kj77 Privacy Policy

1.1 kj77 ("we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you" or "your") who access or use the kj77 online gaming platform at kj77.org. This Privacy Policy has been prepared in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.

1.2 This Policy describes the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, the security measures we employ to protect it, and the rights available to you as a data subject under Philippine law.

1.3 By registering for a kj77 account, accessing kj77.org, or using any feature of the kj77 platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions.

1.4 kj77 acts as the Personal Information Controller in respect of the personal data it collects directly from users. Where kj77 engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors and are bound by data processing agreements consistent with RA 10173.

2.1 kj77 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.2 Sensitive Personal Information. In the course of KYC verification, kj77 may collect government-issued identification documents that contain sensitive personal information as defined under RA 10173, including but not limited to Philippine passport details, SSS/GSIS/UMID numbers, and driver's license information. Such data is processed solely for identity verification and regulatory compliance purposes and is subject to heightened security controls.

2.3 kj77 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

3.1 kj77 collects personal data through the following means:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated Technologies: Data collected automatically when you access kj77.org, including cookies, web beacons, pixel tags, server logs, and similar tracking technologies;
• Third-Party Sources: Data received from payment processors (e.g., GCash, Maya, partner banks), identity verification providers, fraud prevention services, and regulatory databases, where permitted by law;
• Platform Interactions: Data generated through your use of kj77 games, features, and services, including game session data, wagering activity, and responsible gaming tool usage.

3.2 Where kj77 collects personal data from third-party sources, we ensure that such collection is lawful and that the third party has the appropriate authority to share the data with us.

4.1 kj77 uses the personal data it collects for the following purposes:

• Account Management: To create, maintain, and administer your kj77 account, including verifying your identity and age (21+) during registration and KYC;
• Service Delivery: To provide access to kj77 games, process deposits and withdrawals, and deliver the features and functionality of the platform;
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, anti-money laundering (AML) obligations under RA 9160 as amended, and the Data Privacy Act of 2012;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion arrangements, and administer responsible gaming tools such as deposit limits and session timers;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Marketing Communications: To send you promotional offers, bonuses, and platform updates, where you have provided consent to receive such communications;
• Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, security, and user experience of the kj77 platform.

4.2 kj77 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5.1 kj77 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

6.1 kj77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, and other authorized payment service providers, for the purpose of processing deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and AML screening services engaged to verify user identities and screen against regulatory watchlists;
• Game Software Providers: Licensed game developers and content providers whose games are hosted on the kj77 platform, to the extent necessary for game delivery and fairness certification;
• IT & Infrastructure Providers: Cloud hosting, data storage, cybersecurity, and technical support providers engaged to operate and maintain the kj77 platform;
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or regulatory mandate;
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by kj77, subject to professional confidentiality obligations.

6.2 All third-party service providers engaged by kj77 are required to process personal data only on kj77's documented instructions and in accordance with data processing agreements that impose obligations consistent with RA 10173.

6.3 In the event of a merger, acquisition, or sale of all or substantially all of kj77's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7.1 kj77 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the kj77 platform, including session management, authentication, and security. These cannot be disabled without affecting platform functionality;
• Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with kj77.org, helping us identify areas for improvement;
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations;
• Marketing Cookies: Used to deliver relevant promotional content based on your interests, subject to your prior consent.

7.2 You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the kj77 platform. For marketing cookies, you may withdraw consent at any time through your account settings.

7.3 kj77 does not use tracking technologies to collect personal data from users on third-party websites outside of kj77.org.

8.1 kj77 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

8.2 Upon expiry of the applicable retention period, kj77 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9.1 kj77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and kj77 servers;
• Encryption of sensitive data at rest, including financial data and KYC documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all administrative access to kj77 systems;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• 24/7 security monitoring and intrusion detection systems;
• Regular staff training on data privacy and information security best practices.

9.2 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kj77 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by NPC Circular No. 16-03. Affected users will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms.

9.3 While kj77 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are encouraged to use a strong, unique password for your kj77 account and to enable two-factor authentication where available.

10.1 Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by kj77:

• Right to Be Informed: The right to be informed of the existence of processing, the nature of the data collected, and the purposes for which it is being processed — as set out in this Privacy Policy;
• Right of Access: The right to obtain a copy of the personal data kj77 holds about you, along with information about how it is being processed;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or updated;
• Right to Erasure: The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to kj77's legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that kj77 has processed your personal data in violation of the Data Privacy Act of 2012.

10.2 To exercise any of the rights listed above, please contact kj77's Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy. kj77 will respond to all data subject requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

10.3 kj77 may request proof of identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties.

11.1 The kj77 platform is strictly intended for users who are at least twenty-one (21) years of age, in accordance with Philippine law governing online gaming. kj77 does not knowingly collect, process, or store personal data from individuals under the age of 21.

11.2 If kj77 becomes aware that personal data has been collected from a person under the age of 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data, close the associated account, and reverse any transactions made on that account.

11.3 If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to kj77, please contact our Data Protection Officer immediately using the contact details in Section 14.

12.1 kj77 primarily stores and processes personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where kj77 engages international cloud infrastructure providers or game software developers.

12.2 Where personal data is transferred outside the Philippines, kj77 ensures that such transfers are subject to appropriate safeguards consistent with the requirements of the Data Privacy Act of 2012, including the use of standard contractual clauses, binding corporate rules, or transfers to jurisdictions recognized as providing an adequate level of data protection.

12.3 kj77 will not transfer your personal data to a foreign country or international organization unless it has taken all reasonable steps to ensure that your data will be afforded the same level of protection as it receives under Philippine law.

13.1 kj77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

13.2 Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your personal data — kj77 will notify registered users via email or a prominent notice on the platform at least fourteen (14) days before the changes take effect.

13.3 Your continued use of the kj77 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must cease using the platform and may request the closure of your account.

14.1 kj77 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact the kj77 DPO through the following channels:

14.2 If you are not satisfied with kj77's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.