kn77a Privacy Policy

1. Introduction

kn77a Gaming Corporation ("kn77a", "Company", "we", "us", "our") is committed to protecting the privacy and security of your personal information. As a licensed online gaming operator regulated by the Philippine Amusement and Gaming Corporation (PAGCOR), we process personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and all applicable Philippine privacy laws.

This Privacy Policy ("Policy") describes how we collect, use, store, protect, and share personal information obtained from users ("you", "your", "User", "Player") of the kn77a.cam website and associated services (collectively, the "Service" or "Platform"). By accessing or using kn77a services, you acknowledge that you have read, understood, and agree to the practices described in this Policy.

kn77a acts as a Data Controller under the Data Privacy Act. Our Data Protection Officer (DPO) oversees compliance with this Policy and Philippine data protection laws. For privacy-related inquiries or to exercise your data rights, please contact our DPO using the contact information provided in Section 10.

2. Information We Collect

kn77a collects various categories of personal information necessary to provide gaming services, ensure regulatory compliance, prevent fraud, and improve user experience. The personal data we collect includes:

2.1 Information You Provide Directly

Account Registration Information

When you create a kn77a account, we collect:

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (e.g., Philippine passport number, driver's license number, UMID, SSS/GSIS number)
• Contact Information: Email address, mobile phone number, residential address, city, province, postal code
• Account Credentials: Username, password (stored in encrypted form), security questions and answers

Verification Documents

To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements, we collect:

• Clear, legible copies of government-issued photo identification documents (passport, driver's license, national ID, postal ID, UMID, etc.)
• Proof of address documents (utility bills, bank statements, government correspondence) dated within the last three (3) months
• Selfie photographs holding your identification document for identity verification
• Proof of payment method ownership (bank account statements, e-wallet screenshots)
• Source of funds documentation for enhanced due diligence when required

Transaction and Financial Information

• Deposit and withdrawal amounts, dates, and payment methods
• Bank account details (account name, account number, bank name)
• E-wallet information (GCash mobile number, PayMaya account details)
• Transaction histories and payment receipts
• Billing addresses associated with payment methods

Communications

• Customer support inquiries, chat transcripts, and email correspondence
• Feedback, complaints, and dispute resolution communications
• Marketing preferences and communication consents

2.2 Information Collected Automatically

Device and Technical Information

When you access kn77a services, we automatically collect:

• Device identifiers (IP address, device ID, MAC address)
• Device characteristics (operating system, browser type and version, screen resolution, device model)
• Network information (mobile network operator, connection type, time zone)
• Geolocation data (approximate location derived from IP address) to verify Philippine jurisdiction

Usage and Behavioral Data

• Pages visited, features accessed, links clicked, and navigation paths
• Gaming activity (games played, bets placed, win/loss records, session duration)
• Login and logout timestamps, session frequency, and duration
• Search queries, filters applied, and content preferences
• Referral sources and marketing campaign interactions

Cookies and Similar Technologies

We use cookies, web beacons, local storage, and similar tracking technologies. For detailed information, please refer to Section 8 of this Policy.

2.3 Information from Third Parties

• Payment Processors: Transaction verification, fraud detection signals, and payment method validation from GCash, PayMaya, banks, and other payment service providers
• Identity Verification Services: Age verification, identity authentication, and document validation results from third-party verification providers
• PAGCOR and Regulatory Bodies: Self-exclusion status, regulatory alerts, and compliance-related information
• Fraud Prevention Services: Risk scores, fraud indicators, and threat intelligence from security providers
• Marketing Partners: Campaign performance data and aggregated demographic information (when you interact with our advertisements)

3. How We Use Your Data

kn77a processes your personal information for the following lawful purposes under the Data Privacy Act:

3.1 Service Provision and Account Management

• Create, maintain, and administer your kn77a account
• Process deposits, withdrawals, and financial transactions
• Facilitate game play and settle bets according to game rules
• Provide customer support and respond to inquiries
• Authenticate your identity and verify account credentials
• Process bonuses, promotions, and loyalty rewards
• Deliver transactional notifications (deposits confirmed, withdrawals processed, etc.)

