Privacy Policy – wk7 Casino Philippines

1. Introduction

This Privacy Policy ("Policy") describes how wk7 ("we," "us," "our," "the Platform") collects, processes, stores, shares, and protects personal information in connection with the operation of the wk7 online gaming platform accessible at wk7.bio and all associated services (collectively, "Services").

wk7 is committed to protecting the privacy of all players and visitors, with particular attention to the rights of Filipino data subjects under the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations as enforced by the National Privacy Commission of the Philippines.

By registering an account with wk7, accessing the Platform, or otherwise using the Services, you acknowledge that you have read, understood, and agreed to the practices described in this Policy. This Policy should be read together with our Terms & Conditions.

2. Personal Data We Collect

2.1 Registration and Identity Data

When you create a wk7 account, we collect the following information:

• Full legal name
• Date of birth (required to verify the 21+ age requirement)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address (required for KYC verification)

2.2 Identity Verification (KYC) Data

To comply with anti-money-laundering obligations and PAGCOR framework requirements, wk7 may collect:

• Copies of government-issued identification documents (PhilSys National ID, passport, driver's license, or equivalent)
• Selfie or liveness verification images for document authentication
• Proof of payment method documentation
• Source of funds declarations where required by regulatory thresholds

2.3 Financial Transaction Data

Records of all deposits, withdrawals, wagers, and bonus claims associated with your wk7 account, including payment method identifiers (e.g., GCash mobile number, bank account last digits), transaction amounts in Philippine Pesos, and timestamps.

2.4 Gameplay and Behavioral Data

Game session data including games played, bet amounts, win/loss outcomes, session durations, and responsible gaming tool usage. This data is used for fraud detection, fairness verification, and improving the platform experience.

2.5 Technical and Device Data

IP address, device type and operating system, browser type and version, mobile network operator (Smart, Globe, DITO), session cookies, and log files generated during your use of the Platform.

2.6 Communications Data

Records of communications between you and wk7 support, including live chat transcripts, email correspondence, and support ticket content. These records are retained for quality assurance and dispute resolution purposes.

3. How We Collect Your Data

wk7 collects personal data through the following means:

• Directly from you — when you register, complete KYC, make a deposit, contact support, or update your account settings.
• Automatically — through cookies, web beacons, and server logs when you visit or interact with the wk7 website or gaming interface.
• From third-party payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other payment providers may share transaction confirmation data with wk7 to verify deposits and process withdrawals.
• From identity verification service providers — third-party KYC and AML screening services may provide verification status and risk scoring for your account.
• From fraud prevention and analytics services — device fingerprinting and behavioral analytics tools may automatically collect technical data to detect fraudulent activity.

4. Purpose and Legal Basis for Processing

wk7 processes your personal data only for specified, legitimate purposes. The following table summarizes the primary purposes and the corresponding legal basis under the DPA:

• Account creation and management — necessary for the performance of the contract between you and wk7.
• Identity verification and age compliance — legal obligation under PAGCOR framework requirements and anti-money-laundering regulations.
• Processing deposits and withdrawals — necessary for the performance of the contract; financial regulatory compliance.
• Fraud prevention and security monitoring — legitimate interests of wk7 and protection of the player community.
• Responsible gaming compliance — legal obligation; protection of vital interests of players.
• Customer support — legitimate interests in resolving player queries and disputes.
• Marketing communications — your consent (opt-in); you may withdraw consent at any time.
• Platform analytics and improvement — legitimate interests of wk7 in maintaining and improving the Services.
• Legal and regulatory compliance — compliance with applicable Philippine laws and regulatory directives.

5. Sharing Your Personal Data

wk7 does not sell your personal data to any third party. We share data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash (PayMaya/Maya), BPI, BDO, Metrobank, Visa/Mastercard processing networks — to facilitate transactions.
• KYC and AML service providers: Third-party identity verification and anti-money-laundering screening services engaged by wk7 under data processing agreements.
• Game software providers: JILI Technology, PG Soft, Pragmatic Play, Spadegaming, and other licensed game suppliers — receive anonymized session data for game integrity and RNG auditing purposes.
• Cloud and hosting infrastructure providers: Server and data storage providers operating under strict data processing agreements that prohibit independent use of your data.
• Regulatory authorities: PAGCOR, the National Privacy Commission, AMLC (Anti-Money Laundering Council), and other Philippine regulatory bodies, where required by law or regulatory directive.
• Law enforcement: Philippine law enforcement agencies, when required by valid legal process including court orders or duly issued subpoenas.

