ki88 Privacy Policy

This Privacy Policy applies to all personal information collected by ki88 in connection with the operation of the ki88 online gaming platform, accessible at ki88.vu, including all associated mobile applications, customer support channels, promotional communications, and payment processing systems.

This Policy applies to:

• Registered ki88 Account holders, including all Filipino players and international users who create an Account on the ki88 platform;
• Visitors who access the ki88 website or mobile app without registering an Account;
• Individuals who contact ki88's customer support team via live chat, email, or any other communication channel;
• Individuals whose information ki88 receives from third-party payment providers (such as GCash, Maya, BPI, or BDO) in connection with deposit or withdrawal transactions.

This Policy does not apply to the data practices of third-party websites, payment processors, game developers, or other external services that may be linked to or integrated with the ki88 platform. ki88 is not responsible for the privacy practices of third parties.

For the purposes of the Data Privacy Act of 2012 and applicable data protection law, ki88 is the data controller responsible for personal information collected through the ki88 platform. As data controller, ki88 determines the purposes for which your personal information is processed and the means by which that processing takes place.

ki88 has designated a Data Protection Officer (DPO) who is responsible for overseeing ki88's compliance with applicable data protection law, handling data subject requests, and serving as the primary point of contact for privacy-related inquiries. Details of ki88's DPO are set out in Section 16 of this Policy.

Where ki88 engages third-party service providers to process personal data on its behalf — including payment processors, KYC verification service providers, and cloud infrastructure providers — those service providers act as data processors under ki88's instruction and are bound by appropriate contractual data processing agreements.

ki88 collects personal information from and about you through several channels. The specific categories of information collected vary depending on whether you are a registered Account holder, an unregistered visitor, or a person contacting ki88's support team.

When you access the ki88 platform — whether through a web browser or mobile application — ki88 automatically collects certain technical and behavioural data, including:

• Device Information: Device type, operating system version, browser type and version, screen resolution, device identifiers;
• Network Information: IP address, approximate geographic location derived from IP address, internet service provider, mobile network operator;
• Usage Data: Pages visited, game sessions played, wager amounts, session duration, navigation paths, features accessed;
• Log Data: Server logs including access timestamps, error logs, login events, and security-related events such as failed login attempts;
• Cookie Data: Information stored in cookies and similar tracking technologies as described in Section 7 of this Policy.

ki88 may receive personal information about you from the following third-party sources:

• Payment Providers: GCash, Maya, and Philippine banking institutions may transmit transaction data, account verification status, and payment confirmation details to ki88 in connection with processing your deposits and withdrawals;
• KYC Service Providers: Third-party identity verification services engaged by ki88 may provide verification results, document authentication outcomes, and liveness check results;
• Fraud Prevention Services: Specialist fraud detection providers may share risk scoring data and flagged activity indicators with ki88 to protect the integrity of the platform.

ki88 uses the personal information it collects for the following specific purposes. For each purpose, ki88 identifies the applicable legal basis in Section 5 of this Policy:

ki88 processes your personal information only where a lawful basis for that processing exists under the Data Privacy Act of 2012 (RA 10173). The applicable legal bases for ki88's data processing activities are as follows:

• Consent (Section 12(a), RA 10173): Where you have given ki88 your explicit consent to process your personal information for a specific purpose — such as receiving marketing communications — ki88 relies on your consent as the legal basis for that processing. You may withdraw your consent at any time by contacting ki88 support or adjusting your Account notification settings.
• Contractual Necessity (Section 12(b), RA 10173): Processing that is necessary for the performance of the contract between you and ki88 — including Account registration, payment processing, game provision, and KYC verification — is carried out on the basis that it is necessary to fulfil ki88's contractual obligations to you.
• Legal Obligation (Section 12(c), RA 10173): Processing that is necessary for ki88 to comply with a legal obligation — including AML reporting, PAGCOR compliance, and responses to lawful government authority requests — is carried out on the basis of legal obligation.
• Legitimate Interests (Section 12(f), RA 10173): Processing for fraud prevention, platform security, dispute resolution, and internal analytics is carried out on the basis of ki88's legitimate interests in operating a secure, fair, and compliant gaming platform, provided those interests are not overridden by your fundamental rights and freedoms.

ki88 does not sell your personal information to third parties. ki88 shares your personal information only in the following defined circumstances:

ki88 engages carefully selected third-party service providers to assist in operating the ki88 platform. These providers act as data processors under ki88's instruction and are contractually prohibited from using your personal information for any purpose other than providing the contracted service to ki88. Categories of service providers include:

• Payment processing providers (GCash, Maya, Philippine interbank payment network operators);
• KYC and identity verification service providers;
• Cloud infrastructure and hosting providers;
• Fraud detection and risk management service providers;
• Customer support platform providers;
• Game content providers (JILI, Pragmatic Play, PG Soft, Evolution Gaming, and other licensed studios).

ki88 may disclose your personal information to government authorities, regulators, law enforcement agencies, or courts when required to do so by applicable Philippine law, PAGCOR regulatory directive, AMLC reporting obligation, valid court order, or lawful government authority request. ki88 will, where legally permissible, notify you of any such disclosure.

In the event of a merger, acquisition, restructuring, or sale of all or part of ki88's business, your personal information may be transferred to the acquiring entity as part of that transaction. ki88 will notify registered Players of any such transfer and the data protection terms applicable thereafter.

ki88 uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) on the ki88 website and mobile application to provide core platform functionality, improve user experience, and support security and analytics operations.

You may control non-essential cookies through your browser settings. Most modern browsers — including Chrome, Safari, Firefox, and the browsers built into common Philippine Android devices — allow you to block or delete cookies through the browser's privacy or settings menu. Please note that disabling essential or security cookies may impair the functionality of the ki88 platform and prevent you from logging into your Account.

ki88 retains personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with applicable legal retention obligations, and to resolve any disputes or enforce any agreements.

