Privacy Policy — fk776

1 Data Controller

1.1 For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines ("DPA"), fk776 is the personal information controller in respect of all personal data collected through the fk776 Platform at fk776.org.

1.2 fk776 operates under a licence granted by the Philippine Amusement and Gaming Corporation (PAGCOR). The processing of personal data by fk776 is subject to both the DPA and applicable PAGCOR regulatory requirements.

1.3 Contact details for fk776's Data Protection Officer (DPO) are set out in Section 14 of this Policy.

2 Personal Data We Collect

2.1 fk776 collects the following categories of personal data from registered Players and Platform users:

2.2 fk776 does not collect special categories of sensitive personal data (as defined under the DPA) unless specifically required to do so by PAGCOR regulation or court order.

3 How We Collect Your Data

3.1 Directly From You: fk776 collects personal data directly from you when you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your Account settings.

3.2 Automatically: When you access and use the fk776 Platform, certain technical data is collected automatically by our servers and analytics systems. This includes IP addresses, device identifiers, browser information, session data, and cookies. See Section 7 for the fk776 Cookie Policy.

3.3 From Third Parties: fk776 may receive personal data from the following third-party sources in limited circumstances:

• Identity verification service providers engaged to assist with KYC compliance (for the purpose of verifying government-issued Philippine IDs);
• Payment processors and e-wallet providers (GCash, Maya, BPI, BDO) for transaction confirmation and fraud prevention;
• PAGCOR and other Philippine regulatory bodies, where information sharing is legally required;
• Fraud prevention and AML screening services.

3.4 fk776 does not purchase personal data lists from data brokers or marketing list providers.

4 Legal Basis for Processing

4.1 fk776 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between fk776 and the Player — specifically, to operate the account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (RA 9160), the PAGCOR Charter, and the Data Privacy Act itself. Mandatory KYC verification, transaction reporting, and self-exclusion register compliance fall within this basis.
• Legitimate Interests: Processing is necessary for fk776's legitimate interests in fraud prevention, platform security, responsible gaming enforcement, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: Where fk776 sends direct marketing communications via email or SMS beyond transactional messages, this is done on the basis of your separately obtained consent. You may withdraw marketing consent at any time via Account settings or by contacting support.

5 How We Use Your Personal Data

5.1 fk776 uses the personal data collected for the following specific purposes:

5.1.1 Account Management & Service Delivery

To create and manage your fk776 Account, authenticate your identity at login, process deposits and withdrawals, apply responsible gaming controls you have set, and provide all gaming and sports betting services available on the Platform.

5.1.2 KYC & Regulatory Compliance

To verify your identity and age (21+ requirement) as mandated by PAGCOR, to conduct anti-money laundering (AML) screening as required under RA 9160, to report required transactions to the Anti-Money Laundering Council (AMLC), and to maintain PAGCOR player registration records.

5.1.3 Payment Processing

To process GCash, Maya, and bank transfer deposits and withdrawals, to verify that payment methods are registered to the Account holder, and to maintain transaction records required under Philippine financial regulations.

5.1.4 Fraud Prevention & Platform Security

To detect and prevent fraudulent Account activity, bonus abuse, money laundering, multiple-account registrations, and other prohibited activities. Technical data including IP addresses and device identifiers is used for security monitoring and session integrity verification.

5.1.5 Customer Support

To respond to your queries, investigate complaints, process responsible gaming requests (such as self-exclusion or deposit limit changes), and maintain accurate support interaction records.

5.1.6 Platform Improvement

To analyse aggregated, anonymised usage data to improve the fk776 Platform, game lobby, and user experience. Individual gaming data used for this purpose is anonymised before analysis.

5.1.7 Marketing Communications

To send promotional information about fk776 bonuses, new games, and platform updates via email or SMS — but only where you have provided explicit consent. Marketing preferences can be managed at any time via Account settings.

6 Sharing Your Personal Data

6.1 fk776 does not sell, rent, or trade your personal data to third parties. We share personal data only where it is necessary to deliver the fk776 service or comply with applicable law, and only with the following categories of recipients:

• Identity Verification Providers: Third-party KYC service providers engaged to assist with verification of government-issued Philippine IDs. These providers process your data solely on fk776's instructions under data processing agreements.
• Payment Processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations, Inc.), and Philippine banking institutions, for the purpose of processing deposits and withdrawal transactions. fk776 does not store full financial account credentials — these are handled directly by the respective payment providers.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where fk776 is legally obliged to disclose information.
• Game Content Providers: Certified game providers (including but not limited to Pragmatic Play, Evolution Gaming, JILI Games) may receive session metadata necessary to deliver live game streams and RNG game content. Game providers do not receive your identity documents or financial data.
• AML Screening Services: Third-party sanctions and adverse media screening providers used to meet fk776's AML compliance obligations under RA 9160.
• Legal and Professional Advisors: Philippine law firms, auditors, and compliance consultants engaged by fk776, subject to professional confidentiality obligations.

6.2 All third-party data processors engaged by fk776 are contractually bound to process personal data only on fk776's documented instructions and to implement appropriate security measures consistent with the DPA.

7 Cookies & Tracking Technologies

7.1 fk776 uses cookies and similar tracking technologies on the Platform for the following purposes:

7.2 You may manage or disable non-essential cookies via your browser settings at any time. Disabling essential or security cookies may impair or prevent your use of the fk776 Platform.

7.3 fk776 does not use third-party advertising or retargeting cookies that track your activity on other websites outside fk776.org.

8 Data Retention

8.1 fk776 retains personal data for the following periods, unless a longer retention period is required by applicable Philippine law or PAGCOR regulation:

8.2 Where personal data is no longer required for the applicable retention period, fk776 will securely delete or irreversibly anonymise the data in accordance with its internal data lifecycle procedures.

9 Your Privacy Rights

9.1 Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you have the following rights in relation to your personal data held by fk776:

9.2 How to Exercise Your Rights: To exercise any of the above rights, contact fk776's Data Protection Officer using the contact details in Section 14. fk776 will respond to valid requests within fifteen (15) business days of receipt, or such longer period as may be required by the complexity of the request — in which case you will be notified of the expected timeline.

9.3 Identity Verification for Rights Requests: For security purposes, fk776 will require you to verify your identity before processing a data rights request. This is to protect against fraudulent requests that could result in the disclosure of your personal data to a third party.

10 Children and Minors

10.1 The fk776 Platform is strictly for individuals aged 21 years and above as required by PAGCOR regulation. fk776 does not knowingly collect personal data from persons under 21 years of age.

10.2 Age verification is a mandatory step in the fk776 Account registration process. If fk776 discovers that personal data has been collected from a person under 21, the Account will be immediately suspended, the data will be flagged for regulatory reporting, and all personal data belonging to the minor will be securely deleted to the extent permitted by applicable law following completion of any required regulatory reporting.

10.3 If you believe that a person under 21 has registered an Account on fk776, please notify fk776's support team immediately at [email protected].

11 Data Security

11.1 fk776 implements technical and organisational security measures appropriate to the risk posed by the personal data we process. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and fk776's servers is encrypted using TLS 1.3 protocol;
• Encryption at Rest: Sensitive personal data stored in fk776's databases is encrypted at the storage layer;
• Access Controls: Access to personal data within fk776's systems is restricted on a need-to-know basis and controlled via role-based access permissions with multi-factor authentication for system administrators;
• Intrusion Detection: fk776's platform infrastructure is monitored continuously for anomalous activity and intrusion attempts;
• Data Breach Response: fk776 maintains a data breach response procedure. In the event of a breach likely to affect your rights and freedoms, you will be notified within 72 hours of fk776 becoming aware, in accordance with NPC notification requirements.

11.2 Notwithstanding the above, no digital system is completely immune to security threats. fk776 recommends that you maintain strong, unique passwords for your Account, enable two-factor authentication, and report any suspected security incidents to fk776 support immediately.

12 Third-Party Services

12.1 The fk776 Platform integrates third-party services for the delivery of game content, payment processing, and KYC verification. These services are provided by entities independent of fk776, each operating under their own privacy policies and terms of service.

12.2 fk776 does not control and is not responsible for the data practices of third-party game providers, payment processors, or identity verification services when you interact directly with their systems — for example, when you approve a GCash transaction in the GCash application.

12.3 All third-party processors engaged by fk776 to process personal data on fk776's behalf are required by contract to:

• Process personal data only on fk776's documented instructions;
• Implement appropriate security measures;
• Delete or return personal data upon termination of the processing relationship;
• Comply with applicable Philippine data protection law.

13 Changes to This Privacy Policy

13.1 fk776 reserves the right to update this Privacy Policy at any time to reflect changes in its data practices, applicable Philippine law, or PAGCOR regulatory requirements. The effective date of the current version is displayed at the top of this document.

13.2 Where changes are material — affecting your rights or how your data is used in a significant way — fk776 will notify registered Players via the contact details on their Account at least fourteen (14) days before the changes take effect.

13.3 Continued use of the fk776 Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the Platform and may request Account closure.

14 Contact & Data Protection Officer

14.1 fk776 has designated a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. The DPO is responsible for overseeing fk776's compliance with the DPA and this Privacy Policy.

14.2 To exercise your data privacy rights, submit a data-related complaint, or ask questions about this Privacy Policy, contact fk776's DPO through the following channels:

• Email: [email protected] (please include "Data Privacy Request" in the subject line)
• Live Chat: Via the chat button inside your fk776 Account dashboard, available 24/7

14.3 If you are not satisfied with fk776's handling of your data privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the statutory body responsible for enforcing the Data Privacy Act of 2012.