8mbet Privacy Policy

1 Introduction

8mbet ("we," "us," "our," or "the Company") operates the online gaming platform accessible at 8mbet.cam, providing sports betting, live dealer casino games, slots, bingo, and related entertainment services to players in the Philippines. The 8mbet platform is operated under the PAGCOR regulatory framework.

This Privacy Policy applies to all personal data collected and processed by 8mbet in connection with your use of our website, mobile site, customer support channels, and any other digital touchpoints associated with the 8mbet brand. It has been prepared in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations.

By registering an account on the 8mbet platform, making a deposit, placing a bet, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the 8mbet platform.

This Policy should be read alongside our Terms and Conditions, which together govern your use of the 8mbet platform. In the event of any conflict between this Policy and the Terms and Conditions on a privacy-related matter, this Privacy Policy shall prevail.

2 Data We Collect

8mbet collects personal data in two ways: data you provide directly to us, and data we collect automatically through your interaction with our platform.

2.1 Data You Provide Directly

When you register an account, complete identity verification, make a deposit or withdrawal, or contact our support team, you may provide us with the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, gender, and a copy of your government-issued ID (Philippine passport, SSS ID, UMID, driver's licence, or PhilSys national ID).
• Contact Data: Registered Philippine mobile number (Globe, Smart, or DITO), email address, and residential address including barangay, city/municipality, province, and region.
• Financial Data: GCash account number, PayMaya (Maya) account number, bank account name and number (BPI, BDO, Metrobank), credit or debit card details (last four digits and card type only — full card numbers are not stored by 8mbet), and transaction history on our platform.
• Account Data: Username, hashed password, account preferences, responsible gaming settings, and communication preferences.
• Verification Data: Selfie photographs taken during KYC verification, proof of address documents (utility bills, bank statements issued within 90 days), and source of funds declarations where applicable.
• Support Data: Records of communications with our customer support team via live chat, including chat transcripts and timestamps.

2.2 Data We Collect Automatically

When you access and use the 8mbet platform, our systems automatically collect certain technical and behavioural data, including:

• Device and Technical Data: IP address, device type and model, operating system version, browser type and version, screen resolution, and mobile network operator.
• Usage Data: Pages and game categories visited, bet amounts and outcomes, session duration, login timestamps and frequency, and navigation paths through the platform.
• Location Data: General geolocation data derived from your IP address, used to verify that you are accessing the platform from within the Philippines and to comply with geographic access restrictions.
• Cookie and Tracking Data: Data collected via cookies, web beacons, and similar technologies as described in Section 5 of this Policy.

2.3 Data from Third Parties

In certain circumstances, 8mbet may receive personal data about you from third parties, including:

• Identity verification and KYC service providers used to validate the authenticity of your submitted documents;
• Payment service providers such as GCash, PayMaya, and banking partners, who confirm the status of deposit and withdrawal transactions;
• PAGCOR and other regulatory bodies, where applicable law requires us to cross-reference player data for compliance purposes;
• Fraud prevention and anti-money laundering screening services.

3 How We Use Your Data

8mbet uses your personal data only for specific, declared purposes. The table below summarises the primary purposes for which we process your data and the type of data used for each:

8mbet does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review, except where required for fraud screening — in which case you retain the right to request human review of any decision.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 8mbet relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, payment processing, and providing gaming services.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and tax reporting obligations.
• Legitimate Interests: Processing necessary for our legitimate interests in preventing fraud, protecting the integrity of our platform, conducting analytics to improve our services, and ensuring the responsible operation of our business — provided these interests are not overridden by your rights.
• Consent: Processing for marketing communications and certain analytics activities, where we have obtained your freely given, specific, and informed consent. You may withdraw consent at any time by updating your communication preferences in your 8mbet Account Settings or by contacting our support team.

5 Cookies & Tracking Technologies

The 8mbet platform uses cookies and similar tracking technologies to operate our services effectively, enhance your user experience, and comply with our legal and regulatory obligations. A cookie is a small text file stored on your device when you access a website.

5.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function correctly — including maintaining your login session, remembering your account preferences, and enabling secure payment flows. These cookies cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Enable enhanced features such as remembering your preferred language, game lobby layout, and responsible gaming settings between sessions.
• Analytical Cookies: Help us understand how players navigate and use the 8mbet platform so we can identify technical issues and improve the overall experience. Data collected via analytical cookies is aggregated and anonymised.
• Security Cookies: Used to detect and prevent fraudulent activity, identify unusual login patterns, and verify that users accessing the platform are genuine human players rather than automated bots.

5.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in to your 8mbet account and using our services. Instructions for managing cookies in commonly used browsers are available on the respective browser's support pages.

6 Sharing Your Data

8mbet does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

6.1 Service Providers

We engage trusted third-party service providers to support our operations, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, PESONet, Visa, Mastercard), cloud hosting providers, platform security and anti-fraud vendors, and customer support software providers. All service providers are bound by contractual data processing agreements that prohibit them from using your data for any purpose other than delivering services to 8mbet.

6.2 Regulatory Authorities

8mbet is required by law to disclose certain player data to PAGCOR and other competent Philippine government authorities — including the Anti-Money Laundering Council (AMLC) and the Bureau of Internal Revenue (BIR) — upon lawful request or as part of mandatory regulatory reporting. Such disclosures are made strictly in accordance with applicable law and are not treated as a breach of your privacy rights under the DPA.

6.3 Law Enforcement

Where required by a valid court order, subpoena, or other legally binding directive from Philippine law enforcement authorities, 8mbet will disclose the minimum personal data necessary to comply with such an order. We will endeavour to notify you of such a disclosure to the extent permitted by law.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of 8mbet's business assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the privacy practices of the new entity before it takes effect, and you will retain all rights available to you under the DPA.

