Privacy Policy

1. Introduction

lotto8 ("we," "us," "our") operates an online casino and gaming platform accessible to players in the Philippines at lotto8.cam. We understand that your personal information is important and deserves careful handling. This Privacy Policy has been prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, as administered by the National Privacy Commission (NPC).

This document describes the types of personal data we collect from players and visitors, the purposes for which we process that data, the legal basis for processing, how long we retain it, who we may share it with, and what rights you have over your own information. We encourage you to read this policy in full so you can make informed decisions about your use of the lotto8 platform.

If you have questions at any point, do not hesitate to reach us at [email protected]. Our team — available in English, Tagalog, and Bisaya — is ready to address privacy-related concerns 24/7.

2. Personal Data We Collect

lotto8 collects personal data through various means, including direct input by you during registration, automatic collection during platform use, and from third-party service providers. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify that you meet the 21-year minimum age requirement)
• Residential address, city, and postal code (Manila, Cebu, Davao, Quezon City, Makati, and elsewhere in the Philippines)
• Valid email address
• Mobile phone number registered in the Philippines
• Username and encrypted password
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Philippine Passport, Driver's License, SSS ID, PhilSys National ID, UMID)
• Proof of address documentation (e.g., utility bills, bank statements, barangay certificate)
• Selfie or live photo for biometric identity matching, where required
• Source of funds documentation as required by Anti-Money Laundering (AML) regulations

2.3 Financial and Transaction Data

• GCash account details, Maya (PayMaya) account information, bank account details (BPI, BDO, Metrobank), and USDT wallet addresses
• Deposit and withdrawal transaction history, amounts, and timestamps
• Payment method type and the last four digits of associated accounts where applicable
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Game history including titles played, wager amounts, wins, losses, and session duration
• Responsible gaming settings such as deposit limits, session limits, and self-exclusion status
• Bonus claims, wagering progress, and promotional participation records

2.5 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookies and session identifiers (see Section 6)
• Log files, access timestamps, and clickstream data
• Referring URLs and search terms used to find lotto8

2.6 Communications Data

• Records of your interactions with our customer support team via live chat, email, or other channels
• Feedback, complaints, and survey responses submitted through the platform

3. How We Use Your Personal Data

lotto8 processes your personal data only for legitimate, specified purposes. We do not sell your personal data to third parties for marketing purposes. The primary purposes for which we use your data are:

Purpose	Data Used
Account creation and management	Registration data, contact details, login credentials
Age and identity verification (KYC)	Date of birth, government ID, proof of address
Processing deposits and withdrawals	Financial data, payment instrument details
Delivering gaming services	Game activity data, account balance
Fraud prevention and security	Technical data, transaction history, KYC documents
Anti-money laundering (AML) compliance	Financial data, identity documents, source of funds
Customer support	Communications data, account information
Responsible gaming monitoring	Gaming activity, self-exclusion status, limit settings
Marketing communications (with consent)	Contact details, preferences, gaming history
Platform analytics and improvement	Usage data, technical data, cookies

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and applicable data protection principles, lotto8 processes your personal data on the following legal grounds:

• Contractual necessity: Processing is necessary to perform the contract between you and lotto8, including account management, payment processing, and game delivery.
• Legal obligation: Certain processing activities — such as KYC verification, AML reporting, and age verification — are required by Philippine law and gaming regulations.
• Legitimate interests: We process some data to pursue our legitimate business interests, such as preventing fraud, securing our platform, and improving our services, provided these interests do not override your fundamental rights.
• Consent: Where we send you marketing communications or use non-essential cookies, we rely on your explicit consent, which you may withdraw at any time without affecting the lawfulness of any prior processing.

