wk7 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how wk7 ("wk7," "we," "us," or "our") — the operator of the online gaming platform at wk7.biz — collects, uses, stores, discloses, and protects the personal information of individuals who access or use the wk7 Platform, including its website, mobile interface, account dashboard, and all associated services (collectively, the "Platform").

wk7 is committed to safeguarding the privacy and personal data of all players, visitors, and prospective registrants. This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission of the Philippines.

By accessing or using the Platform — including registering an account, making a deposit, placing a wager, or interacting with any feature of the Platform — you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

2 Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for the personal information processed in connection with the wk7 Platform is:

Where wk7 engages third-party service providers to process personal data on its behalf, those providers act as data processors under written data processing agreements that require them to process personal data only on wk7's documented instructions and in compliance with applicable Philippine data protection law.

3 Personal Data We Collect

wk7 collects the following categories of personal data from players and Platform users:

3.1 Identity and Registration Data

• Full legal name as appearing on a Philippine government-issued identification document;
• Date of birth (to verify the 21-years-of-age eligibility requirement);
• Username chosen by the player at registration;
• Gender (optional, for account personalisation purposes).

3.2 Contact and Communication Data

• Registered Philippine mobile number;
• Email address (where provided);
• Records of all communications between you and wk7's support team, including live chat transcripts and email correspondence.

3.3 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, driver's licence, UMID, SSS ID, Philhealth ID, or voter's ID);
• Proof of address documentation;
• Proof of payment method (e.g., screenshot of GCash account registered in your name);
• Selfie photograph for liveness verification where required.

3.4 Financial and Transaction Data

• Deposit amounts, dates, times, and originating payment method references;
• Withdrawal requests, amounts, processing status, and destination payment method references;
• Bonus credits received and wagering activity related to bonuses;
• Account wallet balance history.

3.5 Gaming Activity Data

• Game titles played, bet amounts, win and loss outcomes, and session duration;
• Betting patterns and gaming history;
• Responsible gaming tool settings (deposit limits, session time limits, self-exclusion status).

3.6 Technical and Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser type and version;
• Session identifiers and login timestamps;
• Cookies and similar tracking technologies (see Section 10).

4 How We Collect Personal Data

wk7 collects personal data through the following means:

4.1 Directly from You

Most personal data wk7 holds is provided directly by you during the registration process, account verification (KYC), deposit and withdrawal transactions, support interactions, and use of responsible gaming tools. You are not obligated to provide personal data, but failure to provide data required for registration or KYC verification will prevent you from using the Platform or withdrawing funds.

4.2 Automatically Through the Platform

When you access the Platform, wk7's systems automatically collect certain technical data about your device and session — including IP address, browser type, operating system, referring URLs, pages visited, time spent on the Platform, and game activity logs. This data is collected using server logs, cookies, and similar technologies as described in Section 10.

4.3 From Third-Party Payment Processors

When you make a deposit or withdrawal via GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, or USDT TRC20, wk7 receives transaction confirmation data from the relevant payment service provider, including transaction reference numbers, amounts, timestamps, and the registered name on the payment account.

4.4 From Identity Verification Services

Where wk7 uses third-party KYC and identity verification service providers, those providers may return to wk7 the results of identity verification checks conducted on your submitted documents. wk7 does not receive raw biometric data from these providers beyond what is necessary to confirm verification status.

5 Purposes for Which We Process Your Data

The following table summarises the primary purposes for which wk7 processes your personal data and the corresponding legal basis for each purpose:

6 Legal Basis for Processing

wk7 relies on the following legal bases under the Data Privacy Act of 2012 to process your personal data:

6.1 Contract Performance

The majority of personal data processing by wk7 is necessary for the performance of the contract between wk7 and you — specifically, the Terms & Conditions you accept upon registering a wk7 account. This includes processing necessary to register your account, verify eligibility, process financial transactions, deliver gaming services, and provide customer support.

6.2 Legal Obligation

Certain processing activities are required by Philippine law and PAGCOR regulations, including but not limited to: age verification, KYC identity verification, anti-money laundering transaction monitoring and reporting, responsible gaming compliance, and mandatory reporting to regulatory authorities including PAGCOR and the Anti-Money Laundering Council (AMLC).

6.3 Legitimate Interest

Where processing is not required by contract or legal obligation, wk7 may process personal data on the basis of its legitimate interests as a regulated gaming operator — including fraud prevention, platform security, system integrity monitoring, and improving the quality and safety of the Platform. wk7 conducts legitimate interest assessments to ensure that its interests do not override the fundamental rights and freedoms of data subjects.

6.4 Consent

For processing activities that are not covered by the above bases — such as sending optional marketing communications — wk7 will seek your explicit consent. You may withdraw consent for such processing at any time without affecting the lawfulness of processing carried out prior to withdrawal. Withdrawal of consent does not affect your ability to use the Platform.

7 Data Sharing and Third-Party Disclosure

wk7 does not sell, rent, or otherwise commercially transfer your personal data to third parties. Personal data may be shared with the following categories of recipients only to the extent necessary and as permitted by applicable law:

7.1 Game Providers and Software Licensors

Third-party game providers whose titles are available on the wk7 Platform may receive limited player session data necessary to deliver the game and log game outcomes. Game providers are contractually prohibited from using this data for any purpose other than delivering their gaming services to wk7.

7.2 Payment Service Providers

Transaction data is shared with payment service providers including GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and applicable cryptocurrency networks solely for the purpose of processing deposits and withdrawals. Each payment provider operates under its own privacy policy and regulatory obligations.