3.2 Legal and Regulatory Compliance

• Verify your age and eligibility to use gaming services (21+ requirement)
• Conduct Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures as required by PAGCOR
• Perform Enhanced Due Diligence (EDD) when transaction patterns warrant additional scrutiny
• Comply with Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) obligations
• Detect, prevent, and report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Enforce responsible gaming policies, including self-exclusion and deposit limits
• Respond to lawful requests from PAGCOR, law enforcement, courts, and government agencies
• Maintain records as required by Philippine gaming regulations (typically five to seven years)

3.3 Fraud Prevention and Security

• Detect and prevent fraudulent transactions, account takeovers, and unauthorized access
• Identify and block multiple accounts, bonus abuse, and terms violations
• Monitor for irregular play patterns, collusion, and unfair advantage exploitation
• Protect against cyber attacks, data breaches, and security threats
• Investigate disputes, chargebacks, and payment discrepancies
• Enforce our Terms and Conditions and protect kn77a's legitimate business interests

3.4 Service Improvement and Analytics

• Analyze user behavior and preferences to improve Platform functionality
• Develop new features, games, and services based on user demand
• Conduct A/B testing and optimize user experience
• Generate aggregated, anonymized statistics and reports for business intelligence
• Troubleshoot technical issues and improve system performance

3.5 Marketing and Communications (With Your Consent)

• Send promotional offers, bonus notifications, and exclusive deals
• Deliver personalized game recommendations based on your preferences
• Provide news about new games, features, and platform updates
• Invite participation in tournaments, leaderboards, and special events
• Conduct satisfaction surveys and request feedback

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in promotional emails, adjusting your account communication preferences, or contacting our support team. Opting out of marketing does not affect transactional or account-related communications, which are necessary for service provision.

3.6 Legal Basis for Processing

Processing Purpose	Legal Basis
Account creation and service provision	Contractual necessity
KYC/AML compliance and regulatory reporting	Legal obligation
Fraud prevention and security	Legitimate interests
Marketing and promotional communications	Consent
Analytics and service improvement	Legitimate interests

4. Data Sharing and Disclosure

kn77a does not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your data only in the following limited circumstances:

4.1 Service Providers and Business Partners

We share personal information with trusted third-party service providers who assist us in operating the Platform:

• Payment Processors: GCash, PayMaya, banks, and payment gateways to process deposits and withdrawals
• Identity Verification Services: Third-party KYC/AML providers for age verification, document authentication, and risk assessment
• Cloud Infrastructure Providers: Hosting services for secure data storage and platform operations
• Game Providers: Software developers and gaming content suppliers who provide games featured on kn77a
• Customer Support Tools: Live chat platforms and ticketing systems for support services
• Marketing and Analytics Platforms: Email service providers, SMS gateways, and analytics tools (when you have consented to marketing)
• Security and Fraud Prevention Vendors: Cybersecurity firms providing threat detection and fraud monitoring

All service providers are contractually bound to process your data only according to our instructions, maintain confidentiality, and implement appropriate security measures. They are prohibited from using your personal information for their own purposes.

4.2 Regulatory and Legal Disclosures

We disclose personal information to regulatory authorities and law enforcement when legally required:

• PAGCOR: Regulatory reports, compliance audits, and license-related disclosures
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports (STRs) and covered transaction reports (CTRs) as required by the Anti-Money Laundering Act
• Law Enforcement Agencies: In response to valid legal process (court orders, subpoenas, search warrants) or to assist criminal investigations
• National Privacy Commission (NPC): When required for data protection investigations or compliance audits
• Tax Authorities: As required by Philippine tax laws for reporting taxable winnings

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity. We will notify you via email and prominent notice on the Platform before your data is transferred and becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you have provided explicit consent, such as participating in joint promotions with partners or authorizing data sharing for specific purposes.

4.5 Aggregated and Anonymized Data

We may share aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you. This includes statistical reports on user demographics, gaming trends, and platform performance shared with business partners, investors, or the public.

