kf777 Privacy Policy

1 Who We Are

For the purposes of this Privacy Policy, the "Data Controller" is kf777, the operator of the online gaming platform accessible at kf777.vip. kf777 determines the purposes and means by which personal data collected through the platform is processed.

kf777 is an online casino and sports betting platform serving Filipino players across the Philippines, from Metro Manila and Makati to Cebu, Davao, Quezon City, and all regions beyond. Our platform offers live casino games, slot machines, bingo, sports betting, and related gaming services.

kf777 processes personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines. We are also subject to Anti-Money Laundering Act (AMLA) obligations that require certain data collection and retention activities, which are described in this Policy.

2 Scope of This Privacy Policy

This Privacy Policy applies to all personal data processed by kf777 in connection with:

• Your use of the kf777 website at kf777.vip;
• The registration and management of a kf777 player account;
• All financial transactions conducted through the kf777 platform, including deposits via GCash, PayMaya, BPI, BDO, and Metrobank;
• Your participation in any game, promotion, or loyalty program offered by kf777;
• Any communication you have with kf777's customer support team;
• kf777's compliance with legal and regulatory obligations under Philippine law.

This Policy does not apply to the data practices of third-party game providers, payment processors, or any other external services whose privacy policies govern their own data handling. kf777 encourages you to review the privacy policies of any third-party services you interact with through or in connection with the kf777 platform.

3 Personal Data We Collect

kf777 collects the following categories of personal data. The specific data collected in any given instance depends on the nature of your interaction with the platform.

4 How We Collect Your Data

kf777 collects personal data through the following means:

4.1 Direct Collection

Data you provide directly to kf777 when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings.

4.2 Automatic Collection

Technical and usage data collected automatically as you interact with the kf777 platform — including your IP address, device information, browser type, pages visited, game sessions accessed, and time stamps. This data is collected through server logs, cookies, and similar technologies described in Section 7.

4.3 Third-Party Sources

kf777 may receive data about you from third parties in limited circumstances, including:

• Payment providers (GCash, PayMaya, BPI, BDO, Metrobank) — transaction confirmation and account ownership verification;
• Identity verification services — to support KYC processes and cross-check government ID documents submitted during account verification;
• Fraud prevention and AML screening services — to screen against politically exposed persons (PEP) lists and sanctions databases as required by AMLA compliance obligations.

5 Purposes of Processing

kf777 processes your personal data for the following purposes:

• Account creation and management: To register your kf777 account, verify your identity, maintain your account profile, and enable platform access;
• Platform services: To provide gaming services, process bets, record game outcomes, administer bonuses, and deliver the full kf777 product experience;
• Payment processing: To process deposits and withdrawals, verify payment account ownership, and maintain transaction records;
• Identity verification (KYC): To confirm your age (21+), identity, and source of funds as required by Philippine gaming regulations and AMLA obligations;
• Legal and regulatory compliance: To meet obligations under R.A. 10173, AMLA, PAGCOR regulations, and any other applicable Philippine law — including mandatory reporting to the Anti-Money Laundering Council (AMLC);
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account abuse, and unauthorized access;
• Customer support: To respond to queries, resolve disputes, and provide account assistance;
• Responsible gaming: To administer self-exclusion, deposit limits, session tracking, and other player protection tools;
• Marketing and promotions: To send you promotional communications where you have provided consent, subject to your right to withdraw consent at any time;
• Platform improvement: To analyze usage patterns, troubleshoot technical issues, and improve the performance, security, and content of the kf777 platform.

6 Legal Bases for Processing

Under the Data Privacy Act of 2012, kf777 relies on the following legal bases for processing personal data:

Where kf777 processes data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. You may withdraw marketing consent by contacting [email protected] or through your Account Settings.

7 Cookies & Tracking Technologies

kf777 uses cookies and similar tracking technologies to operate the platform, enhance user experience, and gather analytical data about platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function — session management, authentication, security tokens. These cannot be disabled without breaking core platform functionality;
• Functional Cookies: Remember your preferences such as language, game display settings, and responsible gaming configurations;
• Analytics Cookies: Collect aggregated data about page visits, game session durations, and navigation paths to help kf777 understand how the platform is used and identify areas for improvement. These are activated only with your consent;
• Security Cookies: Support fraud detection, device fingerprinting for suspicious activity monitoring, and bot prevention systems.

You may control non-essential cookies through your browser settings or the kf777 cookie preference centre, accessible from the platform footer. Note that disabling certain cookies may affect the functionality of the kf777 platform.

