This Privacy Policy explains how kb77 collects, uses, stores, and protects the personal data of its players and website visitors in accordance with Philippine law.
These highlights summarise our core privacy commitments. They do not replace the full Privacy Policy below, which all players are encouraged to read in its entirety.
kb77 processes all personal data in accordance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.
kb77 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Data is shared with service providers only to the extent necessary to operate the kb77 platform and deliver services to you.
All personal data held by kb77 is stored using industry-standard encryption. Passwords are hashed using bcrypt and are never stored in plain text. Data in transit between your device and kb77 servers is protected by TLS encryption.
As a kb77 player in the Philippines, you have the right to access, correct, object to, and request erasure of your personal data. You can exercise any of these rights by contacting kb77 support — no excessive formality required.
Where personal data is transferred to processors outside the Philippines — for example, to licensed game studios — kb77 ensures that adequate data protection safeguards are in place consistent with NPC requirements and the Data Privacy Act.
kb77 retains personal data only for as long as it is required for the stated processing purpose or as required by Philippine regulatory and tax law. Account data is retained for a minimum of five years post-closure to satisfy AMLA and PAGCOR record-keeping requirements.
kb77 ("we," "us," "our," or "the Operator") is committed to protecting the personal data of every player and visitor who interacts with the kb77 platform at kb77.biz and any associated mobile applications. This Privacy Policy has been prepared in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines (the "DPA"), and its Implementing Rules and Regulations (IRR) as issued by the National Privacy Commission (NPC).
This Privacy Policy applies to all personal data collected, processed, and stored by kb77 in connection with your use of the platform, including registration, gameplay, financial transactions, customer support interactions, and your engagement with any marketing communications from kb77.
By registering an account with kb77 or by continuing to use the kb77 platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree to the processing of your personal data as described herein, you should not register or continue to use the kb77 platform.
Plain Language Note: We've written this policy in clear, accessible English. While the document uses legal language where required, we've tried to make each section straightforward for Filipino players to understand. If you have questions about any part of this policy, contact kb77 support — we're happy to explain.
For the purposes of the Data Privacy Act of 2012, kb77 is the Personal Information Controller (PIC) in respect of the personal data collected and processed through the kb77 platform. As PIC, kb77 determines the purposes for which personal data is collected and the means by which it is processed.
Where kb77 engages third-party service providers — including game studios, payment processors, identity verification services, and customer support software providers — to process personal data on kb77's behalf, those providers act as Personal Information Processors (PIPs) and are contractually bound to process data only on kb77's documented instructions and to maintain appropriate security measures consistent with the DPA.
kb77's designated Data Protection Officer (DPO) can be contacted at the details provided in Section 16 of this Privacy Policy for any queries, complaints, or requests relating to personal data processing.
kb77 collects the following categories of personal data from players and platform visitors. The specific data collected at any stage depends on the services you use and the level of account verification applicable to your account.
| Data Category | Specific Data Points | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID type and number (PhilSys, Passport, Driver's License) | Account registration and KYC verification |
| Contact Data | Philippine mobile number, email address | Account registration |
| Address Data | Residential address (barangay, city/municipality, province), postal code | KYC verification and withdrawal processing |
| Financial Data | GCash account number, Maya account number, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records | Payment processing and AML compliance |
| Gaming Activity Data | Game sessions, wagers placed, wins and losses, bonus usage, game preferences, betting history | Continuous during platform use |
| Technical Data | IP address, device type and model, operating system, browser type and version, session tokens, login timestamps | Automatically on each platform access |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with kb77 | Customer support interactions |
| Verification Documents | Photographs or scans of government IDs, selfie verification images, proof-of-address documents | KYC and enhanced due diligence checks |
kb77 does not collect sensitive personal information as defined under Section 3(l) of the DPA (such as health, race, religious beliefs, or political affiliations) except where specifically required for responsible gaming assessments, in which case such collection is conducted with explicit consent.
