Z8Slot Privacy Policy

This Privacy Policy ("Policy") describes how Z8Slot ("z8slot," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the z8slot online gaming platform, including the website at z8slot.xyz, the z8slot mobile application, and all associated services (collectively, the "Platform").

This Policy applies to all personal data processed by z8slot in connection with your use of the Platform, regardless of whether you are a registered player, a visitor browsing the website, or a person who has contacted z8slot's customer support team. It covers data collected directly from you, data collected automatically through your use of the Platform, and data received from third parties in connection with your account.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. By accessing or using the z8slot Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Philippine Data Privacy Act of 2012, z8slot is the Personal Information Controller (PIC) in respect of the personal data collected and processed through the Platform. As PIC, z8slot determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

Z8slot has appointed a Data Protection Officer (DPO) who is responsible for overseeing the Platform's data protection strategy and ensuring compliance with applicable Philippine privacy laws. The DPO can be contacted through the details provided in Section 14 of this Policy.

Where z8slot engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud hosting services — those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to process personal data only on z8slot's documented instructions and in compliance with applicable law.

Z8slot collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth and age verification information
• Nationality and country of residence
• Residential address (including barangay, city/municipality, province, and ZIP code)
• Email address and mobile phone number
• Government-issued identification documents (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID)

3.2 Account and Authentication Data

• Username and encrypted password
• Security questions and answers (where applicable)
• Two-factor authentication (2FA) credentials
• Account registration date and history of account changes

3.3 Financial and Transaction Data

• Payment method details (e.g., GCash mobile number, Maya account reference, bank account name and number for BPI, BDO, Metrobank, or UnionBank)
• Deposit and withdrawal transaction history, including amounts, timestamps, and payment method used
• Bonus and promotional credit history
• Account balance information

3.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, outcomes, and session duration
• Betting history and win/loss records
• Responsible gaming tool settings (e.g., deposit limits, self-exclusion status)

3.5 Technical and Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Pages visited, features used, and time spent on the Platform
• Referral source and marketing attribution data
• Cookie identifiers and similar tracking technology data (see Section 8)

3.6 Communications Data

• Records of your communications with z8slot customer support, including live chat transcripts, email correspondence, and support ticket history
• Survey responses and feedback submitted through the Platform
• Marketing communication preferences

Z8slot collects personal data through the following means:

Directly from you, when you:

• Register a z8slot account and complete the registration form
• Submit KYC verification documents
• Make a deposit or request a withdrawal
• Contact z8slot customer support via live chat, email, or any other channel
• Participate in promotions, surveys, or competitions on the Platform
• Update your account profile or communication preferences

Automatically, through your use of the Platform, via:

• Cookies and similar tracking technologies (see Section 8)
• Server logs that record your IP address, device information, and Platform activity
• Game engine logs that record all game sessions and outcomes
• Analytics tools that measure Platform performance and user behavior

From third parties, including:

• KYC and identity verification service providers who confirm the authenticity of your identification documents
• Payment processors (e.g., GCash, Maya, BPI, BDO, Metrobank) who provide transaction confirmation and fraud screening data
• Anti-fraud and AML screening services that check your details against sanctions lists and politically exposed persons (PEP) databases
• Marketing partners who refer players to z8slot, where you have consented to such data sharing with those partners

Z8slot uses your personal data for the following purposes:

Z8slot will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

Under the Philippine Data Privacy Act of 2012, z8slot processes your personal data on the following legal bases:

• Consent: Where you have given your freely given, specific, informed, and unambiguous consent to the processing of your personal data for a particular purpose — for example, when you opt in to receive marketing communications from z8slot. You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting our DPO.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and z8slot — specifically, the Terms and Conditions you agreed to upon registration. This covers account management, payment processing, game delivery, and customer support.
• Legal Obligation: Where processing is necessary for z8slot to comply with a legal obligation under Philippine law, including AML reporting obligations under Republic Act No. 9160 (Anti-Money Laundering Act), KYC requirements under PAGCOR regulations, and data retention obligations under the DPA.
• Legitimate Interests: Where processing is necessary for the purposes of z8slot's legitimate interests — such as fraud prevention, platform security, and responsible gaming monitoring — provided that those interests are not overridden by your rights and interests as a data subject.

Z8slot does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 Service Providers and Processors

Z8slot engages trusted third-party service providers to assist in operating the Platform. These providers process personal data on z8slot's behalf and are bound by contractual data processing agreements. They include:

• Payment processors and e-wallet providers (GCash, Maya, BPI, BDO, Metrobank, UnionBank) for deposit and withdrawal processing
• KYC and identity verification providers for document authentication and age verification
• Cloud hosting and infrastructure providers for secure data storage and platform operation
• Customer support platform providers for live chat and ticketing systems
• Analytics and fraud detection service providers
• Game software providers whose games are available on the z8slot Platform

7.2 Regulatory and Law Enforcement Authorities

Z8slot may disclose your personal data to Philippine government authorities, regulatory bodies, or law enforcement agencies where required or permitted by law, including:

• The Anti-Money Laundering Council (AMLC) in connection with AML reporting obligations
• The National Privacy Commission (NPC) in connection with data breach notifications or regulatory inquiries
• PAGCOR or other gaming regulatory authorities in connection with licensing compliance
• Philippine courts or law enforcement agencies pursuant to a valid court order, subpoena, or legal process

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of z8slot's business, your personal data may be transferred to the acquiring entity as part of that transaction. Z8slot will notify affected players of any such transfer and ensure that the acquiring entity is bound by privacy obligations no less protective than those in this Policy.

