kf777 Privacy Policy

For the purposes of this Privacy Policy, the following definitions apply alongside those in the kf777 Terms & Conditions:

• 1.1"Personal Data" means any information from which a living individual can be directly or indirectly identified, including but not limited to name, mobile number, email address, date of birth, government ID number, IP address, and financial transaction data.
• 1.2"Sensitive Personal Information" has the same meaning as under Republic Act No. 10173 (the Data Privacy Act of 2012), and includes data relating to health, financial standing, and government-issued identification numbers.
• 1.3"Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, use, transfer, disclosure, or disposal.
• 1.4"Data Subject" means any natural person whose Personal Data is processed by kf777 — principally registered Players and website visitors.
• 1.5"DPA" means the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as amended.
• 1.6"NPC" means the National Privacy Commission of the Philippines, the regulatory authority supervising compliance with the DPA.
• 1.7"Third Party" means any entity other than the Data Subject and kf777 that processes Personal Data under a lawful arrangement with kf777, including payment processors, KYC verification providers, and licensed game content providers.

2.1 This Privacy Policy applies to all Personal Data collected by kf777 in connection with:

• The registration and maintenance of kf777 player Accounts;
• The use of any Game, service, or feature available on the kf777 Platform;
• Visits to kf777.org, including unauthenticated browsing sessions;
• Communications between a Player and the kf777 support team via any channel;
• Participation in kf777 promotions, surveys, or loyalty programs.

2.2 This Policy is consistent with the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and any relevant circulars or advisories issued by the National Privacy Commission of the Philippines.

2.3 This Privacy Policy should be read alongside the kf777 Terms & Conditions. In the event of a conflict between this Privacy Policy and the Terms & Conditions specifically concerning data privacy matters, this Privacy Policy shall prevail.

3.1 kf777 collects only the Personal Data that is necessary for the purposes described in Section 5 of this Policy. The categories of data collected are as follows:

3.2 kf777 does not collect special categories of data (such as racial or ethnic origin, political opinions, religious beliefs, or biometric data) unless this is strictly required for a specific regulatory compliance purpose, in which case the Data Subject will be expressly notified and consent obtained.

4.1 kf777 collects Personal Data through the following channels:

• (a)Direct Provision: Information you voluntarily provide when registering a kf777 Account, completing identity verification (KYC), making a deposit or withdrawal request, contacting the kf777 support team, or responding to a survey or promotion.
• (b)Automated Technical Collection: Technical and usage data collected automatically when you access the kf777 Platform, including IP address, browser fingerprint, session activity, and cookie data as described in Section 9.
• (c)Third-Party Verification Services: Identity and age verification data received from licensed KYC service providers when you submit identity documents. kf777 engages only with KYC providers who are themselves compliant with the DPA.
• (d)Payment Processors: Transaction confirmation data received from payment platforms including GCash, Maya, BPI, BDO, Metrobank, InstaPay, GrabPay, and 7-Eleven CLiQQ in connection with deposit and withdrawal processing.
• (e)Fraud Prevention & AML Monitoring: Data received from fraud detection and anti-money laundering screening services where kf777 is required by applicable law to conduct such checks.

5.1 kf777 processes Personal Data only where a lawful basis exists under the Data Privacy Act of 2012. The primary legal bases relied upon are:

• Contractual Necessity — processing required to perform the agreement between kf777 and the Player (the kf777 Terms & Conditions);
• Legal Obligation — processing required to comply with applicable Philippine law, including anti-money laundering obligations under Republic Act No. 9160 (as amended), PAGCOR regulatory requirements, and NPC directives;
• Legitimate Interests — processing necessary for kf777's legitimate business interests (e.g., fraud prevention, platform security, responsible gaming monitoring) where these are not overridden by the Data Subject's rights;
• Consent — processing for marketing communications, where opt-in consent has been expressly obtained and may be withdrawn at any time.

5.2 The specific purposes for which kf777 processes Personal Data include:

• Verifying the identity and age (21+) of Players at registration and during ongoing account reviews;
• Managing Account registration, login authentication, and Account security;
• Processing deposits and withdrawal requests via Philippine payment channels;
• Delivering Games, recording game results, and maintaining accurate transaction histories;
• Administering bonuses, promotions, and loyalty rewards;
• Conducting anti-money laundering screening and fraud prevention checks as required by law;
• Providing customer support and resolving disputes;
• Complying with PAGCOR reporting obligations and other regulatory requirements;
• Monitoring player activity for responsible gaming purposes and applying protective measures where needed;
• Sending transactional and account-related notifications via SMS or email;
• Sending promotional communications to Players who have opted in to receive them.

5.3 kf777 will not process Personal Data for any purpose that is materially incompatible with the purposes described in this Section without first providing notice to the Data Subject and obtaining any required consent.

6.1 kf777 may share Player Personal Data with the following categories of third parties under appropriate data processing agreements or legal obligations:

• (a)Payment Processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO Unibank, Metrobank, GrabPay, and other licensed Philippine payment channels — solely for the purpose of processing deposits and withdrawals.
• (b)KYC/Identity Verification Providers: Licensed third-party identity verification service providers engaged to conduct document authentication and age verification as required for regulatory compliance.
• (c)AML Screening Services: Anti-money laundering and sanctions screening providers engaged by kf777 to fulfil its obligations under Republic Act No. 9160 (Anti-Money Laundering Act) and related regulations.
• (d)Regulatory Authorities: PAGCOR and other Philippine regulatory or law enforcement bodies where kf777 is required to disclose data by law, court order, or regulatory directive.
• (e)Game Content Providers: Licensed game software providers whose titles are available on the kf777 Platform, where game result data must be shared with the provider's systems to resolve disputes or conduct audits.
• (f)Technology Infrastructure Providers: Cloud hosting, CDN, and cybersecurity service providers engaged by kf777 to operate the Platform, subject to strict data processing agreements.

6.2 All third parties with whom kf777 shares Personal Data are contractually required to process that data only for the specified purpose, maintain appropriate security measures, and comply with applicable data protection law.

7.1 kf777 retains Personal Data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The principal retention periods applied by kf777 are:

• Account Data (identity, contact, KYC documents): Retained for the duration of the Account and for a minimum of 5 years following Account closure, in compliance with anti-money laundering record-keeping obligations under Philippine law;
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, as required under Republic Act No. 9160 and relevant BSP regulations;
• Gaming Activity Records: Retained for 3 years following the relevant game session, or longer where required for ongoing dispute resolution or regulatory inquiry;
• Support Communications: Retained for 2 years from the date of the last communication, or longer where the communication relates to an unresolved dispute;
• Technical and Log Data: Retained for 12 months from the date of collection, unless required for longer by a security investigation;
• Marketing Preference Data: Retained until consent is withdrawn or the Account is closed, whichever is earlier.

7.2 Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with kf777's data disposal procedures. Anonymised data may be retained indefinitely for aggregated analytics purposes.

8.1 kf777 implements appropriate technical and organisational security measures to protect Personal Data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• (a)Encryption in Transit: All data transmitted between a Player's device and the kf777 Platform is protected by 256-bit SSL/TLS encryption. This applies to login credentials, financial data, and all other Account interactions.
• (b)Encryption at Rest: Personal Data stored in kf777's systems is encrypted at rest using industry-standard algorithms. Sensitive financial data is subject to additional encryption layers.
• (c)Access Controls: Access to Personal Data within kf777's systems is restricted on a need-to-know basis. Staff members with access to Personal Data are subject to confidentiality obligations.
• (d)Multi-Factor Authentication: All internal systems containing Personal Data require multi-factor authentication for staff access.
• (e)Intrusion Detection & Monitoring: kf777's infrastructure is monitored 24/7 for unauthorized access attempts, anomalous activity, and potential data breaches.
• (f)Penetration Testing: kf777 conducts regular third-party security assessments and penetration tests of its Platform and data infrastructure.

8.2 In the event of a personal data breach that is likely to result in a real risk of serious harm to Data Subjects, kf777 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and subsequent NPC directives. Affected Data Subjects will be notified without undue delay where the breach poses a high risk to their rights and freedoms.

9.1 The kf777 Platform uses cookies and similar tracking technologies to operate correctly, enhance the Player experience, and support security functions. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for the Platform to function — including session management, login state, and security tokens. These cannot be disabled without preventing basic Platform functionality.
• Functional Cookies: Remember Player preferences such as language settings, game lobby layout, and recent game history to personalise the experience.
• Analytics Cookies: Collect aggregated, anonymised data about how Players interact with the Platform to help kf777 improve performance and identify usability issues. No individual Player is identified from analytics data.
• Security Cookies: Used for fraud detection and prevention, including device fingerprinting to identify unusual login patterns and protect against account takeover attempts.

9.2 Players may manage non-essential cookie preferences through their browser settings. Disabling functional or analytics cookies will not prevent access to the Platform but may affect the quality of certain features.

9.3 kf777 does not use third-party advertising cookies or share cookie data with advertising networks or data brokers.

10.1 Under the Data Privacy Act of 2012, kf777 Players who are Philippine nationals or residents have the following rights with respect to their Personal Data. These rights may be exercised by contacting the kf777 Data Protection Officer at the contact details in Section 14:

10.2 kf777 will respond to verified data rights requests within 15 business days. Where a request cannot be fulfilled — for example because legal retention obligations require the data to be kept — kf777 will explain the basis for this in writing.

10.3 To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Privacy Request — [Your Right]" and include your Account username and a copy of a valid Philippine government-issued ID for identity verification purposes.

11.1 As a condition of registration, all Players confirm that they are at least 21 years of age. This is a mandatory legal requirement applicable to casino-style online gaming in the Philippines. kf777 enforces this requirement through age verification at registration and through ongoing KYC review processes.

11.2 If kf777 becomes aware that Personal Data has been collected from an individual under 21 years of age, kf777 will immediately close the associated Account, delete the data subject to any applicable legal obligations, and return any deposited funds to the originating payment channel after completing any required AML review.

11.3 Parents or guardians who believe that a minor under their care has accessed the kf777 Platform should contact [email protected] immediately so that the Account can be reviewed and closed.

12.1 kf777 may transfer Player Personal Data outside the Philippines where this is necessary to operate the Platform — for example, to cloud hosting infrastructure, game content servers, or internationally engaged KYC and AML service providers.

12.2 Any cross-border transfer of Personal Data by kf777 is subject to the requirements of Section 21 of the Data Privacy Act of 2012, and kf777 ensures that:

• The receiving country provides an adequate level of protection for Personal Data, as assessed by the NPC; or
• Contractual safeguards — including standard data protection clauses — are in place with the receiving entity to ensure equivalent protection applies; or
• The transfer is otherwise authorised under an applicable exception recognised by the DPA.

12.3 Players may request information about the specific cross-border transfer mechanisms applied by kf777 in any given context by contacting the Data Protection Officer at the details in Section 14.

13.1 kf777 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or Platform features. The date of the most recent revision is displayed at the top of this page.

13.2 Where a material change to this Privacy Policy is made — for example, a new category of data being collected, a new purpose for processing, or a new category of third party receiving data — kf777 will notify registered Players via an in-platform notification upon login, or via the email address or mobile number associated with their Account, no less than 7 days before the change takes effect.

13.3 For non-material updates (such as clarifications of existing language, formatting corrections, or updates to contact information), kf777 will update the Policy and revise the "Last Updated" date without individual notification.

13.4 Continued use of the kf777 Platform after revised Terms have taken effect constitutes acceptance of the updated Privacy Policy. If you do not agree with any change, you should cease using the Platform and request Account closure in accordance with the kf777 Terms & Conditions.

14.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data by kf777, please contact the kf777 Data Protection Officer:

14.2 If you are not satisfied with kf777's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent supervisory authority for data privacy in the Philippines and can be contacted through the official NPC website or its public assistance channels.

14.3 kf777 takes all data privacy concerns seriously. Our Data Protection Officer is a dedicated point of contact for privacy matters and is committed to responding to all legitimate requests fairly, transparently, and within the timeframes required by Philippine law.