8 Disclosure of Your Personal Data

kf777 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

8.1 Payment Processors

GCash, PayMaya, and Philippine banking institutions (BPI, BDO, Metrobank, UnionBank) receive payment-relevant data necessary to process deposits and withdrawals. These entities are independent data controllers operating under their own privacy policies and BSP regulations.

8.2 Identity Verification and KYC Providers

Third-party identity verification service providers may process your ID document images and personal details to facilitate automated KYC checks. Such providers are bound by confidentiality obligations and data processing agreements with kf777.

8.3 Game Content Providers

Licensed game studios (such as JILI Gaming, Pragmatic Play, and Spadegaming) may receive a player session identifier and game-specific data to facilitate gameplay and record game outcomes. Full identity data is not shared with game providers.

8.4 Regulatory and Law Enforcement Authorities

kf777 is legally required to share personal and transaction data with the Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other Philippine government authorities when required by law, court order, or lawful regulatory request. kf777 will disclose the minimum data necessary to satisfy any such obligation.

8.5 Fraud Prevention and Security Services

kf777 may share data with fraud prevention and cybersecurity service providers to detect and prevent unauthorized account access, money laundering, and platform abuse. These providers operate under binding data processing agreements.

9 International Data Transfers

Some of kf777's third-party service providers — including certain game studios, cloud infrastructure providers, and analytics platforms — may be located outside the Philippines. Where personal data is transferred to recipients in countries that do not offer an equivalent level of data protection as the Philippines, kf777 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission;
• Transfer only to recipients in jurisdictions with equivalent data protection laws or adequate NPC-recognized protections;
• Encryption of transferred data in transit and at rest.

You may request information about the specific safeguards applied to any international transfers of your data by contacting kf777 at [email protected].

10 Data Retention

kf777 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable law. The following retention periods apply:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with kf777's data destruction procedures.

11 Security Measures

kf777 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data in transit between your device and kf777 servers;
• Access Controls: Role-based access restrictions ensuring only authorized kf777 personnel can access personal data, and only to the extent necessary for their role;
• Two-Factor Authentication: 2FA is available for all player accounts and is mandatory for kf777 staff accessing administrative systems;
• Security Audits: Regular penetration testing and security assessments conducted by independent third-party security firms;
• Incident Response: A documented data breach response procedure in place — kf777 will notify the National Privacy Commission and affected individuals within 72 hours of becoming aware of a qualifying personal data breach, in accordance with NPC requirements.

12 Your Data Subject Rights

As a data subject under R.A. 10173, you have the following rights with respect to your personal data processed by kf777:

• Right to be Informed: To know that your personal data is being collected, used, and processed, and to receive this Privacy Policy;
• Right of Access: To obtain a copy of the personal data kf777 holds about you and information about how it is processed;
• Right to Rectification: To request correction of inaccurate or incomplete personal data without undue delay;
• Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected — subject to legal retention obligations under AMLA and gaming regulations which may override this right;
• Right to Object: To object to the processing of your data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interest;
• Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller where technically feasible;
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe kf777 has violated your data privacy rights.

To exercise any of the above rights, submit a written request to [email protected] with the subject line "Data Privacy Rights Request." kf777 will respond to all verified rights requests within 30 days. In complex cases, this period may be extended by up to 60 days with notice to you.

kf777 may require identity verification before processing any rights request to confirm that the request is being made by the data subject or their authorized representative.

13 Children and Minors

kf777 is strictly prohibited to individuals under 21 years of age. kf777 does not knowingly collect personal data from any person under the age of 21. If kf777 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended and all associated data and balances will be handled in accordance with applicable law.

14 Third-Party Links and Services

The kf777 platform may display content from or links to third-party game providers, payment gateways, and service partners. These third parties operate independently of kf777 and have their own privacy policies that govern the collection and processing of your data when you interact with their services.

kf777 does not accept responsibility for the privacy practices or content of any third-party service. We encourage you to review the privacy policies of GCash, PayMaya, and any other payment or service provider you use in connection with your kf777 account. kf777 selects partners carefully and requires contractual data protection commitments from all third parties who process player data on our behalf.

15 Updates to This Privacy Policy

kf777 may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, kf777 will notify registered players via email to the address on file or through a prominent in-platform notification, at least 7 days before the changes take effect.

The "Last Reviewed" date at the top of this Policy indicates when it was most recently updated. We encourage you to review this Policy periodically. Your continued use of the kf777 platform following notification of changes constitutes your acknowledgment of the updated Policy.

16 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or kf777's data processing practices, please contact kf777 using the details below. kf777 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Policy.