kz77 Privacy Policy

kz77 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all players who register and use the kz77 online gaming platform. This Privacy Policy ("Policy") is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations as issued by the National Privacy Commission (NPC).

This Policy describes the types of personal information we collect from you as a kz77 player or website visitor, the purposes for which that information is used, how it is stored and protected, with whom it may be shared, how long it is retained, and the rights you hold as a data subject under Philippine law.

We encourage all kz77 players — whether you're based in Manila, Cebu, Davao, or anywhere else across the Philippines — to read this Policy in full so you understand exactly how your personal information is handled on the platform. If you have questions at any point, our support team is available at [email protected].

For the purposes of the Data Privacy Act of 2012, kz77 is the Personal Information Controller with respect to all personal data collected through the kz77 platform. This means kz77 is the entity that determines the purposes and means of processing your personal information.

kz77 operates under the PAGCOR regulatory framework applicable to online gaming operators in the Philippines. All data processing activities are conducted in accordance with PAGCOR's requirements for licensed operators, including KYC (Know Your Customer) and AML (Anti-Money Laundering) compliance obligations.

For data privacy inquiries, you may contact kz77 at: [email protected]

kz77 collects personal data necessary for the operation of the platform, regulatory compliance, and the delivery of gaming and payment services. The categories of personal data we collect include the following:

kz77 collects personal data through the following means:

• Direct submission by you — when you register an account, complete KYC verification, initiate a deposit or withdrawal, update your profile, or contact kz77 customer support.
• Automated technical collection — when you access the kz77 platform, our systems automatically log certain technical data including your IP address, device identifiers, and session activity via server logs and cookies.
• Payment processor data — when you transact via GCash, Maya, BPI, BDO, Metrobank, or other supported payment channels, we receive confirmation data from the relevant payment processor necessary to credit your account.
• Identity verification services — when you submit KYC documents, these may be processed through a third-party identity verification service acting as our data processor.
• Gameplay systems — game servers operated by kz77's game provider partners log your game activity as part of their fair play and RNG certification requirements.

kz77 processes your personal data for the following specific purposes:

• Account registration and management — creating and maintaining your kz77 player account, including username and password management.
• Age and identity verification — confirming that you meet the 21+ age requirement under PAGCOR regulations and verifying your identity for KYC compliance.
• Payment processing — facilitating deposits and withdrawals through GCash, Maya, bank transfers, and other supported payment methods in Philippine Pesos.
• Regulatory compliance — fulfilling kz77's legal obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and RA 10173.
• Platform security and fraud prevention — detecting, investigating, and preventing fraudulent activity, multi-accounting, unauthorized access, and abuse of promotions.
• Customer support — responding to inquiries, resolving disputes, and providing technical assistance to kz77 players.
• Responsible gaming — monitoring gaming patterns to identify potential problem gambling indicators and enforce self-exclusion or account restrictions where applicable.
• Service improvement — analyzing anonymized usage data to improve platform performance, game selection, and the overall kz77 player experience.
• Communications — sending account-related notifications, security alerts, and (where consent is given) promotional updates about kz77 offers.

Under the Data Privacy Act of 2012, all processing of personal data must be based on a lawful criterion. kz77 relies on the following legal bases for the processing activities described in this Policy:

• Contractual necessity — processing required to fulfill kz77's contractual obligations to you as a registered player, including account management and payment processing.
• Legal obligation — processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the AMLA, and tax obligations.
• Legitimate interests — processing undertaken in kz77's legitimate interests, including fraud prevention, platform security, and service improvement, where these interests do not override your data protection rights.
• Consent — for processing activities not covered by the above bases, such as sending promotional communications, kz77 will obtain your explicit consent and you may withdraw consent at any time without affecting prior processing.

kz77 does not sell your personal data to third parties. We may share your personal information only in the following limited circumstances:

• Payment processors — GCash (GXI/Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers receive only the data necessary to process your transaction.
• Identity verification providers — KYC and document verification service providers acting as our data processors, under contract and under kz77's instructions.
• Game providers — Jili Gaming, PG Soft, Pragmatic Play, Evolution Gaming, and other certified game studios receive pseudonymized player session data necessary to deliver their game content and fulfill RNG certification audit requirements.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent government authorities in the Philippines, where disclosure is required by law or regulatory direction.
• Legal and compliance — law enforcement agencies, courts, and other authorities where kz77 is legally required to disclose information pursuant to valid legal process.
• Technology service providers — cloud infrastructure, cybersecurity, analytics, and customer support platform providers acting as data processors under binding data processing agreements.

kz77 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law and regulation. The following general retention principles apply:

