k77 Casino — Privacy Policy

k77 Casino ("k77", "we", "us", "our") is committed to protecting the privacy and personal data of all players and visitors of the k77 Platform at k77.biz. This Privacy Policy has been prepared in accordance with the requirements of Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected through the k77 Platform, including data collected at account registration, during identity verification (KYC), in the course of gaming activity, during deposit and withdrawal transactions, and through your interactions with k77's customer support team.

By using the k77 Platform, you acknowledge that you have read and understood this Privacy Policy. Your continued use of the Platform constitutes your consent to the data processing activities described herein, to the extent that consent is the applicable legal basis for such processing. Where consent is relied upon, you may withdraw it at any time, though withdrawal of consent may affect your ability to use certain features of the Platform.

2.1 The data controller responsible for your personal data under this Privacy Policy is k77 Casino, operator of the gaming platform at k77.biz, operating within the Philippine gaming regulatory framework under the oversight of PAGCOR.

2.2 k77 has registered its data processing activities with the National Privacy Commission as required under Section 46 of Republic Act No. 10173 for personal information controllers maintaining a filing system of sensitive personal information or at least 1,000 individuals.

2.3 k77 has designated a Data Protection Officer (DPO) as required under NPC Circular No. 16-03. The DPO is responsible for overseeing data protection strategy and implementation and acts as the primary point of contact for data subjects asserting their rights. Contact details for the DPO are set out in Section 16.

3.1 Identity and Contact Data. When you register an account with k77, we collect:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — minimum 21 years old);
• Philippine mobile number (used as your primary identifier and for OTP delivery);
• Email address (optional, for account notifications);
• Residential address in the Philippines.

3.2 Identity Verification (KYC) Data. To comply with PAGCOR regulations and the Anti-Money Laundering Act (RA 9160 as amended), k77 collects:

• Copies of government-issued identification documents (PhilSys ID, UMID, passport, driver's license, PRC ID, Voter's ID, or Postal ID);
• Biometric photograph (selfie with ID);
• Proof of payment method ownership (e.g., GCash or Maya account screenshot);
• Source of funds declarations where required by enhanced due diligence thresholds.

3.3 Financial Transaction Data. For every deposit and withdrawal processed through k77, we retain:

• Transaction amount, currency, date, and time;
• Payment method identifier (GCash reference number, bank transfer reference, USDT transaction hash);
• Processing status and any error codes;
• Running account balance at the time of each transaction.

3.4 Gaming Activity Data. k77 records all gaming activity to maintain fair play integrity, resolve disputes, and comply with PAGCOR reporting requirements:

• Games played, bet amounts, outcomes, and timestamps;
• Session durations and session start/end times;
• Bonus claims, activations, wagering progress, and expiry events;
• Sports betting markets selected, odds accepted, and bet slip outcomes;
• VIP tier status and loyalty points earned.

3.5 Technical and Device Data. When you access the k77 Platform, we automatically collect:

• IP address and approximate geolocation (country and region level);
• Device type, operating system, and browser version;
• Session identifiers and authentication tokens;
• Pages visited, features used, and navigation patterns within the Platform;
• Time zone and preferred language settings.

3.6 Communications Data. When you contact k77 support, we retain records of the interaction including the channel used (live chat, email), the content of the communication, and the resolution outcome. Call recordings (if applicable) are retained for quality assurance and dispute resolution.

4.1 Directly from You. The majority of personal data k77 holds is provided directly by you — at account registration, during KYC submission, when you contact support, or when you update your account profile. This is the primary collection channel.

4.2 Automatically from Platform Use. Technical and device data (Section 3.5) is collected automatically through your use of the k77 Platform using cookies, session tokens, and server-side logging. This collection occurs whether or not you are logged in to your Account.

4.3 From Payment Processors. When you initiate a deposit or withdrawal, k77 receives confirmation data from payment processors including GCash, Maya, and banking partners. This data is limited to transaction confirmation details — k77 does not receive or store your full payment account credentials, PINs, or authentication codes.

4.4 From Identity Verification Providers. For enhanced KYC processing, k77 may use third-party identity verification services who perform document authenticity checks and cross-reference submitted information against available public databases. These providers act as data processors on behalf of k77.

