kudos8 Privacy Policy

1. Introduction and Scope

kudos8 operates as a licensed online gaming platform under the jurisdiction of the Philippine Amusement and Gaming Corporation (PAGCOR). As part of our regulatory obligations and commitment to player protection, we adhere to the highest standards of data privacy as mandated by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and international best practices including the General Data Protection Regulation (GDPR) principles where applicable to our international users.

This Privacy Policy applies to all personal data collected through our website (kudos8.cam), mobile applications, customer service channels, social media platforms, and any other touchpoints where you interact with kudos8 services. It governs how we collect, process, store, share, and protect your information throughout your relationship with us, from account registration through active gaming and beyond account closure.

We encourage you to read this policy carefully and in its entirety. If you have questions or concerns about how we handle your personal information, please contact our Data Protection Officer using the contact information provided at the end of this document.

2. Information We Collect

2.1 Personal Information You Provide

When you register for a kudos8 account, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers
• Contact Information: Email address, mobile phone number, residential address, and postal code
• Financial Information: Bank account details, payment card information (stored securely by our PCI-DSS compliant payment processors), GCash/PayMaya account identifiers, cryptocurrency wallet addresses
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers
• Verification Documents: Copies of government-issued IDs (passport, driver's license, national ID), proof of address documents, and source of funds documentation
• Communication Records: Chat transcripts, email correspondence, phone call recordings (with your consent), and customer support tickets

2.2 Information Automatically Collected

When you access kudos8, we automatically collect certain technical and behavioral information through cookies, web beacons, and similar tracking technologies:

• Device Information: IP address, device type and model, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address)
• Usage Data: Pages visited, features accessed, time spent on site, click patterns, navigation paths, referring/exit pages, search queries
• Gaming Activity: Betting history, game selections, wager amounts, win/loss records, bonus claims, deposit and withdrawal transactions
• Location Data: Geolocation information derived from IP address or device GPS (where permitted) to verify geographic compliance and prevent fraud
• Performance Data: Website load times, error reports, system crashes, and technical diagnostics

2.3 Information from Third Parties

We may receive information about you from third-party sources including:

• Payment processors (transaction verification and fraud detection data)
• Identity verification services (KYC/AML screening results)
• Credit reference agencies (affordability checks where required by regulation)
• Marketing partners and affiliate networks (referral source data)
• Social media platforms (if you connect your account or interact with our social content)
• Regulatory authorities and law enforcement (compliance inquiries and investigations)

3. How We Use Your Information

kudos8 processes your personal data for the following lawful purposes:

3.1 Account Management and Service Delivery

• Creating and maintaining your gaming account
• Processing deposits, withdrawals, and bonus claims
• Enabling gameplay and providing access to gaming products
• Managing your VIP tier status and loyalty rewards
• Providing customer support and responding to inquiries
• Sending transactional notifications (deposit confirmations, withdrawal updates, bonus expirations)

3.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement enforcement)
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Detecting and preventing fraud, money laundering, and other illegal activities
• Complying with PAGCOR reporting requirements and gaming regulations
• Responding to legal requests from law enforcement and regulatory bodies
• Maintaining records for audit and compliance purposes

3.3 Security and Risk Management

• Monitoring account activity for suspicious or fraudulent behavior
• Preventing unauthorized access and account takeovers
• Identifying collusion, bonus abuse, and advantage play
• Implementing responsible gaming controls and player protection measures
• Protecting against DDoS attacks and other cybersecurity threats

3.4 Marketing and Communications (With Your Consent)

• Sending promotional offers, bonus announcements, and tournament invitations
• Providing personalized game recommendations based on your preferences
• Conducting customer satisfaction surveys and market research
• Delivering targeted advertising through email, SMS, and push notifications
• Retargeting campaigns on third-party platforms (Facebook, Google Display Network)

3.5 Platform Improvement and Analytics

• Analyzing user behavior to optimize website performance and user experience
• Testing new features and conducting A/B experiments
• Generating aggregated statistical reports on platform usage
• Improving game selection, payment methods, and customer service quality
• Developing predictive models for responsible gaming interventions

4. Data Sharing and Disclosure

kudos8 does not sell your personal information to third parties. However, we may share your data with the following categories of recipients for legitimate business and legal purposes:

4.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, bank partners, cryptocurrency exchanges (for transaction processing)
• Identity Verification Services: KYC/AML screening providers, document authentication services
• Cloud Hosting Providers: Secure data storage and infrastructure services
• Game Providers: Third-party software developers supplying slots, live dealer games, and sports betting platforms
• Marketing Platforms: Email service providers, SMS gateways, analytics tools (Google Analytics, Facebook Pixel)
• Customer Support Tools: Live chat providers, ticketing systems, call center partners

All service providers are contractually bound by data processing agreements that require them to protect your information and use it only for specified purposes consistent with this Privacy Policy.

4.2 Regulatory and Legal Authorities

We disclose personal information to government agencies and regulators when required by law, including:

• PAGCOR (Philippine Amusement and Gaming Corporation) for licensing compliance and regulatory reporting
• Anti-Money Laundering Council (AMLC) for suspicious transaction reporting
• National Privacy Commission (NPC) for data breach notifications and investigations
• Law enforcement agencies pursuant to valid court orders, subpoenas, or search warrants
• Tax authorities for financial reporting obligations

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you via email and prominent website notice before your data is transferred and becomes subject to a different privacy policy.

