balato8 Privacy Policy

balato8 is an online gaming platform serving players across the Philippines — from Metro Manila and Quezon City to Cebu, Davao, Makati, and beyond. We take the privacy and security of your personal data seriously. This Policy applies to all personal information we collect through the balato8 website, mobile platform, customer support channels, and any other touchpoints associated with the balato8 service.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of balato8. Where there is any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, balato8 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the operation of the balato8 platform.

As Personal Information Controller, balato8 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data privacy law. Where balato8 engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to maintain appropriate security standards and process data only on balato8's documented instructions.

balato8 collects the following categories of personal data in connection with the operation of the platform:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• Government-issued identification number (e.g., PhilSys ID, passport, driver's license)
• Username and encrypted password

3.2 Contact Data

• Email address
• Mobile number (Philippine mobile number, e.g., Globe, Smart, DITO)
• Residential address

3.3 Financial Data

• GCash or PayMaya account details (mobile number linked to the e-wallet)
• Bank account details for BPI, BDO, Metrobank, or other Philippine banks (account name and number only)
• Transaction history, including deposit amounts, withdrawal requests, and wagering records denominated in Philippine Peso (₱)

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the balato8 platform
• Login timestamps and access logs

3.5 Communications Data

• Records of your communications with balato8 customer support, including live chat transcripts and email correspondence
• Responses to surveys, promotions, or feedback requests

balato8 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the balato8 platform, through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; transaction data from payment processors such as GCash, PayMaya, and Philippine banking partners; fraud detection signals from security service providers.
• Publicly available sources: In limited circumstances, balato8 may verify information against publicly available records for compliance purposes.

balato8 uses your personal data for the following purposes:

balato8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

Under the Data Privacy Act of 2012, balato8 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

balato8 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other Philippine payment service providers, for the purpose of processing deposits and withdrawals.
• KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with our regulatory obligations.
• Fraud prevention and security providers: Services that help balato8 detect and prevent fraudulent activity, account takeovers, and money laundering.
• IT infrastructure and hosting providers: Cloud and server infrastructure providers who host the balato8 platform and store data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or court order.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

The balato8 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather analytics data. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of the platform, including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and display options, to personalize your balato8 experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the platform, helping us improve performance and usability.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content. You may opt out at any time through your account settings.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the balato8 platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate securely.

balato8 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Technical and usage logs: Retained for twelve (12) months from the date of collection, after which they are anonymized or deleted.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with balato8's data disposal procedures.

balato8 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the balato8 platform.
• Encryption at rest for sensitive personal data stored on balato8 servers.
• Access controls limiting access to personal data to authorized personnel on a strict need-to-know basis.
• Multi-factor authentication for internal systems that process personal data.
• Regular security audits and penetration testing of the balato8 platform infrastructure.
• Incident response procedures to detect, contain, and report personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, balato8 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by balato8. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14.

balato8 will respond to all data subject rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it. We may need to verify your identity before processing your request.

The balato8 platform is strictly intended for individuals aged 21 years and above. balato8 does not knowingly collect personal data from persons under the age of 21. The minimum legal age for participation in casino-style gambling in the Philippines is 21 years, and balato8 enforces this requirement through its registration and KYC verification processes.

If balato8 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the balato8 platform, please contact our support team immediately.

balato8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email and/or through a prominent notice on the balato8 platform at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically. Your continued use of the balato8 platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

If you do not agree with any changes to this Policy, you should stop using the balato8 platform and may request account closure in accordance with the Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by balato8, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing balato8's compliance with the Data Privacy Act of 2012 and is your primary point of contact for all data privacy matters.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe that balato8 has not handled your personal data in accordance with the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available on the NPC's official website.