4.5 From Regulatory Authorities. In cases involving fraud investigations, AML compliance, or PAGCOR regulatory inquiries, k77 may receive information from or share information with PAGCOR, the Anti-Money Laundering Council (AMLC), and Philippine law enforcement as permitted or required by law.

k77 processes personal data only where a valid legal basis exists under Section 12 or Section 13 of Republic Act No. 10173. The applicable legal bases are:

6.1 Account Operation. Your identity and contact data is used to create and maintain your k77 Account, authenticate your identity at login, deliver OTP verification codes, send account-related notifications, and enable password recovery.

6.2 KYC and Regulatory Compliance. KYC data is used to verify your identity and age (21+ requirement), comply with PAGCOR licensing conditions, fulfil AMLA reporting obligations, screen against politically exposed persons (PEP) and sanctions lists, and satisfy any enhanced due diligence requirements triggered by transaction thresholds.

6.3 Payment Processing. Financial transaction data is used to process your GCash, Maya, and bank transfer deposits and withdrawals, maintain your account balance records, generate transaction history accessible from your Account panel, and comply with financial record-keeping obligations under Philippine law.

6.4 Game Delivery and Integrity. Gaming activity data is used to provide the games and services you request, resolve game-round disputes using server-side records as the authoritative source, calculate and deliver bonuses and loyalty rewards, detect and investigate cheating, bot usage, and collusion, and generate PAGCOR-required gaming activity reports.

6.5 Fraud Prevention and Security. Technical device data and transaction patterns are analysed to detect suspicious activity indicative of account compromise, identity fraud, money laundering, or prohibited conduct as defined in k77's Terms and Conditions.

6.6 Responsible Gaming. Your gaming activity data is used to monitor for patterns associated with problem gambling, administer deposit limits, session controls, cooling-off periods, and self-exclusion orders that you have applied, and fulfil k77's obligations under PAGCOR's responsible gaming framework.

6.7 Customer Support. Communications data is used to respond to your enquiries, resolve disputes, maintain a history of your interactions with k77 support for continuity and quality assurance purposes, and train support agents to improve service quality.

6.8 Marketing (Consent-Based). Where you have opted in to receiving marketing communications, k77 may use your contact details to send you information about promotions, new games, and platform updates. You may withdraw marketing consent at any time via your Account settings or by contacting support.

7.1 k77 does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own commercial purposes. Data is shared only with the following categories of recipients, for the specific purposes indicated:

7.2 All third-party service providers acting as data processors on behalf of k77 are bound by data processing agreements that require them to process personal data only on k77's documented instructions and to implement security measures consistent with RA 10173 requirements.

8.1 k77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following minimum retention periods apply:

• Account and identity data: Retained for the duration of the Account and for a minimum of five (5) years after Account closure, in compliance with AMLA record-keeping requirements;
• KYC documents: Retained for five (5) years from the date of collection or Account closure, whichever is later, as required by PAGCOR and AMLA;
• Financial transaction records: Retained for five (5) years from the date of each transaction, as required by RA 9160;
• Gaming activity records: Retained for two (2) years from the date of activity; records subject to an active dispute are retained until the dispute is resolved;
• Customer support records: Retained for two (2) years from the last interaction;
• Marketing consent records: Retained for the duration of your Account or until consent is withdrawn, plus one (1) year to evidence the consent period;
• Technical/device logs: Retained for ninety (90) days on a rolling basis.

8.2 At the end of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised or aggregated data (which cannot identify any individual) may be retained indefinitely for statistical and business analysis purposes.

9.1 k77 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks posed to data subjects. These measures include:

• Encryption in transit: All data transmitted between your device and the k77 Platform is encrypted using TLS 1.2 or higher. Connections using older, less secure protocols are rejected;
• Encryption at rest: Sensitive personal data including KYC documents, financial data, and password hashes is encrypted at rest using AES-256 or equivalent standards;
• Access controls: Access to personal data systems is restricted to k77 personnel with a documented need for access. Access is granted on a least-privilege basis and reviewed periodically;
• Authentication: Internal systems use multi-factor authentication. Player accounts support two-factor authentication via OTP, which is strongly recommended;
• Audit logging: All access to personal data systems is logged and retained for security review and incident response purposes;
• Vendor assessment: Third-party data processors are assessed for security compliance before engagement and are contractually required to maintain equivalent security standards;
• Employee training: All k77 personnel with access to personal data complete data privacy and security training as part of onboarding and on an annual basis.