5. Data Security Measures

kn77a implements comprehensive technical, organizational, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

5.1 Technical Safeguards

• Encryption: All data transmitted between your device and kn77a servers is encrypted using industry-standard TLS/SSL protocols. Sensitive data at rest (passwords, financial information) is encrypted using AES-256 or equivalent encryption algorithms.
• Secure Authentication: Multi-factor authentication (2FA) options available for account access. Passwords are hashed and salted using bcrypt or similar cryptographic algorithms.
• Firewalls and Intrusion Detection: Network-level security controls, web application firewalls (WAF), and intrusion detection/prevention systems (IDS/IPS) monitor and block malicious activity.
• Vulnerability Management: Regular security assessments, penetration testing, and vulnerability scanning to identify and remediate security weaknesses.
• DDoS Protection: Distributed denial-of-service mitigation to ensure service availability and data integrity.

5.2 Organizational Measures

• Access Controls: Role-based access control (RBAC) ensuring only authorized personnel can access personal data on a need-to-know basis.
• Employee Training: Regular data protection and security awareness training for all staff handling personal information.
• Confidentiality Agreements: All employees, contractors, and service providers sign confidentiality and data protection agreements.
• Data Protection Impact Assessments (DPIA): Conducted for high-risk processing activities to identify and mitigate privacy risks.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data breaches or security incidents.

5.3 Physical Security

• Data centers with restricted physical access, surveillance systems, and environmental controls
• Secure disposal procedures for hardware containing personal data
• Business continuity and disaster recovery plans to ensure data availability

5.4 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, kn77a will notify affected users and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act. Notifications will include the nature of the breach, affected data categories, potential consequences, and measures taken to address the breach and prevent future incidents.

6. Data Retention Period

kn77a retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

6.1 Active Account Data

While your kn77a account remains active, we retain all account information, transaction history, and associated data necessary to provide services and maintain regulatory compliance.

6.2 Closed Account Data

After you close your account, we retain personal information for the following periods:

• KYC/AML Records: Five (5) years from account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act
• Transaction Records: Seven (7) years from the transaction date, in accordance with Philippine accounting and tax laws
• Gaming Activity Logs: Five (5) years from the gaming session, as required by PAGCOR record-keeping requirements
• Communications: Three (3) years from the date of communication, or longer if required for ongoing disputes or legal proceedings
• Marketing Consent Records: Three (3) years from consent withdrawal to demonstrate compliance with opt-out requests

6.3 Legal Hold and Dispute Resolution

If your account or data is subject to ongoing litigation, regulatory investigation, or dispute resolution, we may retain relevant information beyond standard retention periods until the matter is resolved and all appeal periods have expired.

6.4 Secure Deletion

Once the retention period expires and there are no legal obligations to retain data, we securely delete or anonymize your personal information using industry-standard data sanitization methods that prevent recovery or reconstruction.

7. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

7.1 Right to Be Informed

You have the right to be informed about the collection, use, and processing of your personal data. This Privacy Policy serves as our primary notice, and we will inform you of any significant changes to our processing practices.

7.2 Right to Access

You have the right to request access to your personal information held by kn77a. You may request copies of:

• Account information and registration details
• Transaction history and financial records
• Communications with customer support
• Any other personal data we process about you

To exercise your right of access, submit a written request to our Data Protection Officer. We will provide the requested information within fifteen (15) days, subject to identity verification. The first access request per year is free; subsequent requests may incur a reasonable administrative fee.

7.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You may update most account information directly through your kn77a account settings. For information you cannot update yourself, contact our support team or Data Protection Officer.

7.4 Right to Erasure ("Right to Be Forgotten")

You have the right to request deletion of your personal information when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent (where consent was the legal basis for processing)
• The data has been unlawfully processed
• Erasure is required to comply with a legal obligation

However, we may not be able to delete data if retention is necessary to:

• Comply with PAGCOR regulations, AML laws, or other legal obligations
• Establish, exercise, or defend legal claims
• Detect and prevent fraud or security threats

In such cases, we will restrict processing to the minimum necessary and inform you of the reasons for retention.

7.5 Right to Object

You have the right to object to processing of your personal data when based on legitimate interests. This includes the right to opt out of marketing communications at any time. Note that you cannot object to processing required for service provision, legal compliance, or fraud prevention.

7.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and request transfer to another service provider where technically feasible. This right applies to data you provided to kn77a with consent or under contract.

7.7 Right to Withdraw Consent

Where processing is based on consent (such as marketing communications), you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.

7.8 Right to File a Complaint

If you believe kn77a has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission of the Philippines:

• Website: privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228

7.9 Exercising Your Rights

To exercise any of the above rights, please contact our Data Protection Officer using the contact information in Section 10. We will verify your identity before processing your request and respond within fifteen (15) days. Complex requests may require up to thirty (30) days; we will inform you of any extension and the reasons for delay.

8. Cookies and Tracking Technologies

kn77a uses cookies, web beacons, local storage, and similar tracking technologies to enhance your experience, analyze Platform usage, and deliver personalized content.

8.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser. They contain information that helps websites recognize your device, remember your preferences, and analyze how you use the site.

8.2 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for Platform functionality, account authentication, and security. You cannot opt out of these cookies.	Session / Persistent
Functional Cookies	Remember your preferences (language, currency, game filters) to provide enhanced features.	Persistent (up to 1 year)
Analytics Cookies	Collect aggregated data about Platform usage, page views, and user journeys to improve services.	Persistent (up to 2 years)
Marketing Cookies	Track interactions with promotional content and deliver personalized advertisements (requires consent).	Persistent (up to 1 year)

8.3 Managing Cookie Preferences

You can manage cookie settings through your browser options. Most browsers allow you to:

• View and delete cookies currently stored on your device
• Block third-party cookies
• Block all cookies (though this may impair Platform functionality)
• Receive notifications when cookies are set

To learn how to manage cookies in your specific browser, consult your browser's help documentation or visit aboutcookies.org.

You may also opt out of analytics cookies by adjusting your cookie preferences in your kn77a account settings or contacting customer support.

8.4 Do Not Track Signals

Some browsers support "Do Not Track" (DNT) signals. At present, there is no industry consensus on how to interpret DNT signals, and kn77a does not currently respond to DNT browser settings. We will update this Policy if industry standards evolve.

9. International Data Transfers

kn77a operates primarily within the Philippines and stores data on servers located in the Philippines or other jurisdictions approved by the National Privacy Commission. In certain circumstances, your personal information may be transferred to service providers located outside the Philippines, such as:

• Cloud infrastructure providers (e.g., servers located in Singapore, Japan, or other Asia-Pacific regions)
• Payment processors with international operations
• Third-party software providers based outside the Philippines

When we transfer personal data outside the Philippines, we ensure that:

• The recipient country has been deemed by the National Privacy Commission to provide adequate data protection standards, or
• Appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), or other NPC-approved transfer mechanisms, or
• You have provided explicit consent to the transfer after being informed of the risks

We conduct due diligence on all international service providers to ensure they maintain data protection standards equivalent to Philippine law and contractually bind them to protect your personal information.

10. Contact Us and Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your data privacy rights, or need to report a privacy concern, please contact our Data Protection Officer:

Data Protection Officer

• Email: [email protected]
• Privacy Inquiries Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through kn77a.cam

Written Correspondence

For formal privacy requests or complaints, you may send written correspondence to:

kn77a Gaming Corporation
Data Protection Officer
[Company Address]
Philippines

Response Time

We aim to respond to all privacy inquiries within fifteen (15) business days. Complex requests may require up to thirty (30) days; we will notify you of any extension and the reasons for delay.

Policy Updates

kn77a reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or service offerings. Material changes will be communicated via email to your registered email address and through prominent notice on the Platform at least fifteen (15) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically. Your continued use of kn77a services after changes take effect constitutes your acceptance of the revised Privacy Policy.