This Privacy Policy explains what personal data k77 collects from you, why we collect it, how we use and protect it, who we share it with, and what rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Please read it carefully alongside our Terms & Conditions.
All data transmitted between your device and k77 is protected by TLS encryption. Sensitive fields are never stored in plain text.
k77 processes personal data in full compliance with the Philippine Data Privacy Act of 2012 and NPC implementing rules.
k77 does not sell, rent, or trade your personal data to unaffiliated third parties for marketing or any commercial purpose.
You can access, correct, delete, or restrict your data at any time. Data subject requests are processed within 15 business days.
Data collected for one declared purpose is not repurposed for another without your explicit consent or a legal basis.
k77 has a designated Data Protection Officer. You can contact the DPO directly with any privacy-related query or complaint.
k77 Casino ("k77", "we", "us", "our") is committed to protecting the privacy and personal data of all players and visitors of the k77 Platform at k77.biz. This Privacy Policy has been prepared in accordance with the requirements of Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.
This Policy applies to all personal data collected through the k77 Platform, including data collected at account registration, during identity verification (KYC), in the course of gaming activity, during deposit and withdrawal transactions, and through your interactions with k77's customer support team.
By using the k77 Platform, you acknowledge that you have read and understood this Privacy Policy. Your continued use of the Platform constitutes your consent to the data processing activities described herein, to the extent that consent is the applicable legal basis for such processing. Where consent is relied upon, you may withdraw it at any time, though withdrawal of consent may affect your ability to use certain features of the Platform.
2.1 The data controller responsible for your personal data under this Privacy Policy is k77 Casino, operator of the gaming platform at k77.biz, operating within the Philippine gaming regulatory framework under the oversight of PAGCOR.
2.2 k77 has registered its data processing activities with the National Privacy Commission as required under Section 46 of Republic Act No. 10173 for personal information controllers maintaining a filing system of sensitive personal information or at least 1,000 individuals.
2.3 k77 has designated a Data Protection Officer (DPO) as required under NPC Circular No. 16-03. The DPO is responsible for overseeing data protection strategy and implementation and acts as the primary point of contact for data subjects asserting their rights. Contact details for the DPO are set out in Section 16.
3.1 Identity and Contact Data. When you register an account with k77, we collect:
3.2 Identity Verification (KYC) Data. To comply with PAGCOR regulations and the Anti-Money Laundering Act (RA 9160 as amended), k77 collects:
3.3 Financial Transaction Data. For every deposit and withdrawal processed through k77, we retain:
3.4 Gaming Activity Data. k77 records all gaming activity to maintain fair play integrity, resolve disputes, and comply with PAGCOR reporting requirements:
3.5 Technical and Device Data. When you access the k77 Platform, we automatically collect:
3.6 Communications Data. When you contact k77 support, we retain records of the interaction including the channel used (live chat, email), the content of the communication, and the resolution outcome. Call recordings (if applicable) are retained for quality assurance and dispute resolution.
4.1 Directly from You. The majority of personal data k77 holds is provided directly by you — at account registration, during KYC submission, when you contact support, or when you update your account profile. This is the primary collection channel.
4.2 Automatically from Platform Use. Technical and device data (Section 3.5) is collected automatically through your use of the k77 Platform using cookies, session tokens, and server-side logging. This collection occurs whether or not you are logged in to your Account.
4.3 From Payment Processors. When you initiate a deposit or withdrawal, k77 receives confirmation data from payment processors including GCash, Maya, and banking partners. This data is limited to transaction confirmation details — k77 does not receive or store your full payment account credentials, PINs, or authentication codes.
4.4 From Identity Verification Providers. For enhanced KYC processing, k77 may use third-party identity verification services who perform document authenticity checks and cross-reference submitted information against available public databases. These providers act as data processors on behalf of k77.
