This Privacy Policy ("Policy") describes how k677 ("k677," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of users ("you," "your," or "Player") who access or use the k677 online gaming platform at k677.app and all associated services, features, and content.
k677 is committed to protecting the privacy and personal data of every player on our platform. This Policy is written in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. By creating a k677 account or using any k677 service, you acknowledge that you have read and understood this Policy and consent to the practices described herein.
If you do not agree with any part of this Policy, you must discontinue use of the k677 platform immediately. For questions about this Policy or your personal data, contact our Data Protection Officer at [email protected].
Your Data, Your Rights: Under the Philippine Data Privacy Act of 2012, you have the right to be informed, to access your data, to correct inaccuracies, to object to processing, to erasure, and to data portability. Section 10 of this Policy explains how to exercise these rights.
1. Scope and Application
This Policy applies to all personal information collected by k677 through the following channels:
- Account registration and profile management on k677.app
- Identity verification (KYC) processes
- Deposits, withdrawals, and financial transactions
- Gameplay activity and session data
- Customer support interactions via live chat or email
- Voluntary participation in surveys, promotions, or feedback forms
- Automatic collection through cookies, log files, and analytics tools
This Policy does not apply to third-party websites, payment processors, or services that may be linked from the k677 platform. k677 is not responsible for the privacy practices of third parties, and we encourage you to review their respective privacy policies before providing any personal information.
2. Information We Collect
2.1 Information You Provide Directly
When you register for a k677 account, complete KYC verification, make transactions, or contact support, you provide us with personal information including:
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number | Registration & KYC |
| Contact Data | Email address, Philippine mobile number, residential address | Registration |
| Financial Data | Bank account details, e-wallet identifiers (GCash, PayMaya), transaction history | Deposits & Withdrawals |
| Verification Documents | Copies of government-issued IDs, proof of address, selfie verification images | KYC Process |
| Support Data | Chat transcripts, email correspondence, complaint records | Customer Support |
2.2 Information Collected Automatically
When you access the k677 platform, certain technical information is collected automatically through our systems and third-party analytics tools:
- Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
- Usage Data: Pages visited, features used, time spent on the platform, click patterns, and navigation paths
- Session Data: Login timestamps, session duration, game history, bet amounts, and wagering activity
- Location Data: Approximate geographic location derived from your IP address, used for fraud prevention and jurisdictional compliance
- Cookie Data: Preferences, authentication tokens, and session identifiers stored via cookies and similar technologies (see Section 8)
2.3 Information from Third Parties
k677 may receive personal information about you from third-party sources in limited circumstances, including identity verification service providers used during KYC processing, payment processors confirming transaction details, and fraud prevention services that flag suspicious activity patterns. All third-party data sharing is governed by data processing agreements that require third parties to handle your information in accordance with applicable privacy laws.
3. How We Use Your Information
k677 processes your personal information only for specific, legitimate purposes. The legal bases for processing under the Data Privacy Act of 2012 include your consent, the performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating a secure and compliant gaming platform.
| Purpose | Legal Basis |
|---|---|
| Account creation, authentication, and management | Contract performance |
| Identity verification and KYC compliance | Legal obligation |
| Processing deposits and withdrawals | Contract performance |
| Fraud detection and prevention | Legitimate interest / Legal obligation |
| Anti-money laundering (AML) monitoring | Legal obligation |
| Responsible gaming monitoring and intervention | Legal obligation / Legitimate interest |
| Customer support and dispute resolution | Contract performance |
| Platform improvement and analytics | Legitimate interest |
| Promotional communications (with consent) | Consent |
| Legal and regulatory compliance | Legal obligation |
k677 does not use your personal information for automated decision-making that produces legal or similarly significant effects without human review. If automated systems flag your account for review, a k677 compliance officer will assess the situation before any action is taken.
