PK77
Privacy Policy

This Privacy Policy is issued by pk77 and applies to all personal data collected from individuals who access, register on, or interact with the pk77 platform at pk77.vu ("the Platform"). It covers data collected through the website itself, account registration and login processes, payment transactions, customer support interactions, and any other touchpoint between pk77 and a registered or prospective player.

pk77 is committed to protecting the privacy and personal data of its users in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This Policy describes pk77's practices as a personal information controller with respect to the collection, use, storage, disclosure, and disposal of your personal data.

By registering on pk77 or continuing to use the Platform after this Policy has been published or updated, you acknowledge that you have read and understood its contents. This Policy should be read alongside the pk77 Terms & Conditions, which govern your use of the Platform more broadly.

For the purposes of the Philippine Data Privacy Act, pk77 acts as the personal information controller with respect to the personal data of players and visitors to the pk77 platform. As data controller, pk77 determines the purposes and means by which your personal data is processed.

Where pk77 engages third-party service providers — such as game software studios, payment processors, or fraud prevention services — those providers act as personal information processors operating under pk77's instructions and under contractual data processing agreements that require them to protect your data to an equivalent standard.

For all privacy-related enquiries, data subject access requests, and complaints, you may contact pk77 through the contact details set out in Section 15 of this Policy.

pk77 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

• Full legal name as it appears on your government-issued identification document.
• Date of birth — collected to verify that you meet the 21-year minimum age requirement.
• Email address — used for account notifications, security alerts, and marketing (where consented).
• Philippine mobile number — used for OTP verification, two-factor authentication, and account recovery.
• Username chosen by you during registration.
• Password — stored in hashed, non-reversible form; pk77 staff cannot access your plaintext password.
• Residential address — collected as part of the KYC verification process.

• Scanned copy or clear photograph of a valid Philippine government-issued ID (UMID, passport, driver's licence, PhilHealth ID, SSS/GSIS card, or Voter's ID).
• Selfie or facial image for identity matching purposes where required by compliance processes.
• Proof of address documentation where additionally requested.

• GCash account number or PayMaya number linked to your pk77 account for payment processing.
• Bank account details (account name, account number, bank name) where bank transfer is used.
• Records of all deposits, withdrawals, bonus credits, and wagers placed on the Platform.
• Transaction timestamps, reference numbers, and processing status records.

• IP address and approximate geolocation derived from it.
• Device type, operating system version, and browser type.
• Session duration, pages visited, and features used within the Platform.
• Log files recording login events, game sessions, and significant account actions.
• Cookie identifiers and similar tracking technology data as described in Section 10.

pk77 collects your personal data through the following means:

• Directly from you: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or updating your account profile.
• Automatically: Technical and usage data collected through cookies, server log files, and similar technologies when you access or interact with the Platform.
• From payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers when you complete a deposit or withdrawal.
• From fraud prevention and verification services: Identity and risk signals received from third-party compliance and fraud detection providers used by pk77 to protect the Platform and its players.

pk77 processes your personal data for the following specific purposes:

Under the Philippine Data Privacy Act, pk77 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfil the Terms and Conditions between pk77 and you as a registered Player — including account management, payment processing, and game access.
• Legal obligation: Processing required by applicable Philippine law, including anti-money laundering regulations, PAGCOR-related compliance requirements, and the Data Privacy Act itself.
• Legitimate interests: Processing for fraud prevention, platform security, and abuse prevention, where pk77's legitimate interest in protecting players and the platform does not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have given specific, freely given, and informed consent that you may withdraw at any time.

pk77 does not sell, rent, or trade your personal data to any third party. Data sharing is limited to the following categories of recipients and circumstances:

• Game software providers: Game session data (wager amounts, outcomes, session timestamps) is shared with licensed game studios to operate their titles on the pk77 platform. These providers do not receive your full personal profile.
• Payment service providers: Your GCash or PayMaya account number, bank details, and transaction reference data are shared with the relevant payment processors solely to execute your deposit or withdrawal instructions.
• Identity verification and fraud prevention services: KYC documents and risk-related data may be processed by contracted third-party compliance providers to verify your identity and assess fraud risk.
• Regulatory and law enforcement authorities: pk77 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, or courts of competent jurisdiction where required by law or by a valid legal order.
• Corporate transactions: In the event of a merger, acquisition, or asset sale involving pk77, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

pk77 implements technical and organisational security measures appropriate to the nature and sensitivity of your personal data. These measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pk77's servers.
• Encryption of sensitive data at rest, including identity documents and payment details.
• Password hashing using industry-standard one-way algorithms — no pk77 employee or system can read your plaintext password.
• Two-factor authentication (2FA) options for player accounts, strongly recommended for all users.
• Access controls limiting employee access to personal data on a strict need-to-know basis, with audit logging of all access events.
• Regular security assessments and penetration testing of the pk77 platform infrastructure.
• Incident response procedures including player notification in the event of a data breach affecting your personal data, in accordance with NPC notification requirements.

pk77 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, pk77 will securely delete or anonymise the relevant personal data so that it can no longer be attributed to you as an identifiable individual.

pk77 uses cookies and similar tracking technologies to operate the Platform, improve the user experience, and (where consented) to understand how players interact with the site. The following types of cookies are in use:

• Essential cookies: Required for the Platform to function — including session cookies that keep you logged in during a gaming session. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming limit configurations.
• Analytics cookies: Used by pk77 to understand aggregate usage patterns — which pages are visited, how long sessions last, and where drop-off occurs — in order to improve the Platform. Analytics data is not linked to your individual identity.
• Security cookies: Used to detect and prevent suspicious login activity, fraud attempts, and bot traffic on the Platform.

You may manage your cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the Platform. pk77 does not use third-party advertising cookies or cross-site tracking cookies for retargeting purposes.

pk77 is strictly a 21-years-and-above platform. We do not knowingly collect personal data from individuals under the age of 21. The pk77 registration process requires users to confirm their age, and the KYC verification process cross-checks date of birth against a government-issued identity document.

If pk77 discovers or is notified that personal data has been collected from an individual under the age of 21, we will immediately suspend and close the relevant account, delete all associated personal data, and — where applicable — refer the matter to the relevant authorities.

Parents and guardians who believe a minor has created a pk77 account should contact pk77 support immediately using the contact details in Section 15 of this Policy.

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by pk77:

• Right to be Informed: You have the right to know what personal data pk77 collects about you, the purposes for which it is processed, and who it may be shared with. This Privacy Policy fulfils that obligation.
• Right of Access: You may request a copy of the personal data pk77 holds about you at any time. pk77 will respond to verified access requests within 30 days.
• Right to Rectification: If any personal data held by pk77 is inaccurate or incomplete, you have the right to request correction. Some corrections (e.g., name changes) require supporting documentation.
• Right to Erasure: Subject to legal retention obligations (see Section 9), you may request deletion of your personal data. pk77 will erase data that is no longer required for the purposes for which it was collected, unless retention is mandated by law.
• Right to Object: You may object to pk77's processing of your personal data for marketing purposes at any time by updating your Account Settings or contacting support. You may also object to processing based on legitimate interests where you have grounds specific to your situation.
• Right to Data Portability: You may request that pk77 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service, where technically feasible.
• Right to Complain: If you believe pk77 has processed your personal data in breach of RA 10173 or this Policy, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact pk77 through the channels listed in Section 15. We may require you to verify your identity before processing a data rights request to protect against unauthorised access to another person's data.

Some of pk77's service providers — including game software studios and technical infrastructure providers — may be located outside the Philippines. Where personal data is transferred to a recipient in another country, pk77 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to RA 10173's requirements.

These safeguards may include contractual data processing agreements that incorporate standard data protection clauses, the implementation of technical security measures equivalent to those described in Section 8, and transfer to jurisdictions that have been assessed as providing an adequate level of data protection for the categories of data transferred.

You may request information about the specific safeguards applicable to any international transfer involving your personal data by contacting pk77 through the details in Section 15.

pk77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When we make material changes, we will:

• Update the "Last Reviewed" date at the top of this Policy.
• Notify registered Players by email (using the address on your pk77 account) or by a prominent in-platform notification at least seven (7) days before the changes take effect, where the nature of the change permits advance notice.
• Require fresh consent from you where a change involves a new processing purpose that requires your consent under RA 10173.

Your continued use of the pk77 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy, to the extent permitted by law. We encourage you to review this page periodically.

For all privacy-related enquiries, data subject rights requests, and complaints relating to pk77's processing of your personal data, please contact us through the following channels:

• Email: [email protected] — Please include "Privacy" in the subject line of your message for fastest routing to our data privacy team.
• Live Chat: Available 24/7 within the pk77 Platform after login. Our support agents can escalate privacy-specific requests to the appropriate team.

pk77 will acknowledge all privacy-related requests within 72 hours of receipt and will aim to resolve or respond substantively within 30 days. For complex requests involving large volumes of data, we may notify you within the initial 30-day period that an extension of up to a further 30 days is required, in accordance with RA 10173.

If you are not satisfied with how pk77 has handled your privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC), the regulatory authority responsible for enforcing RA 10173 in the Philippines.