kw777 Privacy Policy

1 Introduction

kw777 ("the Platform", "we", "us", "our") operates the online gaming website at kw777.cam and all associated mobile applications and services (collectively, the "Platform"). As a PAGCOR-regulated online gaming operator serving Filipino players across the Philippines, kw777 processes personal data as part of its day-to-day operations.

This Privacy Policy describes how kw777 collects, uses, stores, shares, and protects personal data belonging to players, prospective players, and visitors to the kw777 Platform. It is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, relevant National Privacy Commission (NPC) issuances, and applicable PAGCOR data protection requirements.

This Privacy Policy should be read together with kw777's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference and published on the kw777 website.

2 Data Controller Information

kw777 acts as the Personal Information Controller (as defined under RA 10173) in respect of the personal data it collects and processes in connection with the kw777 Platform. kw777 determines the purposes and means of processing personal data collected from players and visitors.

kw777 has appointed a Data Protection Officer (DPO) responsible for overseeing the Platform's compliance with the Data Privacy Act, monitoring data processing activities, and serving as the primary point of contact for data subjects and the National Privacy Commission. The DPO may be reached via the contact information provided in Section 14 of this Privacy Policy.

kw777 is registered with the National Privacy Commission as required under the Data Privacy Act and its Implementing Rules and Regulations.

3 Personal Data We Collect

The categories of personal data collected by kw777 depend on your relationship with the Platform. The following table outlines the principal data categories collected:

4 How We Collect Your Data

kw777 collects personal data through the following channels:

• Directly from you: When you register a kw777 account, complete KYC verification, make deposits or withdrawals, use live chat or email support, participate in promotions, or update your account profile.
• Automatically through the Platform: Through cookies, web beacons, session tracking, and device fingerprinting technologies that operate when you access and use the kw777 website or mobile application. See Section 7 for full details on cookies.
• From payment service providers: GCash, Maya, BPI, BDO, Metrobank, and other payment processors may share transaction confirmation data with kw777 as part of deposit and withdrawal processing.
• From identity verification services: kw777 may use third-party KYC verification providers to cross-check ID documents and confirm player identity against Philippine government databases where permitted by applicable law.
• From PAGCOR and regulatory bodies: kw777 may receive information from PAGCOR or other Philippine regulatory authorities in connection with licensing compliance, responsible gaming self-exclusion registries, or AML investigations.

5 Purposes & Legal Basis for Processing

kw777 processes personal data only when there is a lawful basis for doing so under the Data Privacy Act. The following table outlines kw777's primary processing purposes and their corresponding legal bases:

6 Data Sharing & Third-Party Disclosure

6.1 Service Providers

kw777 engages carefully selected third-party service providers (Personal Information Processors under RA 10173) to assist in operating the Platform. These include payment processors (GCash/Maya/banks), game content providers, KYC verification services, cloud infrastructure providers, and customer support software vendors. All service providers are contractually required to process kw777 player data only according to kw777's instructions and to maintain security standards consistent with the Data Privacy Act.

6.2 Regulatory Authorities

kw777 is obligated to disclose player data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities when required by law, court order, or valid regulatory directive. kw777 will disclose the minimum data necessary to satisfy the legal requirement and will notify affected players where permitted by law.

6.3 No Sale of Personal Data

kw777 does not sell, rent, exchange, or otherwise commercially transfer your personal data to any third party for marketing or commercial purposes. This prohibition is absolute and applies regardless of whether the data is in identifiable or anonymized form.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of kw777's assets, personal data held by kw777 may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity assuming the obligations of this Privacy Policy and complying with all applicable Philippine data protection laws. Affected players will be notified in advance of any such transfer.

7 Cookies & Tracking Technologies

The kw777 Platform uses cookies and similar tracking technologies to enhance user experience, maintain session security, and gather analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your language preferences, responsible gaming settings, and other personalization choices across sessions on kw777.
• Analytics Cookies: Collect aggregated, anonymized data about how players navigate and use the kw777 Platform, helping us identify usability improvements and technical issues.
• Security Cookies: Detect and prevent fraudulent logins, session hijacking, and other unauthorized access attempts on kw777 accounts.

