km77 Privacy Policy

1. Data Controller

The data controller responsible for the personal information of km77 players is the operator of km77.asia, a PAGCOR-licensed online gaming entity operating in the Philippines. For all data privacy matters, including the exercise of data subject rights, players may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

km77 is registered with the National Privacy Commission (NPC) of the Philippines as required under Republic Act 10173, the Data Privacy Act of 2012, and its implementing rules and regulations.

2. Personal Data We Collect

km77 collects personal data that is necessary to provide our gaming services, comply with PAGCOR regulatory requirements, and ensure a safe gaming environment for all Filipino players. The categories of personal data we collect include:

3. How We Collect Your Data

km77 collects personal data through the following methods:

• Direct Collection: Information you provide during account registration, KYC document submission, deposit and withdrawal processing, contact form submissions, and live chat interactions.
• Automated Collection: Technical data collected automatically when you access km77.asia, including IP address, cookies, device identifiers, browser type, referring URLs, and session activity logs.
• Third-Party Sources: Identity verification data from PAGCOR-approved KYC verification partners; fraud screening data from anti-fraud service providers; payment confirmation data from GCash, Maya, BPI, BDO, and other payment processors.
• Publicly Available Sources: Where permitted by law, km77 may supplement player records with publicly available information to assist with identity verification or fraud investigations.

4. How We Use Your Personal Data

km77 processes your personal data for the following purposes:

• Creating and managing your km77 player account and profile;
• Processing deposits and withdrawals via GCash, Maya, and Philippine banking channels;
• Verifying your identity and age (21+) in accordance with PAGCOR requirements;
• Monitoring gaming activity to detect and prevent fraud, money laundering, and bonus abuse;
• Complying with PAGCOR regulatory reporting obligations, including mandatory reporting of suspicious transactions to AMLC (Anti-Money Laundering Council);
• Providing customer support via live chat, email, and any other support channels offered by km77;
• Administering promotions, bonuses, and loyalty programs you have opted into;
• Monitoring gaming patterns to identify signs of problem gambling and delivering responsible gaming interventions;
• Sending transactional notifications including deposit confirmations, withdrawal updates, and security alerts;
• Sending marketing communications where you have provided explicit consent;
• Improving km77 platform performance, user experience, and game offerings based on aggregated, anonymized usage data;
• Defending against and resolving legal claims, regulatory investigations, or disputes involving km77.

5. Legal Basis for Processing

km77 processes your personal data on the following legal bases as defined under the Philippine Data Privacy Act of 2012 and relevant PAGCOR regulations:

• Contractual Necessity: Processing required to perform the km77 Player Agreement (Terms and Conditions) you entered into upon registration — including account management, game provision, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLC reporting obligations, and other applicable Philippine laws.
• Legitimate Interests: Processing necessary for km77's legitimate business interests, including fraud prevention, security, platform improvement, and responsible gaming monitoring, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, including marketing communications and optional platform cookies. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

km77 does not sell, rent, or trade your personal data to third-party advertisers. We share personal data only in the following circumstances and with the following categories of recipients:

• PAGCOR and Philippine Regulatory Authorities: km77 is obligated to share player data and gaming records with PAGCOR and the AMLC as required under our licensing conditions and Philippine AML law.
• KYC and Identity Verification Partners: PAGCOR-approved identity verification service providers for the purpose of age and identity verification during account registration and KYC processing.
• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers receive only the minimum data necessary to process deposit and withdrawal transactions.
• Game Content Providers: Third-party game studios and platform providers (e.g., Pragmatic Play, Evolution Gaming) may receive anonymized player session identifiers necessary to deliver and log game outcomes.
• Fraud and Security Services: Anti-fraud and cybersecurity providers who assist km77 in detecting unauthorized access and suspicious activity on the Platform.
• Law Enforcement: Where required by a valid court order, subpoena, or regulatory direction from Philippine law enforcement or the NPC, km77 will disclose personal data to the extent legally required.

