kita7 Privacy Policy — Your Data, Protected
At kita7, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains what personal information we collect, why we collect it, how we use and safeguard it, and the rights you hold as a player based in the Philippines. We comply fully with Republic Act No. 10173, the Data Privacy Act of 2012.
Effective Date: January 1, 2026 | Last Reviewed: January 2026How kita7 Protects Your Privacy
We built kita7's data practices around the principle that Filipino players deserve transparency, security, and full control over their personal information.
End-to-End Encryption
All data transmitted between your device and kita7 is protected by 256-bit SSL/TLS encryption — the same standard used by major Philippine banks and financial institutions like BPI and BDO. Your login credentials and payment details are never sent in plain text.
DPA 2012 Compliant
kita7 operates in full compliance with the Data Privacy Act of 2012 (RA 10173) and all implementing rules issued by the National Privacy Commission (NPC). Your personal data is processed on a lawful basis with your informed consent obtained at registration.
No Data Selling
kita 7 will never sell, rent, or trade your personal information to third-party advertisers or data brokers. Period. Your data is used solely for the purpose of operating your kita7 account and providing the best possible gaming experience.
Minimal Data Collection
We collect only the personal data that is strictly necessary for account registration, identity verification (KYC), payment processing, and regulatory compliance. We do not collect data out of curiosity — every data point has a clear, documented purpose.
Your Controls, Always On
Through your kita7 account settings, you can review your personal data, request corrections, manage marketing preferences, and initiate a data deletion request at any time. You are always in the driver's seat when it comes to your own information.
Regulated by PAGCOR
As a PAGCOR-regulated online gaming platform, kita7 is subject to regular regulatory audits that include data handling practices. Our compliance with Philippine privacy law is not optional — it is a condition of our operating licence.
Who We Are
kita7 ("we," "us," "our," or the "Company") is the operator of the online gaming and sports betting platform accessible at kita7.app. kita7 is a PAGCOR-regulated online gaming operator offering casino games, slots, live dealer tables, bingo, fishing games, and sports wagering to eligible players based in the Philippines.
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), kita7 acts as the Personal Information Controller (PIC) in respect of the personal data collected from players and site visitors. We determine the purposes and means by which your personal information is processed, and we are accountable for the privacy practices described in this Policy.
Data We Collect
kita7 collects personal information that falls into the following categories. We only collect data that is necessary for a clearly defined operational or regulatory purpose.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number (National ID, passport, UMID, driver's licence) | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile number (for OTP), home address | Account communications, transaction alerts, support |
| Financial Data | GCash / Maya account details, bank account name and number (BPI, BDO, Metrobank), transaction history | Processing deposits and withdrawals, fraud prevention, AMLA compliance |
| Gaming Activity Data | Bet history, game session logs, wager amounts, win/loss records, bonus usage | Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, session timestamps | Security monitoring, fraud detection, platform optimisation |
| Communications Data | Live chat transcripts, support emails, complaint records | Customer service, training, regulatory record-keeping |
| Marketing Preferences | Opt-in/opt-out status for promotional emails and SMS | Sending relevant promotions and offers (only with your consent) |
We do not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect data on race, religion, political affiliation, health conditions, or sexual orientation.
How We Collect Your Data
kita7 collects your personal information through the following channels:
- Direct Registration: Information you provide when creating your kita7 account, completing KYC verification, or updating your account profile.
- Transaction Activity: Data generated automatically when you make a deposit, request a withdrawal, or participate in a promotion.
- Gaming Sessions: Logs created automatically by the kita7 platform as you play games, place bets, or use interactive features.
- Customer Support Interactions: Information you share when contacting our support team via live chat or email at [email protected].
- Cookies and Tracking Technologies: Data collected automatically when you browse the kita7 website. See Section 7 for full details.
- Third-Party Verification Services: Identity and document verification data obtained from licensed KYC/AML service providers we engage to fulfil our regulatory obligations.
- Payment Processors: Confirmation and reference data returned by GCash, Maya, BPI, BDO, Metrobank, and other payment partners after transaction processing.
Why We Use Your Data
kita7 processes your personal data for the following purposes:
- Account Management: To create, maintain, and secure your kita7 account, including processing your registration and verifying your identity.
- Payment Processing: To facilitate deposits and withdrawals via GCash, Maya, QR Ph, GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, and 7-Eleven CLiQQ.
- Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and Know Your Customer (KYC) obligations under Philippine law.
