NOTICE: This Privacy Policy is issued by kb77 ("the Platform," "we," "us," "our") and applies to all personal data collected from users ("Player," "You") in connection with their registration, use of kb77 services, and any communications with kb77 support. It is to be read in conjunction with the Terms & Conditions. This Policy is compliant with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and its Implementing Rules and Regulations.
kb77 is the data controller responsible for the personal data of users who register and interact with the kb77 online gaming platform at kb77.lat. As data controller, kb77 determines the purposes and means of processing personal data collected through the platform, and is responsible for ensuring that such processing complies with RA 10173 and its implementing rules.
kb77 serves players across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and all other provinces and cities — operating within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR). All player data is handled in accordance with Philippine law.
Data Protection Officer: kb77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173. For data privacy matters, contact the DPO via support email: [email protected] with the subject line "DPO — Data Privacy Enquiry."
kb77 collects the following categories of personal data from its players. Collection is limited to data that is necessary for the specific processing purpose identified at the time of collection.
kb77 collects personal data through the following channels:
kb77 uses the personal data it collects for the following purposes:
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Registration and identity data |
| Age verification (mandatory 21+ requirement) | Date of birth, KYC documents |
| Identity verification (KYC/AML compliance) | KYC documents, registration data |
| Processing deposits and withdrawals | Financial and transaction data |
| Providing and improving gaming services | Usage data, bet history |
| Customer support and complaint handling | Communications data, account data |
| Fraud detection and platform security | Technical data, transaction data |
| Regulatory reporting (PAGCOR, AMLA) | Transaction data, KYC documents |
| Responsible gaming monitoring and tools | Responsible gaming data, usage data |
| Sending transactional communications (OTPs, withdrawal alerts) | Mobile number, email address |
| Platform analytics and performance optimisation | Technical and usage data (anonymised or aggregated) |
kb77 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human review. Fraud flagging and responsible gaming alerts may be generated algorithmically, but account action based on those flags is reviewed by kb77 staff before being applied.
Under the Philippine Data Privacy Act, kb77 processes personal data on the following legal bases:
kb77 engages trusted third-party service providers to perform functions necessary to operate the platform. These include payment processors (GCash, PayMaya, and banking partners), KYC verification technology providers, game software studios (such as JILI Games and other content providers), hosting and infrastructure providers, and customer support tools. These service providers process data solely on kb77's behalf, under contractual obligations that prohibit them from using the data for their own purposes and require them to implement adequate security measures.
kb77 will disclose personal data and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities when required to do so by law, court order, or valid regulatory demand. kb77 will not notify the affected player of such disclosure where prohibited from doing so by the relevant legal process.
kb77 does not sell, rent, lease, or otherwise transfer your personal data to any third party for their own commercial or marketing purposes. Data shared with third parties is strictly limited to what is necessary for the purpose identified above.
Anti-Money Laundering Disclosure: Under the Philippine AMLA (Republic Act No. 9160, as amended), kb77 is required to report certain covered and suspicious transactions to the Anti-Money Laundering Council. Players should be aware that large or unusual transactions may trigger mandatory regulatory reports. This is a legal obligation and not optional.
kb77 uses cookies and similar browser-based tracking technologies to operate the platform, maintain your session while logged in, and analyse aggregate usage patterns to improve the platform experience.
You may manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Be aware that disabling strictly necessary cookies will prevent you from using the kb77 platform — including the login and deposit functions. Disabling analytics cookies will not affect your ability to use kb77.
kb77 retains personal data for the following periods, after which it is securely deleted or anonymised:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years | PAGCOR regulatory requirement |
| KYC verification documents | Duration of account + 5 years | AMLA and PAGCOR requirement |
| Transaction records (deposits, withdrawals, bets) | 5 years from transaction date | AMLA requirement (RA 9160) |
| Support communications | 2 years from last interaction | Legitimate interest — dispute resolution |
| Self-exclusion and responsible gaming records | Duration of exclusion + 2 years | Legal obligation and player protection |
| Technical and session logs | 90 days (rolling) | Security and fraud monitoring |
| Marketing consent records | Until consent withdrawn + 2 years | Proof of lawful processing |
Where statutory retention obligations require kb77 to retain data beyond a player's account closure or deletion request, kb77 will honour those obligations and inform the player of the applicable retention period.
kb77 implements technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
Breach notification: In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, kb77 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach (as required by RA 10173), and will notify affected players without undue delay where required. The notification will describe the nature of the breach, the data affected, and the steps being taken to address it.