6. Cookies and Tracking Technologies

The wk7 website uses cookies and similar tracking technologies to operate the Platform, recognize returning users, maintain session state, prevent fraud, and improve user experience. The categories of cookies used are:

• Strictly necessary cookies: Essential for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without preventing core functionality.
• Functional cookies: Remember your preferences such as language settings and display preferences across sessions.
• Analytics cookies: Collect anonymized data about how players use the Platform (pages visited, session duration, error events) to help us improve the experience.
• Fraud prevention cookies: Used to detect and prevent fraudulent access attempts and multi-accounting.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your wk7 account.

7. Data Security

wk7 implements the following technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• TLS 1.2/1.3 encryption for all data in transit between your device and wk7 servers.
• AES-256 encryption for sensitive data at rest, including identity document copies and financial records.
• Bcrypt hashing with individual salts for all stored passwords — plain-text passwords are never stored.
• Role-based access control limiting employee access to personal data on a strict need-to-know basis.
• Regular penetration testing and security audits of the Platform and underlying infrastructure.
• 24/7 intrusion detection and automated anomaly alerting on account access patterns.
• Secure data centers with physical access controls, redundant power, and environmental monitoring.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach affecting your rights and freedoms, wk7 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required by the DPA.

8. Data Retention

wk7 retains personal data for the following periods, after which data is securely deleted or irreversibly anonymized:

• Account and transaction records: Retained for a minimum of five (5) years after account closure, as required by anti-money-laundering regulations applicable in the Philippines.
• KYC documentation: Retained for five (5) years after the last transaction or account closure, whichever is later.
• Gameplay session logs: Retained for three (3) years for fairness auditing and dispute resolution purposes.
• Support communications: Retained for three (3) years from the date of the last communication in each ticket or thread.
• Marketing data: Retained until you withdraw consent or for a maximum of two (2) years from your last interaction with a marketing communication, whichever occurs first.
• Server access logs: Retained for 12 months for security monitoring purposes.

9. Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by wk7:

• Right to be informed — the right to know what personal data we collect and how it is used, as described in this Policy.
• Right of access — the right to request a copy of the personal data we hold about you.
• Right to rectification — the right to request correction of inaccurate or incomplete personal data.
• Right to erasure — the right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object — the right to object to certain types of processing, including direct marketing. Objections to marketing will be honored immediately.
• Right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to file a complaint — the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe your data rights have been violated.

To exercise any of these rights, contact the wk7 Data Protection Officer at the email address provided in Section 13 of this Policy. We will acknowledge your request within 5 business days and respond substantively within 15 business days. Some requests may require identity verification before we can act on them.

10. Children's Privacy

The wk7 platform is strictly intended for persons who are at least 21 years of age. We do not knowingly collect personal data from individuals under 21 years old. The 21+ age threshold applies under the PAGCOR framework governing casino-style gaming in the Philippines.

If we become aware that we have collected personal data from a person under the age of 21, we will immediately close the associated account, void all transactions, return any real-money balance, and delete the personal data collected without undue delay. If you believe a minor has registered on the wk7 platform, please contact us immediately at the details in Section 13.

11. International Data Transfers

Certain service providers engaged by wk7 — including cloud infrastructure, game software providers, and analytics platforms — may process your personal data on servers located outside the Philippines. Where such transfers occur, wk7 ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses recognized by the National Privacy Commission.
• Transfers only to service providers operating under data protection regimes offering equivalent protections to those under Philippine law.
• Contractual prohibitions on the receiving party's independent use of your personal data for any purpose other than providing services to wk7.

12. Changes to This Privacy Policy

wk7 reserves the right to update this Privacy Policy at any time to reflect changes in our practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect, except where a shorter notice period is required by law.

The "Last updated" date at the top of this Policy reflects the most recent revision. Your continued use of the wk7 Services after the effective date of an updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically.

13. Contact and Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or to report a potential data breach, please contact the wk7 Data Protection Officer:

Data Protection Officer — wk7

Email: [email protected] (plain text — not a link; use the subject line "Privacy / DPO Request")

Live Chat: Available 24/7 through the wk7 platform after signing in.

Our DPO is registered with the National Privacy Commission of the Philippines in accordance with NPC Advisory No. 2017-01. We are committed to resolving all privacy concerns promptly and transparently, consistent with the rights and obligations established under the Data Privacy Act of 2012 and its Implementing Rules and Regulations.