5. Sharing Your Personal Data

lotto8 does not sell, rent, or trade your personal data. We may share your data only in limited circumstances and with appropriate safeguards in place:

• Payment processors: We share necessary financial data with payment providers such as GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay/PesoNet operators, and USDT processing services to facilitate transactions on your behalf.
• Game providers: Licensed third-party game studios may receive gameplay-related data necessary to deliver their games and verify game integrity.
• KYC and identity verification services: We engage accredited third-party verification providers to assist with identity checks required under Philippine law.
• Regulatory authorities: We may disclose personal data to the relevant Philippine gaming regulatory authorities, the National Privacy Commission, or law enforcement agencies where legally required or in response to a valid legal process.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers may process data on our behalf under strict data processing agreements.
• Corporate transactions: In the event of a merger, acquisition, or restructuring, personal data may be transferred to the new entity, subject to equivalent privacy protections.

All third parties with whom we share data are bound by contractual obligations to use your data only for specified purposes and to maintain appropriate security standards.

6. Cookies and Tracking Technologies

lotto8 uses cookies and similar tracking technologies to ensure the platform operates correctly, to remember your preferences, and to analyze usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Essential for core functionality such as maintaining your login session, remembering your language preference, and keeping your account secure. These cannot be disabled without breaking the platform.
• Performance and analytics cookies: Help us understand how players interact with lotto8, which pages are most visited, and where technical issues occur, allowing us to continuously improve the platform experience.
• Functional cookies: Remember your personalization choices, such as preferred game categories or responsible gaming limit settings you have configured.
• Marketing cookies (with consent): Used only where you have provided explicit consent, to deliver relevant promotions and offers based on your gaming preferences.

You can manage cookie preferences through your browser settings. Disabling certain cookie categories may affect the functionality of the lotto8 platform. For a full list of cookies in use, please contact our support team.

7. Data Security

lotto8 employs industry-standard security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encrypted storage of sensitive data including passwords (using bcrypt hashing) and financial records
• Multi-factor authentication options for account access
• Regular penetration testing and security audits conducted by independent third parties
• Strict access controls ensuring only authorized personnel can access personal data on a need-to-know basis
• 24/7 monitoring for suspicious activity, unauthorized access attempts, and data anomalies

Despite our best efforts, no system is completely impenetrable. In the event of a data breach that poses a risk to your rights and freedoms, lotto8 will notify affected users and the National Privacy Commission within 72 hours of becoming aware of the incident, as required by Philippine law.

8. Data Retention

lotto8 retains your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by applicable law. Our general retention guidelines are:

• Active account data: Retained for the duration of your account and for a period of at least five (5) years after account closure, as required by AML regulations.
• Financial and transaction records: Retained for a minimum of ten (10) years in compliance with Philippine financial regulations.
• KYC documents: Retained for the duration of the business relationship plus five (5) years, or longer if required by law.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent plus one (1) year for audit purposes.

When personal data is no longer required, it is securely deleted or anonymized in accordance with our data disposal procedures.

9. Your Rights Under Philippine Data Privacy Law

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by lotto8:

• Right to be informed: You have the right to know whether lotto8 holds personal data about you and how it is being processed.
• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to erasure: In certain circumstances, you may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
• Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to data portability: You may request a structured, machine-readable copy of the personal data you provided to us.
• Right to lodge a complaint: If you believe your data rights have been violated, you may file a complaint with the Philippine National Privacy Commission.

To exercise any of these rights, contact our Data Privacy Officer at [email protected] with a clear description of your request. We will respond within 15 business days. Some requests may require identity verification before we can process them.

10. Children and Minors

The lotto8 platform is strictly intended for adults aged 21 years and above in compliance with Philippine gaming laws. We do not knowingly collect personal data from individuals below 21 years of age. If we discover or are notified that a minor has created an account, we will immediately close that account, delete all associated data, and return any deposited funds.

Parents and guardians who believe a minor may have accessed lotto8 or provided personal data without authorization are encouraged to contact us immediately at [email protected] so we can take prompt corrective action.

11. Changes to This Privacy Policy

lotto8 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, applicable law, or regulatory requirements. When we make material changes, we will notify registered users via email and display a prominent notice on the platform. The revised policy will be posted on this page with an updated "Last Updated" date.

Your continued use of the lotto8 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically.

12. Contact and Data Privacy Officer

If you have any questions, concerns, or requests related to this Privacy Policy or the way lotto8 handles your personal data, please get in touch with us: