k677rr Privacy Policy

This Privacy Policy ("Policy") describes how k677rr ("k677rr," "we," "us," or "our") collects, processes, uses, stores, and discloses personal information in connection with the k677rr online gaming platform accessible at k677rr.org (the "Platform").

This Policy applies to all users of the Platform, including registered players, visitors, and prospective players located in the Republic of the Philippines. It is intended to be read in conjunction with k677rr's Terms and Conditions.

k677rr is committed to protecting the privacy of all individuals whose personal data it handles. This Policy explains your rights as a data subject under Republic Act No. 10173 (the "Data Privacy Act of 2012" or "DPA") and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC").

k677rr acts as the personal information controller ("PIC") in respect of personal data collected through the Platform. As PIC, k677rr determines the purposes and means of processing your personal data.

For all data privacy matters, including the exercise of your rights under the DPA, you may contact k677rr's designated Data Protection Officer ("DPO") at:

• Email: [email protected]
• Subject line: "Data Privacy – [Your Request Type]"
• Response time: Within fifteen (15) business days of receipt

k677rr collects the following categories of personal data, to the extent necessary and proportionate to the purposes described in Section 5:

Identity and Contact Information

• Full legal name as it appears on a valid government-issued ID;
• Date of birth (to verify you are 21 years of age or older);
• Nationality and country of residence;
• Email address and mobile phone number;
• Residential address (city/municipality, province).

Identity Verification (KYC) Documents

• Copy of a valid Philippine government-issued ID (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS ID, Voter's ID);
• Proof of address (utility bill, bank statement issued within 90 days);
• Source of funds declaration where required under anti-money laundering regulations.

Financial Data

• GCash mobile number, Maya account details, or bank account information used for deposits and withdrawals;
• Transaction history including deposit amounts, withdrawal amounts, and dates;
• Wagering and gaming activity records.

Technical and Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session logs, pages visited, and features used on the Platform;
• Cookie identifiers and similar tracking data (see Section 8).

k677rr collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies as you use the Platform;
• From third parties — from payment processors (GCash, Maya, BPI, BDO, Metrobank) in connection with financial transactions, from identity verification service providers, and from fraud prevention agencies;
• From public sources — where permitted by law, from publicly available government registers or watch-lists relevant to anti-money laundering compliance.

k677rr processes your personal data for the following purposes and on the following legal bases under the DPA:

• Account creation and management — necessary for the performance of the contract between you and k677rr;
• Age verification and KYC compliance — compliance with a legal obligation and protection of the vital interests of third parties (particularly minors);
• Processing deposits and withdrawals — necessary for the performance of the contract;
• Anti-money laundering and fraud prevention — compliance with legal obligations under RA 9160 (AMLA) and related regulations;
• Customer support — legitimate interests and contract performance;
• Responsible gaming monitoring — legitimate interests and compliance with gaming regulatory requirements;
• Marketing communications — with your separate consent, which you may withdraw at any time by contacting [email protected];
• Platform improvement and analytics — legitimate interests in improving the k677rr Platform for all Filipino players.

k677rr does not sell, rent, or otherwise transfer your personal data to unrelated third parties for their own marketing purposes. k677rr may disclose your personal data to the following categories of recipients, strictly to the extent necessary:

• Payment processors — GCash, Maya, and partner banks to facilitate deposits and withdrawals;
• Identity verification providers — to conduct KYC checks required by law;
• Game software providers — to the minimum extent necessary to deliver game services (typically limited to anonymised session data);
• IT and infrastructure providers — cloud hosting, security, and analytics vendors operating under data processing agreements with k677rr;
• Regulatory and law enforcement authorities — when required by Philippine law, including PAGCOR, the Anti-Money Laundering Council ("AMLC"), and law enforcement agencies acting under lawful authority;
• Professional advisers — lawyers, auditors, and compliance consultants bound by confidentiality obligations.

Where personal data is transferred to service providers outside the Philippines, k677rr ensures that appropriate safeguards are in place in accordance with NPC guidelines and Chapter VIII of the DPA.

k677rr retains personal data for as long as necessary to fulfil the purposes described in this Policy, including the following minimum retention periods:

• Account registration and KYC data: retained for the duration of the account and for a minimum of five (5) years after account closure, as required by AMLA regulations;
• Financial transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Customer support records: retained for three (3) years from last interaction;
• Technical log data: retained for up to twelve (12) months, unless required for longer by an ongoing investigation or legal proceeding.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with NPC guidelines.

k677rr uses cookies and similar technologies to enhance Platform functionality, maintain session security, analyse usage patterns, and deliver relevant content. The types of cookies used include:

• Strictly necessary cookies — required for basic Platform operation, including session management and security. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game favourites.
• Analytical cookies — collect aggregated information about how players use k677rr to help us improve the Platform.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may impair the functionality of the k677rr Platform. k677rr does not use cookies for cross-site advertising or to track your activity on third-party websites.

Under the DPA, you have the following rights with respect to your personal data held by k677rr:

• Right to be informed — to be told what personal data k677rr holds about you and how it is processed;
• Right to access — to obtain a copy of your personal data in a readable format;
• Right to correction — to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking — to request deletion or suppression of personal data where there is no longer a lawful basis for its retention;
• Right to object — to object to processing based on legitimate interests, particularly for direct marketing;
• Right to data portability — to receive your personal data in a structured, commonly used format;
• Right to damages — to claim compensation for harm suffered as a result of a violation of the DPA;
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) if you believe k677rr has violated the DPA.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Subject Rights Request." k677rr will respond within fifteen (15) business days of receiving a verifiable request.

k677rr implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and k677rr servers;
• Encrypted storage of passwords using industry-standard hashing algorithms — k677rr staff cannot read your password;
• Role-based access controls restricting employee access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments of Platform infrastructure;
• A documented data breach response plan in accordance with NPC Circular No. 16-03.

Notwithstanding the foregoing, no security system is impenetrable. k677rr cannot guarantee absolute security and encourages players to maintain strong, unique passwords and enable two-factor authentication on their k677rr accounts.

k677rr strictly prohibits access to and use of the Platform by any person under 21 years of age. k677rr does not knowingly collect personal data from minors. If k677rr discovers that personal data has been collected from a person under 21, such data will be deleted immediately and the account suspended without refund of any bonus credits.

If you believe a minor has registered an account on k677rr, please contact [email protected] immediately.

k677rr reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. The "Last updated" date at the top of this page will be revised accordingly. Where changes are material, k677rr will notify registered players via the email address on their k677rr account or through a prominent notice on the Platform prior to the changes taking effect.

Your continued use of k677rr after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you must discontinue use of the Platform and may request account closure.

For any questions, concerns, or complaints relating to this Privacy Policy or k677rr's data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject: "Privacy Policy Inquiry" or "Data Subject Rights Request"
• Response time: Within 15 business days

If you are not satisfied with k677rr's response, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) through their official website and complaint channels.