wk77 Privacy Policy

The data controller responsible for your personal data in connection with your use of wk77.asia is wk77, the operator of the Platform. References in this Policy to "wk77", "we", "us", or "our" refer to the data controller in this capacity.

As data controller, wk77 determines the purposes for which and the means by which your personal data is processed. We have appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data privacy law. You may contact our DPO at any time through the customer support channels described in Section 12 of this Policy.

wk77 collects the following categories of personal data from or about Players. We collect only the data that is necessary for the specified purposes and endeavour to minimise collection beyond what is required.

wk77 does not collect or process special categories of sensitive personal data (as defined under the DPA, including health data, political opinions, religious beliefs, and biometric data) unless explicitly required for regulatory compliance or with your specific, informed consent.

wk77 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide voluntarily during account registration, identity verification (KYC), deposit or withdrawal requests, responsible gaming tool configuration, or when you contact customer support.
• Automated Technical Collection: Data collected automatically when you access or use the Platform, including IP addresses, device identifiers, browser type, access times, pages visited, and session duration. This collection is facilitated by server logs, cookies, and similar tracking technologies as described in Section 8.
• Third-Party Payment Processors: When you make a deposit or request a withdrawal, payment processors (including GCash, Maya, and partner banks) transmit transaction confirmation data to wk77. wk77 receives only the data necessary to confirm and record the transaction — not your full payment credentials.
• Identity Verification Providers: Where wk77 uses third-party identity verification services to assist with KYC processing, those services may transmit verification outcomes (pass/fail) and risk flags to wk77 in connection with your submitted documents.
• Fraud Detection Systems: Automated fraud detection and anti-money laundering screening tools may generate data about your account activity as a by-product of their operation. This data is used solely for security and regulatory compliance purposes.

wk77 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis:

wk77 does not use your personal data for automated decision-making that produces significant legal or similarly significant effects without providing you an opportunity to seek human review of that decision, in accordance with Section 21 of the DPA.

wk77 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the Account's active life and for a minimum of five (5) years following account closure, in compliance with PAGCOR regulatory requirements and applicable AML legislation.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in accordance with the Anti-Money Laundering Act (AMLA) and its implementing regulations.
• Gaming History: Retained for three (3) years following the date of play, or for five (5) years if associated with a transaction record retained under AML requirements.
• KYC / Verification Documents: Retained for five (5) years after account closure or five (5) years from the date of submission, whichever is later.
• Customer Support Communications: Retained for two (2) years from the date of resolution of the relevant support interaction.
• Technical Logs (IP, Device): Retained for ninety (90) days for security and fraud investigation purposes, unless a longer period is required in connection with an active investigation.
• Marketing Preference Records: Retained indefinitely as evidence of consent status, until withdrawn or the Account is deleted.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised, whichever is technically more practicable, in accordance with wk77's data destruction standards.

wk77 does not sell, rent, or trade your personal data to third parties for marketing purposes. We share personal data only in the following circumstances and only to the extent strictly necessary:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), partner banks (BPI, BDO, Metrobank), and other payment service providers, for the purpose of processing deposits, withdrawals, and payment verification. Each payment processor operates under its own privacy policy and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC service providers engaged to assist with document verification and age confirmation. These providers are contractually bound to process data only for verification purposes.
• Game Content Providers: Software providers such as JILI, Pragmatic Play, and PG Soft receive anonymised or pseudonymised gameplay data necessary to operate and maintain their game services. wk77 does not share personally identifying information with game providers beyond what is technically required for game session management.
• Regulatory Authorities: Philippine government agencies including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies, where disclosure is required by law, court order, or regulatory directive.
• Fraud Prevention Services: Shared fraud risk databases and screening services used to detect and prevent fraudulent activity on the Platform.
• Professional Advisers: Legal counsel, auditors, and accountants bound by confidentiality obligations, where necessary for the conduct of wk77's business.

wk77 primarily processes personal data within the Philippines. In certain circumstances, personal data may be transferred to, or processed by entities located in, jurisdictions outside the Philippines — for example, where game software providers or technology infrastructure partners are incorporated or operate servers outside Philippine territory.

Any international transfer of personal data by wk77 is conducted only where:

• The destination country has been assessed to provide an adequate level of data protection equivalent to Philippine standards under the DPA; or
• Appropriate safeguards are in place, such as contractual clauses approved by the National Privacy Commission or equivalent data transfer agreements; or
• The transfer is strictly necessary for the performance of the contract between you and wk77 (e.g., processing a transaction through an international payment network).