7.3 Identity Verification and KYC Providers

Where wk7 uses third-party KYC verification services, personal data submitted for identity verification — including government ID copies — is shared with those providers. KYC providers are bound by data processing agreements and applicable Philippine privacy law.

7.4 Regulatory and Law Enforcement Authorities

wk7 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent authorities pursuant to applicable Philippine law. wk7 will comply with all lawful requests for disclosure and will notify affected data subjects where legally permitted to do so.

7.5 IT Infrastructure and Hosting Providers

wk7 uses third-party cloud hosting, data centre, and IT security service providers who may have incidental access to personal data in the course of providing infrastructure services. All such providers operate under data processing agreements that restrict processing to wk7's documented instructions.

8 Data Retention

wk7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account registration data: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, as required by PAGCOR and AML regulations;
• KYC and identity verification documents: Retained for a minimum of five (5) years after the end of the account relationship or the completion of the relevant KYC process, in compliance with Republic Act No. 9160;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction as required by Philippine AML and tax regulations;
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes;
• Customer support records: Retained for a minimum of two (2) years from the date of the interaction;
• Technical and device data: Retained for up to twelve (12) months in standard server logs for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with wk7's data disposal procedures. Anonymised data that cannot be used to identify any individual may be retained for statistical and analytical purposes without time limitation.

9 Security Measures

wk7 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Transport layer encryption: All data transmitted between your device and the wk7 Platform is encrypted using TLS (Transport Layer Security) protocols, ensuring that data in transit cannot be intercepted in readable form;
• Data at rest encryption: Personal data stored on wk7's servers is encrypted using AES-256 or equivalent standard encryption;
• Access controls: Access to personal data is restricted to authorised wk7 personnel who require access in order to perform their job functions, enforced through role-based access controls and multi-factor authentication;
• Password protection: Account passwords are stored as salted cryptographic hashes — wk7 does not store plaintext passwords and cannot retrieve your original password;
• Intrusion detection: wk7 operates continuous network monitoring and intrusion detection systems to identify and respond to anomalous access patterns;
• Third-party security audits: wk7's Platform and data handling practices are subject to periodic security assessments by independent third-party security professionals;
• Employee training: All wk7 employees with access to personal data receive regular data protection and information security training.

While wk7 takes all reasonable steps to protect your personal data, no internet-based system is entirely immune to security risks. You also play a role in protecting your account by using a strong, unique password and keeping your login credentials confidential.

10 Cookies and Tracking Technologies

The wk7 Platform uses cookies and similar tracking technologies to enhance your user experience, maintain your session state, and analyse Platform performance. The following types of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function correctly. They enable core functions such as maintaining your logged-in session, remembering your account preferences, and securing your session against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without materially impairing your use of the Platform.

10.2 Performance and Analytics Cookies

wk7 may use analytics cookies to collect aggregate, anonymised data about how players interact with the Platform — including pages visited, time spent on pages, navigation paths, and technical error reports. This data helps wk7 improve the Platform's performance and user experience. Analytics data is not used to identify individual players.

10.3 Functional Cookies

Functional cookies allow the Platform to remember choices you have made — such as your preferred language, display settings, or lobby configuration — so that you do not need to reconfigure these settings on each visit.

10.4 Cookie Management

You can manage or disable non-essential cookies through your browser settings. Disabling cookies may affect the functionality of the Platform. For instructions on managing cookies in your specific browser, consult your browser's help documentation. Note that disabling strictly necessary cookies will prevent you from accessing the Platform's authenticated features.

11 Your Privacy Rights Under Philippine Law

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by wk7. To exercise any of these rights, please contact wk7's Data Protection Officer using the contact details in Section 15.

13 Cross-Border Data Transfers

In the course of operating the Platform, certain personal data may be transferred to and processed by service providers or infrastructure systems located outside the Republic of the Philippines — including game providers, payment processors, and cloud hosting providers that operate data centres in other jurisdictions.

Where such cross-border transfers occur, wk7 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and NPC regulations. These safeguards may include contractual data transfer agreements, adequacy determinations, or binding corporate rules that provide an equivalent level of protection to that afforded under Philippine data privacy law.

wk7 will not transfer personal data to any jurisdiction or recipient that does not provide an adequate level of data protection without implementing appropriate supplementary safeguards and, where required, obtaining your prior consent.

14 Amendments to This Privacy Policy

wk7 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or our data processing practices. Material amendments will be communicated to registered players via the mobile number or email address on file, or through a prominent notice on the Platform, with reasonable advance notice where practicable.

The "Effective Date" at the top of this document indicates when the current version took effect. Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you may request account closure in accordance with wk7's Terms & Conditions.

We recommend reviewing this Policy periodically to stay informed about how wk7 handles your personal data. The current version of this Policy will always be accessible on the Platform.

15 Contact and Complaints

15.1 Data Protection Officer

wk7 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. To exercise your data subject rights, raise a privacy concern, or submit a formal complaint, please contact wk7 through one of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, through your logged-in wk7 account dashboard. This is the fastest and most efficient channel for all account and privacy inquiries.
• Email: [email protected] — for written privacy inquiries and formal data subject requests. Please allow up to five (5) business days for a response to email inquiries.

When submitting a data subject request, please include your registered username, a description of your request, and any relevant details that will assist wk7 in locating and processing the correct data. wk7 may request additional identity verification before processing your request.

15.2 National Privacy Commission

If you are not satisfied with wk7's response to your privacy complaint or data subject request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering the Data Privacy Act of 2012 and may be contacted through its official government website and published contact channels.