kk77 Casino Privacy Policy

1 Introduction

kk77 is committed to protecting the privacy and personal data of its members. This Policy sets out in clear terms the nature of the personal data kk77 collects, the purposes for which that data is processed, the parties with whom it may be shared, the security measures in place, and the rights available to you under Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR").

kk77 operates an online casino and sports betting platform serving Filipino players across the Philippines, including in Metro Manila, Cebu, Davao, and other regions. The personal data we handle relates primarily to account registration, identity verification, financial transactions, gameplay activity, and customer support interactions. All data is processed fairly, lawfully, and transparently, and only to the extent necessary for the purposes described in this Policy.

2 Data Controller

kk77 is the data controller responsible for the personal data you provide through the kk77 platform. As data controller, kk77 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection law.

kk77 has designated a Data Protection Officer ("DPO") responsible for overseeing data protection compliance and responding to data subject requests. You may reach the DPO at: [email protected] with the subject line "Data Privacy — DPO Inquiry."

3 Personal Data We Collect

3.1 Data You Provide Directly

When you register, verify your account, make transactions, or contact kk77 support, you may provide the following categories of personal data:

3.2 Data Collected Automatically

When you access and use the kk77 platform, certain technical data is collected automatically:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution.
• Usage Data: Pages visited, game sessions played, bet amounts, login timestamps, and session duration.
• Location Data: General location inferred from IP address for regulatory compliance and fraud detection purposes. kk77 does not collect precise GPS location.
• Cookie Data: Session identifiers, authentication tokens, and analytics data. See Section 8 for full cookie details.

4 How We Use Your Personal Data

kk77 processes your personal data for the following specific purposes:

• Account Management: Creating, maintaining, and securing your kk77 account, including authentication and password recovery.
• Identity Verification (KYC): Verifying your identity and age (21+) to comply with PAGCOR regulatory requirements and prevent underage gambling.
• Transaction Processing: Processing deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Gameplay Services: Delivering and recording game sessions, calculating and recording winnings, and managing your kk77 wallet balance.
• Fraud Prevention & AML Compliance: Detecting and preventing fraudulent activity, money laundering, and unauthorized account access.
• Regulatory Compliance: Meeting obligations under PAGCOR regulations, the Data Privacy Act, anti-money laundering laws, and other applicable Philippine statutes.
• Customer Support: Responding to queries, resolving disputes, and managing responsible gaming requests submitted through live chat or email.
• Platform Improvement: Analyzing usage patterns to improve platform performance, game selection, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and event information — only where you have consented or where permitted by applicable law.

5 Legal Basis for Processing

kk77 processes your personal data only where a valid legal basis under the Data Privacy Act exists. The applicable legal grounds for each processing purpose are:

• Contractual Necessity: Processing necessary to provide kk77's services under the Terms & Conditions you accepted upon registration — including account management, gameplay, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including KYC identity verification, AML reporting obligations, and PAGCOR regulatory requirements.
• Legitimate Interests: Processing for fraud detection, platform security, and analytics, where such interests are balanced against your rights and do not override them.
• Consent: Processing for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

kk77 does not sell, rent, or otherwise trade your personal data for commercial gain. Your data may be shared with the following categories of recipients only to the extent strictly necessary:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other financial institutions to process transactions. These providers handle your data under their own privacy policies and applicable Philippine banking regulations.
• Identity Verification Partners: Third-party KYC service providers that assist in verifying your identity and government-issued identification documents.
• Game Content Providers: Licensed game studios (e.g., JILI, PG Soft, Pragmatic Play) may receive minimum session data necessary to operate their games within the kk77 platform.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and law enforcement agencies where disclosure is required by law or court order.
• IT & Infrastructure Providers: Cloud hosting, database management, and cybersecurity providers who process data on kk77's behalf under data processing agreements and strict confidentiality obligations.

Where kk77 shares your data with third-party processors, it does so under written data processing agreements that impose equivalent data protection standards to those kk77 maintains.

7 Data Retention

kk77 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. The following general retention periods apply:

• Account Data: Retained for the duration of your active kk77 account plus 5 years following account closure, to meet AML and regulatory record-keeping obligations.
• KYC Documents: Retained for a minimum of 5 years following identity verification or account closure, in accordance with Philippine AML regulations.
• Transaction Records: Retained for 5 years from the date of each transaction as required by applicable financial record-keeping law.
• Customer Support Records: Retained for 3 years from the date of the last support interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of applicable retention periods, kk77 will securely delete or anonymize your personal data so that it can no longer be associated with you.

8 Cookies & Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They allow the website to recognize your device on return visits and store certain preferences or session information. kk77 uses cookies and similar technologies (such as local storage and session tokens) to operate and improve the platform.

8.2 Types of Cookies Used by kk77

• Essential Cookies: Required for platform operation — these include session authentication cookies that keep you logged in to your kk77 account during a session. Cannot be disabled without breaking core platform functionality.
• Security Cookies: Used for fraud detection and to identify suspicious login activity. These are essential cookies and cannot be disabled.
• Analytics Cookies: Used to understand how members navigate the kk77 platform, which pages and games are most popular, and where technical errors occur. This data is aggregated and anonymized.
• Preference Cookies: Store your language and display preferences for the kk77 platform.

kk77 does not use advertising cookies, cross-site tracking pixels, or third-party behavioral targeting technologies. Your browsing activity on kk77 is not shared with advertising networks.

8.3 Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling essential cookies will prevent you from logging in to your kk77 account. Instructions for managing cookies are available in your browser's help documentation.

9 Security Measures

kk77 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and kk77 servers is encrypted using industry-standard protocols identical to those used by Philippine banks.
• Data Encryption at Rest: Sensitive personal and financial data stored in kk77's systems is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within kk77 is restricted on a strict need-to-know basis. All staff with data access undergo background checks and data privacy training.
• Two-Factor Authentication: kk77 offers and recommends 2FA for all member accounts. Internal kk77 systems require 2FA for all staff.
• Penetration Testing: kk77's platform undergoes regular security assessments and penetration testing by qualified security professionals.
• Incident Response: kk77 maintains a data breach response plan and will notify the National Privacy Commission and affected members within 72 hours of discovering a breach that poses a real risk of serious harm, in accordance with DPA requirements.

10 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by kk77:

• Right to Be Informed: The right to be informed of the specific personal data being collected, the purpose of collection, and how your data will be used — which this Policy fulfills.
• Right of Access: The right to request a copy of the personal data kk77 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal data in your kk77 account.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another data controller.
• Right to Object: The right to object to processing of your personal data for marketing purposes. kk77 will cease marketing communications upon receipt of a valid objection.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe kk77 has processed your data in breach of the DPA.

To exercise any of these rights, contact kk77's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." kk77 will acknowledge your request within 5 business days and will fulfill it within 30 days, subject to identity verification and any applicable legal constraints.

11 Children's Privacy

The kk77 platform is strictly for adults aged 21 years and above. kk77 does not knowingly collect, process, or store personal data from individuals under the age of 21. If kk77 discovers that an account has been registered by a person under 21, the account will be immediately closed, gameplay suspended, and the data will be deleted (or handled in accordance with applicable law in the case of suspected fraud).

If you are a parent or guardian and believe your child has accessed kk77 or provided personal data to kk77, please contact us immediately at [email protected] so that we may take appropriate action.

12 Third-Party Links

The kk77 platform may contain links to game providers' help documentation or payment provider information pages. kk77 is not responsible for the privacy practices or content of any third-party websites or services. This Privacy Policy applies solely to data collected by kk77 through the kk77.bid platform. We encourage you to review the privacy policies of any third-party service you access independently of kk77.

13 Changes to This Privacy Policy

kk77 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform features. When material changes are made, kk77 will notify members via: (a) a prominent notice on the kk77 platform upon next login; (b) email to your registered address; or (c) an update to the "Last Updated" date at the top of this Policy.

Your continued use of kk77 following publication of an updated Privacy Policy constitutes your acceptance of the revised terms. kk77 recommends reviewing this Policy periodically. Prior versions of this Policy are available upon request.

14 Contact & Complaints

For any questions, concerns, or requests related to this Privacy Policy or kk77's data protection practices, please contact:

• Data Protection Officer, kk77: [email protected]
• Subject Line: "Data Privacy Inquiry" or "Data Subject Rights Request"
• Response Time: Acknowledgment within 5 business days; full response within 30 days

If you are not satisfied with kk77's response to your privacy complaint, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines, the regulatory authority responsible for enforcing the Data Privacy Act.