- Responsible Gaming: To monitor gaming patterns for indicators of problem gambling behaviour and to implement responsible gaming tools (deposit limits, self-exclusion) where necessary.
- Fraud Prevention and Security: To detect, investigate, and prevent unauthorised account access, payment fraud, money laundering, and other illegal activities.
- Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance.
- Platform Improvement: To analyse aggregated and anonymised usage data to improve the kita7 platform's performance, game selection, and user experience.
- Marketing Communications: To send you personalised promotional offers, bonus notifications, and relevant updates — but only where you have given your explicit consent to receive such communications.
- Legal Proceedings: To establish, exercise, or defend legal claims in the event of a dispute between you and kita7.
Legal Basis for Processing
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, kita7 relies on the following lawful bases when processing your personal data:
- Consent (Section 12[a], DPA): For optional processing activities such as marketing communications, personalised offers, and non-essential cookies. You provide this consent at registration and can withdraw it at any time.
- Contractual Necessity (Section 12[b], DPA): Processing that is necessary to perform our obligations under the Terms and Conditions you agreed to at registration — including account management, payment processing, and game delivery.
- Legal Obligation (Section 12[c], DPA): Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, court orders, and other statutory requirements applicable to kita7 as a Philippine-licensed gaming operator.
- Legitimate Interests (Section 12[f], DPA): Processing undertaken for kita7's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and dispute resolution — where these interests do not override your fundamental rights and freedoms.
Sharing Your Data
kita7 does not sell, rent, or disclose your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients strictly for the purposes described in this Policy:
- Payment Partners: GCash, Maya, GrabPay, QR Ph, BPI, BDO, Metrobank, InstaPay, PesoNet, and 7-Eleven CLiQQ — to process your deposits and withdrawals.
- KYC / AML Service Providers: Licensed identity verification and anti-money laundering screening vendors engaged to fulfil kita7's regulatory obligations under PAGCOR and AMLC requirements.
- Game Content Providers: Third-party game studios and live dealer operators who supply games available on the kita7 platform. These providers may receive session and wagering data necessary to operate their games.
- IT and Cloud Infrastructure Providers: Hosting, security, and cloud service providers who process data on kita7's behalf under binding data processing agreements.
- Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or court order.
- Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by kita7, subject to professional secrecy obligations.
Cookies & Tracking Technologies
The kita7 website uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your session security, and to analyse how players interact with the site. Below is a summary of the cookie types we use:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication tokens, security checks. Required for the site to function. | No — essential for platform operation |
| Functional | Remembering your language preference, account settings, and game lobby layout choices. | Yes — via browser settings |
| Analytics | Aggregated, anonymised data on page views, session durations, and feature usage to help us improve kita7. | Yes — via cookie consent settings |
| Marketing | Personalising promotional content and offers shown on the kita7 platform based on your activity. | Yes — requires your explicit consent |
You can manage your cookie preferences at any time through your browser settings. Please note that disabling strictly necessary cookies may prevent certain features of the kita7 platform from working correctly. Disabling analytics or marketing cookies will not affect your ability to play games or access your account.
Data Retention
kita7 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable Philippine law and regulatory requirements. Our standard retention periods are as follows:
- Account and Identity Data: Retained for the duration of your active account plus five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLC regulations.
- Gaming Activity Logs: Retained for three (3) years from the date of each session or wager, for dispute resolution and responsible gaming monitoring purposes.
- Customer Support Records: Retained for two (2) years from the date of the last interaction, unless a formal complaint or legal proceeding requires a longer retention period.
- Marketing Preference Records: Retained for the duration of your account. Opt-out records are retained indefinitely to ensure we do not inadvertently re-contact you.
Once the applicable retention period expires, your personal data will be securely deleted or permanently anonymised so that it can no longer be attributed to you.
Data Security
kita7 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and the kita7 platform is encrypted in transit using industry-standard TLS protocols.
- Encrypted Data Storage: Sensitive personal data, including identity documents and financial details, is stored using AES-256 encryption at rest.
- Multi-Factor Authentication (MFA): kita7 accounts support OTP-based two-factor authentication via your registered Philippine mobile number. We strongly recommend enabling MFA on your account.
- Access Controls: Strict role-based access controls ensure that only authorised kita7 personnel with a documented business need can access player personal data.
- Regular Security Audits: kita7 undergoes periodic independent security assessments, penetration testing, and vulnerability scans to identify and address potential weaknesses.
- Intrusion Detection: Real-time monitoring systems flag and respond to suspicious access patterns or anomalous activity on kita7's infrastructure.
