Privacy Policy — 0kfun Online Casino

0kfun ("we", "us", "our") operates the online casino and sports betting platform accessible at 0kfun.bet, licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). We are committed to protecting the privacy and personal data of every player, visitor, and user who interacts with the 0kfun platform.

This Privacy Policy is issued pursuant to Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations as promulgated by the National Privacy Commission (NPC) of the Philippines. It describes in clear terms what personal data 0kfun collects from you, the lawful basis on which we process that data, how long we retain it, with whom we share it, and what rights you can exercise as a data subject.

This Privacy Policy applies to all personal data collected through the 0kfun website, mobile-optimized browser interface, customer support channels, and any promotional communications we send to registered players. It does not apply to third-party websites or services that may be linked from the 0kfun platform — those services maintain their own separate privacy policies.

0kfun collects only the personal data that is necessary and proportionate to the purposes described in this policy. The categories of personal data we collect include:

0kfun does not intentionally collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act (e.g., religious beliefs, political affiliations, health conditions) except where specifically required by PAGCOR compliance obligations, such as self-exclusion declarations related to problem gambling.

0kfun collects personal data through the following channels and mechanisms:

• Direct Registration: When you create a 0kfun account, you voluntarily provide your name, date of birth, email address, and mobile number through the registration form.
• KYC Document Submission: When you submit identity documents through the 0kfun verification portal to satisfy PAGCOR KYC requirements prior to withdrawal processing.
• Deposit and Withdrawal Transactions: When you make a deposit or request a withdrawal via GCash, Maya, BPI, BDO, Metrobank, or any other approved payment method, the transaction details are captured and linked to your account.
• Platform Interaction: Automatically, through server logs, session tracking, and cookies, as you browse and play on the 0kfun platform. This includes IP address logging, device fingerprinting for fraud prevention, and game session data.
• Customer Support Interactions: When you initiate a live chat session or contact our support team by email, the content of that communication is recorded for quality assurance and dispute resolution purposes.
• Promotional Participation: When you opt into a bonus, tournament, or promotional campaign on 0kfun, additional preference and eligibility data may be captured.
• Third-Party Sources: In limited cases, 0kfun may receive data from PAGCOR, payment processors, fraud prevention services, or identity verification providers to supplement our own records. All such third-party data sharing is conducted under data processing agreements consistent with RA 10173.

0kfun processes your personal data exclusively for the following specified, legitimate purposes:

1. Account Management: To create, maintain, and administer your 0kfun player account, including authentication and access control.
2. KYC and Regulatory Compliance: To verify your identity and age (21+ requirement) in accordance with PAGCOR licensing conditions and Philippine anti-money laundering regulations.
3. Payment Processing: To facilitate deposits and process withdrawal requests to your registered GCash, Maya, or bank account, and to maintain an accurate financial ledger for your account.
4. Gaming Service Delivery: To provide access to all casino games, sports betting markets, and platform features that constitute the 0kfun service.
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the platform.
6. Customer Support: To respond to inquiries, resolve disputes, and provide technical assistance through our live chat and email support channels.
7. Responsible Gaming: To administer deposit limits, loss limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming obligations.
8. Legal and Regulatory Reporting: To comply with mandatory reporting requirements to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities.
9. Service Improvement: To analyze platform usage patterns and optimize the 0kfun user experience, including game performance, payment flow, and customer support quality.
10. Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have provided explicit marketing consent. You may withdraw this consent at any time through your account notification settings.

Under Section 12 of the Data Privacy Act of 2012, personal data may only be processed when at least one of the following criteria is satisfied. 0kfun relies on the following legal bases for its data processing activities:

• Contractual Necessity (Section 12[b]): Processing your registration data, financial data, and gaming activity data is necessary to perform the contract established when you create a 0kfun account and agree to our Terms and Conditions.
• Legal Obligation (Section 12[c]): KYC verification, AMLC transaction reporting, and age verification (21+) are processing activities required by PAGCOR licensing conditions and Philippine law. 0kfun has no discretion to decline these obligations.
• Legitimate Interest (Section 12[f]): Fraud prevention, security monitoring, and platform analytics are conducted on the basis of 0kfun's legitimate interest in maintaining a safe and compliant gaming environment, provided that such interests are not overridden by your privacy rights.
• Consent (Section 12[a]): Marketing communications and optional preference data collection are conducted on the basis of your freely given, specific, and informed consent as recorded during the registration process or subsequently through your account settings.

0kfun does not sell, rent, or trade your personal data to third parties for their commercial purposes. We share your data only in the following limited and necessary circumstances:

• Payment Processors: GCash (GXI), Maya (Voyager Innovations), BancNet, and other payment providers receive only the minimum data required to authenticate and process your deposit or withdrawal transaction. All payment data transmission uses TLS 1.3 encryption.
• Game Content Providers: JILI Games, Pragmatic Play, PG Soft, Spadegaming, and other licensed game suppliers receive pseudonymized session identifiers to facilitate game-play and RNG certification. No directly identifiable personal data is transmitted to game providers beyond what is technically necessary.
• KYC and Identity Verification Providers: Third-party identity verification services may receive copies of your submitted government ID and selfie for automated document authentication. These providers operate under data processing agreements that bind them to RA 10173 standards.
• Fraud Prevention and Security Services: IP reputation services, device fingerprinting providers, and fraud detection platforms may receive technical session data to assist in identifying and preventing prohibited activity on the platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and any court or law enforcement authority with lawful jurisdiction may receive data as required by applicable Philippine law and regulation. Such disclosures are made pursuant to legal obligation, not commercial arrangement.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of the 0kfun business, player data may be transferred to a successor entity, subject to the same privacy protections described in this policy.