Where personal data is transferred internationally, wk77 ensures that the recipient is contractually bound to maintain confidentiality and to implement technical and organisational security measures appropriate to the risk.

wk77 uses cookies and similar tracking technologies to provide Platform functionality, improve user experience, and support analytics and security operations. The following categories of cookies are used on wk77.asia:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies, authentication tokens, and security cookies. These cookies cannot be disabled without impairing Platform functionality and do not require your consent under applicable law.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming limit configurations. These improve convenience and are enabled by default but can be disabled through your browser settings.
• Analytics Cookies: Used to collect anonymised data about how Players navigate and interact with the Platform, to identify technical issues and improve the user experience. Analytics data is aggregated and does not identify individual users.
• Security and Fraud Detection Cookies: Used to detect unusual access patterns, bot activity, and potential fraud indicators. These operate in the background and do not affect the user experience directly.

You may manage cookie preferences through your browser's cookie settings. Note that disabling non-essential cookies will not affect your ability to access the Platform's core gaming and account management functions, but may reduce certain convenience features.

wk77 implements a layered set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. Key measures include:

• Encryption in Transit: All data transmitted between your browser or device and wk77 servers is encrypted using Transport Layer Security (TLS) with a minimum of 256-bit encryption. This is indicated by the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive data stored in wk77 databases — including identity information and financial records — is encrypted at rest using AES-256 or equivalent standard.
• Access Controls: Access to personal data within wk77's systems is restricted on a need-to-know basis. Staff who process personal data are required to complete data privacy training and are bound by confidentiality obligations.
• Password Security: Player passwords are stored exclusively in hashed form using a strong, salted hashing algorithm. wk77 staff do not have access to plaintext passwords at any time.
• Two-Factor Authentication: Two-factor authentication (2FA) via SMS OTP is available to all Players and strongly recommended. wk77 also applies 2FA internally for staff access to production systems.
• Security Monitoring: wk77 employs real-time intrusion detection, anomaly monitoring, and periodic penetration testing to identify and address security vulnerabilities.
• Data Breach Response: In the event of a personal data breach, wk77 will notify affected Players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in compliance with the DPA's breach notification requirements.

wk77 is strictly an adult gaming platform. Access to and use of the Platform — including account registration, deposit, gameplay, and all other services — is prohibited for persons under the age of twenty-one (21) years. This restriction applies in compliance with Philippine law governing casino-style online gaming and the PAGCOR licensing framework.

wk77 does not knowingly collect personal data from persons under 21. If we become aware that a Person under 21 has provided personal data — whether through registration, a payment transaction, or otherwise — we will promptly delete that data, close the associated account, and return any real-money deposits to the payment method of origin after verification.

wk77 applies mandatory age verification during the KYC process. The submission of a government-issued Philippine identification document confirming date of birth is required before real-money play is enabled on any account. If a Player is subsequently found to have provided false information regarding their age, their account will be immediately terminated and any associated balances forfeited, in accordance with the Terms & Conditions.

If you believe a person under 21 has accessed or attempted to access wk77, or if you are aware of a minor's data that may have been inadvertently submitted to the Platform, please contact our support team immediately.

As a data subject under the Data Privacy Act of 2012 of the Philippines, you hold the following rights with respect to personal data processed by wk77. You may exercise these rights by contacting our Data Protection Officer through the channels described in Section 12.

• Right to Be Informed: The right to be informed whether wk77 holds personal data about you and, if so, the purposes for which it is processed, the sources from which it was obtained, and the recipients to whom it may be disclosed. This Policy constitutes the primary fulfilment of this right.
• Right of Access: The right to request a copy of the personal data held about you, in a commonly used format, together with information about how it is processed. wk77 will respond to access requests within fifteen (15) business days of receipt.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update certain account details directly through the Account Settings page. Corrections to identity or verification data require a support request and may require document resubmission.
• Right to Erasure: The right to request deletion of personal data held about you, subject to legal retention obligations. wk77 cannot delete data that is required to be retained under AMLA, PAGCOR regulations, or other applicable Philippine law, even upon request. Data not subject to such obligations will be deleted promptly.
• Right to Object: The right to object to the processing of your personal data for marketing purposes or on grounds of legitimate interest. Marketing opt-outs take immediate effect. Objections to legitimate interest processing are evaluated on a case-by-case basis.
• Right to Data Portability: The right to receive personal data that you have provided to wk77 in a structured, commonly used, and machine-readable format, for transmission to another controller.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated. Information on submitting a complaint is available on the NPC website at privacy.gov.ph.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or have a complaint about the way wk77 has handled your personal data, please contact our Data Protection Officer through any of the following channels:

• Live Chat: Available on the Platform 24 hours a day, 7 days a week, in English and Filipino.
• Support Ticket: Submitted through the Help / Support section of your wk77 account dashboard.
• Written Correspondence: Addressed to the Data Protection Officer at the registered address of wk77, details available upon request through live support.

wk77 aims to acknowledge all data rights requests within three (3) business days and to resolve them fully within fifteen (15) business days. For complex requests — such as those involving large volumes of data or requiring consultation with third parties — we may extend this period by a further fifteen (15) business days, in which case we will inform you of the extension and the reasons for it.

If your complaint is not resolved to your satisfaction through our internal process, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.

wk77 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to Players via account notification or a prominent notice on the Platform prior to the change's effective date. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms.