Privacy Policy

This Privacy Policy ("Policy") describes how km77 ("km77," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of users ("you," "Player," or "User") who access or use the km77 online gaming platform at km77.vip (the "Platform"), including all associated games, features, and services.

km77 is committed to protecting the privacy and personal data of all users, particularly Filipino players, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. We take our obligations as a data controller seriously and have implemented appropriate technical and organisational measures to safeguard your information.

This Policy should be read alongside our Terms & Conditions, which govern your use of the km77 Platform. Capitalised terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

For the purposes of the Philippine Data Privacy Act of 2012, km77 acts as the Personal Information Controller in respect of the personal data collected through the Platform. This means km77 determines the purposes and means of processing your personal data.

km77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and this Policy. You may contact the DPO through the contact details provided in Section 14 of this Policy.

km77 collects the following categories of personal data from users of the Platform:

3.1 Identity & Contact Data

• Full legal name, date of birth, and gender
• Email address and mobile phone number
• Residential address (city, province, country)
• Government-issued identification documents (e.g., Philippine passport, PhilSys National ID, SSS ID, UMID, driver's licence) — collected during KYC verification
• Selfie or live photo for identity verification purposes

3.2 Financial Data

• GCash or PayMaya / Maya account details (mobile number linked to e-wallet)
• Bank account details (bank name, account number) for bank transfer transactions
• Debit card details (card number, expiry date) where applicable
• Transaction history, including deposit amounts, withdrawal amounts, and dates

3.3 Gaming & Account Data

• Username and encrypted password
• Game history, wagering records, and session data
• Bonus and promotion usage history
• Responsible gaming settings and self-exclusion records
• Customer support communications and complaint records

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, features used, and time spent on the Platform
• Cookies and similar tracking technologies (see Section 8)

km77 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and use the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from security partners; payment confirmation data from e-wallet and banking partners (GCash, PayMaya, BPI, BDO, and other Philippine banks).

km77 does not purchase personal data from data brokers or third-party marketing lists.

km77 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your km77 account, including processing your registration and verifying your identity.
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the features and functionality of the Platform.
• Legal compliance: To comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and gaming regulations. This includes conducting KYC checks and filing mandatory regulatory reports.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Responsible gaming: To monitor gaming behaviour, enforce responsible gaming tools (such as deposit limits and self-exclusion), and identify players who may be at risk of problem gambling.
• Customer support: To respond to your enquiries, complaints, and support requests.
• Platform improvement: To analyse usage patterns and improve the features, performance, and user experience of the km77 Platform.
• Marketing communications: To send you promotional offers, bonuses, and updates about km77 — but only where you have provided your consent to receive such communications. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, km77 processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the processing of sensitive personal information.
• Contractual necessity: Where processing is necessary for the performance of the contract between you and km77 (i.e., the Terms & Conditions), including account management, game provision, and payment processing.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to km77, including KYC/AML obligations, tax reporting, and regulatory compliance.
• Legitimate interests: Where processing is necessary for the legitimate interests of km77 or a third party, such as fraud prevention, platform security, and service improvement — provided that such interests are not overridden by your rights and interests.

km77 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Service Providers

Trusted third-party service providers who assist km77 in operating the Platform, including KYC/identity verification providers, payment processors (GCash, PayMaya, Philippine banks), cloud hosting providers, customer support platforms, and fraud detection services. All service providers are contractually bound to process your data only on km77's instructions and in accordance with applicable data privacy laws.

7.2 Game Providers

Third-party game software providers whose games are available on the km77 Platform may receive limited technical data (such as player session tokens) necessary to deliver their games. These providers do not receive your full identity or financial data.

7.3 Regulatory & Law Enforcement Authorities

km77 may disclose personal data to the National Privacy Commission (NPC), PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other competent Philippine authorities where required by law, court order, or regulatory direction.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of km77's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

km77 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support security functions. The following types of cookies are used:

• Essential cookies: Strictly necessary for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform, helping km77 identify areas for improvement. These are only set with your consent.
• Preference cookies: Used to remember your settings and preferences (such as language and display options) to personalise your experience.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity checks.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the Platform. For more information on how to manage cookies in your browser, refer to your browser's help documentation.

km77 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial account details and government ID information.
• Role-based access controls ensuring that only authorised km77 personnel can access personal data, and only to the extent necessary for their role.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform.
• Multi-factor authentication options for player accounts.
• Incident response procedures for detecting, reporting, and responding to personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, km77 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the requirements of the Data Privacy Act.

While km77 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your km77 account credentials.

km77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a period of five (5) years following account closure, in accordance with AML record-keeping requirements.
• KYC / identity verification documents: Retained for a minimum of five (5) years from the date of the last transaction, as required by the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw your consent or for three (3) years from the date of consent, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by km77:

• Right to be informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data km77 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data km77 holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to km77's legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on km77's legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe km77 has processed your personal data in violation of the Data Privacy Act.

The km77 Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. km77 does not knowingly collect personal data from individuals under the age of 21.

If km77 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the km77 Platform, please contact our support team immediately.

km77 employs age verification measures during the registration process and reserves the right to request documentary proof of age at any time.

km77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features of the Platform. The date of the most recent revision is indicated at the top of this page.

When material changes are made to this Policy, km77 will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how km77 is protecting your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way km77 handles your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 on the km77 Platform — the fastest way to reach our support team.
• Email (DPO): privacy [at] km77.vip
• General Support: support [at] km77.vip

km77 aims to acknowledge all privacy-related enquiries within two (2) business days and to provide a substantive response within thirty (30) days of receipt.

If you are not satisfied with km77's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.

This Privacy Policy was last updated on January 1, 2026 and supersedes all previous versions.