While kita7 takes every reasonable step to protect your data, no digital platform is entirely immune to security threats. You also play a role in keeping your account safe — please use a strong, unique password, enable OTP verification, and never share your login credentials with anyone.
Your Rights Under DPA 2012
As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by kita7. You can exercise any of these rights by contacting our Data Protection Officer (DPO) — see Section 14.
Rights You Hold as a kita7 Player
Under the Data Privacy Act of 2012, every Filipino player on kita7 holds these rights with respect to their personal data.
Right to Be Informed
You have the right to be told what personal data kita7 collects, how it is used, and with whom it is shared — before or at the point of collection.
Right of Access
You can request a copy of all personal data kita7 holds about you at any time. We will provide this in a structured, readable format within thirty (30) days.
Right to Rectification
If any personal data we hold about you is inaccurate, outdated, or incomplete, you have the right to request that we correct it promptly.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected — subject to our legal retention obligations.
Right to Object
You can object to the processing of your personal data for direct marketing or where processing is based on kita7's legitimate interests.
Right to Data Portability
You have the right to receive your personal data in a commonly used, machine-readable format so you can transfer it to another service provider.
Right to Withdraw Consent
Where processing is based on your consent — such as for marketing — you can withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Complain to NPC
If you believe kita7 has mishandled your personal data, you have the right to file a complaint with the National Privacy Commission of the Philippines.
Children & Minors
The kita7 platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gambling regulations and PAGCOR licensing conditions. kita7 does not knowingly collect personal data from any person under the age of 21.
If you are a parent or guardian and believe that a person under the age of 21 has provided personal data to kita7 without your knowledge or consent, please contact our Data Protection Officer immediately at [email protected]. We will investigate the matter promptly and delete any data attributable to an underage individual.
Cross-Border Data Transfers
kita7 primarily processes and stores personal data within the Philippines. However, certain third-party service providers — including game content providers, cloud infrastructure partners, and KYC verification vendors — may operate data centres or processing facilities outside of the Philippines.
Where personal data is transferred outside the Philippines, kita7 ensures that such transfers are protected by appropriate safeguards, including:
- Binding contractual clauses that impose data protection obligations equivalent to those under Philippine DPA 2012.
- Transfers only to recipients located in countries or operating under frameworks that the NPC has determined offer an adequate level of data protection.
- Where neither of the above applies, kita7 will only transfer personal data with your explicit consent or where the transfer is necessary for the performance of your account contract.
You may request details of the specific safeguards applied to any cross-border transfer of your personal data by contacting our Data Protection Officer.
Changes to This Privacy Policy
kita7 may update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or NPC guidance. When we make material changes to this Policy, we will notify you through one or more of the following channels:
- A prominent notice displayed on the kita7 platform upon your next login.
- An email notification sent to the address registered on your kita7 account.
- An in -platform message notification.
The "Effective Date" and "Last Reviewed" date shown at the top of this Policy will always reflect the most current version. We encourage you to review this Privacy Policy periodically. Your continued use of the kita7 platform after any changes have been published constitutes your acknowledgment of the updated Policy.
If you disagree with any changes to this Privacy Policy, you have the right to close your kita7 account and request deletion of your personal data, subject to our legal retention obligations described in Section 8.
Contact & Data Protection Officer
If you have any questions about this Privacy Policy, wish to exercise any of your rights under the Data Privacy Act of 2012, or need to report a data privacy concern, please contact kita7's designated Data Protection Officer (DPO) through the following channels:
- Email: [email protected]
- Live Chat: Available 24/7 directly on the kita7 platform
- Response Time: We aim to acknowledge all data privacy requests within five (5) business days and to resolve them within thirty (30) calendar days of receipt.
If you are not satisfied with kita7's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the government authority responsible for administering and enforcing the Data Privacy Act of 2012.
We are committed to resolving all data privacy concerns fairly, transparently, and in accordance with Philippine law. Your trust in kita7 as a responsible data controller is something we do not take lightly — it is a commitment we renew with every game session, every transaction, and every interaction on our platform.
Your Privacy Is Safe — Now Let's Play
kita7 protects your data so you can focus on what matters — enjoying world-class casino games, live dealer tables, slots, bingo, and more. Join thousands of Filipino players from Manila, Cebu, Davao, and Quezon City who trust kita7 for a secure, rewarding gaming experience. Must be 21 or older. Play responsibly.
21+ PAGCOR Regulated • Responsible Gaming Advocate • Data Privacy Act 2012 Compliant