7 Data Retention

8mbet retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by Philippine law or PAGCOR regulations. The following general retention schedules apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where data must be retained for legal compliance purposes beyond your account closure date, it will be stored in restricted-access archives and will not be used for any operational purpose.

8 Data Security

8mbet implements a comprehensive set of technical, organisational, and physical security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and the 8mbet platform is encrypted using TLS 1.2 or higher. This applies to all web browsing sessions, login processes, payment transactions, and API communications.
• Encryption at Rest: Sensitive personal data stored on 8mbet's servers — including identity documents and financial information — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within 8mbet's internal systems is restricted on a role-based, need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security awareness training.
• Password Security: Account passwords are stored in a one-way hashed format using industry-standard algorithms. 8mbet never stores your password in plaintext and will never ask for your password via email, chat, or telephone.
• Two-Factor Authentication: 8mbet supports and encourages the use of two-factor authentication (2FA) via OTP sent to your registered Philippine mobile number for all account logins.
• Penetration Testing and Vulnerability Assessments: Our platform undergoes regular security assessments by independent third-party security professionals to identify and remediate potential vulnerabilities before they can be exploited.
• Incident Response: 8mbet maintains a documented data breach response procedure. In the event of a confirmed breach affecting your personal data, we will notify the National Privacy Commission and affected players within the timeframes required by the DPA.

9 Your Rights Under Philippine Law

The Philippine Data Privacy Act of 2012 grants you the following rights with respect to your personal data held by 8mbet. To exercise any of these rights, please contact our support team via live chat on the 8mbet platform:

9.1 Right to Be Informed

You have the right to be informed about how your personal data is collected and processed. This Privacy Policy fulfils that obligation. If you have specific questions not addressed here, our support team is available 24/7.

9.2 Right of Access

You have the right to request a copy of the personal data that 8mbet holds about you, along with information about how it is being used. We will respond to access requests within 30 calendar days. A copy of your data may be provided in a commonly used electronic format.

9.3 Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. You can update certain information directly within your Account Settings. For changes to identity data (name, date of birth), please contact our support team and provide supporting documentation.

9.4 Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent (for consent-based processing). Please note that this right is not absolute — we are required to retain certain data for the periods specified in Section 7 to comply with PAGCOR, AMLA, and BIR regulations.

9.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, in which case we will assess whether our interests are overridden by your rights in the specific circumstances.

9.6 Right to Data Portability

Where technically feasible, you may request that personal data you have provided to 8mbet be delivered to you — or to another data controller you designate — in a structured, commonly used, machine-readable format.

9.7 Right to Lodge a Complaint

If you believe that 8mbet has processed your personal data in violation of the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Details of the NPC complaints process are available on the NPC's official website.

10 Cross-Border Data Transfers

In certain circumstances, the operation of the 8mbet platform may involve the transfer of your personal data to servers or service providers located outside the Philippines — for example, where we use cloud infrastructure or third-party software solutions hosted in other jurisdictions.

Any such cross-border transfer of personal data is carried out in compliance with Section 21 of the Philippine Data Privacy Act and NPC Circular No. 16-01 on cross-border data transfers. Specifically, 8mbet ensures that:

• The recipient country provides an adequate level of protection for personal data, comparable to the standards of the Philippine DPA; or
• We have entered into binding contractual arrangements with the receiving entity that impose DPA-equivalent data protection obligations; and
• The transfer is limited strictly to the data necessary for the specific processing purpose, and is conducted securely using encrypted transmission channels.

Where personal data is processed by third-party providers outside the Philippines, those providers act as data processors under 8mbet's instructions and are prohibited from using your data for their own purposes.

11 Children & Minors

8mbet does not knowingly collect personal data from persons under the age of 21. Our registration process requires users to confirm their date of birth, and all accounts are subject to KYC age verification before withdrawal privileges are activated.

If 8mbet becomes aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete the personal data concerned, and notify PAGCOR as required. If you are a parent or guardian and believe that a person under 21 in your care has registered an account on 8mbet, please contact our support team immediately via live chat so that the matter can be investigated and resolved.

12 Third-Party Links

The 8mbet platform may contain references or links to game providers or content partners whose privacy practices differ from our own. Where such third-party content is accessible through the 8mbet platform, please be aware that:

• 8mbet is not responsible for the privacy practices or content of any third-party service accessible via our platform;
• This Privacy Policy applies solely to personal data processed by 8mbet in connection with the 8mbet platform and services;
• We recommend that you review the privacy policy of any third-party service you access separately to understand how they process your data.

13 Changes to This Privacy Policy

8mbet reserves the right to update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or the services we offer. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page;
• Notify registered players via the mobile number or email address associated with their 8mbet account at least 7 days before the changes take effect, where the changes materially affect players' rights or the way we handle their data;
• Where required by the DPA, seek fresh consent from players for any new processing activities that are not covered by the consents already obtained.

Your continued use of the 8mbet platform after any revised Privacy Policy takes effect constitutes your acceptance of the updated terms. We encourage you to review this page periodically to stay informed of how 8mbet protects your privacy.

14 Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your rights under the Philippine Data Privacy Act, or have a concern about how 8mbet has handled your personal data, please reach out to us through the following channel:

We will acknowledge your request within 5 business days and aim to resolve all privacy-related inquiries within 30 calendar days. For complex requests, we will keep you informed of progress and any anticipated delays.

If you are not satisfied with our response, or believe that 8mbet has not complied with the Philippine Data Privacy Act, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government authority responsible for administering and implementing the DPA and adjudicating complaints from data subjects.

For responsible gaming concerns — including self-exclusion requests or support for problem gambling — please visit our Responsible Gaming page, which includes guidance on available tools and support resources.