Privacy Policy

Introduction

680k is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is the foundation of any good relationship — and that trust starts with being completely transparent about how we handle your information.

This Privacy Policy applies to all personal data collected through the 680k website at 680k.org, any associated mobile applications, and all related services, features, and communications (collectively, the "Platform"). It covers data collected during account registration, identity verification, gameplay, payment processing, customer support interactions, and any other touchpoint between you and 680k.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions regarding data privacy matters, this Policy shall prevail.

680k processes personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). We are registered as a personal information controller with the NPC as required by applicable law.

Personal Data We Collect

680k collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are described below.

2.1 Registration Data

When you create a 680k account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including barangay, city/municipality, province)
• Email address
• Mobile number (Philippine mobile number, e.g., Globe, Smart, DITO)
• Username and encrypted password
• Nationality and citizenship

2.2 Identity Verification (KYC) Data

As part of our Know Your Customer (KYC) obligations under PAGCOR guidelines and anti-money laundering regulations, we may collect:

• Copies of government-issued photo identification (Philippine passport, driver's license, SSS ID, GSIS ID, PhilHealth ID, Voter's ID, or other PAGCOR-accepted IDs)
• Proof of residential address (utility bill, bank statement, or barangay certificate dated within the last three months)
• Selfie or live photo for facial verification purposes
• Proof of payment method ownership (e.g., screenshot of GCash wallet showing your registered name)
• Source of funds documentation where required by applicable law

2.3 Financial and Transaction Data

When you make deposits or withdrawals, we collect:

• Payment method type (GCash, PayMaya, BPI, BDO, Metrobank, etc.)
• Transaction reference numbers and timestamps
• Deposit and withdrawal amounts in Philippine Peso (₱)
• Account balance history
• Bonus and promotional credit history

680k does not store your full GCash PIN, bank account passwords, or card CVV numbers. All sensitive payment credentials are handled directly by our certified payment processing partners.

2.4 Gaming Activity Data

We collect data about your activity on the Platform, including:

• Games played, bet amounts, and outcomes
• Session duration and frequency of play
• Bonus usage and wagering history
• Responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods)

2.5 Technical and Device Data

When you access the Platform, we automatically collect:

• IP address and approximate geolocation (to verify you are accessing from the Philippines)
• Device type, operating system, and browser type
• Unique device identifiers
• Pages visited, links clicked, and time spent on each page
• Referring URL (the website you came from before visiting 680k.org)

2.6 Communications Data

When you contact our support team or communicate with us, we collect:

• Live chat transcripts
• Email correspondence
• Support ticket content and resolution history
• Survey responses and feedback submissions

How We Use Your Personal Data

680k uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the purposes listed below without first obtaining your consent or as otherwise permitted by applicable law.

• Account Creation and Management: To register your account, verify your identity, and manage your ongoing relationship with the 680k platform.
• Age and Eligibility Verification: To confirm that you are at least 21 years of age and meet all other eligibility requirements under our Terms & Conditions and applicable PAGCOR guidelines.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods. All transactions are denominated in Philippine Peso (₱).
• KYC and Anti-Money Laundering (AML) Compliance: To fulfill our legal obligations under Philippine anti-money laundering laws, including the Anti-Money Laundering Act (AMLA) and its amendments, and PAGCOR's KYC requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other prohibited conduct on the Platform.
• Platform Operation and Improvement: To operate, maintain, and improve the 680k platform, including fixing bugs, optimizing performance, and developing new features based on player behavior and feedback.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance through our 24/7 Filipino support team.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Marketing and Promotions: To send you information about 680k promotions, bonuses, and new games — but only where you have given your consent to receive such communications. You may opt out at any time.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws, respond to lawful requests from government authorities, and fulfill our reporting obligations to PAGCOR and other regulators.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 680k must have a lawful basis for processing your personal data. The legal bases we rely on are:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to provide you with access to the 680k platform and its services as described in our Terms & Conditions. This covers account registration, payment processing, and gameplay.
• Legal Obligation: Processing is necessary to comply with our legal obligations under Philippine law, including KYC/AML requirements, PAGCOR licensing conditions, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable gaming platform — including fraud prevention, security monitoring, and platform improvement — provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — particularly direct marketing communications — we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Data Sharing and Disclosure

680k does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

5.1 Payment Processors

We share transaction data with our payment processing partners (including GCash, PayMaya, and banking partners such as BPI, BDO, and Metrobank) to facilitate deposits and withdrawals. These partners are bound by their own privacy policies and applicable Philippine financial regulations.

