k77 Casino Privacy Policy

This Privacy Policy ("Policy") is issued by k77 ("k77," "we," "us," or "our") and applies to all personal data collected through the k77 online gaming platform accessible at https://k77.one, including all associated pages, features, mobile interfaces, and customer support channels (collectively, the "Platform").

This Policy is designed to help you — our players and visitors — understand exactly what personal information k77 collects, the purposes for which it is used, how it is protected, and the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "PDPA") and its Implementing Rules and Regulations.

By registering a k77 account, accessing the Platform, or otherwise providing your personal data to k77, you acknowledge that you have read and understood this Policy. This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

k77 collects personal data in several categories depending on your interaction with the Platform. The table below summarises the types of data we collect and the context in which each category is gathered.

k77 does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (for example, problem gambling self-declaration for responsible gaming purposes).

k77 collects personal data through the following channels and methods:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access or use the Platform.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors (e.g., GCash, PayMaya, BDO, BPI), and fraud prevention services where necessary to verify your identity and protect the integrity of the Platform.
• Regulatory sources: Information received from PAGCOR, the National Privacy Commission, or other competent Philippine authorities in connection with regulatory compliance obligations.

k77 uses your personal data only for legitimate, specified purposes. The following table outlines the primary purposes for which your data is processed and the corresponding legal basis under the PDPA:

• Account creation and management: To register your k77 account, verify your identity, and manage your player profile throughout your relationship with k77.
• Transaction processing: To process deposits, withdrawals, and bonus credits accurately and securely through your chosen Philippine payment method.
• KYC and fraud prevention: To verify your age (21+ requirement), identity, and payment method ownership, and to detect, investigate, and prevent fraudulent, illegal, or abusive activity on the Platform.
• Regulatory compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations, and other applicable Philippine laws and regulations.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance through live chat and email.
• Responsible gaming: To monitor gaming patterns, identify potential problem gambling behaviour, and administer responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Platform improvement: To analyse usage patterns, conduct internal research, and improve the features, performance, and security of the k77 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided consent. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, k77 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations under the k77 Terms & Conditions, including account management, game provision, and payment processing.
• Legal obligation: Processing necessary to comply with applicable Philippine laws, including PAGCOR regulations, AML requirements, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, freely-given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

k77 does not sell your personal data. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers require certain data to process your transactions securely.
• KYC and identity verification providers: Third-party services used to verify your identity, age, and document authenticity as required by PAGCOR and AML regulations.
• Fraud prevention and security services: Specialist providers that help k77 detect and prevent fraudulent activity, account takeovers, and money laundering.
• Game software providers: Licensed game developers whose software is integrated into the k77 Platform may receive limited technical data necessary to deliver game functionality.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where necessary for legal or financial compliance purposes.

All third parties with whom k77 shares personal data are required to handle that data in accordance with applicable data protection laws and are prohibited from using it for any purpose beyond the specific service they provide to k77.

k77 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and deliver relevant content. A cookie is a small text file placed on your device when you visit the Platform.

The types of cookies used by k77 include:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled as they are required for security, session management, and core functionality.
• Performance and analytics cookies: Help k77 understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalise your experience.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of k77 marketing campaigns. These are only placed with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the k77 Platform. Strictly necessary cookies cannot be disabled without impacting your ability to use the Platform.

k77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and k77 servers.
• Encrypted data storage for sensitive personal and financial information at rest.
• Multi-factor authentication (MFA) options available to all k77 account holders.
• Access controls ensuring that only authorised k77 personnel with a legitimate need can access personal data.
• Regular security audits and penetration testing conducted by independent security professionals.
• Incident response procedures to detect, contain, and notify affected parties of any data breach in accordance with NPC notification requirements.

k77 retains your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual. Where data is anonymised rather than deleted, it may be retained indefinitely for statistical and research purposes.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by k77. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14.

• Right to be informed: You have the right to know what personal data k77 holds about you, how it is used, and with whom it is shared — which is the primary purpose of this Policy.
• Right of access: You may request a copy of the personal data k77 holds about you. We will respond to verified access requests within 15 business days.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most account details directly through your k77 account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to k77's overriding legal obligations.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: If you believe k77 has not handled your personal data in accordance with the PDPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

k77 is an online gaming platform strictly intended for adults. In accordance with Philippine law and PAGCOR regulations, you must be at least 21 years of age to register an account and participate in any gaming activity on the Platform.

k77 does not knowingly collect, process, or retain personal data from individuals under the age of 21. All new accounts are subject to age verification as part of the KYC process. If k77 discovers that personal data has been collected from a person under 21, that account will be immediately suspended, all funds will be handled in accordance with applicable regulations, and the personal data will be deleted without undue delay.

k77 primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including certain game software providers, cloud infrastructure partners, and fraud prevention services — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, k77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include:

• Contractual clauses requiring the recipient to protect personal data to PDPA-equivalent standards.
• Transfers to jurisdictions recognised by the NPC as providing adequate data protection.
• Binding corporate rules or equivalent internal data protection policies where the recipient is part of a corporate group.

You may request further information about the specific safeguards applied to any international transfer of your personal data by contacting our Data Protection Officer.

k77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The "Last Updated" date at the top of this Policy will be revised accordingly whenever material changes are made.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — k77 will notify registered account holders via email or through a prominent notice on the Platform at least 14 days before the changes take effect.

Your continued use of the k77 Platform after the effective date of any updated Policy constitutes your acknowledgment of the revised terms. If you do not agree with any changes, you should discontinue use of the Platform and may request account closure by contacting our support team.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way k77 handles your personal data, please contact our designated Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.