7. Data Retention

km77 retains personal data for as long as is necessary to fulfill the purposes described in this Policy, subject to the following retention periods:

• Active Account Data: Retained for the duration of your km77 account plus five (5) years following account closure, as required for PAGCOR and AML compliance purposes.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction, or longer if required by AMLC regulations.
• Financial Transaction Records: Retained for five (5) years from the transaction date in accordance with PAGCOR and Philippine AML law requirements.
• Support Communications: Retained for two (2) years from the date of the interaction unless the matter relates to an ongoing dispute or regulatory investigation.
• Marketing Consent Records: Retained for five (5) years from the date of consent, or until consent is withdrawn, to demonstrate compliance with applicable law.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with km77's data destruction procedures.

8. Cookies and Tracking Technologies

km77.asia uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Essential Cookies: Required for the km77 Platform to function correctly. These include session cookies that maintain your login state and security tokens. These cookies cannot be disabled without affecting Platform functionality.
• Performance Cookies: Collect anonymized data about how players navigate and use km77, allowing us to identify and fix errors, improve load times, and optimize game delivery on Philippine mobile networks.
• Functional Cookies: Remember your preferences — such as preferred language, game lobby view, and responsible gaming settings — so you don't have to reconfigure them on each visit.
• Analytics Cookies: Used by internal analytics tools to analyze aggregate usage patterns and help km77 make product improvements. No individual player profiles are sold to third-party analytics companies.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair or prevent your ability to use the km77 Platform, including km77 Login functionality.

9. Your Data Subject Rights

Under Republic Act 10173 (Data Privacy Act of 2012), km77 players in the Philippines have the following rights with respect to their personal data:

• Right to Be Informed: The right to know what personal data km77 holds about you, the purposes for which it is processed, and with whom it is shared — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data km77 holds about you. Requests will be fulfilled within 15 business days of identity verification.
• Right to Rectification: The right to have inaccurate personal data corrected. For account details such as name and contact information, you may update certain fields directly from your km77 Account Settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose collected. This right is subject to km77's legal and regulatory data retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes. You may withdraw marketing consent at any time via your Account Settings or by emailing our DPO.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe km77 has handled your personal data in breach of the Data Privacy Act.

To exercise any of the above rights, please contact our Data Protection Officer as described in Section 14.

10. Data Security

km77 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and km77.asia;
• Encrypted storage of personal data at rest using industry-standard encryption;
• Role-based access controls limiting km77 personnel access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing by qualified cybersecurity professionals;
• Two-factor authentication available for all player accounts;
• Incident response procedures providing for prompt notification of data breaches to the NPC and affected players where required by law.

11. Children's and Minors' Privacy

km77 strictly prohibits the use of its Platform by persons under 21 years of age, in compliance with PAGCOR regulations. km77 does not knowingly collect personal data from individuals under 21. If km77 discovers that personal data has been collected from a minor, that data will be immediately deleted and the associated account permanently closed.

If you believe a minor has registered an account on km77 or has provided personal data to km77, please contact our Data Protection Officer immediately at the contact details provided in Section 14.

12. International Data Transfers

Some of km77's technology and service partners — including game content providers and cybersecurity vendors — may be located outside the Philippines. Where personal data is transferred to recipients in foreign jurisdictions, km77 ensures that:

• The transfer is to a jurisdiction that the NPC recognizes as providing adequate data protection; or
• The transfer is governed by contractual data protection clauses that impose obligations on the recipient equivalent to those required under Philippine law; or
• The transfer is otherwise permitted under the Data Privacy Act of 2012 and NPC regulations.

km77 does not transfer financial transaction data or government-issued ID documents to parties outside the Philippines except where required by PAGCOR regulations or applicable Philippine law.

13. Changes to This Privacy Policy

km77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via the email address on file at least seven (7) calendar days before the revised Policy takes effect.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage players to review this Policy periodically. Your continued use of the km77 Platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

14. Contact Our Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by km77, please contact our Data Protection Officer:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 within the km77 Platform after km77 Login
• Response Time: Within 5 business days for data subject rights requests

If you are not satisfied with km77's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.