kn88 Privacy Policy
kn88 is committed to protecting the personal data of every Filipino player who uses our platform. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have under Philippine law — written in plain language, not just legal boilerplate.
Six Ways kn88 Protects Your Privacy
Before reading the full policy below, here's a plain-language summary of how kn88 approaches data protection for every Filipino player on our platform.
kn88 only collects personal data that is strictly necessary to operate your account, process payments, and comply with Philippine regulatory requirements. We do not collect data for its own sake — every data point we hold has a defined purpose under this Policy.
All personal data held by kn88 is stored in encrypted form using industry-standard AES-256 encryption. Payment data is handled through PCI-DSS compliant processors — your GCash account details, Maya credentials, and bank information are never stored in plain text on kn88 systems.
kn88 does not sell, rent, or commercially transfer your personal data to third parties for their own marketing or commercial purposes. Any data sharing with partners or service providers is governed by strict data processing agreements and is limited to what is necessary for service delivery.
As a kn88 user in the Philippines, you have full rights under the Data Privacy Act (RA 10173) — including the right to access, correct, and delete your personal data. kn88 provides a straightforward process for exercising these rights through your account settings or by contacting our Data Protection Officer.
kn88 retains personal data only for as long as necessary — either for the purposes described in this Policy or as required by Philippine law. KYC/AML records are retained for a minimum of five years after account closure as required by AMLC regulations. Non-regulatory data is deleted within 90 days of account closure.
In the unlikely event of a personal data breach that poses risk to kn88 users, kn88 will notify the National Privacy Commission (NPC) within 72 hours of discovery and will notify affected users as soon as practically possible — directly, by email or in-platform notification, not buried in a blanket policy update.
- 1. Scope & Application
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis
- 5. Cookies & Tracking
- 6. Sharing Your Data
- 7. International Transfers
- 8. Data Retention
- 9. Your Rights
- 10. Security Measures
- 11. Children's Privacy
- 12. Marketing Preferences
- 13. Third-Party Links
- 14. Policy Changes
- 15. Contact & DPO
This Privacy Policy ("Policy") is issued by the operator of kn88 ("kn88", "we", "us", "our") and governs the collection, use, storage, disclosure, and disposal of personal data processed in connection with the kn88 online gaming platform accessible at kn88.onl and all services offered thereunder.
This Policy applies to all individuals whose personal data is processed by kn88, including registered account holders, prospective users who visit the Platform without registering, and any individuals whose data is provided to kn88 in connection with a transaction or support inquiry. References to "you" or "your" in this Policy refer to any such individual.
This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. Where kn88's processing activities involve data subjects outside the Philippines, kn88 will apply no less protective standards than those required by Philippine law.
kn88 collects personal data through multiple channels depending on how you interact with the Platform. The categories of personal data we collect are described below:
- Full legal name as it appears on your Philippine government-issued ID.
- Date of birth (used to verify the minimum age requirement of 21 years).
- Residential address in the Philippines.
- Philippine mobile number in +63 format.
- Email address.
- Username and encrypted password hash.
- Copy of government-issued Philippine ID (PhilSys, passport, UMID, driver's license, SSS/GSIS ID, or PRC ID).
- Facial image or selfie for identity matching purposes.
- Source of funds declaration for high-volume accounts, as required by PAGCOR and AMLC guidelines.
- GCash account reference number (not your full GCash credentials).
- Maya wallet reference number.
- Bank account details (BPI, BDO, Metrobank) provided for withdrawal processing.
- Transaction history: deposit amounts, withdrawal amounts, dates, and reference numbers.
- Wagering history: games played, bet amounts, game outcomes, and session durations.
- IP address and approximate geographic location derived from IP.
- Device type, operating system, browser type, and version.
- Session logs: login timestamps, pages visited, game sessions initiated, and logout timestamps.
- Cookie and tracking data as described in Section 5 of this Policy.
- Records of live chat conversations with kn88 support agents.
- Email correspondence with kn88.
- Feedback, complaints, and dispute records.
kn88 uses personal data only for the specific purposes described below. We do not use personal data for purposes that are incompatible with those stated in this Policy without providing prior notice and, where required, obtaining fresh consent.
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration & authentication | Registration data, device data | Contract |
| KYC identity verification | ID documents, facial image | Legal Obligation |
| Payment processing & withdrawals | Financial data, transaction data | Contract |
| AML monitoring & fraud prevention | All financial and usage data | Legal Obligation |
| Responsible gaming enforcement | Wagering history, session data | Legal Obligation |
| Platform security & fraud detection | Technical data, IP address | Legitimate Interest |
| Customer support & dispute resolution | Communications data, account data | Contract |
| Promotional communications (opt-in) | Email, mobile number | |
| Platform analytics & improvement | Usage data, session logs (anonymised) | Legitimate Interest |
Under the Data Privacy Act of the Philippines (RA 10173), kn88 must have a lawful basis for each personal data processing activity. The lawful bases applicable to kn88's processing activities are:
- Consent: Where you have given kn88 a clear, informed, and freely given indication of agreement to the processing of your personal data for a specific purpose — such as subscribing to promotional communications.
