mk16 Privacy Policy — Your Data Protection Rights

1. Introduction and Scope

This Privacy Policy applies to all personal data collected by mk16 through the website (mk16.cam), mobile browser access, customer support channels, and any other means by which you interact with mk16 services. By creating an mk16 account or using mk16 services, you acknowledge that you have read, understood, and consent to the data collection, use, and processing practices described in this Privacy Policy.

mk16 operates under the regulatory jurisdiction of the Philippine Amusement and Gaming Corporation (PAGCOR) and is committed to compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and all applicable data protection laws in the Philippines.

2. Data Controller and Contact Information

mk16 is the data controller responsible for the processing of your personal data. For questions, concerns, or requests regarding your personal data or this Privacy Policy, you may contact mk16's Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via mk16.cam
• Subject Line: "Data Privacy Inquiry" or "GDPR Request"

mk16 will respond to all data protection inquiries within fifteen (15) business days of receipt, as required by the Philippine Data Privacy Act.

3. Types of Personal Data Collected

mk16 collects and processes the following categories of personal data:

3.1 Account Registration Data

When you create an mk16 account, you provide:

• Full legal name (as it appears on government-issued identification)
• Date of birth (to verify age eligibility of 21+ years)
• Residential address (street address, city/municipality, province, postal code)
• Email address
• Mobile phone number (for SMS verification and account security)
• Chosen username and password
• Preferred currency (PHP by default for Philippine users)

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and anti-money laundering (AML) requirements, mk16 collects identity verification documents:

• Government-issued identification card (National ID, Driver's License, Passport, UMID, SSS ID, Postal ID) — copies or digital scans
• Proof of address documents (utility bills, bank statements, government correspondence dated within last 3 months)
• Selfie photograph holding identification card (for facial verification)
• For payment method verification: screenshots or statements showing account ownership of GCash, Maya, or bank accounts

3.3 Financial Transaction Data

mk16 records all financial transactions conducted through your account:

• Deposit amounts, dates, times, and payment methods used
• Withdrawal amounts, dates, times, and destination accounts
• Payment processor transaction IDs and reference numbers
• Transaction status (pending, completed, cancelled, failed)
• Account balance history

3.4 Gaming Activity Data

mk16 logs all gaming activity for regulatory compliance, fraud prevention, and customer service purposes:

• Games played, bet amounts, win/loss outcomes, and timestamps
• Bonus claims, wagering progress, and bonus fulfillment status
• Sports betting selections, odds, stake amounts, and settlement details
• Session duration and frequency of play
• Responsible gaming tool usage (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

mk16 automatically collects technical information when you access the platform:

• IP address and geolocation data (to verify Philippine location)
• Device type, model, operating system, and browser type/version
• Screen resolution and device language settings
• Referring website URL (if you arrived at mk16 from another site)
• Cookies and similar tracking technologies (see Section 9 below)
• Login timestamps and session activity logs

3.6 Communication Data

When you contact mk16 customer support or receive communications from mk16:

• Live chat transcripts and support ticket correspondence
• Email communications (content, timestamps, attachments)
• SMS messages sent for account verification or security alerts
• Promotional communications (if you opted in to receive marketing)

4. Legal Basis and Purposes for Data Processing

mk16 processes your personal data based on the following legal grounds under the Philippine Data Privacy Act:

4.1 Performance of Contract

Processing is necessary to provide mk16 services under the Terms & Conditions you accepted when creating your account. This includes:

• Creating and managing your mk16 account
• Processing deposits and withdrawals
• Enabling gameplay and placing bets
• Crediting winnings and calculating payouts
• Providing customer support and responding to inquiries

4.2 Legal Obligation

Processing is required to comply with Philippine law and PAGCOR regulatory requirements, including:

• Verifying player identity and age (21+ requirement) per PAGCOR mandate
• Preventing money laundering and terrorist financing (AML/CTF compliance)
• Detecting and preventing fraud, collusion, and other illegal activity
• Maintaining records for tax reporting and audit purposes
• Responding to lawful requests from government authorities or courts
• Retaining transaction records for periods mandated by Philippine law

4.3 Legitimate Interests

Processing is necessary for mk16's legitimate business interests, provided such interests do not override your fundamental rights:

• Preventing fraud, cheating, bonus abuse, and account compromise
• Analyzing platform usage to improve game selection and user experience
• Detecting technical issues and optimizing platform performance
• Conducting internal audits and risk assessments
• Defending mk16's legal rights in disputes or litigation

4.4 Consent

For certain processing activities, mk16 relies on your explicit consent:

• Sending promotional emails, SMS, or push notifications (you may opt out at any time)
• Using cookies for analytics and advertising purposes (see Section 9)
• Processing sensitive personal data beyond what is strictly required (if applicable)

You may withdraw consent at any time by contacting mk16 support or adjusting your account settings. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal.

5. Data Sharing and Third-Party Recipients

mk16 does not sell, rent, or trade your personal data to third parties for their marketing purposes. However, mk16 may share personal data with the following categories of third-party recipients as necessary to operate mk16 services:

5.1 Payment Processors

GCash, Maya, bank transfer intermediaries, cryptocurrency payment processors, and other financial service providers process your deposit and withdrawal transactions. These processors receive only the data necessary to complete the transaction (e.g., transaction amount, your account identifier, payment method details).

5.2 Identity Verification Providers

Third-party KYC service providers may verify your identity documents against government databases to confirm authenticity and prevent identity fraud. These providers operate under strict confidentiality agreements and data protection standards.

5.3 Game Providers and Platform Suppliers

Live casino game providers, slot developers, sports betting data feeds, and platform software suppliers may receive limited data (username, bet amounts, game outcomes) necessary to deliver gaming content and settle bets. These providers are bound by contractual data protection obligations.

5.4 Regulatory Authorities

mk16 may disclose personal data to PAGCOR and other Philippine government authorities as required by law, court order, or regulatory request. This includes anti-money laundering investigations, tax audits, and compliance verifications.

5.5 Legal and Professional Advisors

mk16 may share personal data with legal counsel, auditors, and consultants for the purpose of obtaining professional advice, conducting audits, or defending legal claims. These parties are bound by professional confidentiality obligations.

5.6 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of mk16's business assets, personal data may be transferred to the acquiring entity, subject to the same privacy commitments outlined in this Policy.

6. International Data Transfers

mk16 primarily stores and processes personal data within the Philippines using servers located in Philippine data centers. However, certain third-party service providers (such as cloud infrastructure providers, payment processors, or game suppliers) may store or process data outside the Philippines.

Where personal data is transferred internationally, mk16 ensures adequate safeguards are in place, including:

• Standard contractual clauses approved by the National Privacy Commission (NPC) of the Philippines
• Verification that the receiving country provides an adequate level of data protection
• Binding corporate rules or other approved transfer mechanisms

You have the right to request information about the safeguards applied to any international transfer of your personal data by contacting mk16's Data Protection Officer.

7. Data Retention Periods

mk16 retains personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:

• Active Accounts: Personal data is retained for the duration of account activity plus a reasonable period for potential reactivation (typically 12 months of inactivity).
• Closed Accounts: After voluntary account closure, personal data is retained for seven (7) years to comply with PAGCOR record-keeping requirements and Philippine tax law.
• Transaction Records: Financial transaction data (deposits, withdrawals, bets, payouts) is retained for seven (7) years per anti-money laundering regulations.
• Identity Verification Documents: KYC documents are retained for seven (7) years after account closure or last transaction, whichever is later.
• Communications: Customer support correspondence is retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing Data: If you opt out of marketing communications, your contact information is retained on a suppression list indefinitely to honor your opt-out preference.

After the applicable retention period expires, personal data is securely deleted or anonymized such that it can no longer be attributed to an identifiable individual.

