slost8 Privacy Policy

1. Overview and Scope of This Policy

This Privacy Policy applies to all personal information processed by slost8 (the "Company", "we", "us", or "our") in connection with your use of the slost8 website located at slost8.cam and all related services, features, and applications (collectively, the "Platform").

slost8 acts as the Personal Information Controller (PIC) as defined under Republic Act No. 10173, also known as the Philippine Data Privacy Act of 2012 ("DPA"). In this capacity, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with all applicable data protection laws and regulations, including the implementing rules and regulations (IRR) of the DPA and the issuances of the National Privacy Commission of the Philippines (NPC).

By registering an account with slost8, accessing the Platform, or otherwise engaging with our services, you consent to the collection, processing, storage, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of the Platform immediately.

2. Personal Information We Collect

slost8 collects both personal information and sensitive personal information as those terms are defined under the DPA. The categories of information we collect include, but are not limited to:

2.1 Identity and Contact Information

• Full legal name as it appears on a valid government-issued identification document;
• Date of birth (for mandatory age verification — slost8 requires players to be at least 21 years of age);
• Email address used to register your slost8 account;
• Mobile number registered to your GCash, Maya, or other linked payment method;
• Residential address (province, city, barangay) within the Philippines or, where applicable, abroad.

2.2 Identity Verification Documents

• Government-issued identification document numbers (e.g., passport number, UMID number, LTO driver's license number, SSS number, PhilHealth ID number, voter's ID number);
• Copies or scans of the foregoing identification documents, submitted during Know Your Customer (KYC) verification.

2.3 Financial and Transaction Information

• GCash account details and mobile number associated with GCash transactions;
• Maya (formerly PayMaya) account details;
• Bank account details (BPI, BDO, Metrobank, UnionBank, or other Philippine financial institutions) submitted for withdrawal purposes;
• Cryptocurrency wallet addresses where applicable;
• Complete record of all deposits, withdrawals, and in-platform transactions in Philippine Peso (PHP).

2.4 Gaming Activity Data

• Game history, including games played, wagers placed, outcomes, and winnings;
• Session duration and frequency of play;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, cool-off periods, self-exclusion status).

2.5 Technical and Device Data

• IP address and approximate geolocation data derived from IP;
• Device type, model, and operating system (Android, iOS, Windows, macOS);
• Browser type and version;
• Cookie identifiers, session tokens, and similar tracking technologies;
• Referral source and pages visited on the slost8 Platform.

2.6 Communications Data

• Records of customer support interactions via live chat, email, or Telegram;
• Content of written complaints, feedback submissions, and dispute correspondence;
• Marketing communication preferences and opt-out records.

3. How We Collect Your Personal Information

slost8 collects your personal information through the following means:

• Directly from you — when you register an account, submit KYC documents, make deposits or withdrawal requests, contact customer support, or participate in promotions;
• Automatically — through cookies, web beacons, log files, and similar tracking technologies when you access or use the slost8 Platform;
• From third-party payment processors — when you initiate transactions via GCash, Maya, BPI, BDO, or other integrated payment channels, subject to those providers' own privacy policies;
• From identity verification providers — where slost8 engages third-party KYC verification services to authenticate your identity documents;
• From fraud prevention and AML compliance tools — data obtained through transaction monitoring systems to detect suspicious activity and comply with anti-money laundering obligations.

4. Purposes for Which We Process Your Information

slost8 processes your personal information for the following specific, legitimate purposes:

1. Account Management: To create, maintain, verify, and administer your slost8 player account, including age and identity verification in accordance with applicable gaming regulations;
2. Service Delivery: To provide you with access to slost8's gaming platform, process your deposits and withdrawals in Philippine Peso, and deliver customer support;
3. Regulatory Compliance: To comply with obligations under Philippine gaming regulations, the Data Privacy Act, anti-money laundering laws (Republic Act No. 9160 as amended), and orders of competent regulatory authorities including PAGCOR;
4. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account abuse, money laundering, and other prohibited activities as defined in our Terms and Conditions;
5. Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and fulfill our responsible gaming obligations to players;
6. Marketing Communications: To send you promotional offers, bonus notifications, and product updates where you have consented to receive such communications. You may withdraw this consent at any time;
7. Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the slost8 Platform;
8. Legal Proceedings: To establish, exercise, or defend legal claims and to comply with orders of courts or regulatory agencies.

5. Legal Basis for Processing

slost8 processes your personal information on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

• Consent Sec. 12(a) DPA — For marketing communications and non-essential cookies, where you have provided explicit, informed consent;
• Contractual Necessity Sec. 12(b) DPA — For processing necessary to perform our obligations under the Terms and Conditions, including account management and payment processing;
• Legal Obligation Sec. 12(c) DPA — For KYC verification, AML reporting, and regulatory compliance activities required by Philippine law;
• Legitimate Interest Sec. 12(f) DPA — For fraud prevention, platform security, and analytics, where our legitimate interest does not override your fundamental rights and freedoms.

