Privacy Policy

1. Overview & Data Controller

kw77.club ("kw77," "we," "us," or "our") is the data controller responsible for the personal data of users who access and use the kw77 online gaming platform. This Privacy Policy governs the collection, processing, storage, and disclosure of personal data submitted to or collected by kw77 in connection with your use of our website, account services, gaming features, and related communications.

This Policy is written in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission (NPC) of the Philippines. As a PAGCOR-regulated operator, kw77 also processes certain data in accordance with PAGCOR's anti-money laundering and responsible gaming requirements under Philippine law.

For privacy-related inquiries, please contact our Data Privacy Officer at [email protected] (email only — please do not send physical correspondence).

2. Personal Data We Collect

kw77 collects the following categories of personal data, depending on how you interact with the platform:

Category	Examples	Required?
Identity Data	Full name, date of birth, government ID type and number	Yes (KYC)
Contact Data	Email address, mobile number, residential address	Yes
Financial Data	GCash / PayMaya account reference, bank account (BPI, BDO, Metrobank), transaction history	Yes (payments)
Technical Data	IP address, device type, browser, operating system, session timestamps	Automatic
Usage Data	Games played, bets placed, login history, feature interactions	Automatic
Communications Data	Live chat transcripts, support email content, feedback submitted	When provided
Verification Documents	Scanned or photographed government IDs (Passport, UMID, PhilHealth, SSS, Driver's License)	Yes (KYC)

kw77 does not collect sensitive personal information as defined under the DPA (such as racial or ethnic origin, political opinions, religious beliefs, or health information) unless specifically required by PAGCOR regulations or Philippine law in particular circumstances, and only to the minimum extent necessary.

3. How We Collect Personal Data

• Direct interactions: Data you provide when registering your kw77 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Server logs, session cookies, and analytics tools that record technical and usage data automatically when you access the kw77 platform.
• Third-party payment providers: Transaction references and verification signals from GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard processing systems, as necessary to confirm payment status.
• Identity verification services: Third-party KYC providers used to verify the authenticity of identity documents submitted to kw77 in compliance with PAGCOR and AMLC requirements.
• Fraud prevention systems: Device fingerprinting and behavioral analytics tools used to detect unauthorized access, multi-accounting, and other prohibited conduct as described in our Terms & Conditions.

4. Lawful Basis for Processing

Under the Data Privacy Act of 2012, kw77 processes your personal data on the following lawful bases:

• Contractual necessity: Processing your account registration data, payment information, and game records is necessary to perform the contract between you and kw77 (the platform Terms & Conditions).
• Legal obligation: kw77 is required by PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies to collect, retain, and in some cases disclose certain player data. Compliance with RA 9160 (AMLA) and PAGCOR directives is a legal obligation.
• Legitimate interests: kw77 processes technical and usage data to ensure platform security, detect fraud, improve services, and maintain the integrity of its games — activities that are in the legitimate interests of kw77 and its player community.
• Consent: Where kw77 sends promotional communications or uses non-essential cookies, it does so based on your opt-in consent, which you may withdraw at any time.

5. How kw77 Uses Your Personal Data

5.1 Account Management

Your identity, contact, and financial data are used to create and maintain your kw77 account, process deposits and withdrawals, verify your age and identity as required by PAGCOR, and communicate account-related notices (password resets, security alerts, transaction confirmations).

5.2 Regulatory Compliance

kw77 uses identity and transaction data to comply with PAGCOR licensing conditions, AMLC reporting requirements under RA 9160, and any other applicable Philippine law. This may include reporting large or suspicious transactions to the AMLC without prior notice to the player as required by law.

5.3 Responsible Gaming

Usage data — including session duration, bet frequency, and deposit patterns — is analyzed by kw77's responsible gaming systems to identify players who may be exhibiting signs of problem gambling. This processing is in the legitimate interests of player welfare and PAGCOR compliance. Players flagged by these systems may be contacted by kw77 support with responsible gaming information.

5.4 Security & Fraud Prevention

Technical and usage data are continuously analyzed to detect unauthorized account access, multi-accounting, bonus abuse, collusion, money laundering, and other prohibited conduct. IP addresses and device fingerprints are used to enforce geographic restrictions and self-exclusion orders.

5.5 Marketing Communications

With your consent, kw77 may use your contact data to send promotional emails, SMS notifications, and in-platform messages about bonuses, new games, and special events. You may opt out at any time by updating your communication preferences in your kw77 account settings or by contacting support.

5.6 Platform Improvement

Aggregated and anonymized usage data is used to analyze platform performance, improve game load times, optimize the mobile experience, and develop new features. This analysis does not identify individual players.

