ki333 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how ki333 ("ki333", "we", "us", "our") collects, uses, stores, and discloses personal information in connection with your use of the ki333 online gaming platform available at ki333.one and all associated services (the "Platform").

ki333 is committed to protecting the personal data of every Filipino player who registers and plays on the Platform. This Policy has been prepared in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations issued by the National Privacy Commission of the Philippines.

By creating a ki333 account or by continuing to use the Platform, you consent to the collection, processing, and use of your personal data as described in this Policy. If you do not agree to this Policy, please do not register an account or continue using the ki333 Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and its implementing rules, ki333 acts as the Personal Information Controller (PIC) in respect of personal data collected through the Platform.

As the Personal Information Controller, ki333 determines the purposes and means of processing personal data collected from players and users. ki333 is responsible for ensuring that all processing activities comply with the DPA and applicable regulations.

If you have questions or concerns about how ki333 processes your personal data, or if you wish to exercise your rights under the DPA, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 13 of this Policy.

3. Personal Data We Collect

ki333 collects the following categories of personal data in connection with your use of the Platform:

4. How We Collect Personal Data

ki333 collects personal data through the following means:

• Directly from you — when you register a ki333 account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a ki333 survey or promotion.
• Automatically — through cookies, web beacons, and server logs when you access or use the ki333 Platform. See Section 9 (Cookies) for further details.
• From payment service providers — such as GCash, Maya, BPI, BDO, Metrobank, Visa, or Mastercard, in connection with processing your transactions on the Platform.
• From identity verification services — when ki333 uses third-party KYC verification partners to confirm the authenticity of documents submitted by players.
• From fraud prevention and compliance partners — including anti-money laundering screening services, where required to comply with applicable Philippine law.

5. Purpose & Legal Basis for Processing

ki333 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table summarises the key processing purposes and their corresponding legal bases:

ki333 does not process your personal data for purposes incompatible with those listed above. Where we intend to process your data for a new purpose, we will provide notice and, where required, obtain your consent before doing so.

6. Sharing of Personal Data

ki333 does not sell, rent, or trade your personal information to third-party advertisers or data brokers. We share personal data only in the following circumstances:

• Payment processors — GCash, Maya, BPI, BDO, Metrobank, UnionBank, Visa, and Mastercard receive transaction data necessary to process deposits and withdrawals on your behalf.
• KYC and identity verification partners — Third-party verification services receive identity documents for the purpose of confirming your identity and age in compliance with PAGCOR requirements.
• Fraud and AML screening services — Personal data may be shared with anti-fraud and anti-money laundering compliance partners as required under Philippine law (including the Anti-Money Laundering Act).
• Regulatory and law enforcement authorities — ki333 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine law enforcement agencies, or courts, where required by law or court order.
• IT and hosting service providers — Cloud hosting and infrastructure providers who process data on ki333's behalf as Personal Information Processors (PIPs), under contractual obligations consistent with the DPA.
• Professional advisers — Legal, accounting, and compliance advisers, subject to confidentiality obligations, where necessary for ki333's legitimate business operations.

7. Data Retention

ki333 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data — Retained for the duration of your ki333 account and for a minimum of 5 years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Financial and transaction records — Retained for a minimum of 5 years following the date of the transaction, as required by Philippine anti-money laundering regulations.
• Gaming activity logs — Retained for 2 years from the date of the activity, or longer where required for regulatory, legal, or dispute resolution purposes.
• Customer support records — Retained for 2 years from the date of the last interaction, unless a longer retention period is required.
• Self-exclusion records — Retained for the duration of the self-exclusion period and for a minimum of 5 years thereafter.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized so that it can no longer be attributed to an individual.

8. Security Measures

ki333 implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your browser or device and ki333's servers
• Encrypted storage of sensitive personal data at rest on ki333's servers
• Access controls — ki333 staff access to personal data is restricted on a need-to-know basis, with role-based access management
• Two-factor authentication (2FA) available for player accounts as an optional additional security layer
• Regular security audits and penetration testing of the Platform's infrastructure
• Secure data disposal procedures for personal data that has reached the end of its retention period

Notwithstanding these measures, no internet transmission or electronic storage method is 100% secure. ki333 cannot guarantee absolute security and will not be liable for breaches that are beyond its reasonable control. In the event of a personal data breach that poses a risk to your rights and freedoms, ki333 will notify affected players and the National Privacy Commission in accordance with the DPA's breach notification requirements.

9. Cookies & Similar Technologies

ki333 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse Platform performance. The following categories of cookies are used:

• Essential cookies — Required for the Platform to function. These include session cookies that maintain your ki333 login state and security cookies that protect against cross-site request forgery. These cannot be disabled without impairing Platform functionality.
• Functional cookies — Store your language preference, game display settings, and other non-essential preferences to improve your Platform experience.
• Analytics cookies — Used by ki333 to understand how players interact with the Platform — which pages are visited most, where users encounter difficulties, and how Platform performance can be improved. Data collected by analytics cookies is aggregated and does not identify individual users.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect the functionality of your ki333 account. ki333 does not use third-party advertising or targeting cookies.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by ki333:

• Right to be Informed — You have the right to be informed about the collection and processing of your personal data, which this Privacy Policy fulfils.
• Right of Access — You may request a copy of the personal data ki333 holds about you, together with information about how it is used.
• Right to Rectification — You may request correction of inaccurate or incomplete personal data. Many account details can be updated directly from your ki333 account settings.
• Right to Erasure or Blocking — You may request deletion or blocking of your personal data where processing is no longer necessary, where consent has been withdrawn, or where processing is unlawful — subject to ki333's legal retention obligations.
• Right to Data Portability — Where technically feasible, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to Object — You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests, subject to applicable exceptions.
• Right to Lodge a Complaint — If you believe ki333 has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, contact ki333's Data Protection Officer using the details in Section 13. ki333 will respond to verifiable requests within 15 business days, in accordance with NPC guidelines.

11. Minors

The ki333 Platform is strictly for persons aged 21 years and above, in compliance with PAGCOR requirements and Philippine law. ki333 does not knowingly collect personal data from individuals under 21 years of age.

If ki333 discovers or is notified that personal data has been collected from a person under 21, ki333 will immediately suspend the associated account, delete the personal data collected, and, where required by law, notify relevant authorities.

Parents and guardians who believe their child or dependent under 21 has registered on ki333 should contact ki333 customer support immediately so that appropriate action can be taken.

12. Changes to This Policy

ki333 reserves the right to modify this Privacy Policy at any time to reflect changes in applicable law, Platform features, or data processing practices. Material changes will be communicated to registered players via the email address on file, and/or through a prominent notice on the ki333 Platform, no less than 7 days before the changes take effect.

Continued use of the ki333 Platform following the effective date of an updated Privacy Policy constitutes your acceptance of the revised Policy. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically.

13. Contact Us & Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or your personal data held by ki333, please contact our Data Protection Officer:

If your concern is not resolved to your satisfaction, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Complaint procedures are available on the NPC's official website.