All third parties with whom 0kfun shares personal data are bound by data processing agreements that prohibit secondary use of the data beyond the specified purpose and require compliance with applicable Philippine data privacy law.

The 0kfun platform uses cookies and similar technologies to ensure the platform functions correctly and to provide a secure, personalized experience. The types of cookies we use are as follows:

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using the platform. Functional and analytics cookies can be disabled without affecting your ability to play, though some personalization features may not operate as expected.

0kfun retains personal data only for as long as necessary to fulfill the purposes described in this policy or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

• Active Account Data: Retained for the entire duration your account remains active on the 0kfun platform.
• KYC Documents and Financial Transaction Records: Retained for a minimum of five (5) years following the date of account closure or the last transaction, in compliance with the Anti-Money Laundering Act (RA 9160, as amended) and PAGCOR record-keeping requirements.
• Gaming Session Logs: Retained for three (3) years following the session date for audit, dispute resolution, and regulatory compliance purposes.
• Customer Support Communications: Retained for two (2) years following the resolution of the relevant support interaction.
• Marketing Consent Records: Retained for the duration of your account plus two (2) years to demonstrate compliance with consent requirements.
• Technical / Server Logs: Retained for ninety (90) days under a rolling deletion schedule, except where specific logs are flagged for retention in connection with an ongoing security investigation or dispute.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with NPC-approved data disposal standards.

0kfun implements a layered security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our technical and organizational security measures include:

• Encryption in Transit: All data transmitted between your browser and the 0kfun platform is encrypted using TLS 1.3 (Transport Layer Security). Our SSL certificate is maintained with a minimum 2048-bit RSA key.
• Encryption at Rest: Sensitive data fields — including identity document images, payment account details, and hashed passwords — are stored using AES-256 encryption at the database level.
• Access Controls: Access to player personal data within 0kfun's internal systems is restricted on a need-to-know basis. All staff with access to personal data undergo mandatory data privacy training consistent with NPC guidelines.
• Two-Factor Authentication: 0kfun offers 2FA for player accounts and mandates 2FA for all internal staff accessing systems containing personal data.
• Penetration Testing: 0kfun's platform undergoes periodic third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach, 0kfun will notify the National Privacy Commission within seventy-two (72) hours of discovery, as required by NPC Circular 16-03. Affected data subjects will be notified promptly where the breach is likely to result in a high risk to their rights and freedoms.

Under the Data Privacy Act of 2012 and the implementing regulations of the National Privacy Commission, you have the following rights with respect to your personal data held by 0kfun:

• Right to Be Informed: You have the right to be informed that your personal data is being collected and processed, including the purposes, legal basis, and scope of processing — as described in this Privacy Policy.
• Right of Access: You have the right to obtain confirmation of whether 0kfun holds personal data about you, and to receive a copy of that data in a commonly used electronic format upon verified request.
• Right to Rectification: You have the right to request correction of any inaccurate, outdated, or incomplete personal data held by 0kfun. Corrections to KYC data require resubmission of supporting documents.
• Right to Erasure ("Right to Be Forgotten"): You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations under the Anti-Money Laundering Act and PAGCOR regulations.
• Right to Object: You have the right to object to processing based on legitimate interest, including direct marketing communications. Upon receipt of a valid objection to marketing, 0kfun will cease sending promotional communications within five (5) business days.
• Right to Data Portability: You have the right to receive a structured, commonly used, and machine-readable copy of the personal data you have provided to 0kfun, to the extent technically feasible and legally permissible.
• Right to File a Complaint: If you believe that 0kfun has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission at privacy.gov.ph (Philippines).

0kfun does not knowingly collect personal data from individuals under the age of 21. Our registration process includes an age declaration requirement, and KYC verification with government-issued ID is required before any withdrawal can be processed. If 0kfun becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately:

• Suspend the relevant account pending investigation.
• Delete all personal data associated with the underage registration from our active systems.
• Report the incident to PAGCOR as required by our licensing conditions.
• Void and forfeit any deposits, wagers, or winnings associated with the underage account.

If you are a parent or guardian and believe your child has registered on 0kfun without your knowledge, please contact our support team immediately via live chat so we can take appropriate action without delay.

21+ Gambling is for adults aged 21 and above only. Play responsibly.

0kfun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, we will notify you through one or more of the following channels:

• A prominent notice displayed on the 0kfun platform upon your next login.
• An email notification to your registered address (where the change materially affects your rights as a data subject).
• An in-platform notification through the 0kfun message centre.

The revised Privacy Policy will take effect on the date specified in the notice. Your continued use of the 0kfun platform after the effective date of any amendment constitutes your acknowledgment of the updated policy. If you do not agree with the revised terms, you should discontinue use of the platform and may request account closure in accordance with Section 13 of the 0kfun Terms and Conditions.

The current version of this Privacy Policy is always available at 0kfun.bet/privacy-policy. The effective date at the top of this document reflects when the policy was last reviewed and updated.

0kfun has designated a Data Protection Officer (DPO) in compliance with Section 21 of the Data Privacy Act and NPC Circular 17-01. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 0kfun, please reach out through the following channels:

• Live Chat: Available 24/7 directly on the 0kfun platform — the fastest way to reach our team for urgent privacy concerns.
• Email: [email protected] (plain text — not a clickable link). Please include "Privacy Request" in the subject line and provide your registered username for faster processing.

We aim to respond to all privacy-related inquiries within five (5) business days. For formal data subject rights requests, our response timeline is fifteen (15) business days from receipt of a verified request, consistent with NPC guidelines.