k677qq Privacy Policy

1 Who We Are — Data Controller

For the purposes of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), k677qq is the personal information controller responsible for the processing of personal data collected through the k677qq Platform (https://k677qq.app) and all associated services offered under the k677qq brand.

Any questions, requests, or concerns relating to the processing of your personal data should be directed to k677qq's Data Protection Officer (DPO) via the contact details in Section 15 of this Policy.

2 Personal Data We Collect

k677qq collects the following categories of personal data:

3 How We Collect Personal Data

k677qq collects personal data through the following methods:

• Directly from you: When you register a k677qq account, complete identity verification (KYC), make deposits or withdrawals, contact customer support, or respond to surveys or promotions.
• Automatically: Through cookies, web beacons, server logs, and similar technologies when you access or interact with the k677qq Platform. See Section 7 (Cookies) for details.
• From third parties: From identity verification service providers, payment processors (e.g., GCash, Maya), fraud prevention agencies, and where required, from regulatory authorities such as PAGCOR and the Anti-Money Laundering Council (AMLC).

4 Legal Basis for Processing

k677qq processes your personal data on the following legal bases, as applicable under the DPA and its IRR:

• Contractual necessity: Processing required to fulfil our contractual obligations to you under the k677qq Terms and Conditions — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the DPA itself.
• Legitimate interests: Processing necessary for k677qq's legitimate interests in fraud prevention, platform security, and improving the Platform — where such interests are not overridden by your rights and freedoms.
• Consent: Where you have provided express, freely given, informed consent — for example, for receiving marketing communications about k677qq promotions and offers.

5 How We Use Your Personal Data

k677qq uses your personal data for the following purposes:

• Creating, maintaining, and securing your k677qq account, including facilitating k677qq login and managing account settings.
• Processing deposits and withdrawals in Philippine Peso via GCash, Maya, BPI, BDO, Metrobank, and other accepted payment methods.
• Verifying your identity and age (21+) as required under PAGCOR regulations and Philippine AML law.
• Providing access to the k677qq game catalogue, including slots, live baccarat, Sic Bo, bingo, Dragon Hatch, Big Hammer, and all other Platform features.
• Preventing, detecting, and investigating fraud, money laundering, and other prohibited conduct.
• Complying with regulatory reporting obligations to PAGCOR, AMLC, and other Philippine regulatory authorities.
• Providing customer support via live chat and email.
• Sending service-related communications — transaction confirmations, account security alerts, policy updates.
• Sending marketing communications about k677qq promotions, bonus offers, and new game releases — where you have consented, or where permitted by applicable law.
• Analysing Platform usage to improve game performance, page load times, and user experience for Filipino players.
• Enforcing responsible gaming controls, including monitoring for problem gambling indicators and applying self-imposed limits.

6 Data Sharing & Disclosure

k677qq does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, and other payment service providers — solely to process your financial transactions.
• Identity verification providers: Third-party KYC and AML screening service providers engaged to verify your identity and perform sanctions screening in compliance with Philippine law.
• Game providers: Licensed game software providers (e.g., PG Soft, Pragmatic Play, Jili) — limited to the technical data required to deliver game services.
• Regulatory authorities: PAGCOR, AMLC, the National Privacy Commission (NPC), and Philippine law enforcement agencies — where required by law or in response to valid legal process.
• Service providers: Cloud hosting, analytics, customer support, and cybersecurity service providers engaged under contractual data processing agreements with appropriate DPA-compliant terms.
• Corporate transactions: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

7 Cookies & Tracking Technologies

The k677qq Platform uses cookies and similar tracking technologies to deliver, maintain, and improve Platform functionality. The categories of cookies used include:

• Strictly Necessary Cookies: Required for the Platform to function — including session management, k677qq login authentication, and fraud prevention tokens. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences (e.g., language, game lobby layout) to personalise your k677qq experience across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players interact with the k677qq Platform to improve page performance and game delivery. k677qq uses privacy-respecting analytics tools that do not share raw data with advertising networks.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the k677qq Platform, including the login function.

8 Data Retention

k677qq retains your personal data for as long as your account is active and for such additional periods as required by applicable Philippine law and regulatory obligations, including:

• Account and transaction records: minimum five (5) years from account closure, in line with PAGCOR licensing conditions and Philippine AML law.
• KYC verification documents: minimum five (5) years from the date of the last transaction, as required under the AMLA.
• Communications and support records: three (3) years from the date of the communication.
• Marketing consent records: until consent is withdrawn, plus an additional three (3) years to demonstrate compliance.

Where personal data is no longer required for any lawful purpose, k677qq will securely delete or anonymise it in accordance with the National Privacy Commission's guidelines.

9 Data Security

k677qq implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:

• SSL/TLS encryption on all data transmitted between your device and k677qq's servers, including the k677qq login page and all transaction pages.
• Encrypted storage of sensitive data, including financial information and KYC documents.
• Access controls and role-based authorisation ensuring that only authorised personnel can access personal data, on a need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability management.
• Two-factor authentication available to all k677qq account holders.

In the event of a personal data breach that poses a risk to the rights and freedoms of affected players, k677qq will notify the National Privacy Commission (NPC) and affected players in accordance with the DPA's breach notification requirements.

10 Your Data Rights Under the DPA

As a data subject under the Philippines Data Privacy Act of 2012, you have the following rights with respect to your personal data held by k677qq:

To exercise any of these rights, contact k677qq's Data Protection Officer using the details in Section 15. k677qq will respond within thirty (30) days of receipt of a verified request, in accordance with the DPA.

11 Children's Privacy — Strict 21+ Policy

The k677qq Platform is strictly intended for adults who are at least twenty-one (21) years of age. k677qq does not knowingly collect personal data from persons under the age of 21. If k677qq becomes aware that personal data has been collected from a person under 21, the account will be immediately suspended, all data will be deleted without undue delay, and any deposits will be returned.

If you believe that a person under the age of 21 has registered on the k677qq Platform, please contact support immediately via live chat or email.

12 Third-Party Links

The k677qq Platform does not contain links to third-party external websites. All navigation links on the Platform direct to k677qq's own internal pages. k677qq is not responsible for the privacy practices of any third-party payment providers (such as GCash or Maya) whose own privacy policies govern the personal data you submit directly to those providers during payment processing.

13 Cross-Border Data Transfers

Where k677qq transfers personal data outside the Philippines — for example, to cloud infrastructure providers or game software providers operating internationally — such transfers are conducted only where adequate data protection safeguards are in place, including contractual data processing agreements incorporating the National Privacy Commission's standard clauses or equivalent protections recognised under the DPA's IRR.

14 Changes to This Privacy Policy

k677qq may update this Privacy Policy from time to time to reflect changes in our data processing practices, Platform features, or legal obligations. When material changes are made, k677qq will post a notice on the Platform and update the "Last updated" date at the top of this Policy. Your continued use of the k677qq Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed of how k677qq protects your personal information.

15 Contact & DPO Information

For all privacy-related enquiries, data subject rights requests, or to report a suspected data breach, please contact k677qq's Data Protection Officer:

• Primary contact: Live chat support, available 24/7 on the k677qq Platform.
• Email: [email protected] — please include "Data Privacy Request" in the subject line.

k677qq aims to acknowledge all data privacy requests within five (5) business days and to resolve them fully within thirty (30) calendar days. Where a request is complex or involves multiple data categories, k677qq will notify you if an extension is required.

If you are unsatisfied with k677qq's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.