k667 Privacy Policy

k667 ("k667", "we", "us", "our") operates the online casino and sports betting platform available at k667.app. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and this Privacy Policy, k667 is the Personal Information Controller (PIC) responsible for determining the purposes and means of processing your personal data collected through the platform.

This Privacy Policy applies to all personal data collected from players, registered users, prospective users, and visitors to the k667 platform, including data collected through the website, mobile interface, customer support channels, and any other touchpoints operated by k667.

k667 collects only the personal data necessary to provide and improve our services, meet legal and regulatory obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

Where k667 is required by law to collect certain personal data, and you fail to provide that data when requested, k667 may be unable to provide services to you or may be required to restrict your account.

k667 collects personal data through the following means:

Direct Collection

Data you provide directly when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or submit any form on the k667 platform.

Automated Collection

Data collected automatically when you access or use the k667 platform, including through cookies, web beacons, server logs, and similar tracking technologies. This includes your IP address, device identifiers, browser type, pages visited, session duration, and in-platform behaviour patterns.

Third-Party Sources

Data received from third parties in the course of providing services, including:

• Identity verification and KYC service providers used to confirm your identity and age.
• Payment processors and financial institutions involved in processing your deposits and withdrawals (e.g., GCash, Maya, BPI, BDO, Metrobank, Visa, Mastercard).
• Fraud prevention and anti-money laundering screening providers.
• Responsible gaming databases, including any national self-exclusion registers applicable to your jurisdiction.

k667 processes your personal data on the following legal bases and for the following purposes:

• Contractual Necessity: Processing required to fulfil our contractual obligations to you as a registered player, including account management, game provision, transaction processing, and customer support.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations under Republic Act No. 9160 (Anti-Money Laundering Act), KYC requirements, tax reporting obligations, and responsible gaming regulations.
• Legitimate Interests: Processing carried out for k667's legitimate business interests where those interests are not overridden by your rights, including fraud prevention, platform security, improvement of services, and responsible gaming monitoring.
• Consent: Where required by law, processing based on your freely given, specific, informed, and unambiguous consent, such as for certain marketing communications. You may withdraw consent at any time by contacting k667 support.

k667 does not sell, rent, or trade your personal data to third parties for commercial purposes unrelated to the k667 platform. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

Service Providers (Personal Information Processors)

Third-party companies engaged by k667 to perform services on our behalf, including KYC and identity verification providers, payment processing partners, cloud hosting and infrastructure providers, fraud detection and AML screening services, customer support platform providers, and responsible gaming technology providers. All such providers are bound by data processing agreements requiring them to process your data only on k667's instructions and to maintain appropriate security standards.

Game Providers

Licensed third-party game suppliers whose games are accessible through the k667 platform. These providers may receive gameplay data necessary to operate and audit their games. They are prohibited from using this data for any purpose other than game provision and certification auditing.

Regulatory and Law Enforcement Authorities

Where required by applicable Philippine law, court order, or lawful regulatory request, k667 may disclose your personal data to government agencies, law enforcement authorities, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities. k667 will notify you of such disclosures where legally permitted to do so.

Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of k667's assets, your personal data may be transferred to the acquiring entity, subject to that entity assuming the obligations of this Privacy Policy with respect to your data.

k667 uses cookies and similar tracking technologies to operate the platform, enhance your experience, ensure security, and gather analytics data. The categories of cookies used on k667 are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These enable core features such as account login sessions, security tokens, and load balancing. These cookies cannot be disabled without disrupting platform functionality.
• Performance and Analytics Cookies: Collect aggregated, anonymised data about how players use the platform — including pages visited, session duration, and error reports — to help k667 improve platform performance and usability.
• Functional Cookies: Remember your preferences and settings (such as language, game view preferences, and responsible gaming tool configurations) to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised access, and bot behaviour on the platform.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the k667 platform. k667 does not use third-party advertising cookies or serve targeted advertisements to players based on their platform activity.

k667 retains your personal data for as long as is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable legal and regulatory obligations. The following retention principles apply:

• Active Account Data: Retained for the duration of your account relationship with k667 and for a period thereafter as required by law.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the date of the transaction, consistent with Philippine AML and tax record-keeping requirements under applicable law.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later, in accordance with AML compliance obligations.
• Support Communications: Retained for a period of three (3) years following the resolution of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Self-Exclusion Records: Retained for the duration of the self-exclusion period and for a defined period thereafter to prevent re-registration during the exclusion term.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with k667's data disposal procedures. Anonymised, aggregated data that cannot be used to identify you may be retained indefinitely for analytical and reporting purposes.

k667 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the k667 platform.
• Encryption at rest for sensitive personal and financial data stored in k667 systems.
• Role-based access controls ensuring that k667 staff can only access personal data on a need-to-know basis relevant to their job function.
• Regular security assessments, vulnerability scanning, and penetration testing of platform infrastructure.
• Multi-factor authentication requirements for platform access by k667 personnel.
• Comprehensive audit logging of access to personal data held in k667 systems.
• Staff training on data privacy obligations and information security best practices.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights in relation to the personal data k667 holds about you:

• Right to Be Informed: The right to be notified of how your personal data is collected, processed, and used — as fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data k667 holds about you, including information on how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held about you. You may update basic account information directly through your k667 account dashboard.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to k667's legal retention obligations. Note that data subject to mandatory regulatory retention cannot be deleted until the retention period has expired.
• Right to Object: The right to object to the processing of your personal data on grounds of legitimate interests, direct marketing, or automated processing, where applicable.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, subject to the provisions of RA 10173.

To exercise any of the above rights, please submit a written request to k667 via email at [email protected] or via Live Chat in your account dashboard. k667 will acknowledge your request within 5 business days and respond substantively within 15 business days. Identity verification may be required before processing your request.

If you are unsatisfied with k667's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

k667 is strictly an adults-only platform. In accordance with Philippine gaming regulations, k667 does not permit persons under 21 years of age to register an account or use the platform in any capacity.

k667 does not knowingly collect, process, or retain personal data from individuals under 21 years of age. If k667 becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be deleted (subject to any mandatory retention obligations under applicable law), and any deposited funds will be returned to the originating payment method following investigation.

If you believe that k667 may have inadvertently collected data from an underage individual, please contact us immediately at [email protected] so that we can investigate and take appropriate action promptly.

The k667 platform and some of its third-party service providers may operate infrastructure or process data in locations outside the Philippines. Where personal data is transferred to recipients in other countries, k667 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012.

Such safeguards may include:

• Transferring data only to countries recognised as providing an adequate level of data protection.
• Implementing contractual clauses with recipients that impose data protection obligations consistent with Philippine law.
• Ensuring that third-party processors outside the Philippines are bound by data processing agreements that reflect the requirements of RA 10173.

You may request further information about the specific safeguards applied to cross-border transfers of your personal data by contacting k667's Data Protection Officer at the details provided in Section 13 of this Policy.

k667 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The effective date at the top of this page will be updated whenever a material change is made.

Where changes are material, k667 will notify registered players via email to their registered address or through an in-platform notification prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how k667 protects your personal information.

Your continued use of the k667 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not accept the updated Policy, you must cease using the platform and may request account closure by contacting support.

k667 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us through the following channels:

• Data Protection Officer: k667 Data Protection Office
• Email: [email protected]
• Live Chat: Available 24/7 through your k667 account dashboard
• Response Time: Acknowledgement within 5 business days; substantive response within 15 business days

For complaints regarding the processing of your personal data that have not been resolved to your satisfaction by k667, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.