Introduction & Scope
1.1 This Privacy Policy ("Policy") describes how k677qq collects, processes, stores, discloses, and protects personal data in connection with the operation of its online gaming platform accessible at k677qq.org and all associated mobile applications, tools, and services (collectively, the "Platform").
1.2 This Policy applies to all individuals whose personal data is processed by k677qq, including registered players, prospective players who have initiated but not completed registration, visitors to the Platform, and any other person who interacts with k677qq's services.
1.3 This Policy is to be read alongside k677qq's Terms and Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and those documents, this Policy shall prevail with respect to all matters relating to personal data processing.
1.4 k677qq processes personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the issuances of the National Privacy Commission ("NPC"), applicable provisions of the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) as amended, and any other applicable Philippine legislation governing data processing and gaming operations.
Data Controller Identity
2.1 For the purposes of the Data Privacy Act of 2012, the data controller responsible for your personal data is k677qq, the operator of the Platform at k677qq.org.
2.2 k677qq has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and handling data subject requests. All privacy-related inquiries, requests, and complaints may be directed to the DPO by contacting k677qq's support team via live chat or by email at [email protected] with the subject line "Data Privacy Request."
2.3 k677qq is registered with the National Privacy Commission as required by the Data Privacy Act of 2012 and its Implementing Rules and Regulations.
Personal Data We Collect
3.1 k677qq collects the following categories of personal data from data subjects in connection with the Platform:
| Category | Specific Data Points | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID type and number (PhilSys, passport, driver's license, UMID) | Mandatory (KYC) |
| Contact Data | Mobile phone number (Philippine format), email address, residential address (city/province) | Mandatory |
| Financial Data | GCash mobile number, PayMaya account reference, bank account name and number (BDO, BPI, Metrobank), transaction amounts and history | Mandatory (payments) |
| Gaming Data | Game session records, bet amounts, win/loss history, active bonus status, wagering history, session duration logs | Automatically collected |
| Technical Data | IP address, device type and operating system, browser type and version, session timestamps, login history, geolocation (city level) | Automatically collected |
| Communications Data | Live chat transcripts, support ticket records, email correspondence, any information voluntarily disclosed during support interactions | When applicable |
| Responsible Gaming Data | Deposit and loss limit settings, session timer configurations, self-exclusion status and dates, problem gambling risk indicators | When applicable |
3.2 k677qq does not collect sensitive personal information such as health data, racial or ethnic origin, political opinions, religious beliefs, or criminal records except where expressly required by applicable Philippine law (for example, source of funds declarations required by AMLC regulations).
How We Collect Your Data
4.1 k677qq collects personal data through the following channels and mechanisms:
- Direct submission: Information you provide when registering an account, completing KYC verification, submitting deposit or withdrawal requests, or contacting our support team;
- Platform usage: Data generated automatically as you interact with the Platform, including gameplay sessions, navigation patterns, and login activity;
- Payment processors: Transaction confirmation data received from GCash, PayMaya, and banking partners when you initiate deposits or withdrawals;
- Identity verification services: Confirmation data returned by third-party identity verification providers used in the KYC process;
- Cookies and tracking technologies: Technical data collected through browser cookies, session identifiers, and analytics tags as described in Section 10 of this Policy;
- Fraud prevention and security systems: Behavioral analytics data collected to detect fraudulent activity, unauthorized access, and terms of service violations.
4.2 k677qq does not collect personal data from third-party social media platforms, marketing data brokers, or public directories, except where a player has voluntarily connected such an account to their k677qq profile.
Legal Basis for Processing
5.1 k677qq processes personal data on the following legal bases as recognized under the Data Privacy Act of 2012:
- Contractual necessity: Processing required to fulfill k677qq's obligations under the Terms and Conditions you accepted upon registration, including account management, payment processing, and service delivery;
- Legal obligation: Processing required to comply with the Anti-Money Laundering Act, PAGCOR regulatory requirements, NPC reporting obligations, and other applicable Philippine laws;
- Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights;
- Consent: For marketing communications (including promotional emails and SMS), k677qq relies on your explicit consent, which you may withdraw at any time by contacting support or using the unsubscribe mechanism in any marketing communication.