- Contractual Necessity: Where processing is necessary for the performance of the kn88 Terms & Conditions to which you are a party — such as processing your deposits and withdrawals.
- Legal Obligation: Where processing is required to comply with Philippine law, including obligations under the Anti-Money Laundering Act, PAGCOR regulations, and the Data Privacy Act itself.
- Legitimate Interest: Where processing is necessary for kn88's legitimate business interests and those interests are not overridden by your privacy rights — such as operating fraud detection systems and improving Platform security.
kn88 uses cookies and similar tracking technologies on the Platform to ensure it functions correctly, to maintain your login session, to detect fraudulent activity, and to understand how users interact with the Platform in aggregate. kn88 does not use third-party advertising or social media tracking cookies.
- Strictly Necessary Cookies: These are essential for the Platform to function. They include session management cookies that keep you logged in during your gaming session. These cookies cannot be disabled without breaking Platform functionality.
- Security Cookies: Used to detect and prevent fraudulent login attempts, unusual geographic access patterns, and account takeover attempts. These are essential for account protection.
- Analytics Cookies: kn88 uses anonymised, first-party analytics cookies to understand aggregate Platform usage patterns — which games are popular, where in the navigation users encounter difficulties, and how platform performance varies across device types. No personally identifiable data is included in analytics processing.
- Preference Cookies: Cookies that remember your language settings, display preferences, and responsible gaming tool configurations so you do not need to set them on every visit.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent certain Platform features from working correctly, including your ability to remain logged in during a gaming session.
kn88 does not sell, rent, or commercially transfer your personal data to third parties. kn88 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to data processing agreements or legal obligations:
- Payment Processors: GCash (G-Xchange Inc.), Maya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, and other payment service providers receive only the transaction data necessary to process your deposits and withdrawals. These processors are PCI-DSS compliant and operate under their own privacy frameworks.
- Game Technology Providers: Licensed game studios and live casino technology providers receive session and wagering data necessary to deliver game content. They do not receive your financial or identity documents.
- KYC / Identity Verification Partners: kn88 may use regulated third-party identity verification services to validate Philippine government ID documents. These partners are bound by confidentiality agreements and process your ID data solely for verification purposes.
- Philippine Regulatory Authorities: kn88 is required by law to share certain information with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies when legally required. kn88 will only disclose the minimum data required by each lawful request.
- Law Enforcement: kn88 will disclose personal data to Philippine law enforcement authorities when required by a valid legal order, subpoena, or warrant issued under Philippine law.
- Cloud Infrastructure Providers: kn88 uses cloud hosting infrastructure to operate the Platform. Hosting providers process personal data solely on kn88's instructions under data processing agreements and do not use kn88 user data for any independent purpose.
Some of kn88's service providers — including cloud infrastructure and game technology partners — may be located or operate servers outside the Philippines. Where personal data is transferred internationally, kn88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to Philippine law requirements.
Such safeguards include: (a) entering into data processing agreements that incorporate the NPC's standard contractual clauses for international transfers; (b) ensuring that recipient jurisdictions provide an adequate level of data protection; or (c) relying on the recipient's binding corporate rules where applicable.
kn88 retains personal data only for as long as is necessary for the purposes described in this Policy, or as required by Philippine law. The following retention periods apply:
| Data Category | Retention Period | Basis for Retention |
|---|---|---|
| KYC / Identity Documents | 5 years post account closure | AMLC / PAGCOR regulatory requirement |
| Financial Transaction Records | 5 years post transaction | Anti-Money Laundering Act (RA 9160) |
| Wagering History | 2 years post account closure | Responsible gaming and dispute resolution |
| Customer Support Records | 2 years post case closure | Legitimate interest (dispute resolution) |
| Security / Fraud Logs | 2 years post event | Legitimate interest (security) |
| Account & Registration Data | 90 days post account closure | Contractual (subject to above overrides) |
| Marketing Preferences | Until consent withdrawn | Consent |
Upon expiry of applicable retention periods, kn88 will securely delete or irreversibly anonymise personal data so that it can no longer be associated with any identifiable individual.
Under the Data Privacy Act of the Philippines (RA 10173), you have the following rights with respect to your personal data held by kn88. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request".
