in your kn88 account. You can update basic account details (mobile number, address) directly through account settings.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. This right is subject to kn88's legal obligations to retain certain records under Philippine AML and gaming regulations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. kn88 will cease marketing processing upon receipt of a valid objection.
• Right to Data Portability: The right to receive a structured, machine-readable copy of personal data you have provided to kn88 for your own account, in a format that allows you to transmit it to another service provider.
• Right to Withdraw Consent: Where kn88 processes your data based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe kn88 has processed your personal data in violation of the Data Privacy Act.

kn88 will acknowledge data subject rights requests within five (5) business days and will endeavor to fulfill or provide a reasoned response within thirty (30) calendar days of receipt, in accordance with NPC requirements.

The kn88 platform is strictly for adults who are twenty-one (21) years of age or older, in accordance with PAGCOR regulations governing casino-style online gambling in the Philippines. kn88 does not knowingly collect personal data from persons under 21 years of age.

If kn88 discovers or is notified that an account has been registered by or on behalf of a person under 21, that account will be immediately suspended, all data associated with the underage registration will be deleted to the extent permissible by law, and the matter will be escalated to the appropriate regulatory authorities as required.

Parents and guardians who believe their child under 21 has registered a kn88 account are encouraged to contact kn88's customer support immediately via live chat or by emailing [email protected]. kn88 takes underage gambling concerns very seriously and will act on such notifications within 24 hours.

With your consent, kn88 may send you promotional communications about bonuses, new games, seasonal offers, and platform updates via SMS, email, and in-platform notifications. The specific types of marketing communications you receive are determined by your preferences, which you can set and update through your account notification settings at any time.

You may opt out of all marketing communications at any time by:

• Adjusting your notification preferences in your kn88 account settings;
• Clicking the "Unsubscribe" link in any kn88 marketing email; or
• Contacting kn88 customer support and requesting removal from marketing lists.

Please note that opting out of marketing communications does not affect transactional communications — kn88 will continue to send you operational messages about your account, transaction confirmations, security alerts, and important platform updates regardless of your marketing preference settings, as these are necessary for the operation of your account.

kn88 is committed to responsible marketing practices. We do not send unsolicited gambling promotions to individuals who have self-excluded from the kn88 platform, and we comply with all applicable PAGCOR guidelines regarding the marketing of online gaming services to Filipino audiences.

kn88 may update this Privacy Policy from time to time to reflect changes in our data processing practices, platform features, applicable Philippine law, or NPC and PAGCOR regulatory requirements. The effective date at the top of this Policy will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — kn88 will notify registered players by email and/or by displaying a prominent notice on the kn88 platform for at least fourteen (14) days before the revised Policy takes effect. For minor clarifications and updates that do not affect your substantive rights, changes may be made without prior notice.

Your continued use of the kn88 platform after the effective date of a revised Policy constitutes your acknowledgment of the changes. If you disagree with any material change, you may close your account by contacting kn88 customer support before the revised Policy takes effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how kn88 has handled your personal data, please contact our Data Privacy Officer:

• Data Privacy Officer — kn88
• Email: [email protected] (plain text — not a clickable link)
• Subject Line: "Data Privacy Request — [Your Registered Name]"
• Live Chat: Available 24/7 through the kn88 platform. Ask to be connected to the Data Privacy team.
• Response Time: Acknowledgement within five (5) business days; substantive response within thirty (30) calendar days.

If you are not satisfied with kn88's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), which regulates compliance with the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available on the NPC's official website.