5.2 Identity Verification Providers

We use third-party KYC and identity verification service providers to assist with document verification and facial recognition checks. These providers process your identity documents and biometric data solely for the purpose of verifying your identity and are contractually prohibited from using your data for any other purpose.

5.3 Regulatory Authorities

We may be required to disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities in response to lawful requests, court orders, or as required by applicable law. We will notify you of such disclosures where we are legally permitted to do so.

5.4 Technology and Service Providers

We engage trusted technology partners to provide cloud hosting, data analytics, customer support software, and cybersecurity services. These providers act as data processors on our behalf and are contractually required to process your data only in accordance with our instructions and this Privacy Policy.

5.5 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 680k's assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and ensure that your data continues to be protected in accordance with this Policy.

Cookies & Tracking Technologies

680k uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support our security and fraud prevention measures.

6.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device on subsequent visits and remember certain information about your preferences and activity.

6.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that help protect your account. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings and responsible gaming tool configurations) to provide a more personalized experience.
• Analytics Cookies: Help us understand how players use the Platform — which pages are most visited, where players encounter difficulties, and how we can improve the overall experience. Analytics data is aggregated and anonymized where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and bot traffic on the Platform.

6.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the 680k Platform — for example, you may be required to log in more frequently.

Data Retention

680k retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• KYC / Identity Documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, as required by AMLC regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with Philippine financial record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes.
• Customer Support Records: Retained for two (2) years from the date of the last interaction, unless a longer retention period is required for ongoing dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.

When personal data is no longer required, 680k will securely delete or anonymize it in accordance with industry best practices and NPC guidelines.

Data Security

680k implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and the 680k platform is encrypted using industry-standard 256-bit SSL/TLS technology.
• Encrypted Data Storage: Sensitive personal data stored in our systems — including identity documents and financial records — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized 680k personnel on a strict need-to-know basis. All staff with access to personal data undergo regular data privacy training.
• Two-Factor Authentication (2FA): 680k offers 2FA for player accounts and requires it for all internal staff accounts with access to personal data systems.
• Regular Security Audits: Our platform undergoes regular penetration testing and security audits by independent cybersecurity professionals.
• Incident Response Plan: 680k maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the NPC and affected players within the timeframes required by the Data Privacy Act.

Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 680k. These rights can be exercised by contacting our Data Protection Officer (DPO) using the details provided in Section 13.

To exercise any of the above rights, please submit a written request to our Data Protection Officer at the contact details provided in Section 13. 680k will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. In complex cases, we may extend this period by a further fifteen (15) business days, with prior notice to you.

Children's Privacy

The 680k platform is strictly intended for adults aged 21 years and older, in accordance with PAGCOR guidelines applicable to online gaming in the Philippines. 680k does not knowingly collect personal data from persons under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will immediately suspend the relevant account, delete all associated personal data, and report the incident as required by applicable law. Any funds deposited by an underage player will be handled in accordance with PAGCOR guidelines.

If you are a parent or guardian and believe that your child has registered for a 680k account, please contact our support team immediately. We take underage gambling extremely seriously and will act swiftly to address any such situation.

Third-Party Links

The 680k platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to the 680k platform and does not cover the privacy practices of any third-party websites. 680k is not responsible for the content, privacy policies, or data practices of any third-party sites.

We encourage you to review the privacy policy of any third-party website you visit before providing any personal data. The inclusion of a link on the 680k platform does not constitute an endorsement of that third party's privacy practices.

Updates to This Privacy Policy

680k reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this Policy, we will:

• Post the updated Policy on this page with a revised "Last Updated" date at the top;
• Send a notification to your registered email address or mobile number where the changes are significant; and
• Where required by the Data Privacy Act, obtain your renewed consent before processing your data under the updated terms.

Your continued use of the 680k platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you must stop using the Platform and may request account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically to stay informed about how 680k protects your personal data. The most current version of this Policy will always be available at 680k.org/privacy-policy.

Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 680k handles your personal data, please contact our Data Protection Officer (DPO) using the details below. Our DPO is responsible for overseeing 680k's compliance with the Philippine Data Privacy Act and serves as the primary point of contact for all data privacy matters.

When submitting a data subject request or privacy complaint, please include your full name, registered email address, a description of your request or concern, and any relevant supporting information. This will help our DPO process your request as efficiently as possible.

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and enforcing the Data Privacy Act of 2012.