You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect your kw777 experience, including the ability to maintain a logged-in session. kw777 does not use third-party advertising cookies or cross-site tracking technologies for advertising retargeting.

8 Data Retention

kw777 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

• Financial and transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• KYC identity documents: Retained for five (5) years from the date of account closure or the last transaction, whichever is later.
• Gaming history and account records: Retained for three (3) years following account closure for operational, dispute resolution, and regulatory purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing data (with consent): Retained until you withdraw consent or request deletion, subject to any overriding legal retention obligations.

Upon expiry of applicable retention periods, personal data is permanently and securely deleted or anonymized in accordance with NPC guidelines. Anonymized data that can no longer be associated with an identifiable individual may be retained for statistical and analytical purposes without limitation.

9 Data Security

kw777 implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption on all Platform pages, login sessions, and API communications;
• At-rest encryption for stored personal data, including KYC documents and payment information;
• Access controls: Role-based access limiting kw777 employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication for internal administrative access to player data systems;
• Intrusion detection systems and 24/7 security monitoring for the kw777 infrastructure;
• Regular penetration testing and vulnerability assessments conducted by independent security firms;
• Data breach response plan aligned with NPC mandatory breach notification requirements (72-hour notification window for high-risk breaches).

10 Your Data Subject Rights

Under Republic Act No. 10173, the Data Privacy Act of 2012, you have the following rights as a data subject in relation to personal data held by kw777:

To exercise any of these rights, contact kw777's Data Protection Officer at [email protected] with your full name, registered mobile number, and a description of the right you wish to exercise. kw777 will respond within fifteen (15) business days of receiving a valid request. Where a request is complex or involves a large volume of data, kw777 may extend this period by a further 15 days and will notify you accordingly.

If you are dissatisfied with kw777's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Children's Privacy

The kw777 Platform is strictly for individuals aged twenty-one (21) years and above as required by PAGCOR regulations. kw777 does not knowingly collect personal data from any individual under the age of 21. Age is verified through mandatory KYC using a valid Philippine government-issued ID before any real-money gaming activity is permitted.

If kw777 discovers that personal data has been collected from an individual who does not meet the minimum age requirement, it will immediately suspend the relevant account, delete the associated personal data (except where retention is required by law), and report the matter to PAGCOR as required under its compliance obligations.

Parents and guardians who believe that a minor may have accessed or registered on the kw777 Platform are encouraged to contact kw777 support immediately at [email protected].

12 Cross-Border Data Transfers

kw777's primary data processing and storage infrastructure is located within or governed by contracts consistent with Philippine data protection standards. Where kw777 engages service providers whose systems process data outside the Philippines (for example, certain cloud infrastructure or game provider APIs), such transfers are governed by data processing agreements that require the recipient to maintain data protection standards at least equivalent to those mandated by the Data Privacy Act.

kw777 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual safeguards, consistent with NPC cross-border transfer guidelines.

13 Amendments to this Privacy Policy

kw777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidelines, or kw777's data processing practices. Material amendments will be communicated to registered players via email to the registered address or through an in-Platform notification at least seven (7) days before the amendment takes effect.

The effective date and version number of the current Privacy Policy are displayed at the top of this page and in the Table of Contents sidebar. The latest version of the kw777 Privacy Policy is always available at kw777.cam/privacy-policy. Continued use of the kw777 Platform following notification of an amendment constitutes your acceptance of the revised Privacy Policy.

14 Contact & Data Protection Officer

For all data privacy inquiries, data subject rights requests, privacy complaints, or questions about this Privacy Policy, please contact kw777's Data Protection Officer through the following channels:

• Email: [email protected] — mark the subject line as "Data Privacy Request" for fastest routing to the DPO.
• Live Chat: Available 24/7 from your kw777 account dashboard for general privacy questions and urgent account-related data concerns.

All formal data privacy requests must be submitted in writing via email and must include: your full legal name, your registered kw777 mobile number or email address, a clear description of your request or complaint, and any relevant account references. kw777 will acknowledge receipt of all formal data privacy requests within 24 hours and provide a substantive response within 15 business days.

If your privacy concern is not resolved to your satisfaction through kw777's internal process, you have the right to escalate to the National Privacy Commission of the Philippines. The NPC's contact details and complaint procedures are available on the NPC's official website.