This Privacy Policy explains how k77 collects, uses, stores, shares, and protects the personal information of Filipino players who access and use the k77 platform. We are committed to safeguarding your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and PAGCOR regulatory requirements.
k77 handles all personal data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173). Your information is collected only for lawful purposes, processed fairly, and stored no longer than necessary to fulfil those purposes or meet regulatory requirements.
All personal and financial data transmitted between your device and k77 is encrypted using industry-standard 256-bit SSL protocols. This is the same encryption standard used by Philippine banks and financial institutions for online banking services.
As a data subject under Philippine law, you have enforceable rights regarding your personal data held by k77 — including the right to access, correct, delete, and object to certain processing activities. These rights are explained in detail in Section 9 of this policy.
k77 processes certain personal data — including identity documents and transaction records — as required under PAGCOR's regulatory framework for licensed online gaming operators. This processing is a legal obligation and supports responsible gaming and anti-money laundering compliance.
k77 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data shared with third-party partners — such as payment processors and game providers — is limited to what is strictly necessary to deliver the k77 service.
k77 provides mechanisms for you to access, update, and request deletion of your personal data at any time through your account settings or by contacting our support team. Marketing communications can be opted out of from within your account preferences.
This Privacy Policy sets out the manner in which k77 collects, uses, discloses, stores, and protects personal information provided by users of the k77 online gaming platform. It applies to all data processing activities related to the k77 website at k77.bio, including account registration, identity verification, payment processing, gaming activity, and customer communications.
This policy is intended to be read alongside k77's Terms and Conditions and Responsible Gaming Policy, which together form the full agreement between k77 and its registered players. In the event of any inconsistency between this Privacy Policy and the Terms and Conditions in respect of data handling matters, this Privacy Policy shall prevail.
k77 is committed to complying with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, as amended), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where k77 also processes data subject to international data protection standards, those standards will be observed to the extent they apply.
For the purposes of the Data Privacy Act of 2012, k77 acts as the Personal Information Controller (PIC) in respect of all personal data it collects directly from users through the k77 platform. As PIC, k77 determines the purposes and means by which personal data is processed.
Third-party service providers engaged by k77 — including payment processors, KYC/identity verification services, and game content providers — may act as Personal Information Processors (PIPs) where they handle your data on k77's behalf and under k77's documented instructions.
All data-related enquiries, including requests to exercise your rights under RA 10173, may be directed to k77's Data Protection Officer at the contact details set out in Section 15 of this policy.
k77 collects the following categories of personal information in connection with your use of the platform:
| Category | Data Types | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government ID type and number (passport, driver's license, UMID, SSS ID, PhilSys ID) | Registration and KYC verification |
| Contact Data | Philippine mobile number, email address, residential address (province/city/barangay) | Registration and account updates |
| Financial Data | GCash/Maya account number, bank account name and number (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records | Payment processing and KYC |
| Gaming Data | Game session records, bet amounts, wagering history, win/loss outcomes, bonus usage, game preferences | Active gaming sessions |
| Technical Data | IP address, device type and identifier, browser type and version, operating system, session timestamps, access logs | Each platform visit |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions, dispute records | Customer support interactions |
| Responsible Gaming Data | Deposit limits set, cooling-off periods applied, self-exclusion status and duration, session time limit settings | Responsible gaming tool usage |
k77 collects personal data that you voluntarily provide when you register an account, complete identity verification, make a deposit or withdrawal request, contact customer support, or participate in promotions. This includes all information entered into account forms, uploaded identity documents, and communications submitted through k77's support channels.
When you access k77, certain technical data is collected automatically through server logs, cookies, and similar technologies. This includes your IP address, device identifiers, browser type, and session data. This information is used to maintain platform security, detect fraud, and improve user experience. See Section 10 for details on k77's use of cookies.
k77 may receive personal data from third-party sources in the following circumstances:
k77 processes your personal data for the following specific and legitimate purposes:
Under the Data Privacy Act of 2012, k77 processes personal data on the following legal grounds:
k77 shares personal data with third-party service providers who assist in delivering the platform's services. These include:
All third-party processors engaged by k77 are required to handle personal data in accordance with RA 10173, applicable PAGCOR requirements, and k77's data processing agreements.
k77 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine government agencies where required by law, regulatory directive, court order, or lawful authority. k77 will comply with all such legally binding disclosure requirements.
