slost8 Privacy
Policy

1Who is the Data Controller?

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal information is the operator of the slost8 platform at slost8.net.

As a platform serving Filipino players, slost8 is registered with and subject to the jurisdiction of the National Privacy Commission (NPC) of the Philippines. Our designated Data Protection Officer (DPO) oversees all data processing activities and serves as your primary point of contact for privacy-related concerns. Contact details for the DPO are provided in Section 14 of this Policy.

slost8 operates within a framework that also requires compliance with PAGCOR regulations, the Anti-Money Laundering Act (AMLA) as amended by RA 10365 and RA 11521, and the Terrorism Financing Prevention and Suppression Act. These regulatory frameworks intersect with and inform our data processing practices throughout this Policy.

2What Personal Data We Collect

slost8 collects personal data in several categories depending on how you interact with the Platform. The table below summarises the categories of data we collect and specific examples within each category.

We do not intentionally collect sensitive personal information as defined under RA 10173 (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless it is directly volunteered by you in the context of a responsible gaming self-disclosure or is required for a specific regulatory obligation.

3How We Collect Your Data

3.1 Directly From You

The majority of the personal data slost8 holds about you is provided directly by you when you: register a Player Account; complete KYC verification by uploading government-issued identification; make a deposit or request a withdrawal; contact our customer support team via live chat or email; participate in promotions, surveys, or tournaments; or update your account preferences and responsible gaming settings.

3.2 Automatically Through the Platform

When you access and use slost8.net, certain technical and gaming activity data is collected automatically through cookies, server logs, and analytics tools. This includes your IP address, device identifiers, browser configuration, pages visited, games played, and session duration. See Section 7 for full details on our cookie practices.

3.3 From Third Parties

In limited circumstances, slost8 may receive personal data about you from third parties, including:

• Identity verification service providers (e-KYC partners) who validate government ID authenticity against national databases.
• Payment processors and e-wallet providers (GCash, Maya, BPI, BDO, Metrobank) who confirm transaction details and wallet ownership.
• Fraud detection and anti-money laundering screening services that flag accounts appearing on sanctions or watchlists.
• PAGCOR's player exclusion registry, which we check against our player database to honour self-exclusion requests made through any PAGCOR-licensed platform.

4Why We Use Your Personal Data

slost8 uses the personal data we collect for the following purposes:

• Account Creation and Management: To register your Player Account, verify your identity, and maintain your account in good standing.
• Processing Transactions: To facilitate deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, GrabPay, and 7-Eleven CLiQQ — all in Philippine Peso (PHP).
• Regulatory Compliance: To fulfil our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and any lawful request from Philippine regulatory or law enforcement authorities.
• Game Delivery and Platform Operation: To provide access to slots, live casino, bingo, sports betting (PBA, NBA, boxing, UFC), and Fortune Tree, and to ensure the integrity and fairness of all games.
• Customer Support: To respond to your queries, complaints, and requests through our live chat and email support channels.
• Fraud Prevention and Security: To detect and prevent fraud, abuse, money laundering, multi-accounting, and unauthorised access to the Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour, administer self-exclusion and deposit limit requests, and comply with responsible gaming obligations.
• Marketing and Promotions: To send you relevant offers, bonuses, and promotions via email or SMS — but only where you have opted in to receive such communications.
• Platform Improvement: To analyse usage patterns, fix bugs, and improve the overall slost8 gaming experience for Filipino players.

5Legal Basis for Processing

Under the Data Privacy Act of 2012, slost8 must have a lawful basis for processing your personal data. The bases we rely upon are as follows:

• Performance of a Contract: Processing necessary to operate your Player Account, process your bets, and facilitate your deposits and withdrawals. Without this processing, we cannot provide the slost8 service.
• Compliance with a Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, NPC directives, court orders, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, security monitoring, responsible gaming oversight, platform analytics, and customer service improvement — where such interests are not overridden by your privacy rights.
• Consent: Processing for direct marketing communications (email and SMS), non-essential cookies, and any other processing where we have specifically requested and obtained your freely given, informed, and specific consent. You may withdraw consent at any time.

6Sharing Your Personal Data

slost8 may share your personal data with the following categories of recipients, and only to the extent necessary:

6.1 Regulatory and Government Authorities

We are legally obligated to disclose personal data to PAGCOR (in relation to licensing compliance and player protection), the Anti-Money Laundering Council (AMLC) (in relation to suspicious transaction reporting under the AMLA), the National Privacy Commission (in the event of a data breach or upon lawful request), and Philippine law enforcement agencies (in response to valid court orders or lawful legal processes).

6.2 Payment Service Providers

When you make a deposit or request a withdrawal, relevant transaction data is shared with the applicable payment processor — GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, or 7-Eleven CLiQQ — solely to complete the financial transaction. These providers are subject to their own privacy policies and applicable Philippine financial data protection regulations.

6.3 KYC and Identity Verification Partners

To verify your identity and comply with AMLA and PAGCOR requirements, slost8 may share your submitted identification documents with accredited e-KYC service providers. These partners are contractually bound to process your data exclusively for identity verification purposes and are prohibited from using it for any other purpose.

6.4 Technology and Platform Service Providers

slost8 works with technology partners who provide infrastructure, hosting, customer support software, and analytics services. These processors act on slost8's instructions under data processing agreements and may not independently use your personal data for their own purposes.