6. Sharing & Disclosure of Your Data

kw77 does not sell your personal data to third parties. We share data only in the following circumstances:

• Game providers: Necessary game session data is shared with licensed third-party game studios (e.g., Pragmatic Play, PG Soft, JILI Gaming) to facilitate gameplay. These providers are contractually bound by data protection obligations consistent with the DPA.
• Payment processors: Transaction data is shared with GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard as necessary to process deposits and withdrawals.
• KYC and fraud prevention partners: Identity documents and risk signals are shared with certified KYC verification and fraud prevention service providers operating under appropriate data processing agreements.
• Regulatory authorities: kw77 discloses player data to PAGCOR, the AMLC, the NPC, and other Philippine government authorities when required by law, court order, or regulatory directive.
• Legal proceedings: kw77 may disclose personal data to law enforcement or legal advisers where necessary to investigate, prevent, or take action against fraudulent, illegal, or abusive conduct on the platform.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of kw77's business, player data may be transferred to the successor entity subject to equivalent data protection commitments.

All third-party recipients of kw77 player data are required to process that data only for the purposes specified, in accordance with Philippine data protection law, and subject to appropriate security measures.

7. Data Retention

kw77 retains personal data for as long as your account is active and for such further period as is necessary to comply with legal obligations. Specifically:

• Account and KYC data are retained for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AMLC record-keeping requirements under RA 9160.
• Transaction records (deposits, withdrawals, bet history) are retained for a minimum of five (5) years.
• Support and live chat transcripts are retained for two (2) years for quality assurance and dispute resolution purposes.
• Marketing consent records are retained for the duration of the consent plus two (2) years.
• Technical logs (IP, session data) are retained for up to twelve (12) months for security analysis purposes.

After applicable retention periods expire, personal data is securely deleted or irreversibly anonymized.

8. Security of Your Personal Data

kw77 implements technical and organizational measures appropriate to the nature and sensitivity of the personal data processed. These measures include:

• TLS 1.3 encryption for all data in transit between your device and kw77 servers.
• Encryption at rest for sensitive personal data, including identity documents and financial account references.
• Bcrypt hashing of all kw77 account passwords — passwords are never stored in recoverable form.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the kw77 platform.
• An incident response plan that includes NPC notification procedures in the event of a personal data breach, as required by the DPA.

9. Cookies & Tracking Technologies

kw77 uses cookies and similar technologies to operate the platform, maintain your login session, detect fraud, and analyze platform usage. The categories of cookies used are:

• Essential cookies: Required for the kw77 platform to function. These include session tokens, CSRF protection tokens, and load-balancing cookies. They cannot be disabled without breaking the platform.
• Analytics cookies: Used to collect anonymized data on how players use kw77, which games are most popular, and how the mobile experience performs. Enabled by default; you may opt out via account settings.
• Security cookies: Device fingerprinting and fraud detection signals used to protect your account and the platform from unauthorized access.
• Marketing cookies: Used only with your explicit consent to personalize promotional content. You may withdraw consent at any time through your account privacy settings.

You can manage browser-level cookie settings through your browser's built-in privacy tools. Note that disabling essential cookies will prevent you from logging into your kw77 account.

10. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by kw77:

• Right to be informed: The right to know what data kw77 collects, how it is used, and with whom it is shared — as described in this Privacy Policy.
• Right of access: The right to request a copy of the personal data kw77 holds about you, free of charge, subject to verification of your identity.
• Right to rectification: The right to correct inaccurate or incomplete personal data. You may update most contact information directly from your kw77 account settings; for identity data, contact support.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary, subject to kw77's legal retention obligations under PAGCOR and AMLC requirements, which may override this right.
• Right to object: The right to object to processing based on legitimate interests, including marketing communications. You may exercise this right at any time via account settings or by contacting support.
• Right to data portability: The right to receive a structured, machine-readable copy of personal data you have provided to kw77, where processing is based on consent or contractual necessity.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe kw77 has processed your data in breach of the DPA.

To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Privacy Request." kw77 will respond within 15 business days of receiving a verifiable request.

11. Minors

The kw77 platform is strictly for persons aged 21 and above. kw77 does not knowingly collect personal data from individuals below this age. If you are under 21, you must not use the kw77 platform or submit any personal data to kw77.

If kw77 discovers that personal data has been collected from a person below the minimum age, that data will be deleted immediately and the associated account will be permanently closed. If you believe a minor has registered on the kw77 platform, please contact [email protected] immediately.

12. Changes to This Privacy Policy

kw77 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, PAGCOR requirements, NPC guidance, or Philippine law. When material changes are made, kw77 will post a notice on the platform, update the "Last updated" date at the top of this page, and, where required, notify registered players by email.

Your continued use of the kw77 platform following the effective date of any updated Privacy Policy constitutes acknowledgment of the changes. If you do not accept the updated Privacy Policy, you must stop using the platform and may close your account in accordance with the Terms & Conditions.

13. Contact Our Data Privacy Officer

For any questions, concerns, or requests related to this Privacy Policy or your personal data held by kw77, please contact our designated Data Privacy Officer:

We aim to respond to all data privacy requests within 15 business days. Complex requests may take longer; we will notify you if an extension is necessary.