How We Use Your Data
6.1 k677qq processes your personal data for the following specific purposes:
- Account creation and management: Registering your k677qq account, maintaining accurate account records, and enabling secure platform access;
- Identity and age verification: Confirming that you meet the legal age requirement of 21 years and that you are who you say you are, in compliance with PAGCOR and AMLC requirements;
- Payment processing: Facilitating deposits and withdrawals through your selected payment methods, reconciling transactions, and maintaining financial records;
- Gaming services: Delivering games, recording bet outcomes, managing bonus balances, and maintaining a complete transaction history for your account;
- Fraud and abuse prevention: Detecting and investigating suspicious activity, unauthorized account access, multi-accounting, bonus abuse, and money laundering;
- Regulatory compliance: Meeting reporting obligations to PAGCOR, AMLC, and the NPC as required by Philippine law;
- Responsible gaming: Monitoring gaming behavior to identify potential problem gambling indicators and enforcing player-set limits and self-exclusion decisions;
- Customer support: Responding to your inquiries, resolving disputes, and improving the quality of our support services;
- Platform improvement: Analyzing aggregate usage data to improve game offerings, user experience, and technical performance;
- Marketing (with consent): Sending you promotional offers, bonus notifications, and platform news by SMS, email, or push notification where you have provided consent.
6.2 k677qq will not use your personal data for any purpose not listed above without first providing you with notice and, where required by law, obtaining your explicit consent.
Data Sharing & Disclosure
7.1 k677qq may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:
- Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals;
- Identity verification providers: Third-party KYC service providers used to verify your identity and age as part of the account registration and compliance process;
- Game content providers: Certified game studios and live casino operators who supply the games available on k677qq, to the extent necessary for game delivery and technical support;
- Regulatory authorities: PAGCOR, AMLC, NPC, and other Philippine government authorities where disclosure is required by law, court order, or regulatory direction;
- Fraud prevention services: Third-party fraud detection and cybersecurity firms engaged to protect k677qq's platform and player accounts;
- IT and cloud infrastructure providers: Technology partners providing hosting, database management, and platform infrastructure services, under strict confidentiality and data processing agreements;
- Professional advisors: Legal counsel, auditors, and compliance consultants, where disclosure is necessary for the conduct of their professional engagements with k677qq.
7.2 All third-party recipients of personal data are required to process that data in accordance with the Data Privacy Act of 2012 and k677qq's data protection standards. k677qq conducts due diligence on all third-party processors before engagement.
Data Retention
8.1 k677qq retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer.
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration and KYC data | 5 years after account closure | AMLC / PAGCOR regulatory requirement |
| Financial transaction records | 5 years from transaction date | AMLC / Bureau of Internal Revenue |
| Gaming session and bet history | 3 years from session date | Dispute resolution and regulatory audit |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing consent records | Duration of consent plus 2 years | NPC consent record-keeping requirement |
| Self-exclusion records | Indefinite (for permanent exclusions) | Player protection and regulatory obligation |
| Technical logs (IP, device) | 12 months | Security and fraud prevention |
8.2 Upon expiry of the applicable retention period, k677qq will securely destroy or anonymize personal data in a manner that prevents its reconstruction. Anonymized aggregate data (not attributable to any individual) may be retained indefinitely for statistical and operational purposes.
Data Security
9.1 k677qq implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and k677qq's servers;
- AES-256 encryption at rest for all stored personal and financial data;
- Two-factor authentication (2FA) available to all players on account login;
- Strict access controls — internal access to personal data is role-based and limited to staff whose job function requires it;
- Regular penetration testing and security audits conducted by independent cybersecurity firms;
- 24/7 intrusion detection and monitoring systems deployed across k677qq's infrastructure;
- Staff data protection training — all k677qq personnel handling personal data receive regular training on data protection obligations and security procedures.
9.2 In the event of a personal data breach that creates a real risk of serious harm to data subjects, k677qq will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay in accordance with NPC Circular No. 16-03 (Data Breach Notification Requirements).
9.3 Notwithstanding the security measures described above, no method of electronic transmission or storage is completely secure. k677qq cannot guarantee absolute security of your data and encourages you to use strong, unique passwords and enable two-factor authentication on your account.
Cookies & Tracking Technologies
10.1 k677qq uses cookies and similar tracking technologies to operate and improve the Platform. A "cookie" is a small text file stored on your device by your browser when you visit a website. The following types of cookies are used on k677qq:
10.2 You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use k677qq's core gaming services but may affect personalization features. Disabling strictly necessary cookies will prevent Platform login and access.