4.4 Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you with third parties for industry research, analytics, and marketing purposes. This includes statistical reports on player demographics, gaming trends, and platform performance.

5. Data Security Measures

kudos8 implements industry-leading technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

5.1 Technical Safeguards

• Encryption: 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Password Security: Hashed and salted password storage using bcrypt algorithms; enforcement of strong password requirements
• Database Security: Encrypted databases with access controls, regular security patching, and vulnerability scanning
• Network Security: Firewall protection, intrusion detection systems (IDS), and DDoS mitigation
• Payment Security: PCI-DSS Level 1 compliant payment processing; tokenization of payment card data
• Multi-Factor Authentication: Optional 2FA via SMS or authenticator apps for enhanced account protection

5.2 Administrative Controls

• Strict role-based access controls limiting employee access to personal data on a need-to-know basis
• Comprehensive employee training on data protection and security best practices
• Non-disclosure agreements (NDAs) signed by all employees and contractors
• Regular security audits and penetration testing by independent third parties
• Incident response plan for data breach detection, containment, and notification

5.3 Data Breach Protocol

In the unlikely event of a data breach that compromises your personal information, kudos8 will:

1. Contain and investigate the breach immediately upon detection
2. Notify affected users within 72 hours via email and account notification
3. Report the breach to the National Privacy Commission and PAGCOR as required by law
4. Provide guidance on protective measures you can take (password resets, fraud monitoring)
5. Conduct a post-incident review and implement additional security enhancements

6. Your Data Protection Rights

Under the Philippine Data Privacy Act and international privacy standards, you have the following rights regarding your personal information:

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your account details and a clear description of your request. We will respond within 30 days and may require identity verification to prevent unauthorized access to your information.

7. Cookies and Tracking Technologies

kudos8 uses cookies, web beacons, pixels, and similar tracking technologies to enhance your user experience, analyze platform performance, and deliver personalized content and advertising.

7.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality (login sessions, shopping cart, security features). These cannot be disabled.
• Performance Cookies: Collect anonymous data on website usage, error rates, and page load times (Google Analytics, Hotjar).
• Functional Cookies: Remember your preferences (language selection, display settings, favorite games).
• Advertising Cookies: Track browsing behavior for targeted advertising on kudos8 and third-party platforms (Facebook Pixel, Google Ads retargeting).

7.2 Managing Cookie Preferences

You can manage cookies through your browser settings by blocking or deleting cookies. However, disabling essential cookies may impair website functionality and prevent you from accessing certain features. Most browsers accept cookies by default, but you can configure them to:

• Notify you when cookies are being set
• Block all cookies or only third-party cookies
• Delete cookies automatically when you close your browser

For more information on managing cookies, visit your browser's help section or refer to resources like aboutcookies.org or allaboutcookies.org.

8. Data Retention and Deletion

kudos8 retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal, regulatory, and contractual obligations.

8.1 Retention Periods

• Active Accounts: Data retained for the duration of your account relationship
• Closed Accounts: Account details, transaction history, and communication records retained for 5 years after closure (PAGCOR/AML requirement)
• Financial Records: 10 years (tax and audit compliance)
• KYC Documents: 5 years after account closure (AML regulations)
• Marketing Data: Until consent is withdrawn or 3 years of inactivity
• Customer Support Records: 3 years for quality assurance and dispute resolution

8.2 Deletion Process

Upon expiration of the retention period, we securely delete or anonymize your personal information using industry-standard data destruction methods. You may request early deletion by contacting our Data Protection Officer, subject to legal retention requirements that supersede deletion requests.

9. International Data Transfers

kudos8 primarily operates in the Philippines, but we may transfer your personal information to service providers located in other countries for data processing, cloud storage, and customer support purposes. When we transfer data internationally, we ensure adequate protection through:

• Standard contractual clauses approved by the National Privacy Commission
• Adequacy decisions recognizing equivalent data protection standards
• Privacy Shield frameworks or successor mechanisms where applicable
• Binding corporate rules for intra-group transfers

Countries where data may be transferred include Singapore, the United States, and European Union member states, all of which provide robust data protection frameworks.

10. Children's Privacy

kudos8 services are strictly restricted to individuals aged 21 years and older. We do not knowingly collect personal information from minors. If you are under 21, you must not register for an account, use our services, or provide any personal information to kudos8.

If we discover that we have inadvertently collected personal information from a person under 21, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided information to kudos8 should contact us immediately at [email protected].

We encourage parents to use parental control software (Net Nanny, Qustodio, Kaspersky Safe Kids) to prevent minors from accessing online gaming websites.

11. Changes to This Privacy Policy

kudos8 reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. When we make material changes that significantly affect your rights, we will notify you through:

• Prominent notice on our website homepage
• Email notification to your registered email address
• In-account notification upon your next login
• Push notification via our mobile app (if installed)

The "Last Updated" date at the top of this policy indicates when changes were last made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of kudos8 services after policy updates constitutes acceptance of the revised terms.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected] (Subject: Privacy Inquiry)
• Live Chat: Available 24/7 through kudos8.cam
• Response Time: We aim to respond to all privacy inquiries within 48 hours

If you are not satisfied with our response, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC):

• National Privacy Commission
• 5th Floor, Philippine International Convention Center
• Vicente Sotto Street, Pasay City, Metro Manila 1307, Philippines
• Email: [email protected] | Hotline: (02) 8234-2228