4.5 From Regulatory Authorities. In cases involving fraud investigations, AML compliance, or PAGCOR regulatory inquiries, k77 may receive information from or share information with PAGCOR, the Anti-Money Laundering Council (AMLC), and Philippine law enforcement as permitted or required by law.
k77 processes personal data only where a valid legal basis exists under Section 12 or Section 13 of Republic Act No. 10173. The applicable legal bases are:
| Processing Activity | Legal Basis | Statutory Reference |
|---|---|---|
| Account registration and management | Contractual necessity | RA 10173 §12(b) |
| KYC identity verification | Legal obligation (PAGCOR / AMLA) | RA 10173 §12(c); RA 9160 |
| Payment processing and transaction records | Contractual necessity; legal obligation | RA 10173 §12(b), §12(c) |
| Gaming activity records | Contractual necessity; legitimate interest | RA 10173 §12(b), §12(f) |
| Fraud detection and AML monitoring | Legal obligation; legitimate interest | RA 10173 §12(c); RA 9160 |
| Responsible gaming tools and interventions | Legal obligation; vital interest | RA 10173 §12(c), §12(e) |
| Marketing communications (opt-in only) | Consent | RA 10173 §12(a) |
| Technical device and analytics data | Legitimate interest | RA 10173 §12(f) |
6.1 Account Operation. Your identity and contact data is used to create and maintain your k77 Account, authenticate your identity at login, deliver OTP verification codes, send account-related notifications, and enable password recovery.
6.2 KYC and Regulatory Compliance. KYC data is used to verify your identity and age (21+ requirement), comply with PAGCOR licensing conditions, fulfil AMLA reporting obligations, screen against politically exposed persons (PEP) and sanctions lists, and satisfy any enhanced due diligence requirements triggered by transaction thresholds.
6.3 Payment Processing. Financial transaction data is used to process your GCash, Maya, and bank transfer deposits and withdrawals, maintain your account balance records, generate transaction history accessible from your Account panel, and comply with financial record-keeping obligations under Philippine law.
6.4 Game Delivery and Integrity. Gaming activity data is used to provide the games and services you request, resolve game-round disputes using server-side records as the authoritative source, calculate and deliver bonuses and loyalty rewards, detect and investigate cheating, bot usage, and collusion, and generate PAGCOR-required gaming activity reports.
6.5 Fraud Prevention and Security. Technical device data and transaction patterns are analysed to detect suspicious activity indicative of account compromise, identity fraud, money laundering, or prohibited conduct as defined in k77's Terms and Conditions.
6.6 Responsible Gaming. Your gaming activity data is used to monitor for patterns associated with problem gambling, administer deposit limits, session controls, cooling-off periods, and self-exclusion orders that you have applied, and fulfil k77's obligations under PAGCOR's responsible gaming framework.
6.7 Customer Support. Communications data is used to respond to your enquiries, resolve disputes, maintain a history of your interactions with k77 support for continuity and quality assurance purposes, and train support agents to improve service quality.
6.8 Marketing (Consent-Based). Where you have opted in to receiving marketing communications, k77 may use your contact details to send you information about promotions, new games, and platform updates. You may withdraw marketing consent at any time via your Account settings or by contacting support.
7.1 k77 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. Data is shared only with the following categories of recipients, for the specific purposes indicated:
| Recipient Category | Purpose | Data Shared |
|---|---|---|
| Payment processors (GCash, Maya, BPI, BDO, Metrobank) | Processing deposits and withdrawals | Transaction amount, reference data, account identifier |
| Identity verification providers | KYC document authenticity checks | ID document images, selfie, extracted data fields |
| Game providers (JILI, PG Soft, Pragmatic Play, Evolution, etc.) | Delivering games you play on the Platform | Session tokens, player ID (anonymised), bet/result data |
| Cloud hosting and CDN providers | Platform infrastructure and performance | Encrypted data in transit and at rest |
| PAGCOR | Regulatory reporting and compliance | Aggregated and individual gaming records as required |
| AMLC (Anti-Money Laundering Council) | Anti-money laundering reporting obligations | Covered and suspicious transaction reports as required by RA 9160 |
| Philippine law enforcement | Response to lawful court orders or warrants | Data specified in the order or warrant only |
7.2 All third-party service providers acting as data processors on behalf of k77 are bound by data processing agreements that require them to process personal data only on k77's documented instructions and to implement security measures consistent with RA 10173 requirements.
8.1 k77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following minimum retention periods apply:
8.2 At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and business analysis purposes.
9.1 k77 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks posed to data subjects. These measures include:
Under Republic Act No. 10173, you have the following rights in relation to your personal data held by k77. These rights may be exercised by contacting k77's Data Protection Officer as described in Section 16.
