kj77 Privacy Policy

kj77 ("we", "us", "our", "the Platform") operates the online casino and sports betting service available at kj77.one, serving Filipino players across the Philippines — from Manila to Cebu, Davao to Quezon City, and everywhere in between. As an operator that handles real-money PHP transactions, personal identity documents, and payment method data including GCash and PayMaya account details, we understand that data protection is not a bureaucratic obligation but a fundamental commitment to our players.

This Privacy Policy is designed to be transparent and readable — not a wall of legalese that obscures what we actually do with your information. We have written it in plain English with clear section headings so you can find exactly what you are looking for without reading every word. That said, the full document is binding, and we recommend reading it in its entirety at least once before using kj77.

The personal data of kj77 players is processed in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, along with its Implementing Rules and Regulations, and any subsequent amendments or related issuances by the National Privacy Commission (NPC). kj77 is committed to upholding the rights of Filipino data subjects under this Act.

kj77 collects personal data from players at various stages of the account lifecycle. The categories of data we collect, and the typical context in which each is collected, are set out in the table below.

kj77 does not collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or sexual orientation) except where the collection of such data is strictly required for regulatory compliance or responsible gaming purposes and explicit consent has been obtained.

kj77 collects personal data through the following primary channels:

• Direct Submission: Data you provide voluntarily when registering an account, submitting KYC documents, making a deposit or withdrawal request, contacting support, or completing responsible gaming questionnaires.
• Automated Collection: Technical data collected automatically when you access kj77.one, including your IP address, device identifiers, browser information, and session activity logs. This collection occurs through cookies, server logs, and similar tracking technologies as described in Section 8.
• Payment Provider Data: Transaction reference data received from payment providers (GCash, PayMaya, BPI, BDO, Metrobank) upon processing of deposits and withdrawals. kj77 does not store full payment credentials — only the reference and partial identifiers necessary for reconciliation and compliance.
• Identity Verification Services: Where kj77 uses third-party identity verification services to assist with KYC compliance, data submitted for verification may be cross-referenced with government databases or verification platforms authorised under Philippine law.
• Fraud and Compliance Systems: Data may be generated or augmented through automated fraud detection, geolocation verification, and anti-money laundering screening systems operated by kj77 or its compliance partners.

kj77 uses the personal data we collect for the following specific purposes. We do not use your data for any purpose not listed here without obtaining fresh consent or updating this policy accordingly.

kj77 processes your personal data on one or more of the following legal bases, in accordance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing required to perform the contract between you and kj77 — including account management, game provision, payment processing, and KYC verification — is carried out on the basis that it is necessary to fulfil our obligations to you under the Terms & Conditions you agreed to at registration.
• Legal Obligation: Processing required for kj77 to comply with applicable Philippine laws and regulations, including PAGCOR requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and any directives issued by the National Privacy Commission.
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of our services, where such processing does not override your privacy rights and interests.
• Consent: Processing for marketing communications and certain non-essential cookie usage, where your explicit consent has been obtained. You may withdraw consent at any time.

kj77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data in the following limited and controlled circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by Philippine financial regulations.
• Identity Verification Providers: Third-party KYC and identity verification services engaged by kj77 to assist in confirming the identity and age of Players.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities, when kj77 is legally obligated to provide information.
• Law Enforcement: Philippine law enforcement agencies, where kj77 receives a valid legal order or warrant compelling disclosure, or where disclosure is necessary to prevent imminent harm.
• Fraud and AML Screening Partners: Specialist third-party services that assist kj77 in detecting fraud, money laundering, and other prohibited activities. These partners are contractually bound to use shared data only for the stated purpose.
• Technical Service Providers: Hosting, cloud infrastructure, and platform service providers who process data on behalf of kj77 under data processing agreements that require them to maintain confidentiality and security.
• Business Transfers: In the event of a merger, acquisition, or sale of the kj77 business or its assets, personal data may be transferred as part of that transaction. Affected players will be notified in advance where required by law.

kj77 retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Where anonymised data is retained for analytical purposes, it is no longer considered personal data under the Data Privacy Act of 2012.

