km77 Casino Privacy Policy

1 Who We Are

km77 Casino ("km77," "we," "us," "our") operates the online gaming platform accessible at km77.biz. km77 is the data controller responsible for the personal data of users collected through the km77 platform. We process personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

Our designated Data Protection Officer (DPO) can be reached at [email protected] for any privacy-related inquiries, requests, or concerns.

2 Personal Data We Collect

km77 collects personal data that falls into the following categories:

3 How We Collect Your Data

km77 collects personal data through the following channels:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting customer support.
• Automated collection: Data collected automatically when you access km77.biz, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-party sources: Data received from payment processors (e.g., GCash, PayMaya, BPI), identity verification service providers, and fraud prevention partners, where permitted by applicable law.
• Publicly available sources: In limited circumstances, data from public records or social media profiles where relevant to account verification or fraud investigations.

4 Legal Basis for Processing

km77 processes your personal data based on one or more of the following legal grounds under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to fulfill our obligations under the km77 Terms & Conditions, including account management, game provision, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including PAGCOR regulatory requirements, anti-money laundering obligations, and tax reporting requirements.
• Legitimate interests: Processing necessary for km77's legitimate business interests, including fraud prevention, security monitoring, and platform improvement, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 How We Use Your Personal Data

km77 uses collected personal data for the following purposes:

• To create, manage, and maintain your km77 account.
• To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations.
• To process deposits, withdrawals, and account transactions via GCash, PayMaya, BPI, BDO, and other accepted payment methods.
• To provide and improve km77 gaming services, including slots, live casino, sports betting, and bingo.
• To detect, investigate, and prevent fraud, money laundering, and other illegal or prohibited activities.
• To administer bonuses, promotions, and loyalty programs.
• To provide customer support and resolve disputes.
• To enforce our Terms & Conditions and other policies.
• To send transactional communications (account notices, security alerts, withdrawal confirmations).
• To send promotional communications where you have consented to receive them.
• To comply with applicable legal and regulatory obligations.
• To monitor responsible gaming indicators and apply player protection tools where appropriate.

6 Data Sharing & Disclosure

km77 does not sell your personal data. We share personal data with third parties only in the following circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard processing partners receive the financial data necessary to execute your transactions.
• Identity verification providers: Third-party KYC and identity verification services receive identity data solely to verify your eligibility to use km77.
• Technology providers: Hosting, infrastructure, analytics, and security service providers who process data on km77's behalf under binding data processing agreements with equivalent privacy protections.
• Game providers: Software providers whose games are offered on km77 receive anonymized or pseudonymized game activity data necessary to operate their titles and detect cheating.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where disclosure is required by law or court order.
• Fraud prevention networks: Industry fraud prevention services that help identify and block fraudulent activity across multiple operators.

All third parties with whom km77 shares personal data are required to maintain appropriate technical and organizational security measures and to use the data only for the specific purposes for which it was shared.

7 Cookies & Tracking Technologies

km77 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use include:

• Strictly necessary cookies: Essential to the basic functionality of km77.biz. These include session management, authentication, and security cookies. These cannot be disabled.
• Performance cookies: Collect anonymized information about how players use km77 (e.g., which pages load slowly, which games are most popular) to help us improve the platform experience.
• Functional cookies: Remember your preferences, such as language settings, bet size defaults, and display options, to provide a more personalized experience.
• Analytics cookies: Help us understand player behavior and platform usage patterns in aggregate and anonymized form to guide product development decisions.

You can manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of km77.biz.

8 Data Security

km77 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and km77 servers.
• Encryption of sensitive data at rest, including payment credentials and identity documents.
• Access controls and multi-factor authentication for km77 staff accessing player data systems.
• Regular security audits, penetration testing, and vulnerability assessments.
• Intrusion detection and monitoring systems operating 24/7.
• Staff training on data protection and privacy obligations.

While km77 employs robust security measures, no system is entirely immune to security risks. In the event of a personal data breach that poses a risk to your rights, km77 will notify you and the National Privacy Commission of the Philippines in accordance with the Data Privacy Act and applicable breach notification requirements.

9 Data Retention

km77 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention schedules:

• Account data: Retained for the duration of your active km77 account, plus a minimum of five (5) years after account closure to comply with PAGCOR regulatory and anti-money laundering record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act of the Philippines.
• KYC verification documents: Retained for the duration of account activity plus five (5) years, or as required by applicable law.
• Support communications: Retained for three (3) years from the date of last communication, unless required longer for active dispute resolution.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period to evidence the consent record.

Following the applicable retention period, personal data is securely deleted, destroyed, or anonymized in a manner that prevents reconstruction of the original data.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by km77:

• Right to be Informed: The right to be informed of how your personal data is being processed — which this Privacy Policy fulfills.
• Right of Access: The right to request a copy of the personal data km77 holds about you, along with information on how it is processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or completed.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to km77's overriding legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on km77's legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe km77 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please submit a written request to [email protected] with "Data Rights Request" in the subject line. km77 will respond to all verifiable requests within thirty (30) calendar days.

11 Children's Privacy

km77 Casino does not knowingly collect personal data from individuals under the age of 21. The platform is exclusively for adults who meet the minimum age requirement under Philippine gaming regulations.

If km77 discovers that personal data has been collected from a person under 21 years of age, that account will be immediately closed, all associated data will be deleted (subject to applicable legal obligations), and any deposited funds will be returned via the original payment method after identity verification.

If you are a parent or guardian and believe your child has registered on km77, please contact us immediately at [email protected].

12 Third-Party Links

km77.biz may contain references to or links to third-party websites or services (for example, payment processor portals). km77 is not responsible for the privacy practices of such third-party sites. We encourage you to review the privacy policies of any third-party sites you visit in connection with using km77's payment or verification services.

13 Changes to This Privacy Policy

km77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform functionality. When material changes are made, km77 will notify registered players by email or via a prominent notice on km77.biz at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this page indicates when this policy was most recently revised. Continued use of km77 following publication of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the revised policy, you must cease using the platform.