mk777 Privacy Policy

1 Personal Data We Collect

mk777 collects the following categories of personal data from users of the Platform:

Identity Data:

• Full legal name as it appears on your government-issued ID;
• Date of birth and age verification documents;
• Government-issued identification number (e.g., SSS, GSIS, PhilHealth, TIN, passport number);
• Photograph or selfie for identity verification purposes.

Contact Data:

• Email address;
• Mobile phone number;
• Residential address (city, province, postal code).

Financial Data:

• GCash or PayMaya account number;
• Bank account details (BPI, BDO, Metrobank, or other approved banks) for withdrawal purposes;
• Transaction history including deposits, withdrawals, and wager records.

Technical Data:

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session logs, login timestamps, and activity records.

Behavioral Data:

• Game history, betting patterns, and wagering activity;
• Bonus usage and promotional participation records;
• Customer support interaction records.

2 How We Collect Your Data

mk777 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud detection data from payment processors; transaction monitoring data from anti-money laundering compliance systems.

3 Purpose of Processing

mk777 processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your mk777 player account;
• Identity verification: To verify your identity and age (21+) in compliance with regulatory requirements;
• Service delivery: To provide access to games, process bets, and deliver the full range of mk777 Platform features;
• Financial transactions: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment channels;
• Regulatory compliance: To comply with applicable Philippine laws including anti-money laundering (AMLA), data privacy (DPA), and gaming regulations;
• Fraud prevention: To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct;
• Responsible gaming: To monitor gaming behavior and provide responsible gaming tools and interventions where appropriate;
• Customer support: To respond to your inquiries, complaints, and support requests;
• Marketing communications: To send you promotional offers, bonuses, and platform updates, where you have consented to receive such communications;
• Platform improvement: To analyze usage patterns and improve the functionality, security, and user experience of the mk777 Platform.

4 Legal Basis for Processing

mk777 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform the contract between you and mk777 — specifically, to operate your player account and deliver the Platform's services;
• Legal obligation: Processing is required to comply with applicable Philippine laws, including AMLA reporting obligations, KYC requirements, and gaming regulatory requirements;
• Legitimate interests: Processing is necessary for mk777's legitimate interests in fraud prevention, platform security, and responsible gaming enforcement, provided these interests are not overridden by your rights;
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.

5 Data Sharing & Disclosure

mk777 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment service providers, for the purpose of processing deposits and withdrawals;
• KYC and identity verification providers: Third-party services that assist in verifying your identity and age in compliance with regulatory requirements;
• Fraud prevention and AML services: Third-party compliance and monitoring services used to detect and prevent fraud and money laundering;
• Regulatory authorities: The Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law;
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on mk777's behalf under strict data processing agreements;
• Professional advisors: Legal counsel, auditors, and other professional advisors, subject to confidentiality obligations.

All third parties with whom mk777 shares personal data are required to handle such data in accordance with applicable data protection laws and mk777's data processing standards.

6 Data Retention

mk777 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine anti-money laundering regulations;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with mk777's data disposal procedures.

7 Data Security

mk777 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption; sensitive data at rest is encrypted using industry-standard algorithms;
• Access controls: Personal data is accessible only to authorized mk777 personnel and service providers on a strict need-to-know basis;
• Security audits: mk777 conducts regular security assessments, penetration testing, and vulnerability scans of its systems;
• Incident response: mk777 maintains a data breach response plan and will notify affected users and the National Privacy Commission within 72 hours of discovering a breach that poses a real risk of serious harm, as required by the DPA;
• Staff training: All mk777 personnel with access to personal data receive regular data privacy and security training.

While mk777 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

8 Cookies & Tracking Technologies

mk777 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and display options to provide a personalized experience;
• Analytics cookies: Collect anonymized data about how users interact with the Platform to help us improve performance and usability;
• Responsible gaming cookies: Track session duration and activity to support responsible gaming features such as time reminders and session limits.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the mk777 Platform. mk777 does not use third-party advertising or cross-site tracking cookies.

9 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by mk777:

• Right to be informed: The right to know what personal data mk777 collects about you and how it is processed;
• Right of access: The right to request a copy of the personal data mk777 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to mk777's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact mk777's Data Protection Officer using the contact details in Section 11. mk777 will respond to all verified requests within 15 business days.

10 Minors & Age Policy

The mk777 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. mk777 does not knowingly collect personal data from individuals under the age of 21.

As part of our registration and KYC process, mk777 requires all users to verify their age using a valid government-issued Philippine identification document. Any account found to belong to a person under 21 years of age will be immediately suspended, all deposits returned, and any winnings forfeited.

If you are a parent or guardian and believe that a minor has registered on the mk777 Platform or provided personal data without your consent, please contact us immediately at support@mk777.club and we will take prompt action to investigate and, where confirmed, delete the relevant data and close the account.

11 Contact & Data Protection Officer

mk777 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Policy, please contact our DPO:

• Email: support@mk777.club
• Subject line: "Data Privacy Request – [Your Name]"
• Response time: Within 15 business days of receipt of a verified request

For general customer support inquiries unrelated to data privacy, please also use the same email address. Our support team is available 24/7 in English and Filipino.