680k Casino Privacy Policy

This Privacy Policy (hereinafter, the "Policy") describes how 680k Casino (referred to as "680k", "we", "us", or "our") collects, processes, stores, shares, and protects the personal data of individuals (referred to as "you", "User", "Member", or "Data Subject") who access or use the 680k online gaming platform at 680k.bio and any related digital interfaces.

1 About This Privacy Policy

1.1  This Policy applies to all personal data processed by 680k in connection with its gaming platform, including data collected through the 680k website, mobile web interface, customer support channels, and any third-party integrations directly connected to the 680k platform (such as payment gateways).

1.2  This Policy should be read alongside the 680k Terms & Conditions and Responsible Gaming Policy, which collectively govern your relationship with the platform.

1.3  By creating a 680k Account or continuing to use the platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein, to the extent that consent is the applicable legal basis for such processing.

1.4  680k acts as the Personal Information Controller with respect to the data described in this Policy — meaning we determine the purposes and means of processing your personal data.

2 Definitions

• Personal Data — any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual.
• Sensitive Personal Information — personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic or sexual life, and including government-issued identification numbers, financial data, and legal proceedings.
• Processing — any operation performed on personal data, including collection, recording, organisation, storage, updating, retrieval, consultation, use, disclosure, erasure, or destruction.
• Data Subject — the natural person whose personal data is being processed; in this context, you as a 680k User.
• Personal Information Controller (PIC) — a natural or juridical person, or any other body, who controls the collection, holding, processing, or use of personal data. 680k is the PIC for data processed under this Policy.
• Personal Information Processor (PIP) — a natural or juridical person, or any other body, to whom a PIC may outsource or instruct the processing of personal data pertaining to a data subject.
• KYC — Know Your Customer; the identity verification process conducted to confirm a User's identity in compliance with applicable regulations.
• NPC — National Privacy Commission, the independent Philippine government body responsible for administering and implementing the Data Privacy Act.

3 Personal Data We Collect

680k collects the following categories of personal data. Data is tagged below to indicate whether it is required for account functionality, optional, or collected automatically:

4 How We Collect Your Data

680k collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when registering a 680k Account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account profile;
• Automated collection: Technical and device data collected automatically when you access the 680k platform, including through cookies, log files, and session analytics;
• Payment providers: Transaction confirmation data received from payment processors such as GCash, PayMaya, BDO, BPI, and Metrobank when you conduct financial transactions on 680k;
• Third-party identity verification services: Where 680k uses third-party KYC or anti-fraud service providers, data may be validated against or supplemented by records maintained by those services in compliance with applicable regulations;
• Regulatory sources: In limited circumstances, 680k may receive data from PAGCOR or other Philippine regulatory authorities in connection with compliance obligations.

5 Purposes of Processing

680k processes your personal data for the following specific, legitimate purposes:

1. Account creation and management — to register your 680k Account, authenticate your identity at login, and maintain your account profile;
2. Identity verification (KYC) — to verify that you are at least 21 years of age and to confirm your identity in compliance with PAGCOR licensing requirements and Philippine AML regulations;
3. Financial transaction processing — to process deposits, withdrawals, bonus credits, cashback payments, and other financial transactions through your registered payment methods;
4. Gaming service delivery — to operate the 680k platform, provide access to games, record betting activity, calculate results, and maintain gaming fairness;
5. Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other forms of misconduct;
6. Regulatory compliance — to meet obligations under PAGCOR regulations, the Data Privacy Act of 2012, and applicable Philippine AML and anti-terrorism financing laws;
7. Responsible gaming — to operate responsible gaming tools including deposit limits, self-exclusion, and session management, and to monitor play patterns for problem gambling indicators;
8. Customer support — to respond to your queries, resolve disputes, and provide technical and account support in English and Filipino;
9. Marketing communications — to send promotional offers, bonus notifications, and event updates to Users who have opted in to receive such communications (opt-out available at any time);
10. Platform improvement — to analyse aggregated, anonymised usage data to improve the 680k platform's functionality, game selection, and user experience.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, 680k relies on the following legal bases for the processing of your personal data:

• Performance of a contract — processing necessary to fulfil the 680k Terms & Conditions to which you are a party, including account management, payment processing, and game delivery;
• Compliance with a legal obligation — processing required to comply with applicable Philippine laws and PAGCOR regulatory requirements, including KYC, AML reporting, and age verification;
• Legitimate interests — processing carried out in the legitimate interests of 680k and its Users, including fraud prevention, security monitoring, responsible gaming enforcement, and platform improvement, where such interests are not overridden by your fundamental rights;
• Consent — processing for optional purposes such as marketing communications, where we have obtained your prior consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7 Data Sharing and Third Parties

7.1  680k may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate contractual data protection safeguards:

• Payment service providers — GCash (operated by Mynt), PayMaya (operated by PayMaya Philippines), BDO, BPI, Metrobank, and other licensed Philippine payment institutions, for the purpose of processing your financial transactions;
• Identity verification providers — third-party KYC and document verification services engaged to assist in satisfying 680k's regulatory identity verification obligations;
• Gaming content providers — game studios and content aggregators (such as Pragmatic Play, PG Soft, Jili Games) that supply games on the 680k platform; these providers may process limited technical data such as session identifiers in connection with game delivery;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government bodies, where disclosure is required by applicable law or regulation;
• Professional advisers — lawyers, auditors, and compliance consultants engaged by 680k on a confidential basis;
• IT and platform service providers — cloud hosting, cybersecurity, and analytics service providers engaged to support the technical operation of the 680k platform.