4. Disclosure of Your Information
4.1 We Do Not Sell Your Data
k677 does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Your data is not a product. This is a firm commitment, not a policy subject to change based on business conditions.
4.2 Permitted Disclosures
k677 may share your personal information with third parties only in the following limited circumstances:
- Service Providers: Third-party vendors who assist in operating the k677 platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting services, and customer support tools. These providers are contractually bound to process your data only as instructed by k677 and in accordance with applicable privacy laws.
- Regulatory Authorities: Government agencies, law enforcement, and regulatory bodies (including PAGCOR) when required by law, court order, or regulatory directive. k677 will notify you of such disclosures where legally permitted to do so.
- Fraud Prevention: Industry fraud prevention networks and financial intelligence units where disclosure is necessary to prevent financial crime or protect the integrity of the platform.
- Business Transfers: In the event of a merger, acquisition, or sale of k677 assets, your personal information may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
- With Your Consent: Any other disclosure will only occur with your explicit prior consent.
5. Data Retention
k677 retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | AML / Legal obligation |
| Transaction records | 7 years from transaction date | Tax / Financial regulation |
| KYC documents | 5 years after account closure | AML compliance |
| Support correspondence | 3 years from last interaction | Dispute resolution |
| Marketing preferences | Until consent is withdrawn | Consent |
| Session and gameplay logs | 2 years from session date | Legitimate interest |
After the applicable retention period expires, k677 will securely delete or anonymize your personal information so that it can no longer be associated with you. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.
6. Data Security
k677 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. Our security infrastructure includes:
- All data transmitted between your device and k677 servers is encrypted using TLS 1.3 protocol
- Passwords are hashed using bcrypt with per-user salts — k677 never stores plain-text passwords
- Sensitive data at rest is encrypted using AES-256 encryption
- Access to personal data is restricted to authorized k677 personnel on a strict need-to-know basis
- All staff with access to personal data undergo regular privacy and security training
- Regular penetration testing and security audits are conducted by independent third parties
- Two-factor authentication (2FA) is available for all player accounts and strongly recommended
- Automated monitoring systems detect and alert on suspicious access patterns in real time
Despite these measures, no system is completely immune to security threats. In the event of a data breach that is likely to result in a risk to your rights and freedoms, k677 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay.
7. International Data Transfers
k677 primarily stores and processes your personal information on servers located within the Philippines or in jurisdictions that provide an adequate level of data protection. Where data is transferred to third-party service providers located outside the Philippines, k677 ensures that appropriate safeguards are in place, including data processing agreements that incorporate standard contractual clauses approved by the National Privacy Commission.
By using the k677 platform, you acknowledge and consent to the transfer of your personal information to countries outside the Philippines where k677's service providers operate, subject to the safeguards described in this section.
8. Cookies and Tracking Technologies
8.1 What Are Cookies
Cookies are small text files stored on your device when you visit the k677 platform. They allow k677 to recognize your device, remember your preferences, maintain your session, and analyze how the platform is used. k677 uses the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled |
|---|---|---|
| Strictly Necessary | Authentication, session management, security tokens | No |
| Functional | Language preferences, display settings, saved filters | Yes |
| Analytics | Usage patterns, page views, feature engagement | Yes |
| Marketing | Track campaign effectiveness, personalize offers | Yes |
8.2 Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling strictly necessary cookies will prevent you from using certain features of the k677 platform, including logging in and making transactions. Instructions for managing cookies in popular browsers can be found in your browser's help documentation.
8.3 Third-Party Analytics
k677 uses third-party analytics services to understand how players interact with the platform. These services may set their own cookies and collect data about your usage. k677 does not control these third-party cookies, and you should review the privacy policies of these services for more information.
