680k.com Privacy Policy

1.1 This Privacy Policy applies to all personal information collected, processed, and stored by 680k.com in connection with your use of the 680k.com online gaming platform accessible at 680kcom.club, including all associated pages, features, services, and support functions.

1.2 Data Controller. For purposes of the Philippine Data Privacy Act of 2012 (RA 10173), the data controller responsible for your personal information is the legal entity operating the 680k.com platform under PAGCOR authorization. References to "680k.com", "we", "us", and "our" in this Policy refer to that entity in its capacity as data controller.

1.3 Regulatory Framework. 680k.com processes personal data in compliance with: (a) the Data Privacy Act of 2012 (RA 10173); (b) the Implementing Rules and Regulations of RA 10173 as issued by the National Privacy Commission (NPC); (c) PAGCOR's data protection and player privacy requirements applicable to licensed online gaming operators; and (d) the Anti-Money Laundering Act (RA 9160, as amended) insofar as it requires collection and retention of identity and transaction data.

1.4 Consent. By creating an account on 680k.com, you consent to the collection and processing of your personal data as described in this Policy. Where processing is based on consent, you have the right to withdraw that consent at any time — though withdrawal will not affect the lawfulness of processing conducted prior to withdrawal, and may result in the inability to continue operating certain account functions that depend on the processed data.

2.1 680k.com collects the following categories of personal information from Members and prospective Members:

2.2 680k.com does not collect full payment card numbers, CVV codes, or online banking passwords. Payment processing is handled through GCash, PayMaya, and accredited Philippine bank payment gateways. 680k.com receives only transaction confirmation references and status codes from these payment systems.

3.1 Direct Collection. 680k.com collects personal information directly from you when you: (a) register an account on the platform; (b) complete KYC identity verification; (c) make a deposit or request a withdrawal; (d) contact the support team via live chat or email; (e) set responsible gaming preferences in your account; or (f) participate in promotional activities.

3.2 Automated Collection. When you access and use the 680k.com platform, certain technical and behavioral data is collected automatically through server logs, session tracking systems, and browser technologies. This includes your IP address, device identifiers, login activity, game interaction data, and session duration information. This data is essential for platform security, fraud detection, and technical performance monitoring.

3.3 Third-Party Sources. 680k.com may receive supplementary identity verification data from accredited KYC verification service providers, and transaction data from payment processors including GCash and PayMaya, for the purpose of confirming the validity of deposits and withdrawals and meeting anti-money laundering obligations.

3.4 Cookies and Similar Technologies. 680k.com uses cookies and similar tracking technologies to maintain your session state, remember your preferences, and support platform security functions. See Section 8 for full details on cookie use and your options for managing cookie preferences.

4.1 680k.com processes your personal data for the following purposes, each supported by the legal basis noted:

4.2 Where 680k.com relies on legitimate interest as the legal basis for processing, we have assessed that our legitimate interests in fraud prevention, platform security, and service improvement do not override your fundamental rights and freedoms as a data subject under Philippine law.

5.1 680k.com does not sell, rent, or trade your personal information to any third party for commercial purposes. Data is shared only where necessary and as described below.

5.2 Regulatory and Government Authorities. 680k.com is legally required to disclose relevant personal and financial data to: PAGCOR (as our licensing authority); the Anti-Money Laundering Council (AMLC) where transaction patterns trigger mandatory reporting thresholds under RA 9160; and other competent Philippine government agencies upon valid legal demand, court order, or pursuant to lawful investigation.

5.3 Service Providers and Data Processors. 680k.com engages third-party service providers who process data strictly on 680k.com's behalf and under written data processing agreements consistent with RA 10173. These include:

• KYC and identity verification service providers;
• Payment processors (GCash, PayMaya, and accredited Philippine bank payment gateways);
• Cloud infrastructure and hosting providers;
• Game content providers (JILI, Pragmatic Play, PG Soft, and others in the 680k.com game lobby) — limited to the session and game interaction data necessary to operate the game;
• Customer support platform providers;
• Fraud detection and cybersecurity service providers.

5.4 No Data Sales. 680k.com has not sold and will not sell personal data to any third party. Data shared with service providers is strictly limited to what is necessary for the specified service function and is governed by contractual data protection obligations.

6.1 680k.com retains personal data for the period necessary to fulfill the purposes for which it was collected, subject to applicable legal retention obligations. The following retention periods apply as minimum standards:

• KYC and identity documents: Retained for a minimum of five (5) years following account closure, as required by PAGCOR and AML regulations;
• Financial transaction records: Retained for a minimum of five (5) years following the date of each transaction;
• Gaming activity logs: Retained for a minimum of three (3) years for fraud detection, dispute resolution, and responsible gaming monitoring purposes;
• Support and communications records: Retained for two (2) years from the date of the interaction, or longer if the communication relates to an ongoing dispute or investigation;
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter as evidence of lawful processing.

6.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where anonymized data (which carries no risk of identification) is retained for statistical or analytical purposes beyond the retention period, it is no longer considered personal data under RA 10173.

6.3 In cases where account closure is initiated by the Member, 680k.com will delete or anonymize personal data that is no longer required for legal compliance purposes within a reasonable period following account closure — typically within 90 days, subject to the mandatory retention obligations noted above.