Upon the expiry of the applicable retention period, ki88 will securely delete or anonymize your personal information in accordance with its internal data destruction procedures, unless a legal obligation requires its continued retention.

ki88 implements a comprehensive set of technical and organizational security measures designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and ki88's servers is protected by 256-bit SSL/TLS encryption. This applies to all platform interactions including login, deposit, withdrawal, and gameplay;
• Encryption at Rest: Sensitive personal data stored in ki88's databases — including identity documents and payment information — is encrypted at rest using industry-standard AES-256 encryption;
• Password Security: ki88 stores passwords as cryptographic hashes using a modern, salted hashing algorithm. Ki88 employees cannot retrieve or view your plaintext password under any circumstances;
• Access Controls: Access to personal data held in ki88's systems is restricted to authorized personnel on a need-to-know basis and is subject to role-based access controls and multi-factor authentication;
• Security Monitoring: ki88 operates continuous security monitoring systems that detect and alert on anomalous access patterns, potential intrusion attempts, and unusual transaction activity;
• Security Testing: ki88 conducts periodic security assessments including vulnerability scanning and penetration testing to identify and remediate security weaknesses before they can be exploited.

Under the Data Privacy Act of 2012 (RA 10173), Filipino players and all registered ki88 Account holders have the following rights with respect to their personal information held by ki88. You may exercise any of these rights by contacting ki88's Data Protection Officer using the details in Section 16:

ki88 will respond to all verified data subject rights requests within 30 calendar days of receipt. For complex requests, ki88 may extend this period by a further 30 days with notice to you. Ki88 may request proof of identity before processing any data subject rights request to prevent unauthorized access to your personal information.

The ki88 platform is strictly intended for adults who are 21 years of age or older, in accordance with the PAGCOR-mandated minimum age for casino and gambling activities in the Philippines. ki88 does not knowingly collect personal information from any person under 21 years of age.

ki88's registration process includes age declaration requirements and KYC identity verification procedures designed to identify and prevent underage access. Where ki88 discovers that an Account has been registered by a person under 21 years of age, ki88 will:

• Immediately suspend the Account;
• Refund any deposited funds to the registered payment method;
• Securely delete all personal information collected in connection with the Account, except to the extent retention is required by law;
• Where appropriate, report the matter to PAGCOR in accordance with regulatory requirements.

ki88 primarily processes the personal information of Filipino players within the Philippines or in countries that provide a comparable level of data protection. Where personal information is transferred to a country outside the Philippines in connection with ki88's use of third-party service providers — such as cloud infrastructure providers or internationally hosted KYC services — ki88 ensures that such transfers are subject to appropriate safeguards in accordance with Section 21 of the Data Privacy Act of 2012.

Appropriate safeguards for cross-border transfers may include:

• Contractual clauses approved by the National Privacy Commission;
• Transfers to countries or organizations recognized by the NPC as providing an adequate level of data protection;
• Your explicit consent where required by applicable law.

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting ki88's Data Protection Officer.

The ki88 platform integrates game content from third-party developers including JILI, Pragmatic Play, PG Soft, Evolution Gaming, SA Gaming, and other licensed studios. When you access and play games from these providers through ki88, certain technical data — including your session identifier and gameplay data — may be transmitted to those providers' servers for game execution purposes.

ki88's game provider partners are contractually required to process player data only for the purpose of delivering game content and in accordance with applicable data protection standards. However, ki88 is not responsible for the independent data practices of third-party game developers beyond their obligations to ki88 under applicable contracts.

Similarly, ki88's platform may contain links to payment provider interfaces (GCash, Maya, BPI internet banking, etc.). Your interactions with those payment provider interfaces are governed by the privacy policies of the respective payment providers and are not covered by this ki88 Privacy Policy.

With your consent, ki88 may send you promotional communications including bonus offers, new game announcements, special event promotions (e.g., tied to PBA finals, major boxing events, or Philippine national holidays), and platform updates via SMS to your registered Philippine mobile number or through in-platform notifications.

ki88 will not send you marketing communications without your prior consent. At the time of Account registration, ki88 gives you the option to opt in or opt out of marketing communications. You may change your marketing communication preferences at any time by:

• Adjusting your notification settings within your ki88 Account dashboard;
• Contacting ki88 support via live chat or email at [email protected] with a request to opt out of all marketing communications.

Please note that opting out of marketing communications does not affect ki88's right to send you transactional communications — such as deposit confirmations, withdrawal notifications, Account security alerts, and updates to these Terms or this Privacy Policy — which are sent on the basis of contractual or legal necessity rather than consent.

ki88 reserves the right to update this Privacy Policy at any time to reflect changes in ki88's data practices, applicable law, or NPC guidance. When material changes are made to this Policy, ki88 will:

• Update the "Last Reviewed" date at the top of this document;
• Publish the updated Policy on the ki88 website at ki88.vu/privacy-policy;
• Where required by applicable law or where the changes materially affect your rights, notify registered Players via in-platform notice or through your registered contact information.

Your continued use of the ki88 platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the updated terms. Ki88 encourages you to review this Policy periodically to stay informed of how ki88 protects your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or ki88's data protection practices, please contact ki88's Data Protection Officer through any of the following channels. All privacy-related inquiries will be handled confidentially and in accordance with ki88's data subject request procedures.

This Privacy Policy was last reviewed and updated in January 2026. The most current version is always available at ki88.vu/privacy-policy. For related legal documents, please also review ki88's Terms & Conditions and Responsible Gaming Policy.