7.2  All third parties to whom 680k discloses personal data are required to implement adequate security measures and to process the data only for the specific, documented purpose for which it was shared.

7.3  Where personal data is transferred outside the Philippines, 680k ensures that such transfers comply with the cross-border transfer provisions of the DPA and its IRR, including the imposition of contractual clauses imposing equivalent data protection standards on the recipient.

8 Data Retention

8.1  680k retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following indicative retention periods apply:

• Account data and gaming records — retained for the duration of your active 680k Account plus a minimum of five (5) years following account closure, as required by PAGCOR regulations and applicable AML obligations;
• KYC and identity verification documents — retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later, in compliance with applicable AML and PAGCOR requirements;
• Financial transaction records — retained for a minimum of five (5) years, consistent with Philippine AML record-keeping obligations;
• Support communications — retained for up to three (3) years from the date of the interaction, unless a longer period is required for dispute resolution or regulatory purposes;
• Marketing preference data — retained until you withdraw consent for marketing communications or request deletion, subject to any conflicting legal obligation.

8.2  Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of individual identity.

9 Security Measures

680k implements appropriate technical and organisational security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the 680k platform is encrypted using 256-bit SSL/TLS encryption, the same standard used by Philippine banks;
• Data encryption at rest: Sensitive personal data, including KYC documents and financial account details, is encrypted when stored on 680k systems;
• Access controls: Access to personal data is restricted to 680k personnel and authorised processors who require it for legitimate work purposes, based on the principle of least privilege;
• Multi-factor authentication: Internal systems handling personal data require multi-factor authentication for access;
• Intrusion detection and monitoring: 680k's infrastructure is monitored for suspicious activity and potential security incidents on an ongoing basis;
• Regular security reviews: 680k conducts periodic reviews of its data security practices and vulnerability assessments of its platform infrastructure.

10 Cookies and Tracking Technologies

10.1  The 680k platform uses cookies and similar tracking technologies (including local storage and session storage) to support platform functionality and analyse usage patterns. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the platform to function, including session authentication, secure login maintenance, and fraud prevention. These cannot be disabled without disrupting platform functionality;
• Functional cookies: Remember your language preference, game display settings, and other personalisation choices to improve your experience on return visits;
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the 680k platform — pages visited, session duration, and navigation paths — to help us improve the platform;
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and suspicious session behaviour.

10.2  680k does not use third-party advertising or cross-site tracking cookies for the purpose of displaying targeted advertising on other websites. Any analytics tools used process data in a privacy-preserving, aggregated manner.

10.3  You may configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies may impair your ability to log in to and use the 680k platform. Mobile browser cookie settings vary by device and browser application.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 680k. These rights can be exercised by contacting the 680k Data Protection Officer (see Section 14):

11.1  680k will respond to substantiated data subject rights requests within thirty (30) days of receipt, or such other period as permitted by applicable NPC guidelines. In certain circumstances (for example, where compliance with a request would compromise ongoing AML investigations or conflict with a legal obligation), 680k may be unable to fully satisfy a request and will explain the basis for any such limitation.

11.2  If you are dissatisfied with 680k's response to a data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (www.privacy.gov.ph).

12 Minors and Age Restriction

12.1  If you are a parent or guardian and believe that a minor has submitted personal data to 680k without your consent, please contact the 680k support team or Data Protection Officer immediately so that appropriate action can be taken.

13 Changes to This Privacy Policy

13.1  680k may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, or changes to 680k's data processing practices. The effective date at the top of this document will be updated accordingly.

13.2  Where a material change is made to this Policy — particularly any change that affects the legal basis for processing, the categories of data collected, or your rights — 680k will notify registered Users via email or mobile notification no less than fourteen (14) days before the change takes effect.

13.3  Continued use of the 680k platform after the effective date of any Policy revision constitutes your acknowledgment of the revised Policy. If you do not accept the revised Policy, you should discontinue use of the platform and request account closure.

14 Contact & Data Protection Officer

680k has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable Philippine data privacy law. You may contact the DPO or the 680k privacy team through the following channels:

• Data Protection Officer — 680k Casino
• Email: [email protected] (subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 on the 680k website — request escalation to the DPO team
• Support Languages: English and Filipino (Tagalog)
• Response Time: Privacy-related requests are acknowledged within 3 business days and resolved within 30 days

For general support queries unrelated to privacy, please use the standard live chat or email support channel. For responsible gaming requests including self-exclusion, please visit the Responsible Gaming page.

For complaints about 680k's data handling practices, you also have the right to contact the National Privacy Commission of the Philippines directly.