8. Your Data Protection Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal data:

8.1 Right to Access

You have the right to request confirmation of whether mk16 processes your personal data and, if so, to obtain a copy of that data along with information about how it is processed. mk16 will provide this information in a commonly used electronic format within thirty (30) days of your request.

8.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request correction or completion. You can update certain information (email, mobile number, address) directly through your mk16 account settings, or contact support for assistance with other data corrections.

8.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data in the following circumstances:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (where consent was the legal basis for processing) and no other legal ground applies
• You object to processing based on legitimate interests and mk16 has no overriding legitimate grounds
• The data was processed unlawfully

Note that mk16 may be legally required to retain certain data (e.g., transaction records for tax purposes) even if you request deletion. In such cases, mk16 will restrict processing to the minimum necessary to fulfill legal obligations.

8.4 Right to Restriction of Processing

You may request that mk16 temporarily suspend processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (such as CSV or JSON) and to transmit that data to another service provider where technically feasible.

8.6 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests by demonstrating compelling grounds relating to your particular situation.

8.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

8.8 Right to Lodge a Complaint

If you believe mk16 has violated your data protection rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines:

• National Privacy Commission website: privacy.gov.ph
• NPC Hotline: 1-8888 (toll-free within Philippines)

9. Cookies and Tracking Technologies

mk16 uses cookies, web beacons, and similar technologies to enhance user experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device when you visit mk16.cam.

9.1 Types of Cookies Used

• Essential Cookies: Required for core platform functionality (login authentication, session management, security features). These cannot be disabled without affecting platform usability.
• Functional Cookies: Remember your preferences (language settings, game favorites, display options) to personalize your experience.
• Analytics Cookies: Collect aggregated data about how users interact with mk16 (pages visited, time spent, click patterns) to improve platform performance.
• Advertising Cookies: Track your browsing behavior to deliver relevant promotional content (requires consent; you may opt out at any time).

9.2 Managing Cookie Preferences

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may limit your ability to use mk16 services. To opt out of analytics and advertising cookies specifically, adjust your preferences in Account Settings under Privacy & Cookies.

10. Data Security Measures

mk16 implements industry-standard technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and mk16 servers is encrypted using 256-bit SSL/TLS protocols. Stored data is encrypted at rest using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized mk16 personnel on a need-to-know basis. Multi-factor authentication is required for internal system access.
• Regular Audits: mk16 conducts annual security audits and vulnerability assessments by independent third-party security firms.
• Incident Response: mk16 maintains a data breach response plan and will notify affected users and the National Privacy Commission within seventy-two (72) hours of discovering a breach, as required by law.
• Employee Training: All mk16 personnel undergo mandatory data privacy and security training.

While mk16 employs robust security measures, no system is entirely immune to unauthorized access. You are responsible for maintaining the confidentiality of your login credentials and must notify mk16 immediately if you suspect unauthorized account access.

11. Children's Privacy

mk16 services are not intended for individuals under the age of 21. mk16 does not knowingly collect personal data from minors. If mk16 discovers that a user is under 21 years of age, the account will be immediately closed, all personal data deleted, and any deposits refunded (minus amounts already wagered).

Parents or guardians who believe a minor has provided personal data to mk16 should contact mk16's Data Protection Officer immediately.

12. Changes to This Privacy Policy

mk16 may update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or platform functionality. Material changes will be communicated via email to registered users and prominently displayed on the mk16 website. The "Last Updated" date at the top of this document indicates the most recent revision.

Continued use of mk16 services following any changes constitutes acceptance of the revised Privacy Policy. Users are encouraged to review this page periodically.

13. Contact Information for Data Privacy Inquiries

For questions, concerns, or to exercise your data protection rights, contact mk16's Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via mk16.cam (select "Privacy Inquiry" as your topic)
• Response Time: mk16 will respond to all data protection inquiries within fifteen (15) business days