Z8slot uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session security, and analyze Platform performance. A cookie is a small text file placed on your device when you visit the Platform.

Z8slot uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without significantly impairing your ability to use the Platform.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming tool configurations — to provide a more personalized experience on z8slot.
• Analytics Cookies: These cookies collect aggregated, anonymized information about how players use the Platform, including which pages are visited most frequently and how players navigate between features. This data helps z8slot improve the Platform's performance and usability.
• Marketing and Attribution Cookies: These cookies track whether you arrived at z8slot through a marketing campaign or referral link, enabling z8slot to measure the effectiveness of its promotional activities. They do not track your activity on third-party websites.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling strictly necessary cookies may prevent you from accessing certain features of the z8slot Platform, including account login.

Z8slot retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of 5 years following account closure, in compliance with Philippine AML record-keeping requirements under Republic Act No. 9160.
• Financial and Transaction Data: Retained for a minimum of 5 years from the date of each transaction, as required by Philippine AML regulations and PAGCOR compliance guidelines.
• Gaming Activity Data: Retained for a minimum of 3 years from the date of each game session, for dispute resolution, regulatory compliance, and responsible gaming monitoring purposes.
• Customer Support Communications: Retained for a minimum of 2 years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Technical and Usage Data: Retained for a maximum of 13 months in identifiable form, after which it is aggregated and anonymized for analytics purposes.
• Marketing Preferences: Retained until you withdraw your consent to marketing communications or close your account, whichever is earlier.

Upon expiry of the applicable retention period, z8slot will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where deletion is not immediately possible due to technical constraints, z8slot will isolate the data from further processing until deletion can be completed.

Z8slot implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and z8slot's servers is encrypted using 256-bit SSL/TLS encryption, ensuring that your personal and financial information cannot be intercepted during transmission.
• Encryption at Rest: Sensitive personal data stored on z8slot's servers — including government ID documents and financial account details — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within z8slot's systems is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data privacy training.
• Multi-Factor Authentication: Z8slot's internal systems require multi-factor authentication for all staff access to production environments containing personal data.
• Regular Security Audits: Z8slot conducts regular security assessments, penetration testing, and vulnerability scans of its Platform and infrastructure to identify and remediate potential security weaknesses.
• Incident Response: Z8slot maintains a documented data breach response plan. In the event of a confirmed personal data breach, z8slot will notify the National Privacy Commission within 72 hours and will inform affected players as required by the Philippine DPA.

While z8slot takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials and for notifying z8slot immediately if you suspect unauthorized access to your account.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by z8slot:

• Right to be Informed: You have the right to be informed of how your personal data is being collected and processed. This Privacy Policy fulfills z8slot's obligation to inform you.
• Right of Access: You have the right to request a copy of the personal data that z8slot holds about you, together with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that z8slot holds about you. You can update most account information directly through your z8slot account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to z8slot's legal and regulatory retention obligations.
• Right to Object: You have the right to object to the processing of your personal data where z8slot relies on legitimate interests as the legal basis for processing, or where your data is being processed for direct marketing purposes.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that z8slot transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where z8slot processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that z8slot has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact z8slot's Data Protection Officer using the contact details provided in Section 14. Z8slot will respond to all data subject requests within 15 business days of receipt, as required by the Philippine DPA. In complex cases, this period may be extended by a further 15 business days, and you will be notified of any such extension.

The z8slot Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. Z8slot does not knowingly collect personal data from individuals under the age of 21.

If z8slot becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will take immediate steps to delete that data and close the associated account. Any deposits made by underage users will be returned to the original payment source, and any winnings accumulated will be forfeited.

If you are a parent or guardian and believe that your child has registered an account on z8slot, please contact our Data Protection Officer immediately using the details in Section 14. Z8slot will investigate and take appropriate action within 48 hours of receiving such a report.

Z8slot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The "Last Updated" date at the top of this Policy will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect your rights or the way z8slot processes your personal data — z8slot will notify registered players via email or prominent in-platform notification at least 7 days before the changes take effect. For non-material changes, the updated Policy will be posted on the Platform and will take effect immediately upon posting.

Your continued use of the z8slot Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure in accordance with the Terms and Conditions.

Z8slot recommends that all players review this Privacy Policy periodically to stay informed of how their personal data is being protected and used.

If you have any questions, concerns, or requests relating to this Privacy Policy or z8slot's processing of your personal data, please contact our Data Protection Officer through the following channels:

When contacting the DPO, please include your full name, registered email address, and a clear description of your request or concern. For data subject access requests, please include "Data Subject Request" in the subject line of your email to ensure prompt routing to the correct team.

If you are not satisfied with z8slot's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.