lotto8 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how lotto8 ("lotto8," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "Player," or "User") who access or use the lotto8 online gaming platform at lotto8.club (the "Platform").

lotto8 is committed to protecting the privacy and security of your personal data. We operate in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and the implementing rules and regulations issued by the National Privacy Commission (NPC). We also adhere to applicable PAGCOR data handling requirements for licensed online gaming operators.

By registering for a lotto8 account, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the lotto8 Platform.

This Policy should be read together with our Terms & Conditions, which govern your use of the Platform.

2 Personal Data We Collect

lotto8 collects the following categories of personal data from users of the Platform:

Identity and Contact Information:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address in the Philippines (e.g., Manila, Cebu, Davao, Quezon City, Makati)
• Valid Philippine mobile number
• Email address
• Government-issued identification documents (for KYC verification)

Account and Financial Information:

• lotto8 username and account credentials (passwords are stored in hashed form and are never readable by lotto8 staff)
• Deposit and withdrawal transaction history
• Payment method details (e.g., GCash mobile number, Maya account, bank account details for BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, or debit card information)
• Account balance and bonus history

Gaming and Behavioral Data:

• Game history, wager amounts, and outcomes
• Session duration and login timestamps
• Responsible gaming tool usage (deposit limits, cooling-off periods, self-exclusion requests)
• Customer support interactions and communications

Technical Data:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform usage analytics and performance data

3 How We Collect Your Data

lotto8 collects your personal data through the following means:

• Directly from you: When you register for a lotto8 account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: When you access and use the Platform, we automatically collect technical data such as your IP address, device information, and browsing behavior through cookies and similar tracking technologies.
• From third parties: We may receive information about you from identity verification service providers, payment processors (such as GCash, Maya, and Philippine banks), fraud prevention services, and regulatory authorities where required by law.

4 How We Use Your Personal Data

lotto8 uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your lotto8 account, including processing your lotto8 login and verifying your identity.
• Service delivery: To provide you with access to games, process deposits and withdrawals, and deliver customer support.
• Legal compliance: To comply with PAGCOR licensing requirements, the Data Privacy Act of 2012, anti-money laundering (AML) obligations, and other applicable Philippine laws and regulations.
• Age verification: To verify that you are at least 21 years of age, as required by PAGCOR regulations for online gaming in the Philippines.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming behavior and provide responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion, in accordance with PAGCOR's responsible gaming standards.
• Platform improvement: To analyze usage patterns, troubleshoot technical issues, and improve the features and performance of the lotto8 Platform.
• Marketing communications: To send you promotional offers, bonuses, and news about lotto8 — but only if you have opted in to receive such communications. You may opt out at any time.

5 Legal Basis for Processing

lotto8 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform our obligations under the Terms & Conditions you agreed to when registering your lotto8 account.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AML regulations, and NPC guidelines.
• Legitimate interests: Processing is necessary for lotto8's legitimate interests in operating a secure, fair, and compliant gaming platform, provided those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

6 Data Sharing and Disclosure

lotto8 does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients only to the extent necessary:

• Payment processors: GCash, Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who assist us in verifying your identity and age in compliance with PAGCOR requirements.
• Fraud prevention and AML services: Service providers who help us detect and prevent fraudulent activity and money laundering.
• Technology and hosting providers: Cloud infrastructure and software providers who host and operate the lotto8 Platform under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities where we are legally required to disclose information.
• Professional advisors: Lawyers, auditors, and accountants who provide professional services to lotto8, subject to confidentiality obligations.

All third parties with whom lotto8 shares personal data are required to handle that data in accordance with applicable Philippine data privacy laws and lotto8's data processing standards.

7 Cookies and Tracking Technologies

lotto8 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, keep you logged in, remember your preferences, and analyze how the Platform is used.

We use the following types of cookies:

• Essential cookies: Required for the Platform to function correctly, including maintaining your lotto8 login session and ensuring security. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and display options, to personalize your experience.
• Analytics cookies: Help us understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymized.
• Marketing cookies: Used only with your consent to deliver relevant promotional content. You may opt out of marketing cookies at any time.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the lotto8 Platform.

8 Data Retention

lotto8 retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law. Specifically:

• Account data: Retained for the duration of your lotto8 account and for a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements.
• Transaction records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years in accordance with AML regulations under Republic Act No. 9160, as amended.
• KYC and identity documents: Retained for the period required by PAGCOR and the AMLC, typically five (5) years from the end of the business relationship.
• Customer support records: Retained for three (3) years from the date of the interaction, unless a longer retention period is required for legal or regulatory purposes.
• Marketing data: Retained until you withdraw your consent or opt out of marketing communications, after which it will be deleted or anonymized within a reasonable timeframe.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, lotto8 will securely delete or anonymize it.

9 Data Security

lotto8 takes the security of your personal data seriously and implements a range of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the lotto8 Platform.
• Encrypted storage of sensitive data, including hashed and salted password storage so that plaintext passwords are never retained.
• Access controls: Personal data is accessible only to lotto8 staff and authorized third parties who have a legitimate need to access it, and only to the extent necessary for their role.
• Two-factor authentication (2FA) available for player accounts to add an additional layer of login security.
• Regular security audits and vulnerability assessments of the Platform's infrastructure and software.
• Incident response procedures: In the event of a personal data breach, lotto8 will notify affected users and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.

While lotto8 employs industry-standard security practices, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your lotto8 login credentials and for notifying us immediately if you suspect unauthorized access to your account.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by lotto8:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed, which is the purpose of this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data lotto8 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the lotto8 Data Privacy Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

11 Children's Privacy and Age Restriction

The lotto8 Platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. lotto8 does not knowingly collect personal data from individuals under the age of 21.

During registration, lotto8 requires all users to confirm their date of birth and may request government-issued identification to verify age. If lotto8 discovers that a user under the age of 21 has registered an account, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned at lotto8's discretion.

If you are a parent or guardian and believe that a minor in your care has accessed the lotto8 Platform, please contact our support team immediately at [email protected].

12 Third-Party Links and Services

The lotto8 Platform may contain references to third-party payment services such as GCash and Maya. While lotto8 partners with these services to process transactions, we are not responsible for the privacy practices of third-party platforms. When you interact with a third-party payment provider, their own privacy policy will govern the collection and use of your data.

lotto8 encourages you to review the privacy policies of any third-party services you use in connection with your lotto8 account. lotto8 has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party services.

13 Changes to This Privacy Policy

lotto8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect, where reasonably practicable.

The date of the most recent revision is indicated at the top of this page. Your continued use of the lotto8 Platform after any changes to this Policy have been posted constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how lotto8 protects your personal data.

If you have any concerns about changes to this Policy, please contact our Data Privacy Officer before continuing to use the Platform.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way lotto8 handles your personal data, please contact our Data Privacy Officer:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the lotto8 Platform

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have not been respected. The NPC can be reached through their official government channels.

This Privacy Policy was last updated in May 2026 and applies to all users of the lotto8 Platform. lotto8 serves Filipino players aged 21 and above. Gambling is addictive. Know when to stop.