• Active account data — retained for the full duration of your active kz77 account relationship.
• Closed account data — following account closure, personal data is retained for a minimum period as required by PAGCOR regulations and the AMLA (currently a minimum of five years for transaction records).
• KYC documents — retained for the period required by applicable AML legislation, typically five years from the date of the last transaction.
• Financial transaction records — retained for a minimum of five years in compliance with AMLA requirements.
• Communications and support records — retained for up to three years following resolution of the relevant inquiry or dispute.
• Technical logs — IP access logs and session data are retained for up to 12 months for security and fraud detection purposes, then deleted or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of identifiable information.

kz77 implements technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS/SSL encryption on all data transmitted between your device and the kz77 platform.
• Hashed and salted password storage — your account password is never stored in plaintext.
• Access controls — internal access to personal data is restricted on a need-to-know basis, with role-based permissions and audit logging.
• Intrusion detection and monitoring — continuous network and application monitoring for unauthorized access attempts and anomalous activity.
• Data minimization in production systems — systems that do not require identifiable data for their function operate on pseudonymized or anonymized datasets.
• Third-party security audits — kz77's platform undergoes periodic security assessments by qualified third-party cybersecurity professionals.

While kz77 implements robust security measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, kz77 will notify the National Privacy Commission and affected data subjects in accordance with NPC Circular 16-03 on Personal Data Breach Management.

kz77 uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential cookies — necessary for the platform to function, including session management, login state persistence, and security token verification. These cannot be disabled without impairing core functionality.
• Performance cookies — used to collect anonymized data about how players use the platform, which pages load slowly, and where errors occur, enabling us to improve the kz77 experience.
• Functional cookies — remember your preferences such as language settings, display options, and previously visited game categories.
• Analytics cookies — anonymized session data used by kz77's internal analytics to understand overall traffic patterns, device types, and feature usage.

kz77 does not use third-party advertising cookies or share cookie data with ad networks. You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using kz77's core gaming and payment features, but may affect certain preferences and performance optimizations.

kz77 does not knowingly collect personal data from individuals under 21 years of age. The kz77 platform is strictly for adults aged 21 and above as required by PAGCOR regulations. Our registration process includes an age confirmation step, and we implement identity verification procedures to detect underage users.

If kz77 discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately suspend the relevant account, delete all associated personal data as far as practicable, and report the matter to PAGCOR as required by our licensing conditions.

If you have reason to believe that a minor has registered on the kz77 platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action without delay.

Under the Data Privacy Act of 2012 and NPC regulations, you have the following rights with respect to your personal data held by kz77:

• Right to be Informed — the right to know what personal data kz77 collects, why, and how it is processed. This Policy fulfills our obligation under this right.
• Right to Access — the right to request a copy of the personal data kz77 holds about you, including information about its source, recipients, and processing purposes.
• Right to Correction — the right to request correction of inaccurate, incomplete, or outdated personal data in your kz77 account. Many details can be updated directly in your account settings.
• Right to Erasure (Right to be Forgotten) — the right to request deletion of your personal data where it is no longer necessary for the original purpose, subject to kz77's regulatory retention obligations under PAGCOR and AMLA requirements.
• Right to Object — the right to object to processing based on legitimate interests, including the right to opt out of marketing communications at any time.
• Right to Data Portability — the right to receive a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
• Right to Damages — the right to be indemnified for damages sustained as a result of inaccurate, incomplete, false, unlawfully obtained, or unauthorized use of your personal data.

Some of kz77's technology infrastructure, game provider servers, and operational service providers may be located outside of the Philippines. Where personal data is transferred to processors or subprocessors in other countries, kz77 ensures that appropriate safeguards are in place in accordance with NPC regulations on cross-border data transfers.

Such safeguards include contractual data transfer agreements that require the recipient to apply data protection standards equivalent to those required under the Data Privacy Act of 2012. kz77 does not transfer personal data to jurisdictions that do not offer adequate data protection standards without ensuring that appropriate contractual protections are in place.

kz77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify you via the email address registered to your kz77 account and/or by displaying a prominent notice on the kz77 platform prior to the change taking effect.

The effective date and last updated date at the top of this Policy will be revised to reflect the most current version. We recommend checking this page periodically. Your continued use of the kz77 platform after a revised Policy takes effect constitutes your acceptance of the updated terms, subject to any rights you hold under the Data Privacy Act.

For any questions, concerns, or requests relating to this Privacy Policy or kz77's handling of your personal data, please contact us at:

kz77 Data Privacy
Email: [email protected]
Platform: kz77.vip

If you believe your data privacy rights have been violated and kz77 has not adequately addressed your concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for enforcing the Data Privacy Act of 2012. Information about filing a complaint with the NPC is publicly available through official government channels.