As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by kb77:
You have the right to request a copy of the personal data kb77 holds about you, along with information about the purposes for which it is processed, who it has been shared with, and how long it will be retained.
You have the right to request correction of inaccurate or incomplete personal data kb77 holds about you. Minor corrections (e.g., address updates) can be made via the account settings page. Corrections to identity data require support verification.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (if consent was the legal basis), or where processing is unlawful. This right is subject to exceptions — particularly where retention is required by AMLA, PAGCOR regulations, or other Philippine law.
You may object to kb77 processing your personal data on grounds of legitimate interest, including for direct marketing communications. Where you object to marketing, kb77 will cease processing your data for that purpose promptly. Objections to processing required by law or regulatory obligation will be evaluated on their merits.
Where technically feasible, you have the right to receive a structured, commonly used, machine-readable copy of personal data you provided to kb77, and to request that it be transmitted to another data controller.
If you believe kb77 has processed your personal data in breach of RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Before doing so, kb77 encourages you to raise the matter with our DPO at [email protected] so we can attempt to resolve it directly.
To exercise any of the above rights, submit a written request to kb77's Data Protection Officer at [email protected] with the subject line "Data Privacy Rights Request." kb77 will respond within 15 business days of receiving a valid and sufficiently identified request, as required under RA 10173.
kb77 is an online gaming platform for adults only. Under PAGCOR regulations governing real-money gaming in the Philippines, registration and participation are restricted to persons who are at least twenty-one (21) years of age. kb77 does not knowingly collect personal data from individuals under 21 years of age.
Age verification is conducted during the registration and KYC process. Any account found to have been registered by a person under 21 years of age will be immediately closed, all funds will be forfeited, and the personal data collected will be deleted subject to any applicable legal retention obligations.
If you believe that a minor has registered a kb77 account or that kb77 has inadvertently collected personal data from a person under 21, please contact us immediately at [email protected]. We will investigate and take appropriate action as quickly as possible.
Some of kb77's service providers — including game software studios, infrastructure providers, and KYC technology vendors — may be located outside the Philippines or may process data on servers located outside Philippine territory. Where personal data is transferred internationally, kb77 ensures that such transfers comply with RA 10173, which requires that the recipient country or organisation provides a comparable level of data protection.
International transfers by kb77 are governed by contractual clauses that require recipient service providers to process personal data only for the specified purpose, maintain adequate security measures, and not transfer the data further without authorisation from kb77. Players will be informed of international transfer recipients upon written request to the DPO.
The kb77 platform may contain references to third-party services — such as game provider studios, payment processor interfaces, or regulatory bodies. Where you interact with a third-party interface embedded within or linked from the kb77 platform, that third party's own privacy policy governs the data collected through their interface. kb77 is not responsible for the data practices of third-party operators.
Specifically, GCash and PayMaya payment flows are operated by their respective parent companies (Globe Fintech Innovations / G-Xchange Inc. and Voyager Innovations Inc.). When you deposit or withdraw via these methods, you interact with their systems under their respective privacy policies.
kb77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR requirements. The updated Policy will be published at kb77.lat/privacy-policy with a revised effective date. Where material changes are made to how kb77 processes your personal data, we will notify registered players via email or in-platform notification prior to the changes taking effect.
Your continued use of kb77 after the effective date of an updated Privacy Policy constitutes your acknowledgement of the revised terms. If you do not accept the revised Policy, you must cease using kb77 and contact [email protected] to close your account.
For all privacy-related enquiries, data subject rights requests, data breach notifications, or complaints, please contact kb77's Data Protection Officer through the following channel:
If you are not satisfied with kb77's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines:
National Privacy Commission (NPC)
5th Floor, Delegation Building, PICC Complex, Roxas Boulevard, Pasay City,
Metro Manila, Philippines
Note: kb77 provides this reference for your information. This is not a
clickable link — please visit the NPC's official website independently to
obtain current contact details and complaint filing procedures.