kj77 uses cookies and similar tracking technologies on kj77.one to ensure the platform functions correctly, to maintain your authenticated session, and to collect analytical data that helps us improve the user experience for Filipino players. The following types of cookies may be set when you visit kj77.one:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens that keep you logged in to your kj77 account, security cookies that prevent cross-site request forgery (CSRF), and cookies that remember your language and currency preferences. These cookies cannot be disabled without preventing you from using the platform.
• Functional Cookies: Used to remember your preferences and settings across sessions, such as responsible gaming limit configurations, game category preferences, and display settings.
• Analytical Cookies: Used to understand how players use kj77.one — which pages are visited most frequently, where players drop off, and how navigation flows are used. This data is aggregated and does not identify individual players. Analytical cookies are only set with your consent.
• Security and Fraud Prevention Cookies: Used to detect and mitigate suspicious activity, including automated bot access, multiple simultaneous sessions from different locations, and unusual transaction patterns.

As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights with respect to your personal data held by kj77. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 14.

kj77 will respond to all data rights requests within 30 calendar days of receipt. We may request proof of identity before processing any data rights request to ensure we do not disclose or modify data belonging to another individual. Certain rights may be limited where compliance would conflict with kj77's legal obligations, including AML record-keeping requirements.

kj77 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, destruction, and loss. These measures include but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and kj77.one is encrypted using 256-bit SSL/TLS encryption — the same standard used by Philippine banks for their online platforms.
• Encrypted Data Storage: Sensitive personal data, including KYC documents and payment reference data, is stored in encrypted form at rest. Encryption keys are managed separately from the encrypted data.
• Access Controls: Access to personal data within kj77's systems is restricted on a strict need-to-know basis. Staff members are only granted access to the categories of data required to perform their specific role.
• Two-Factor Authentication: kj77 supports and recommends two-factor authentication (2FA) for all player accounts to prevent unauthorised account access even in cases where credentials are compromised.
• Penetration Testing and Security Audits: kj77's technical infrastructure is subject to regular security testing and third-party audits to identify and remediate vulnerabilities.
• Incident Response: kj77 maintains a documented data breach response procedure. In the event of a breach that affects your personal data, kj77 will notify the National Privacy Commission and, where required, affected players within the timeframes prescribed by the Data Privacy Act.

kj77 takes the protection of minors extremely seriously. The mandatory KYC process is specifically designed to confirm that every player who deposits or withdraws funds is at least 21 years of age. Any account found to be held by or operated on behalf of a person under 21 will be immediately and permanently closed. All associated balances will be forfeited, and the matter will be reported to relevant authorities where required.

If you are a parent or guardian and believe a person under 21 in your household has accessed or registered for kj77, please contact our support team immediately at [email protected]. We will investigate and take appropriate action within 48 hours of receiving your report.

The kj77 platform may contain links to third-party services — including payment providers such as GCash and PayMaya — which operate under their own independent privacy policies. kj77 is not responsible for the data collection, retention, security, or privacy practices of any third-party service, even where those services are accessed through a link or integration on kj77.one.

We recommend reviewing the privacy policy of any third-party service you access in connection with using kj77, particularly your payment providers, before providing personal information to them. Your interactions with third-party services are governed by their own terms and privacy policies, not by this kj77 Privacy Policy.

kj77 game content is provided by third-party game developers and studios. While these developers do not receive your personal player data from kj77 directly, they may collect aggregated, anonymised gameplay data for game performance and testing purposes. Any such data collected by game developers does not identify individual kj77 players.

kj77 reserves the right to update, amend, or replace this Privacy Policy at any time. When we make material changes to this policy — that is, changes that materially affect how we collect, use, or share your personal data — we will endeavour to notify registered players by email or via an in-platform notification before the changes take effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the policy was most recently revised. Continued use of the kj77 platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms. We recommend bookmarking this page and reviewing it periodically, particularly before making significant transactions on the platform.

If any amendment to this policy substantially diminishes your rights as a data subject, kj77 will provide a minimum of 30 days' advance notice before the amended policy takes effect, and will offer you the opportunity to close your account and withdraw your remaining PHP balance if you do not accept the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by kj77, you are welcome to contact us. We aim to respond to all privacy-related inquiries within 15 business days.

If you are not satisfied with kj77's response to your privacy concern or data rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the regulatory body responsible for enforcing the Data Privacy Act of 2012 and protecting the data privacy rights of Filipino citizens.