k677rr Casino – Privacy Policy

1. Introduction

1.1 k677rr is committed to protecting the privacy and personal data of all players using our Platform. This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its implementing rules and regulations, and the data handling guidelines issued by the National Privacy Commission (NPC) of the Philippines.

1.2 This Policy also reflects k677rr's obligations as an online gaming operator subject to PAGCOR oversight, including compliance with Republic Act No. 9160, the Anti-Money Laundering Act (AMLA), which requires collection and retention of specific player identification and transaction records.

1.3 This Policy should be read alongside our Terms & Conditions, which govern the overall use of the k677rr Platform.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, k677rr acts as the personal information controller with respect to all data collected through the Platform. Queries regarding data processing activities, or requests to exercise your data subject rights, may be directed to our support team via the contact details in Section 16 of this Policy.

3. Personal Data We Collect

3.1 k677rr collects personal data in the following categories:

3.2 We do not collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and AMLA compliance. We do not collect biometric data other than where a government-issued ID submitted for KYC incidentally contains such information.

4. How We Use Your Personal Data

4.1 k677rr uses your personal data for the following purposes:

• To create and manage your k677rr account and verify your identity;
• To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank;
• To verify that you meet the 21+ age requirement and are eligible to use the Platform;
• To detect, prevent, and investigate fraud, money laundering, and prohibited activities under AMLA;
• To comply with PAGCOR reporting requirements and other regulatory obligations;
• To provide customer support through Live Chat, Messenger, Viber, and email;
• To send account-related communications (transaction confirmations, security alerts, policy updates);
• To improve Platform performance, debug technical issues, and conduct internal analytics;
• To send promotional offers and bonus notifications, where you have consented to receive marketing communications.

5. Legal Basis for Processing

5.1 Under the Data Privacy Act of 2012, k677rr processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to when registering, including account management, payment processing, and gaming services;
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and internal analytics, where such interests are not overridden by your rights and freedoms;
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit consent.

6. Data Sharing and Disclosure

6.1 k677rr does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Game Providers: Licensed game software providers (e.g., Pragmatic Play, PG Soft) may receive session data necessary to facilitate gameplay. These providers are contractually bound to process data only for the specified purpose;
• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposit or withdrawal transaction;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other competent Philippine authorities may receive player data pursuant to lawful requests or mandatory reporting obligations;
• Service Providers: Third-party companies providing IT infrastructure, customer support platforms, and fraud detection services, under strict data processing agreements that prohibit independent use of your data;
• Legal Proceedings: Where required by court order, subpoena, or applicable law, k677rr may disclose personal data to law enforcement or judicial authorities.

6.2 All third parties who receive personal data from k677rr are required to maintain confidentiality and process such data only for the purposes for which it was shared.

7. International Data Transfers

7.1 Some of k677rr's service providers — including certain game software providers and cloud infrastructure partners — may be located outside the Philippines. Where personal data is transferred internationally, k677rr takes appropriate measures to ensure the receiving party provides a level of data protection equivalent to that required under Philippine law, including through the use of contractual safeguards.

8. Data Retention

8.1 k677rr retains personal data for the following periods:

• Account and identity data: For the duration of the account and for a minimum of five (5) years after account closure, as required under PAGCOR and AMLA regulations;
• Transaction records: Minimum five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act;
• Gaming history: Three (3) years from the date of each session, unless a longer period is required by law or active investigation;
• Support communications: Two (2) years from the date of interaction;
• Technical/log data: Ninety (90) days, unless retained for security investigation purposes.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines.

9. Your Data Subject Rights

9.1 Under the Data Privacy Act of 2012, you are entitled to exercise the following rights with respect to your personal data held by k677rr:

• Right to be Informed: The right to know what data we hold about you and how we process it;
• Right to Access: The right to request a copy of your personal data held by k677rr;
• Right to Correction: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of personal data no longer necessary for the purpose it was collected, subject to legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another service provider;
• Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

9.2 To exercise any of the above rights, please contact k677rr support via the contact details in Section 16. We will respond to verified requests within thirty (30) calendar days, as required under the DPA.

10. Cookies and Tracking Technologies

10.1 k677rr uses the following categories of cookies on the Platform:

• Strictly Necessary Cookies: Required for session management, authentication, and security. These cannot be disabled without impairing Platform functionality;
• Performance Cookies: Collect anonymous, aggregated data about how players use the Platform to help us identify technical issues and improve the experience;
• Functional Cookies: Remember your preferences (e.g., language, last visited game) to personalise your experience.

10.2 k677rr does not use third-party advertising cookies or cross-site tracking technologies for behavioural advertising. You may manage cookie preferences through your browser settings at any time.

11. Marketing Communications

11.1 With your consent, k677rr may send you promotional communications regarding new games, bonuses, and platform features via email, SMS, Messenger, and Viber.

11.2 You may withdraw consent for marketing communications at any time by: (a) updating your account communication preferences in your k677rr account settings; or (b) contacting support via Live Chat or email. Withdrawal of consent does not affect communications that are necessary for account management or legal compliance.

12. Children and Minors

12.1 The k677rr Platform is strictly for persons aged 21 years or older, in compliance with PAGCOR's age requirements for online gambling. k677rr does not knowingly collect personal data from anyone under 21 years of age. If we become aware that personal data has been collected from an underage individual, we will close the associated account and securely delete the data without delay. Any funds deposited by a minor will be returned net of any amounts already wagered.

13. Data Security

13.1 k677rr implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption of sensitive data at rest on our servers;
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing;
• Account-level security features including two-factor authentication and login anomaly detection.

13.2 In the event of a personal data breach that is likely to result in harm to affected individuals, k677rr will notify the NPC and affected players in accordance with applicable breach notification requirements under the DPA.

14. Third-Party Links

14.1 The k677rr Platform may contain links to third-party websites or services (for example, game provider homepages or payment provider portals). k677rr is not responsible for the privacy practices of any third-party site. We encourage you to review the privacy policy of any external site you visit.

15. Changes to This Privacy Policy

15.1 k677rr reserves the right to update this Privacy Policy at any time to reflect changes in legal requirements, regulatory guidance, or our data processing practices. Material changes will be communicated to registered players via email notification or a prominent notice on the Platform at least seven (7) calendar days before taking effect.

15.2 The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated Policy.

16. Contact & Complaints

For privacy-related queries, to exercise your data subject rights, or to raise a complaint regarding k677rr's data handling practices, please contact our support team:

16.1 If you are not satisfied with k677rr's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.