Privacy Policy

Section 1

Who We Are

ki333 is the operator of ki333.co, an online casino and sports betting platform serving Filipino players in the Philippines. In the context of this Privacy Policy, ki333 acts as the Personal Information Controller (PIC) as defined under Republic Act 10173 — the Data Privacy Act of 2012 (DPA) — and its Implementing Rules and Regulations (IRR) as enforced by the National Privacy Commission of the Philippines.

As a PAGCOR-compliant online gaming operator, ki333 is subject to data governance requirements imposed by PAGCOR in addition to the obligations imposed by the DPA. This Privacy Policy is designed to satisfy both sets of obligations and to give ki333 players a clear and complete picture of how their personal data is handled.

Section 2

Personal Data We Collect

ki333 collects the following categories of personal data in the course of providing its services:

2.1 Registration and Identity Data

• Full legal name as appearing on a government-issued Philippine identification document
• Date of birth (to verify the 21+ minimum age requirement)
• Gender
• Registered mobile number (Philippine format)
• Email address
• Username and encrypted password
• Residential address

2.2 KYC and Identity Verification Data

• Government-issued Philippine ID number and document type (e.g., UMID, PhilSys National ID, Driver's License, Passport)
• Scanned copy or photograph of identification document
• Selfie or liveness verification image (where required)
• Proof of address documentation (where requested)
• Source of funds documentation (where required for AML compliance)

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., GCash account reference, bank account last digits) — ki333 does not store full card numbers or complete GCash PINs
• Account wallet balance history
• Bonus and promotion transaction records

2.4 Gaming Activity Data

• Game session logs including game type, stakes, outcomes, and session duration
• Sports betting records including markets, amounts wagered, and results
• Bonus wagering activity
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Technical and Device Data

• IP address
• Device type, operating system, and browser information
• Login timestamps and session identifiers
• Geolocation data (city/region level, not precise GPS coordinates)
• Cookies and similar tracking technologies (see Section 9)

2.6 Communications Data

• Content of communications with ki333 customer support
• Records of complaints and dispute resolution correspondence
• Email and SMS communication preferences

Section 3

How We Collect Personal Data

ki333 collects personal data through the following channels:

Section 4

Legal Bases for Processing

ki333 processes your personal data on the following legal bases as provided under Section 12 and Section 13 of the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfil ki333's obligations under the Terms & Conditions to which you have agreed — including account management, payment processing, game delivery, and customer support.
• Legal Obligation: Processing required to comply with applicable Philippine law — including PAGCOR licensing requirements, Republic Act 9160 (Anti-Money Laundering Act), Republic Act 10173 (Data Privacy Act), and related regulations.
• Legitimate Interests: Processing necessary for ki333's legitimate interests in operating a secure, fraud-free, and compliant gaming platform — including fraud prevention, security monitoring, and platform improvement — where such interests are not overridden by your fundamental rights.
• Consent: Where ki333 relies on consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Section 5

How ki333 Uses Your Personal Data

ki333 uses the personal data it collects for the following specific purposes:

5.1 Account Operations

To create and maintain your ki333 account, authenticate your identity at login, process deposits and withdrawals, and deliver the ki333 gaming services you have subscribed to.

5.2 Regulatory Compliance

To fulfil ki333's obligations under PAGCOR licensing requirements, including player due diligence (KYC), transaction monitoring for anti-money laundering purposes, reporting obligations to the Anti-Money Laundering Council (AMLC), and responsible gaming record-keeping.

5.3 Fraud Prevention and Security

To detect and investigate suspicious account activity, prevent unauthorised access, identify multiple account violations, and protect the integrity of ki333's gaming operations for all players.

5.4 Responsible Gaming

To monitor gaming patterns and apply responsible gaming interventions where necessary, to honour self-exclusion requests and cooling-off periods, and to maintain records required for compliance with PAGCOR's responsible gaming obligations. See Section 12 for more detail.

5.5 Customer Support

To respond to your queries, process complaints, resolve disputes, and maintain records of support interactions in accordance with our complaint handling obligations.

5.6 Platform Improvement

To analyse aggregated and anonymised usage data to improve the ki333 platform, identify technical issues, and develop new features. Such analytics are conducted on data that has been de-identified wherever practicable.

5.7 Marketing Communications (with Consent)

To send you promotional offers, new game notifications, and account-specific communications where you have consented to receive marketing messages. You may withdraw this consent at any time by updating your communication preferences in your account settings.

Section 6

Data Sharing and Disclosure

ki333 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. ki333 shares personal data only in the following circumstances:

6.1 Regulated Service Providers

ki333 engages accredited third-party service providers to support its operations, including payment processors (GCash, Maya, bank transfer networks), KYC identity verification services, cloud hosting and data storage providers, and customer support technology platforms. These providers process data on ki333's behalf under contractual data processing agreements that require them to maintain appropriate security standards and process data only as directed by ki333.

