f28 Casino Privacy Policy

This Privacy Policy applies to all personal data collected and processed by f28 ("f28," "we," "us," or "our") in connection with your use of the f28 website at f28.club, including all associated subdomains, mobile applications, games, features, and services (collectively, the "Platform").

f28 acts as the data controller in respect of the personal data you provide to us or that we collect about you through your use of the Platform. As data controller, f28 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

We encourage you to read this Privacy Policy carefully and in full. If you have any questions about how f28 handles your personal data, please refer to Section 14 for our contact details. This policy should be read alongside our Terms & Conditions, which govern your overall use of the f28 Platform.

f28 collects several categories of personal data depending on how you interact with the Platform. The categories of data we may collect include:

f28 collects personal data through the following means:

• Direct Interactions: Data you provide when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, respond to surveys, or participate in promotions.
• Automated Technologies: Data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, server logs, and similar tracking technologies. See Section 7 for more detail on our use of cookies.
• Third-Party Sources: Data received from identity verification service providers, payment processors (such as GCash, PayMaya, and partner banks), fraud prevention agencies, and analytics providers, where permitted by applicable law.
• Publicly Available Sources: In limited circumstances, f28 may supplement your profile with data from publicly available sources, such as public records or social media profiles, where this is relevant to our compliance obligations.

f28 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your f28 player account, including verifying your identity and processing your registration.
• Service Delivery: To provide you with access to games, process deposits and withdrawals, and deliver the full range of f28 Platform features.
• KYC & Compliance: To verify your identity and age (21+ requirement), comply with anti-money laundering (AML) obligations, and meet other regulatory requirements applicable under Philippine law.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, cheating, and other prohibited conduct on the Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling, enforce self-exclusion and deposit limit settings, and provide player protection tools.
• Marketing & Promotions: To send you information about f28 promotions, bonuses, and new features, where you have provided consent or where we have a legitimate interest in doing so. You may opt out of marketing communications at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the f28 Platform.
• Legal Obligations: To comply with applicable laws, regulations, court orders, and requests from competent regulatory and law enforcement authorities, including PAGCOR and the Anti-Money Laundering Council (AMLC).

f28 processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012 and applicable data protection principles:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the processing of sensitive personal information.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and f28 — specifically, to provide you with the services described in our Terms & Conditions, including account management, gameplay, and payment processing.
• Legal Obligation: Where processing is necessary for f28 to comply with a legal obligation, including KYC and AML requirements under Philippine law, PAGCOR regulatory requirements, and obligations under the Data Privacy Act itself.
• Legitimate Interests: Where processing is necessary for the purposes of the legitimate interests pursued by f28, such as fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your fundamental rights and freedoms.

f28 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by f28 to assist with age and identity verification.
• Game Providers: Licensed game software providers whose games are available on the f28 Platform, where necessary for the delivery of those games and the recording of game outcomes.
• Analytics & Technology Providers: Service providers who assist f28 with platform analytics, fraud detection, cybersecurity, and technical infrastructure, all of whom are bound by confidentiality obligations.
• Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulation.
• Professional Advisors: Lawyers, auditors, and other professional advisors engaged by f28, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of f28's business, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection commitments.

All third parties with whom f28 shares personal data are required to respect the security of your data and to treat it in accordance with applicable law. f28 does not permit third-party service providers to use your personal data for their own purposes.

f28 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support our security and fraud prevention measures. A cookie is a small text file placed on your device when you visit a website.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the f28 Platform and prevent you from accessing certain features. Your cookie preferences can also be managed through the cookie consent tool displayed when you first visit the Platform.

f28 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active Accounts: Personal data associated with active f28 accounts is retained for the duration of the account relationship and for a period of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• KYC Documents: Identity verification documents are retained for five (5) years following the end of the business relationship, or longer if required by a competent authority.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction.
• Marketing Data: Where you have consented to receive marketing communications, your contact details for marketing purposes are retained until you withdraw your consent or opt out.

When personal data is no longer required, f28 will securely delete or anonymize it in accordance with our internal data disposal procedures.

f28 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the f28 Platform is protected using 256-bit SSL/TLS encryption. Sensitive data at rest, including financial information and identity documents, is encrypted using industry-standard algorithms.
• Access Controls: Access to personal data within f28 is restricted on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Secure Infrastructure: f28's Platform is hosted on secure, regularly audited infrastructure with firewalls, intrusion detection systems, and continuous security monitoring.
• Incident Response: f28 maintains a data breach response plan. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, f28 will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of the Data Privacy Act.
• Third-Party Audits: f28 engages independent security auditors to conduct periodic penetration testing and security assessments of the Platform.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by f28. To exercise any of these rights, please contact our Data Protection Officer as described in Section 14.

The f28 Platform is strictly intended for adults aged twenty-one (21) years and older. f28 does not knowingly collect personal data from individuals under the age of 21. The minimum age of 21 is the legal requirement for participation in casino-style gambling activities in the Philippines under applicable PAGCOR regulations.

f28 employs age verification procedures during the registration process and as part of our KYC requirements to prevent access by minors. If f28 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

f28 primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to, and processed in, countries outside the Philippines — for example, where f28 uses cloud infrastructure providers or game software providers whose servers are located abroad.

Where such international transfers occur, f28 ensures that appropriate safeguards are in place to protect your personal data in accordance with the requirements of the Philippine Data Privacy Act. These safeguards may include:

• Contractual clauses that impose data protection obligations on the recipient equivalent to those applicable in the Philippines.
• Transfers to countries that have been assessed as providing an adequate level of data protection by the National Privacy Commission.
• Binding corporate rules or other approved transfer mechanisms where applicable.

By using the f28 Platform, you acknowledge and consent to the transfer of your personal data to other countries as described in this section, subject to the safeguards outlined above.

f28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will notify registered players by posting a prominent notice on the Platform and, where practicable, by sending a notification to the email address associated with your account.

The updated Privacy Policy will be effective from the date indicated in the "Last Updated" notice at the top of this page. Your continued use of the f28 Platform following the effective date of any amendment constitutes your acknowledgment of the revised policy. We encourage you to review this Privacy Policy periodically to stay informed of how f28 is protecting your personal data.

The most current version of this Privacy Policy will always be available at f28.club/privacy-policy.

f28 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by f28, please contact our DPO using the details below:

• Data Protection Officer: f28 Data Protection Office
• Email: [email protected]
• General Support: [email protected]
• Response Time: We aim to acknowledge all privacy-related inquiries within 72 hours and to provide a substantive response within thirty (30) days.

If you are not satisfied with f28's response to your privacy inquiry or complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about how to contact the NPC and file a complaint is available on the NPC's official website.