6.5 Game Content Providers

Some of the casino games available on slost8 are provided by third-party game studios. Certain technical identifiers (such as anonymised session tokens) may be shared with these studios to facilitate game delivery and RNG certification audits. No directly identifiable personal data (such as your full name or address) is shared with game content providers.

7Cookies & Tracking Technologies

slost8 uses cookies and similar tracking technologies to operate the Platform, personalise your experience, prevent fraud, and — where you have consented — to serve relevant marketing communications.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting your ability to use slost8.
• Functional Cookies: Used to remember your preferences, such as language settings, responsible gaming reminder intervals, and display preferences.
• Analytics Cookies: Used to understand how players navigate the Platform — which pages are visited most, where sessions end, and how features are used. This helps us improve the overall experience for Pinoy players.
• Marketing Cookies: Used, with your consent, to track your engagement with promotional content and to avoid showing you the same promotional message repeatedly. These are only activated if you opt in to marketing communications.

7.2 Managing Your Cookie Preferences

You can manage non-essential cookie preferences at any time through your browser settings or the slost8 cookie preference centre accessible via the footer of the Platform. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform normally.

8Data Retention

slost8 retains personal data only for as long as is necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your registered Player Account plus a minimum of 5 years following account closure, in compliance with AMLA record-keeping requirements.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or from the date of account closure, whichever is later.
• Customer Support Communications: Retained for 3 years from the date of the communication, to enable resolution of any subsequent disputes.
• Marketing Consent Records: Retained for the duration of your opt-in period plus 3 years following opt-out, as evidence of your consent history.
• Technical and Log Data: Typically retained for 12 months on active systems, with selected logs archived for up to 5 years for security investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with our data disposal procedures.

9Data Security

slost8 implements a comprehensive set of technical, organisational, and administrative security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All data exchanged between your browser or mobile device and slost8.net is encrypted using TLS 1.2 or higher.
• Encryption at Rest: Sensitive data stored on slost8 servers, including KYC documents and financial records, is encrypted at rest using industry-standard algorithms.
• Access Controls: Access to systems containing personal data is restricted to authorised personnel only, governed by role-based access controls and multi-factor authentication requirements.
• Intrusion Detection: slost8's infrastructure is monitored 24/7 for signs of unauthorised access, unusual traffic patterns, and potential data exfiltration attempts.
• Regular Security Audits: We conduct periodic penetration testing and security audits conducted by independent third-party cybersecurity firms.
• Staff Training: All slost8 employees and contractors who handle personal data receive mandatory data privacy and security training consistent with NPC guidelines.

In the event of a personal data breach that is reasonably likely to result in harm to affected individuals, slost8 will notify the NPC within 72 hours of becoming aware of the breach and will notify affected players as promptly as practicable, in accordance with RA 10173 and NPC Circular 16-03.

10Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you are entitled to the following rights with respect to your personal data held by slost8. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 14.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We may need to verify your identity before processing your request. We will not charge a fee for standard access requests.

11Minors & the 21+ Age Policy

During the registration process, all applicants are required to confirm that they are 21 years of age or older. slost8 enforces this through mandatory date-of-birth collection at registration and compulsory KYC identity verification before any real-money gameplay or withdrawal is permitted.

If slost8 discovers or is notified that a Player Account has been registered by or on behalf of a person under 21 years of age, we will:

• Immediately suspend and permanently close the relevant account.
• Refund any net deposited real-money balance to the originating payment method (minus any winnings, which will be forfeited).
• Delete all personal data associated with the underage account as promptly as is consistent with our legal obligations.
• Report the incident to PAGCOR where required under applicable regulations.

If you are a parent or guardian and believe your child has accessed slost8 without your knowledge, please contact our support team immediately at [email protected].

12Cross-Border Data Transfers

In some instances, the operation of the slost8 Platform may require your personal data to be processed or stored in data centres or by service providers located outside of the Philippines. Where such cross-border data transfers occur, slost8 ensures that appropriate safeguards are in place as required by Section 21 of RA 10173, including:

• Execution of data transfer agreements incorporating the standard contractual clauses recognised by the NPC.
• Transferring data only to recipients located in countries that have been assessed to provide an adequate level of data protection.
• Where transfers are to game content providers or infrastructure partners, ensuring those partners are contractually bound to process Philippine player data exclusively for the agreed purpose and to maintain security standards equivalent to those required under RA 10173.

slost8 maintains a record of all cross-border data transfers and makes this information available to the NPC upon request.

13Amendments to This Privacy Policy

slost8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The date of the most recent update is always displayed at the top of this Policy.

Where amendments are material — meaning they significantly affect how your data is collected, used, or shared — slost8 will provide advance notice via your registered email address and a prominent notice on the Platform. For non-material clarifications, the updated Policy will be published on this page without separate notification.

Your continued use of the slost8 Platform after the effective date of any amendment to this Privacy Policy constitutes your acknowledgement and acceptance of the revised terms. If you do not accept the revised Policy, you must cease using the Platform and request account closure in accordance with our Terms & Conditions.

14Contact Our Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by slost8, please contact our designated Data Protection Officer through any of the following channels:

This Privacy Policy was last reviewed and updated in January 2026. slost8 recommends revisiting this page periodically. If you wish to escalate an unresolved privacy concern, you may contact the National Privacy Commission of the Philippines directly.