You have the right to be informed of what personal data k77 holds about you, the purposes for which it is processed, how long it is retained, and who it is shared with. This Privacy Policy is the primary means by which k77 fulfils this right.
You have the right to request a copy of the personal data k77 holds about you. Requests are processed within fifteen (15) business days. A copy of your Account transaction history is available directly from your Account dashboard at any time without a formal request.
You have the right to have inaccurate or outdated personal data corrected. Contact k77 support with documentary evidence of the correct information. Note that corrections to KYC-verified data may require re-verification.
You may request deletion of your personal data. This right is subject to legal limitations — data that k77 is legally required to retain for PAGCOR or AMLA compliance cannot be deleted until the applicable retention period expires. Erasure of Account data will result in Account closure.
You have the right to object to processing based on legitimate interests. You may also object to processing for direct marketing at any time — this is an absolute right and takes effect immediately upon request.
Where technically feasible, you may request your personal data in a structured, commonly used, machine-readable format (such as CSV). Transaction history is available for self-download from your Account dashboard.
If you believe k77 has handled your personal data in violation of RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph. k77 encourages raising concerns with the DPO first to allow for direct resolution.
12.1 The k77 Platform is strictly prohibited to persons under 21 years of age, consistent with PAGCOR's minimum age requirements for online gaming in the Philippines. k77 does not knowingly collect, store, or process personal data belonging to individuals under 21.
12.2 Age is verified at registration and confirmed during KYC. Any Account found to belong to a person under 21 will be immediately closed. Personal data collected in connection with an underage account will be deleted as soon as the underage status is confirmed, subject only to any minimal retention required to document the compliance action taken.
12.3 If you are a parent or guardian and believe your child has registered an account on k77, contact k77's support immediately. The Account will be suspended pending investigation and closed upon confirmation.
13.1 k77's primary data infrastructure is maintained in data centres serving the Southeast Asian region. Certain third-party service providers (including game providers and cloud infrastructure vendors) may process data in data centres located outside the Philippines.
13.2 Where personal data is transferred outside the Philippines, k77 ensures that such transfers comply with Section 21 of RA 10173 and applicable NPC rules on cross-border data transfers. Specifically, k77 requires that:
13.3 Game providers (such as JILI Games, PG Soft, Pragmatic Play, and Evolution Gaming) receive minimal data necessary for game session delivery — typically an anonymised session token and bet/result data. These providers do not receive your full identity, KYC documents, or Philippine contact details unless required for a specific compliance purpose.
14.1 In the event of a personal data breach, k77 will follow the procedures required by the NPC's Circular on Personal Data Breach Management (NPC Circular 16-03):
14.2 k77 maintains an internal data breach register documenting all breaches, whether or not they required NPC notification. This register is available to the NPC upon request.
15.1 k77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements.
15.2 Material changes to this Policy will be communicated to registered players via a login notification or SMS to the registered mobile number, at least seven (7) days before the revised Policy takes effect. For changes required by law or regulatory direction, the amended Policy takes effect on the date specified by the relevant authority.
15.3 The effective date of the current version is stated at the top of this document. The most current version is always available at k77.biz/privacy-policy. We recommend reviewing this Policy periodically, particularly before each login if you have been away from the Platform for an extended period.
15.4 Your continued use of the k77 Platform following an amendment to this Policy constitutes your acknowledgement of the revised Policy. If you do not agree with an amendment, you may close your Account by contacting support prior to the amendment's effective date.
For all privacy-related enquiries, data subject rights requests, or complaints, you may contact k77's Data Protection Officer through the following channels:
If you are not satisfied with k77's response to your privacy concern, you may escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for RA 10173 matters.
This Privacy Policy was last reviewed and updated on January 1, 2026. Version 2.4. This document supersedes all previous versions of the k77 Privacy Policy.
k77 protects your personal data under the Philippine Data Privacy Act. Register securely, deposit via GCash from ₱100, and access 800+ games. Your privacy is as important to us as your experience on the Platform. Must be 21+.
⚠️ 21+ only · PAGCOR regulated · RA 10173 compliant · Gamble responsibly