6. Disclosure and Sharing of Your Information

slost8 does not sell, rent, or trade your personal information to third parties for their independent marketing purposes. We may disclose your information to the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality and data protection obligations:

• Payment Service Providers: GCash (G-Xchange, Inc.), Maya Philippines, Inc., and Philippine banking institutions, to process deposits, withdrawals, and financial transactions;
• Game Content Providers: Licensed game providers such as Pragmatic Play and Evolution Gaming, to the extent technically necessary to deliver game functionality;
• KYC and Compliance Providers: Third-party identity verification and AML screening services engaged by slost8 to fulfill its regulatory obligations;
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers subject to data processing agreements;
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities, where required by law, court order, or regulatory directive;
• Legal and Professional Advisors: Lawyers, auditors, and accountants where necessary for the exercise of legal rights or fulfillment of professional obligations, subject to confidentiality obligations.

All third-party service providers engaged by slost8 are contractually required to process your personal information solely for the purpose for which it was disclosed, to implement appropriate security measures, and to comply with all applicable data protection laws.

7. Cookies and Tracking Technologies

slost8 uses cookies and similar tracking technologies to deliver, secure, and improve the Platform. Cookies are small text files stored on your device when you access slost8.cam.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming limit configurations.
• Analytical Cookies: Collect aggregated, anonymized data about how users navigate the Platform to help us improve performance and content. These are only set with your consent.
• Marketing Cookies: Track your visit to slost8.cam to enable targeted promotional content. These are only set with your explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling non-essential cookies will not affect your ability to use the core gaming functionality of slost8, but may affect personalization features.

8. Data Retention

slost8 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Our standard retention periods are as follows:

• Account Data: Retained for the lifetime of your slost8 account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations under Philippine law;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or the date of last transaction, whichever is later;
• Transaction Records: Retained for a minimum of five (5) years, consistent with AMLC requirements;
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required by legal proceedings;
• Marketing Consent Records: Retained for the duration of the consent period plus two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, slost8 will securely delete or anonymize your personal information in a manner that prevents its reconstruction or re-identification.

9. Security of Your Personal Information

slost8 implements organizational, technical, and physical security measures appropriate to the risk associated with the processing of your personal information. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and slost8's servers;
• At-rest encryption for stored personal data and financial records;
• Role-based access controls ensuring that slost8 staff can only access personal information necessary for their specific function;
• Regular penetration testing and vulnerability assessments by qualified cybersecurity professionals;
• Two-factor authentication (2FA) options available for all player accounts;
• Automated transaction monitoring systems to detect unusual activity patterns in real time.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, slost8 will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by the DPA and NPC regulations.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information processed by slost8:

• Right to be Informed: The right to be informed whether your personal information is being processed and to receive a description of the information held, the purposes of processing, and third parties to whom it has been disclosed;
• Right to Access: The right to request a copy of your personal information held by slost8, subject to verification of your identity;
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal information. You may update basic account details directly from your account settings on the slost8 Platform;
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal information where processing is unlawful, the purpose for which the data was collected has been fulfilled, or your consent has been withdrawn and there is no other legal basis for continued processing;
• Right to Object: The right to object to the processing of your personal information, including for direct marketing purposes. You may opt out of marketing communications at any time through your account preferences or by contacting support;
• Right to Data Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that your rights under the DPA have been violated.

To exercise any of the above rights, please contact slost8's Data Protection Officer by sending a written request to our support email address. We will acknowledge your request within three (3) business days and fulfill it within fifteen (15) business days, subject to any extensions permitted by law.

11. Children's Privacy

slost8 is strictly prohibited for persons under the age of twenty-one (21) years. The Platform does not knowingly collect personal information from minors. If slost8 becomes aware that personal information has been collected from a person under the age of 21 without parental or guardian consent, we will immediately suspend the relevant account, delete the associated personal information from our records, and report the matter to relevant authorities where required by law.

If you are a parent or guardian and believe that your child has registered an account with slost8, please contact our support team immediately at the contact details provided in Section 13 of this Policy.

12. Changes to This Privacy Policy

slost8 reserves the right to update or modify this Privacy Policy at any time in response to changes in applicable law, changes in our data processing practices, or operational requirements. Any material changes to this Policy will be communicated to you via your registered email address at least seven (7) days prior to the changes taking effect.

The updated Privacy Policy will be published on the slost8 website with a revised "Last Updated" date at the top of the document. Your continued use of the slost8 Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you must cease use of the Platform and close your account before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how slost8 handles your personal information.

13. How to Contact Us — Data Protection Officer

For any inquiries, requests, or complaints relating to this Privacy Policy or the processing of your personal information by slost8, please contact our designated Data Protection Officer (DPO) using the following details:

• Email: [email protected] (displayed as plain text — not a clickable link)
• Subject Line: Please include "Privacy Request" or "Data Subject Rights" in your subject line to ensure prompt routing to the DPO;
• Live Chat: Available 24/7 via slost8.cam — request escalation to the Data Protection team;
• Response Time: Within 3 business days for acknowledgment; within 15 business days for full resolution.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe that your rights under the Data Privacy Act have been infringed by slost8's processing of your personal information.