koko7 Privacy
Policy

1. Introduction

koko7 ("we", "us", "our") is committed to protecting the privacy and personal data of all users of the koko7 online casino platform ("the Platform"). This Privacy Policy describes how koko7 collects, uses, stores, shares, and protects personal information provided by Filipino players and other users of the Platform.

This policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC) of the Philippines. It also reflects applicable international data protection standards.

By registering an account on koko7, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for your personal information is koko7. As data controller, koko7 determines the purposes and means of processing your personal data collected through the Platform.

If you have any questions about how koko7 handles your personal data, or wish to exercise any of your data subject rights, please contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this policy.

3. Data We Collect

koko7 collects personal data from you in the following categories, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name, date of birth, and nationality
• Email address and mobile number
• Username and encrypted password
• Residential address (including city — e.g., Manila, Cebu, Davao, Makati, Quezon City)

3.2 KYC & Verification Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence)
• Proof of address documents
• Selfie or facial verification images where required
• Source of funds declarations where applicable

3.3 Financial & Transaction Data

• Deposit and withdrawal history (amounts in PHP ₱, dates, payment method used)
• GCash or PayMaya / Maya account reference numbers
• Bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) where used for transfers
• Debit card details (masked; full card numbers are never stored by koko7)

3.4 Gaming & Behavioural Data

• Game history, wager amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

3.5 Technical & Device Data

• IP address, browser type and version, operating system
• Device identifiers and screen resolution
• Referring URL and pages visited on the koko7 Platform
• Cookie and session data (see Section 7)

3.6 Communications Data

• Customer support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing preference settings

Data Category	Examples	Required?
Identity	Name, DOB, email, mobile	Mandatory
KYC Documents	Government ID, proof of address	Mandatory (for withdrawals)
Financial	GCash ref, bank details	Mandatory (for transactions)
Gaming History	Bets, wins, session time	Automatic
Technical	IP address, device info	Automatic
Marketing Prefs	Email opt-in status	Optional

4. How We Use Your Data

koko7 uses the personal data we collect for the following purposes:

• Account creation and management: To register your koko7 account, verify your identity, and maintain your account in good standing.
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver customer support.
• KYC and AML compliance: To verify your identity and age (21+), conduct anti-money laundering checks, and comply with applicable Philippine regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct on the koko7 Platform.
• Responsible gaming: To monitor gaming behaviour, enforce self-exclusion requests, and provide responsible gaming tools to Filipino players.
• Personalisation: To tailor game recommendations, promotions, and content to your preferences and gaming history.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have opted in to receive such communications.
• Legal and regulatory obligations: To comply with applicable Philippine laws, regulatory requirements, and lawful requests from authorities.
• Platform improvement: To analyse usage patterns, troubleshoot technical issues, and improve the koko7 user experience.

5. Legal Basis for Processing

koko7 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given explicit consent, such as opting in to marketing communications or agreeing to this Privacy Policy upon registration.
• Contractual necessity: Where processing is necessary to perform our contract with you — i.e., to operate your koko7 account and deliver gaming services.
• Legal obligation: Where processing is required to comply with applicable Philippine laws, including AML regulations, PAGCOR-aligned requirements, and the Data Privacy Act itself.
• Legitimate interests: Where processing is necessary for koko7's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.

6. Data Sharing & Disclosure

koko7 does not sell, rent, or trade your personal data to third parties. We may share your data only in the following limited circumstances:

6.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the koko7 Platform, including payment processors (GCash, PayMaya / Maya, banks), KYC verification providers, game software suppliers, cloud hosting providers, and customer support platforms. All service providers are contractually bound to process your data only on koko7's instructions and in accordance with applicable data protection law.

6.2 Regulatory & Legal Authorities

koko7 may disclose personal data to Philippine regulatory bodies, law enforcement agencies, or courts where required by law, court order, or regulatory directive. This includes disclosures required under AML regulations and PAGCOR-aligned compliance obligations.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of koko7's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

7. Cookies & Tracking Technologies

koko7 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage, and deliver relevant content. The types of cookies we use include:

• Essential cookies: Required for the Platform to function. These cannot be disabled without affecting core functionality (e.g., session management, login state).
• Analytics cookies: Used to understand how players interact with koko7, which pages are most visited, and where technical issues occur. Data is aggregated and anonymised where possible.
• Preference cookies: Store your language, display, and notification preferences so you don't have to reset them on each visit.
• Marketing cookies: Used to deliver relevant promotional content based on your gaming activity and preferences — only where you have consented.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may impair your ability to use certain features of the koko7 Platform.

8. Data Retention

koko7 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer support records: Retained for two (2) years from the date of each interaction.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications.

Upon expiry of the applicable retention period, koko7 will securely delete or anonymise your personal data in accordance with our data disposal procedures.

9. Data Security

koko7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the koko7 Platform
• Encryption of sensitive data at rest, including financial and identity information
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments
• Multi-factor authentication for administrative access to koko7 systems
• Incident response procedures for detecting and responding to data breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, koko7 will notify the National Privacy Commission (NPC) and affected users in accordance with the requirements of the Data Privacy Act of 2012.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by koko7:

• Right to be informed: The right to know what personal data koko7 collects about you and how it is used — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data koko7 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to koko7's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact koko7's Data Protection Officer using the details in Section 15. koko7 will respond to all valid data subject requests within thirty (30) days of receipt.

11. Children's Privacy

The koko7 Platform is strictly intended for users who are 21 years of age or older, in accordance with Philippine law governing casino-style gambling. koko7 does not knowingly collect personal data from individuals under the age of 21.

If koko7 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds to the original payment source. If you believe a minor has registered on koko7, please contact us immediately using the details in Section 15.

12. International Data Transfers

koko7 primarily processes and stores personal data within the Philippines. Where data is transferred to service providers or infrastructure located outside the Philippines (for example, cloud hosting or game software providers), koko7 ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses that provide a level of protection equivalent to that required under Philippine law.

13. Third-Party Links

The koko7 Platform may contain links to third-party websites or services for informational purposes. koko7 is not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to data collected through the koko7 Platform.

14. Changes to This Privacy Policy

koko7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The updated policy will be posted on this page with a revised "Last Updated" date. Where changes are material, koko7 will notify registered users via email or in-platform notification. Your continued use of the koko7 Platform following the posting of changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by koko7, please contact our Data Protection Officer:

Email: [email protected]

For general support enquiries, you may also reach our team at: [email protected]

Both email addresses are provided as plain text for informational purposes only. koko7 aims to respond to all privacy-related enquiries within five (5) business days. For urgent account security concerns, please use the live chat feature available on the koko7 Platform.