kb77 collects personal data through the following channels and mechanisms:
Under the Data Privacy Act of 2012, kb77 processes personal data on the following legal bases:
| Processing Purpose | Legal Basis (DPA) |
|---|---|
| Account registration and management | Performance of contract (Section 12(b)) |
| Processing deposits and withdrawals | Performance of contract (Section 12(b)) |
| Identity verification and age verification (21+) | Compliance with legal obligation (Section 12(c)) |
| Anti-money laundering compliance (AMLA) | Compliance with legal obligation (Section 12(c)) |
| Fraud prevention and account security | Legitimate interests (Section 12(f)) |
| Responsible gaming monitoring and intervention | Legitimate interests / consent (Sections 12(f), 13) |
| Customer support and dispute resolution | Performance of contract (Section 12(b)) |
| Platform improvement and analytics | Legitimate interests (Section 12(f)) |
| Marketing communications | Consent (Section 13) |
| Regulatory reporting to PAGCOR and AMLC | Compliance with legal obligation (Section 12(c)) |
Where kb77 relies on your consent as the legal basis for processing — specifically for marketing communications and certain responsible gaming assessments — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. See Section 12 for details on exercising your data rights.
kb77 uses the personal data it collects for the following specific purposes, consistent with the legal bases described in Section 5:
kb77 shares personal data with third parties only in the following limited and controlled circumstances. All third-party data sharing is governed by written data processing agreements that require the recipient to maintain appropriate security measures and to process data only for the specified purpose.
What kb77 Does NOT Do: kb77 does not sell personal data to marketing companies, data brokers, or any third party for their own commercial use. kb77 does not share gaming history or financial data with credit reference agencies except where required by law.
As an online gaming platform, kb77 uses game studios and technology providers whose servers and processing infrastructure may be located outside the Philippines. Where personal data is transferred to, or accessible from, countries outside the Philippines, kb77 ensures that appropriate safeguards are in place consistent with Section 21 of the Data Privacy Act of 2012.
These safeguards include:
Players who wish to obtain further information about the specific countries to which their data may be transferred, and the safeguards in place, may contact kb77's Data Protection Officer at the details in Section 16.
kb77 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account identity and registration data | 5 years post-account closure | AMLA, PAGCOR record-keeping requirements |
| Financial transaction records | 5 years post-transaction | AMLA Section 9, BIR requirements |
| KYC verification documents | 5 years post-account closure | AMLA enhanced due diligence requirements |
| Gaming activity and betting history | 3 years post-account closure | Dispute resolution, responsible gaming audit |
| Customer support records | 3 years post-interaction | Quality assurance, dispute evidence |
| Marketing consent records | Duration of consent + 1 year | Evidence of lawful processing basis |
| Technical / server log data | 12 months | Security monitoring, fraud prevention |
| Self-exclusion records | Minimum 5 years from application | Responsible gaming enforcement |
Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry-standard data destruction procedures. Anonymised data (from which no individual can be identified) may be retained indefinitely for analytics and platform improvement purposes.
kb77 implements and maintains the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction:
Your Role in Security: No technical measures can fully compensate for insecure user behaviour. kb77 strongly recommends that players use a unique, strong password for their kb77 account, enable 2FA, and never share their login credentials with anyone — including people claiming to be kb77 staff. Legitimate kb77 support agents will never ask for your password.
kb77 uses cookies and similar tracking technologies (including web beacons, local storage, and session tokens) to operate and improve the platform. This section explains the categories of cookies used and your choices regarding cookie management.
kb77 does not use third-party advertising or behavioural retargeting cookies. The platform does not serve targeted advertisements based on your browsing behaviour across other websites.
You can manage your browser's cookie settings at any time through your browser's privacy controls. Note that disabling cookies beyond strictly necessary and security categories may affect your ability to use certain features of the kb77 platform.
Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data processed by kb77. These rights are genuine and enforceable — kb77 will respond to valid requests within a reasonable timeframe consistent with NPC guidelines.
You have the right to know what personal data kb77 holds about you, how it is used, and with whom it is shared. This Privacy Policy is the primary means by which kb77 fulfils this right.
You have the right to request a copy of the personal data kb77 holds about you. Requests can be submitted to kb77 support and will be fulfilled within 30 days, subject to identity verification.
You have the right to request correction of inaccurate or incomplete personal data. Many data fields can be updated directly through your kb77 account settings. For identity data, corrections require supporting documentation.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected. This right is subject to kb77's legal obligations to retain data under AMLA and PAGCOR requirements.
You have the right to object to processing of your personal data based on legitimate interests, including profiling for marketing purposes. You can withdraw marketing consent at any time via your account settings.
You have the right to receive a structured, machine-readable copy of personal data you have provided to kb77, for the purpose of transferring it to another service. Contact kb77's DPO to submit a portability request.
To exercise any of the rights listed above, contact kb77's Data Protection Officer using the details in Section 16. kb77 will not charge a fee for standard data subject requests and will respond within thirty (30) days. Where a request is particularly complex or numerous, kb77 may extend this period by a further thirty (30) days and will notify you accordingly.
If you believe that kb77 has not responded adequately to your request or has processed your data in breach of the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.
The kb77 platform is strictly for individuals aged 21 years and above. kb77 does not knowingly collect personal data from persons under the age of 21. Age is verified during the registration process and through ongoing KYC procedures.
If kb77 discovers that personal data has been collected from a person under the minimum age, the Account will be immediately closed, the data will be securely deleted consistent with applicable regulatory requirements, and any balance remaining in the Account will be returned to the originating payment method net of any winnings, which shall be forfeited.
If you believe that a minor may have registered an Account on kb77, please contact kb77 support immediately at the details in Section 16 so that the matter can be investigated and resolved promptly.
The kb77 platform may contain operational integrations with third-party services — including game studios, payment processors, and customer support tools. These third parties operate under their own privacy policies and data processing practices, which are independent of this Privacy Policy.
kb77's Privacy Policy does not govern the data practices of these third parties beyond the contractual obligations imposed by kb77's data processing agreements. kb77 recommends that players review the privacy policies of any third-party services they use in connection with the kb77 platform, including GCash, Maya, and their banking institutions.
kb77 is not responsible for the privacy practices of third-party services that players choose to link to their kb77 accounts or interact with through the platform outside of kb77's direct contractual relationships.
kb77 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the NPC. The effective date at the top of this document will be updated whenever the policy is revised.
Where changes to this Privacy Policy are material — meaning they substantially affect how kb77 processes your personal data or your rights as a data subject — kb77 will notify registered players via the platform's notification system and/or by email to the registered account address at least fourteen (14) days before the changes take effect. For Philippine players, this notification procedure is designed to meet the requirements of the DPA and NPC guidelines on privacy notice.
Continued use of the kb77 platform following the effective date of a revised Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised Privacy Policy, you must notify kb77 of your objection and cease using the platform. Where processing is based on consent, continued use of the platform does not constitute renewed consent for processing previously based on withdrawn consent — a fresh, affirmative consent action will be required where required by law.
For any questions, requests, or complaints relating to this Privacy Policy or kb77's personal data processing practices, please contact kb77 through the following channels:
National Privacy Commission: If you are not satisfied with kb77's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. The NPC can be reached via its official government website. The NPC is the competent supervisory authority for data protection matters in the Philippines under Republic Act No. 10173.
This Privacy Policy was last updated on 1 January 2026 and supersedes all previous versions. Current and prospective kb77 players are encouraged to review this policy periodically.
Your data is protected. Your games are fair. Your withdrawals are fast. GCash deposits, PAGCOR-aligned. 21+ only.
Sign In to kb77 Responsible Gaming