k77 does not sell, rent, trade, or otherwise transfer your personal information to unaffiliated third parties for commercial purposes. Data shared with third parties is strictly limited to the service delivery and compliance purposes described above.
k77 retains personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | 5 years from account closure | PAGCOR / AMLA compliance |
| Financial transaction records | 5 years from transaction date | AMLA / BSP requirements |
| Gaming session records | 2 years from session date | Regulatory and dispute resolution |
| Customer support communications | 3 years from last communication | Dispute resolution and legal claims |
| Technical and access logs | 12 months from generation | Security and fraud prevention |
| Responsible gaming records | 5 years from account closure | PAGCOR regulatory requirements |
| Marketing consent records | Until consent is withdrawn | Proof of lawful marketing basis |
Upon expiry of the applicable retention period, k77 will securely delete or anonymise personal data in accordance with NPC-approved disposal methods. Data that has been anonymised — such that no individual can be identified from it — may be retained beyond these periods for statistical and analytical purposes.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by k77. These rights may be exercised by contacting k77's Data Protection Officer using the details in Section 15.
Request a copy of the personal data k77 holds about you, along with information about how it is being processed.
Request correction of inaccurate, incomplete, or outdated personal information held in your k77 account.
Request deletion of personal data where processing is no longer necessary, unless retention is required by law or regulatory obligation.
Object to processing of your personal data for marketing or profiling purposes. Objections to legally required processing may not be honoured.
Request that structured personal data be transferred to you or a third party in a commonly used, machine-readable format.
Be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, as provided under RA 10173.
To exercise any of the rights above, submit a written request to k77's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." k77 will acknowledge your request within 5 business days and respond within 15 business days of receipt, in accordance with NPC-issued guidelines on data subject request timelines.
Identity verification may be required before k77 processes a data subject rights request, to ensure that personal data is not disclosed to or modified by an unauthorised person.
Cookies are small text files stored on your device when you visit a website. k77 uses cookies and similar technologies — including local storage and session tokens — to operate and improve the platform, maintain your login session, and understand how players interact with the site.
You can control cookies through your browser's privacy settings. Disabling strictly necessary cookies will prevent you from logging in to your k77 account. Functional and analytics cookies may be disabled without affecting your core access to the platform, though some features may not work as intended. Note that k77 does not use cookies for advertising or cross-site tracking purposes.
k77 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
While k77 takes reasonable precautions to protect personal data, no internet-based system can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication on their k77 accounts to reduce the risk of unauthorised access.
The k77 platform is strictly not intended for use by individuals under 21 years of age. k77 does not knowingly collect or process personal data from individuals below the minimum age requirement established by PAGCOR regulations for online gaming in the Philippines.
Age verification is conducted during the account registration process, and k77 may request additional age confirmation at any point during a player's use of the platform. Where k77 discovers that personal data has been collected from an individual under 21, the account will be immediately suspended, the data will be deleted to the extent permitted by law, and any balances will be handled in accordance with PAGCOR requirements for underage gaming.
Parents and guardians who believe a minor may have created a k77 account should contact k77 support immediately at [email protected] to report the issue.
In the course of providing the k77 service, personal data may be transferred to, stored, or processed in countries outside the Philippines — for example, where k77's cloud infrastructure providers or game software partners operate internationally.
Where such cross-border transfers occur, k77 ensures that adequate protections are in place for your personal data in accordance with Section 21 of the Data Privacy Act and the NPC's guidelines on cross-border data flows. These protections may include contractual data processing agreements that bind recipient entities to standards equivalent to those required under RA 10173.
k77 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection unless appropriate safeguards — such as contractual clauses approved by the NPC — are in place.
k77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in the platform's data processing practices, applicable Philippine law, NPC guidelines, or PAGCOR requirements. The revised policy will be posted at k77.bio/privacy-policy with an updated effective date.
Where changes are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — k77 will make reasonable efforts to notify affected players, such as through a notice displayed on the platform upon login or a communication to your registered mobile number or email address.
For any privacy-related enquiries, data subject rights requests, or concerns regarding k77's handling of your personal information, please contact k77's Data Protection Officer using the following details:
If you are not satisfied with k77's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for enforcing the Data Privacy Act of 2012 and can be reached through its official website at privacy.gov.ph.
Your personal data is protected under Philippine law and handled with the security standards your information deserves. Sign in to your k77 account and enjoy everything the platform has to offer — for players aged 21 and above.
Sign In to k77