10.1 The k77 Platform uses cookies and similar tracking technologies to enable Platform functionality, maintain your logged-in session, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that maintain your login state, CSRF protection tokens, and load balancing cookies. These cannot be disabled without affecting Platform functionality;
• Functional Cookies: Store your preferences such as language settings and remember-me login preferences;
• Analytics Cookies: Collect anonymised data about how players use the Platform to help k77 improve the product. This data does not identify you personally;
• Security Cookies: Support k77's fraud detection systems by establishing a baseline of normal device behaviour for your account.

10.2 k77 does not use third-party advertising or retargeting cookies. The Platform does not participate in cross-site advertising networks that would track your activity outside of k77.biz.

10.3 You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair Platform functionality including the ability to stay logged in. Blocking other cookie categories will not affect your ability to use the Platform's core features.

Under Republic Act No. 10173, you have the following rights in relation to your personal data held by k77. These rights may be exercised by contacting k77's Data Protection Officer as described in Section 16.

12.1 The k77 Platform is strictly prohibited to persons under 21 years of age, consistent with PAGCOR's minimum age requirements for online gaming in the Philippines. k77 does not knowingly collect, store, or process personal data belonging to individuals under 21.

12.2 Age is verified at registration and confirmed during KYC. Any Account found to belong to a person under 21 will be immediately closed. Personal data collected in connection with an underage account will be deleted as soon as the underage status is confirmed, subject only to any minimal retention required to document the compliance action taken.

12.3 If you are a parent or guardian and believe your child has registered an account on k77, contact k77's support immediately. The Account will be suspended pending investigation and closed upon confirmation.

13.1 k77's primary data infrastructure is maintained in data centres serving the Southeast Asian region. Certain third-party service providers (including game providers and cloud infrastructure vendors) may process data in data centres located outside the Philippines.

13.2 Where personal data is transferred outside the Philippines, k77 ensures that such transfers comply with Section 21 of RA 10173 and applicable NPC rules on cross-border data transfers. Specifically, k77 requires that:

• The recipient country has been assessed to provide an adequate level of data protection; or
• Appropriate safeguards are in place through contractual clauses approved by or consistent with NPC guidance; or
• The transfer is covered by an applicable derogation under RA 10173 (e.g., performance of a contract with the data subject).

13.3 Game providers (such as JILI Games, PG Soft, Pragmatic Play, and Evolution Gaming) receive minimal data necessary for game session delivery — typically an anonymised session token and bet/result data. These providers do not receive your full identity, KYC documents, or Philippine contact details unless required for a specific compliance purpose.

14.1 In the event of a personal data breach, k77 will follow the procedures required by the NPC's Circular on Personal Data Breach Management (NPC Circular 16-03):

• Internal response: Upon discovery of a breach, k77's Data Protection Officer coordinates an immediate assessment of the scope, likely impact, and affected data subjects;
• NPC notification: Where the breach involves sensitive personal information or is likely to result in serious harm to data subjects, k77 will notify the National Privacy Commission within seventy-two (72) hours of discovery;
• Data subject notification: Affected data subjects will be notified promptly where the breach is likely to result in significant risk to their rights and freedoms. Notifications will describe the nature of the breach, the data categories affected, likely consequences, and measures taken by k77;
• Remediation: k77 will take all reasonable technical and organisational measures to contain the breach, prevent recurrence, and mitigate harm to affected individuals.

14.2 k77 maintains an internal data breach register documenting all breaches, whether or not they required NPC notification. This register is available to the NPC upon request.

15.1 k77 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements.

15.2 Material changes to this Policy will be communicated to registered players via a login notification or SMS to the registered mobile number, at least seven (7) days before the revised Policy takes effect. For changes required by law or regulatory direction, the amended Policy takes effect on the date specified by the relevant authority.

15.3 The effective date of the current version is stated at the top of this document. The most current version is always available at k77.biz/privacy-policy. We recommend reviewing this Policy periodically, particularly before each login if you have been away from the Platform for an extended period.

15.4 Your continued use of the k77 Platform following an amendment to this Policy constitutes your acknowledgement of the revised Policy. If you do not agree with an amendment, you may close your Account by contacting support prior to the amendment's effective date.

For all privacy-related enquiries, data subject rights requests, or complaints, you may contact k77's Data Protection Officer through the following channels:

If you are not satisfied with k77's response to your privacy concern, you may escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for RA 10173 matters.

This Privacy Policy was last reviewed and updated on January 1, 2026. Version 2.4. This document supersedes all previous versions of the k77 Privacy Policy.