9. Marketing Communications
With your consent, k677 may send you promotional emails, SMS messages, or push notifications about new games, bonuses, tournaments, and other offers. You can opt out of marketing communications at any time by:
- Clicking the "Unsubscribe" link in any promotional email
- Replying "STOP" to any promotional SMS message
- Adjusting your notification preferences in your account settings
- Contacting customer support to request removal from marketing lists
Opting out of marketing communications will not affect transactional messages such as account notifications, withdrawal confirmations, security alerts, or customer support responses, which are necessary for the operation of your account.
10. Your Data Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:
-
Right to Be Informed: You have the right to know what personal information k677 collects, how it is used, and who it is shared with. This Policy fulfills that obligation.
-
Right to Access: You may request a copy of all personal information k677 holds about you. k677 will provide this information in a structured, commonly used, and machine-readable format within thirty (30) days of your request.
-
Right to Rectification: If any of your personal information is inaccurate or incomplete, you have the right to request correction. You can update most information directly through your account settings.
-
Right to Erasure: You may request deletion of your personal information, subject to k677's legal obligations to retain certain data for regulatory compliance (see Section 5).
-
Right to Object: You may object to processing of your personal information for direct marketing purposes or where processing is based on legitimate interests.
-
Right to Data Portability: You have the right to receive your personal information in a portable format and to transmit it to another service provider where technically feasible.
-
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
10.1 How to Exercise Your Rights
To exercise any of these rights, contact k677's Data Protection Officer at [email protected] with your full name, registered email address, and a description of your request. k677 may require additional verification to confirm your identity before processing your request. k677 will respond to all valid requests within thirty (30) days. If your request is complex or k677 receives multiple requests from you, the response time may be extended by an additional thirty (30) days, and k677 will notify you of the extension.
If you are not satisfied with k677's response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
11. Children's Privacy
k677 services are strictly intended for individuals aged twenty-one (21) years and above. k677 does not knowingly collect personal information from individuals under the age of twenty-one (21). If k677 becomes aware that personal information has been collected from a person under twenty-one (21), k677 will take immediate steps to delete that information and close the associated account. If you believe k677 has inadvertently collected information from a minor, please contact [email protected] immediately.
12. Changes to This Policy
k677 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Material changes to this Policy will be communicated to you via email or prominent notice on the k677 platform at least thirty (30) days before the changes take effect.
Your continued use of the k677 platform after the effective date of any changes constitutes acceptance of the revised Policy. If you do not agree with the updated Policy, you must cease using the k677 platform and may request account closure in accordance with Section 4 of the Terms and Conditions.
13. Contact Information
For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact:
k677 Data Protection Officer
Email: [email protected]
General Support: [email protected]
Response Time: Within 48 hours for privacy inquiries
For complaints or concerns about k677's data practices that cannot be resolved through direct contact, you may file a complaint with:
National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City, Metro Manila, Philippines
Website: privacy.gov.ph
Privacy at a Glance
The following cards summarize k677's core privacy commitments. These are not legal substitutes for the full Policy text above, but quick reference points for your convenience.
We Don't Sell Your Data
Your personal information is never sold, rented, or traded to third parties. This is a firm commitment, not a conditional policy.
Bank-Grade Encryption
All data in transit uses TLS 1.3. Sensitive data at rest is encrypted with AES-256. Passwords are hashed with bcrypt and never stored in plain text.
You Control Your Data
Access, correct, delete, or export your data anytime. Opt out of marketing with one click. Exercise your rights under the Data Privacy Act of 2012.
Transparent Retention
We keep data only as long as legally required or operationally necessary. Clear retention schedules published in Section 5 above.
Philippine Data Laws
Full compliance with RA 10173 (Data Privacy Act of 2012). Data stored in PH or jurisdictions with adequate protection. NPC oversight.
Responsive DPO
Dedicated Data Protection Officer responds to privacy inquiries within 48 hours. Full data rights requests processed within 30 days.
Questions About Your Privacy?
Our Data Protection Officer and support team are here to help. Whether you want to exercise your data rights, understand how we use your information, or just have a question — we're ready to assist.
Back to k677 Home