You may request a copy of all personal data kn88 holds about you, the purposes for which it is processed, and the categories of third parties with whom it has been shared. Requests will be fulfilled within 30 days.
If any personal data kn88 holds about you is inaccurate or incomplete, you may request correction. Most account data can be updated directly from your kn88 account settings. Changes to KYC documents require a new verification submission.
You may request deletion of your personal data. Note that kn88 cannot delete data where retention is required by Philippine law — including KYC and financial records subject to AML retention obligations. Other data will be deleted within 30 days of a valid request.
You may object to kn88 processing your data based on legitimate interests, including direct marketing. Where you object to marketing, kn88 will stop that processing immediately. Objections to other legitimate interest processing will be assessed on a case-by-case basis.
You may request a copy of personal data you have directly provided to kn88 — such as your registration data and preference settings — in a structured, commonly used, machine-readable format (JSON or CSV), to facilitate transfer to another service if you wish.
If you believe kn88 has handled your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. kn88 encourages you to contact us first so we can attempt to resolve your concern directly before escalation.
kn88 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:
- AES-256 encryption at rest for all personal data stored on kn88 systems.
- TLS 1.3 encryption in transit for all data transmitted between your browser and the kn88 Platform.
- Multi-factor authentication options available for all kn88 accounts, including SMS OTP to registered Philippine mobile numbers.
- Automated anomaly detection systems that flag unusual login patterns, geographic inconsistencies, and suspected account takeover attempts.
- Role-based access controls limiting kn88 staff access to personal data to those with a documented business need.
- Regular security assessments and penetration testing conducted by qualified security professionals.
- Data breach response procedures aligned with NPC notification requirements under the Data Privacy Act.
Notwithstanding these measures, no online system can guarantee absolute security against all potential threats. kn88 strongly recommends that users enable two-factor authentication and use strong, unique passwords for their kn88 accounts. Users should notify kn88 immediately at [email protected] if they suspect any unauthorised access to their account.
The kn88 Platform is strictly for adults. Real-money gaming on kn88 is prohibited for persons under 21 years of age in accordance with PAGCOR regulations and Philippine law. kn88 does not knowingly collect personal data from persons under 21.
kn88 employs age verification at registration and during KYC processing to prevent underage users from accessing real-money gaming features. If kn88 discovers that personal data has been collected from a person under 21, we will immediately close the associated account, return any deposits to the payment source, and delete all associated personal data, except where retention is required to comply with a legal obligation.
If you are a parent or guardian and believe that a person under 21 in your care has registered a kn88 account, please contact us immediately at [email protected] with the subject line "Underage Account Report".
kn88 may send you promotional communications — including information about new games, bonuses, promotions, and platform updates — if you have consented to receive such communications at registration or at any subsequent time through your account settings.
You may opt out of marketing communications at any time by: (a) updating your communication preferences in your kn88 account settings; (b) clicking the unsubscribe link in any marketing email from kn88; or (c) contacting our support team via live chat or email at [email protected]. Opt-out requests will be processed within five (5) business days.
The kn88 Platform may contain references to third-party services, payment providers, and game studios. This Privacy Policy applies solely to personal data processed by kn88 in connection with the kn88.onl Platform. kn88 is not responsible for the privacy practices of any third-party services you may access in connection with using the Platform, and we encourage you to review the privacy policies of any third-party service you use.
kn88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory guidance from the NPC. When material changes are made, kn88 will provide notice through one or more of the following channels: a prominent notice on the kn88.onl homepage; an email notification to your registered address; or an in-account notification visible upon your next login to the Platform.
The effective date at the top of this Policy indicates when the current version took effect. Your continued use of the kn88 Platform after an updated Policy takes effect constitutes your acceptance of the revised terms. If you do not accept the updated Policy, you must close your account prior to the effective date of the changes.
kn88 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of the Philippines. The kn88 DPO is the primary point of contact for all data privacy queries, rights requests, and regulatory correspondence.
- Email: [email protected] — Subject line: "Privacy / DPO Request"
- Live Chat: Available in-platform 24/7. State "Data Privacy Request" to be routed to the appropriate team.
- Platform: kn88.onl — the only legitimate kn88 domain. Do not send sensitive personal data to any other domain claiming to be kn88.
- Response Time: kn88 commits to acknowledging all DPO requests within five (5) business days and fulfilling valid requests within thirty (30) calendar days, or such extended period as permitted by the Data Privacy Act for complex requests.
If you are not satisfied with kn88's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.
Your Data Is Safe With kn88
Privacy isn't a checkbox for kn88 — it's part of building a platform Filipino players can genuinely trust. From GCash withdrawals to live baccarat sessions, every interaction on kn88 is backed by the protections described in this Policy.
For adults 21 years and above only. Please play responsibly.