6.2 Philippine Government and Regulatory Bodies

ki333 is required by Philippine law to disclose personal data to the following authorities when lawfully requested or when required by ki333's regulatory obligations:

• Philippine Amusement and Gaming Corporation (PAGCOR) — as the primary gaming regulatory authority
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting under Republic Act 9160
• National Privacy Commission (NPC) — for data breach notifications and regulatory investigations
• Bureau of Internal Revenue (BIR) — where required for tax compliance purposes
• Law enforcement authorities — where compelled by court order or lawful legal process

6.3 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of ki333's business, personal data held by ki333 may be transferred to the successor entity subject to the same privacy obligations as set out in this Policy.

Section 7

Data Retention

ki333 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR and AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of transaction, in accordance with Republic Act 9160 and applicable BIR regulations.
• Gaming activity logs: Retained for the period required by PAGCOR licensing terms, generally a minimum of two (2) years.
• Customer support records: Retained for three (3) years from the date of the last interaction, or longer if the matter is the subject of an unresolved complaint or legal proceedings.
• Marketing preferences: Retained until withdrawn or account closure, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with ki333's data disposal procedures.

Section 8

Data Security

ki333 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ki333's servers
• Encryption of stored personal data and financial records at rest
• Role-based access controls limiting data access to authorised personnel with a demonstrated business need
• Two-factor authentication requirements for ki333 staff accessing systems containing personal data
• Regular penetration testing and security audits conducted by independent third parties
• Data breach detection monitoring and incident response procedures
• Staff training on data privacy and security obligations under the DPA

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ki333 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals within a reasonable timeframe as required by the DPA.

Section 9

Cookies and Tracking Technologies

ki333 uses cookies and similar tracking technologies on ki333.co to operate the platform and improve your experience. The following types of cookies are used:

ki333 does not use advertising cookies or participate in third-party advertising networks. You can manage non-essential cookies through your browser settings. Please note that disabling essential cookies will impair your ability to log in and use ki333's services.

Section 10

Your Data Rights

Under the Philippine Data Privacy Act of 2012 and its IRR, you have the following rights in relation to your personal data held by ki333:

To exercise any of these rights, submit a written request to ki333's Data Protection Officer at [email protected]. ki333 will acknowledge your request within 48 hours and respond within the timeframes prescribed by the DPA, generally within fifteen (15) business days. Some requests may be subject to identity verification before ki333 can process them.

Section 11

Children's Privacy

ki333 does not knowingly collect personal data from persons under the age of 21. The minimum age to register for and use ki333 is 21 years, as mandated by PAGCOR regulations. All registrations are subject to age verification through the KYC process.

If ki333 becomes aware that it has inadvertently collected personal data from a person under 21 years of age, it will immediately close the associated account, delete the personal data, and take any additional steps required by applicable law. If you have reason to believe that a minor has registered on ki333, please notify us immediately at [email protected].

Section 12

Responsible Gaming and Data Processing

ki333 processes gaming activity data for responsible gaming purposes, including the detection of gaming patterns that may indicate problem gambling behaviour. This processing is conducted on the basis of ki333's legal obligations under PAGCOR's responsible gaming framework and ki333's legitimate interests in maintaining a safe gaming environment.

Where ki333 applies responsible gaming interventions — such as mandatory deposit limits, cooling-off periods, or referrals to support resources — this may involve processing of your gaming history, transaction records, and account behaviour data. Such processing is strictly limited to responsible gaming purposes.

Self-exclusion requests are recorded and maintained for the full term of the exclusion period, even if you request account deletion during that period, to prevent re-registration in breach of the self-exclusion. This retention is required by PAGCOR regulations.

For more information about ki333's responsible gaming tools and your options, please visit our Responsible Gaming page.

Section 13

International Data Transfers

Where ki333 engages service providers or technology infrastructure located outside the Philippines, personal data may be transferred internationally. ki333 ensures that all such transfers comply with the cross-border data transfer requirements of the Data Privacy Act and the NPC's implementing guidelines.

Specifically, ki333 ensures that recipient countries or organisations provide an adequate level of data protection, or that appropriate safeguards are in place (such as contractual data processing agreements containing standard data protection clauses) before transferring personal data outside the Philippines.

Section 14

Amendments to This Privacy Policy

ki333 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or ki333's data processing practices. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, ki333 will notify registered players via their registered email address and/or by means of a prominent notice on ki333.co. Your continued use of ki333's services following publication of an updated Privacy Policy constitutes your acceptance of the revised Policy.

ki333 recommends that you review this Privacy Policy periodically to remain informed of how your personal data is handled.

Section 15

Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or ki333's handling of your personal data, please contact ki333's Data Protection Officer:

• DPO Contact: [email protected] (plain text — not a clickable link)
• Subject line: "Privacy Request — [Your Registered Name]"
• Response time: Acknowledgement within 48 hours; full response within 15 business days
• Live Chat: Available 24/7 via ki333.co for general privacy queries

If you are not satisfied with ki333's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about how to file a complaint with the NPC is available on the NPC's official government website.

This Privacy Policy was last revised in January 2026 and supersedes all previous versions of the ki333 Privacy Policy.