Your Data Rights Under Philippine Law
11.1 As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by k677qq:
The right to know that your data is being collected and how it will be used — the purpose of this Policy.
The right to obtain confirmation that k677qq holds your personal data and to receive a copy of that data.
The right to correct inaccurate or incomplete personal data held by k677qq about you.
The right to request deletion of your personal data where processing is no longer necessary or was unlawful — subject to legal retention obligations.
The right to object to processing based on legitimate interests, particularly for direct marketing purposes.
The right to receive your personal data in a structured, machine-readable format and transfer it to another controller.
11.2 To exercise any of the rights listed above, contact k677qq's Data Protection Officer via live chat or by email at [email protected] with the subject line "Data Subject Request." k677qq will acknowledge your request within five (5) business days and respond substantively within thirty (30) calendar days, or notify you of an extension where the request is complex.
11.3 k677qq will not charge a fee for standard data subject requests. Requests that are manifestly unfounded, repetitive, or excessive may be subject to an administrative fee, which will be communicated to you in advance.
11.4 Where k677qq declines to comply with a data subject request, we will provide written reasons for that decision and inform you of your right to lodge a complaint with the National Privacy Commission.
Children & Minors
12.1 k677qq's Platform and services are strictly restricted to individuals aged twenty-one (21) years and above. k677qq does not knowingly collect personal data from individuals under the age of 21.
12.2 If k677qq discovers or has reason to believe that personal data has been submitted by or on behalf of a person under 21 years of age, k677qq will immediately suspend the relevant account, initiate an age verification review, and, where the person is confirmed to be under 21, delete the associated personal data and return any deposited funds to the originating payment method where technically feasible.
12.3 Parents and guardians who believe a minor may have accessed or registered on k677qq should contact our support team immediately via live chat or email at [email protected]. k677qq will act promptly on all such reports.
International Data Transfers
13.1 k677qq's primary data processing infrastructure is located within the Philippines. Where operational requirements necessitate the transfer of personal data to service providers or processors located outside the Philippines — for example, cloud infrastructure providers or international game studio partners — k677qq ensures that such transfers are subject to adequate data protection safeguards consistent with the requirements of the Data Privacy Act of 2012 and NPC regulations.
13.2 Specifically, k677qq implements appropriate transfer mechanisms including contractual data processing agreements that incorporate the standard data protection clauses issued by the NPC, and conducts Transfer Impact Assessments for transfers to jurisdictions without an adequacy determination.
13.3 By using the k677qq Platform and accepting this Policy, you acknowledge and consent to the transfer of your personal data to k677qq's vetted international service providers where such transfer is necessary for service delivery, subject to the safeguards described in this section.
Amendments to This Policy
14.1 k677qq reserves the right to amend this Privacy Policy at any time. Where amendments are material — meaning they substantially affect the way k677qq processes your personal data or alter your rights as a data subject — k677qq will provide notice to registered players via the Platform's notification system and by email at least seven (7) calendar days prior to the effective date of the amendment.
14.2 The most current version of this Privacy Policy will always be accessible on the Platform at k677qq.org/privacy-policy. The "Effective Date" displayed at the top of this document indicates when the current version came into force.
14.3 Your continued use of the k677qq Platform following any amendment to this Policy constitutes your acceptance of the revised Policy. If you do not accept any amendment, you must cease using the Platform and may request account closure in accordance with the Terms and Conditions.
Contact & Complaints
15.1 For all privacy-related inquiries, data subject requests, or concerns about how k677qq handles your personal data, please contact k677qq's Data Protection Officer through the following channels:
- Live Chat: Available 24/7 on the k677qq Platform — select "Privacy / Data Request" as the inquiry type;
- Email: [email protected] — use the subject line "Data Privacy Request" to ensure prompt routing to the DPO.
15.2 If you are not satisfied with k677qq's response to your privacy inquiry or data subject request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC's contact details and complaints procedure are available at the NPC's official website. k677qq cooperates fully with NPC investigations and audits.
15.3 k677qq takes all privacy complaints seriously and will acknowledge receipt within 24 hours and provide a substantive response within 15 business days of receiving a formal privacy complaint.