7.1 680k.com implements technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and 680k.com's servers is protected by 256-bit SSL/TLS encryption — the same standard employed by major Philippine banks including BPI, BDO, and Metrobank;
• Encryption at Rest: Sensitive data stored in 680k.com's databases — including identity documents and financial records — is encrypted at rest using industry-standard encryption protocols;
• Password Security: Account passwords are hashed using one-way cryptographic algorithms. 680k.com does not store passwords in readable form and cannot retrieve a Member's password;
• Access Controls: Access to personal data within 680k.com's systems is restricted on a strict need-to-know basis. Employees and contractors with access to personal data are bound by confidentiality obligations;
• Two-Factor Authentication: SMS OTP-based 2FA is available to all Members and is strongly recommended, particularly for accounts linked to GCash wallets;
• Fraud Monitoring: Automated and manual systems monitor account activity for indicators of unauthorized access, unusual transaction patterns, and potential fraud.

7.2 Data Breach Response. In the event of a personal data breach that poses a real risk of harm to affected data subjects, 680k.com will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by RA 10173. Affected Members will be notified where the breach poses a high risk to their rights and interests.

7.3 No security measure can guarantee absolute protection. You are responsible for maintaining the security of your own account credentials and should immediately notify 680k.com via live support if you suspect unauthorized access to your account.

8.1 680k.com uses cookies and similar browser-based technologies to operate essential platform functions, maintain session continuity, remember your preferences, and support security and fraud detection processes.

8.2 The following cookie categories are used on the 680k.com platform:

• Strictly Necessary Cookies: Essential for platform operation — including session management, login state maintenance, and security token storage. These cookies cannot be disabled without impairing core platform functions;
• Functional Cookies: Remember your account preferences, language settings, and responsible gaming configurations between sessions;
• Analytics Cookies: Collect aggregated, anonymized data about how Members navigate and interact with the platform. Used exclusively to improve the platform experience — not shared with third-party advertisers;
• Security Cookies: Support fraud detection and bot-prevention systems by storing device fingerprint identifiers and login anomaly detection parameters.

8.3 680k.com does not use third-party advertising cookies or cross-site behavioral tracking technologies on the platform. We do not participate in programmatic advertising networks.

8.4 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your 680k.com account and using platform services.

9.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 680k.com:

9.2 To exercise any of the above rights, please contact 680k.com's Data Protection Officer (DPO) via the contact details in Section 14 of this Policy. 680k.com will respond to all rights requests within 30 days of receipt, as required by the NPC's implementing regulations.

10.1 The 680k.com platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR's age restriction requirements for real-money online gaming in the Philippines.

10.2 680k.com does not knowingly collect personal information from individuals under the age of 21. All account registrations are subject to mandatory age verification through KYC document submission. Accounts where the registered individual is found to be under 21 years of age are immediately suspended.

10.3 If you have reason to believe that a minor has registered on the 680k.com platform or has provided personal information to 680k.com, please contact our support team immediately via live chat or at the email address listed in Section 14. Upon verification of the report, 680k.com will take immediate action to suspend the relevant account and delete any associated personal data in a manner consistent with applicable legal requirements.

11.1 680k.com's primary data processing infrastructure is located within, or proximate to, the Philippines. However, certain service providers and game content providers engaged by 680k.com may process data from servers located in other jurisdictions, including other countries in the Asia-Pacific region.

11.2 Where personal data is transferred outside the Philippines, 680k.com ensures that such transfers are subject to adequate contractual safeguards, consistent with NPC guidelines on cross-border data transfers under RA 10173. This includes binding data processing agreements that require offshore processors to maintain data protection standards equivalent to those required under Philippine law.

11.3 680k.com does not transfer personal data to jurisdictions that have been identified by the NPC as providing inadequate data protection without implementing additional appropriate safeguards.

12.1 The 680k.com platform integrates with third-party game providers (including JILI, Pragmatic Play, PG Soft, and others) and payment processors (GCash, PayMaya, BPI, BDO, Metrobank) to deliver its services. These integrations involve the transmission of limited, function-specific data to the relevant third party.

12.2 Each third-party service provider integrated into the 680k.com platform operates under its own privacy policy with respect to data processed in its own systems. 680k.com is not responsible for the data practices of these providers beyond the contractual data processing obligations it imposes on them.

12.3 The 680k.com platform does not contain links to external websites or third-party platforms. All navigation within the platform is internal. 680k.com's Privacy Policy applies only to data processed through the 680kcom.club domain and its associated subdomains.

13.1 680k.com reserves the right to update this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, regulatory guidance, or platform features. All updates will be published on this page with an updated effective date.

13.2 Where a change to this Policy materially affects how 680k.com processes your personal data in a manner that requires fresh consent, 680k.com will notify affected Members via their registered email address and request renewed consent before the change takes effect with respect to that Member's data.

13.3 Continued use of the 680k.com platform following publication of an updated Privacy Policy constitutes acknowledgment of the updated Policy. Members who do not accept material changes to the Privacy Policy should close their account prior to the effective date of the change and contact the DPO to exercise their data deletion rights.

14.1 Data Protection Officer (DPO). In compliance with RA 10173, 680k.com has designated a Data Protection Officer responsible for overseeing the platform's data protection compliance and serving as the primary point of contact for data subject rights requests and privacy inquiries.

14.2 To exercise your data privacy rights, submit a complaint about 680k.com's data practices, or make any inquiry relating to this Privacy Policy, please contact the DPO through the following channels:

• Email: [email protected] — with subject line "Privacy / Data Rights Request"
• Live Chat: Available 24/7 on the 680k.com platform — request to speak with a Privacy / Data team representative
• Response Time: All data rights requests acknowledged within 72 hours; substantive response within 30 days as required by NPC implementing regulations

14.3 National Privacy Commission (NPC). If you are not satisfied with 680k.com's response to a data privacy concern, you may escalate the matter to the National Privacy Commission of the Philippines, which has jurisdiction over data privacy complaints under RA 10173.

This Privacy Policy was last updated on 1 January 2026 and is effective from that date. All previous versions of the 680k.com Privacy Policy are superseded by this document.