f28 Casino Privacy Policy

f28 Casino, operating the platform at f28.xyz, is the personal information controller ("PIC") responsible for the personal data collected through the f28 platform. As PIC, f28 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (RA 10173) and all applicable regulations issued by the National Privacy Commission (NPC).

f28 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at any time regarding data privacy matters using the contact details provided in Section 12 of this Policy.

f28 collects personal data from you in the following categories, depending on how you interact with the platform:

f28 processes your personal data only for the following specified, explicit, and legitimate purposes:

• Account Management: To create, maintain, and administer your f28 player account, including verifying your identity and age (21+ requirement), managing your account settings, and processing your login credentials.
• Service Delivery: To provide you with access to f28's gaming platform, process your deposits and withdrawals, credit bonuses and promotions, and deliver customer support services.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations under the Anti-Money Laundering Act (AMLA), KYC requirements, and reporting obligations to relevant regulatory authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal or prohibited conduct on the f28 platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce responsible gaming tools (deposit limits, self-exclusion), and comply with responsible gaming obligations.
• Communications: To send you transactional communications (account notifications, deposit/withdrawal confirmations, security alerts) and, where you have consented, promotional communications about f28 offers and updates.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the f28 platform, optimize game performance, and enhance the player experience.
• Dispute Resolution: To investigate and resolve complaints, disputes, and legal claims involving your f28 account.

f28 will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by law.

Under the Philippine Data Privacy Act of 2012, f28 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and f28 (i.e., the Terms and Conditions governing your use of the platform). This covers account creation, game access, payment processing, and customer support.
• Legal Obligation: Processing is necessary for f28 to comply with its legal obligations under Philippine law, including AML reporting, KYC verification, and regulatory record-keeping requirements.
• Legitimate Interests: Processing is necessary for f28's legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, platform security, and responsible gaming monitoring — provided such interests are not overridden by your rights and freedoms.
• Consent: For processing activities not covered by the above bases — in particular, the sending of promotional communications — f28 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

f28 does not sell your personal data to third parties. f28 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, and banking partners receive the financial data necessary to process your deposits and withdrawals. These processors are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC / Identity Verification Providers: Third-party identity verification services receive your identity documents and biometric data solely for the purpose of verifying your identity and age in compliance with regulatory requirements.
• Game Providers: Third-party game studios and live dealer providers may receive your player ID and gaming session data to deliver their games on the f28 platform. These providers do not receive your full identity or financial data.
• Regulatory Authorities: f28 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other competent Philippine authorities when required by law, court order, or regulatory directive.
• Professional Advisors: f28's legal counsel, auditors, and compliance consultants may access personal data on a confidential basis as necessary to provide professional services to f28.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of f28's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

f28 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your active account relationship with f28, plus a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements under the AMLA.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years after the end of the business relationship, or longer if required by a regulatory authority.
• Gaming History: Game logs and betting records are retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Communications: Customer support communications are retained for two (2) years from the date of the last interaction.
• Technical Logs: Server logs and IP address records are retained for twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with f28's data disposal procedures.

f28 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the f28 platform is encrypted using 256-bit SSL/TLS technology. You can verify this by checking for the padlock icon in your browser's address bar when visiting f28.xyz.
• Encryption at Rest: Sensitive personal data stored on f28's servers — including financial data and identity documents — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to f28 personnel and authorized third parties who have a legitimate need to access it. All staff with access to personal data are subject to confidentiality obligations and receive regular data protection training.
• Two-Factor Authentication: f28 supports two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
• Penetration Testing: f28's platform undergoes regular security assessments and penetration testing by independent security professionals to identify and remediate vulnerabilities.
• Incident Response: f28 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, f28 will notify the National Privacy Commission and affected players in accordance with the timelines prescribed by RA 10173 and NPC regulations.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by f28. You may exercise any of these rights by contacting f28's Data Protection Officer using the details in Section 12:

f28 uses cookies and similar tracking technologies on the f28.xyz platform to enhance your experience, maintain your session, and analyze platform usage. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the f28 platform to function. They enable core features such as session management, login authentication, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming limits — to provide a more personalized experience on return visits.
• Analytics Cookies: f28 uses anonymized analytics data to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data is aggregated and does not identify individual players.
• Security Cookies: These cookies help f28 detect and prevent fraudulent activity, unauthorized account access, and bot traffic on the platform.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the f28 platform. f28 does not use third-party advertising cookies or cross-site tracking technologies.

The f28 platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with Philippine gambling regulations. f28 does not knowingly collect personal data from individuals under the age of 21.

If f28 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, f28 will immediately suspend the relevant account, delete the associated personal data, and forfeit any account balance in accordance with f28's Terms and Conditions and applicable law.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account with f28 or provided personal data to f28, please contact f28's Data Protection Officer immediately using the contact details in Section 12 so that appropriate action can be taken without delay.

f28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or f28's data processing practices. When material changes are made, f28 will notify registered players via email or in-platform notification at least seven (7) days before the revised Policy takes effect.

The current version of this Policy, including its effective date, is always available on this page at f28.xyz/privacy-policy. Your continued use of the f28 platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with any changes, you should stop using the platform and may request account closure in accordance with f28's Terms and Conditions.

f28 encourages you to review this Policy periodically to stay informed about how your personal data is being protected. Minor updates — such as corrections of typographical errors or clarifications that do not materially affect your rights — may be made without prior notice.

If you have any questions, concerns, or requests regarding this Privacy Policy or f28's handling of your personal data, you may contact f28's Data Protection Officer through the following channels:

If you are not satisfied with f28's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.

All data privacy requests must be submitted in writing and must include sufficient information to verify your identity as the account holder. f28 will not process rights requests from unverified individuals to protect against unauthorized disclosure of personal data.