bl77 Casino — Privacy Policy

1 Introduction

bl77 Casino is an online casino and sports betting platform designed for Filipino players. We take the privacy and security of your personal information seriously. This Policy has been written in plain, accessible language — with a structure Filipino players can actually follow — while maintaining the legal rigour required by the Philippine Data Privacy Act of 2012 (RA 10173) and the regulations of the National Privacy Commission (NPC).

This Policy covers personal data collected when you register for a bl77 account, make deposits or withdrawals via GCash, Maya, or bank transfer, play games, contact support, or simply browse the bl77.cam website.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, bl77 Casino acts as the personal information controller ("PIC") in respect of the personal data it collects directly from players through the bl77.cam platform. As PIC, bl77 determines the purposes for which and the means by which your personal data is processed.

Where bl77 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, or game providers — those parties act as personal information processors ("PIP") operating under instructions and data processing agreements with bl77.

3 Personal Data We Collect

bl77 collects the following categories of personal data from its players and platform users:

4 How We Collect Your Data

bl77 collects personal data through the following means:

• Direct collection — information you provide when creating your bl77 account, completing your profile, undergoing KYC verification, making a payment, or contacting support.
• Automated collection — technical data collected automatically when you access the bl77.cam website or use the platform, including IP addresses, device identifiers, and session data, primarily via server logs and cookies.
• Third-party sources — identity verification results from KYC service providers; fraud and AML screening results from compliance partners; payment confirmation data from GCash, Maya, or banking institutions.

5 Legal Basis for Processing

bl77 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to provide you with bl77 account services, game access, payment processing, and customer support under the bl77 Terms and Conditions you accepted upon registration.
• Legal obligation — processing required to comply with applicable Philippine laws and regulations, including PAGCOR's anti-money laundering (AML) requirements, KYC obligations, and tax reporting where applicable.
• Legitimate interests — processing for fraud detection, security monitoring, platform analytics, responsible gaming interventions, and service improvement, where these interests are not overridden by your data protection rights.
• Consent — for processing not covered by the above bases, including direct marketing communications, bl77 relies on your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6 Purposes of Processing

bl77 uses your personal data for the following specific purposes:

• Creating and managing your bl77 player account, including login authentication and account settings.
• Processing your deposits and withdrawals through your chosen Philippine payment methods (GCash, Maya, BPI, BDO, USDT TRC20, Coins.ph, 7-Eleven Cliqq).
• Verifying your identity and age (21+ requirement) through our KYC process before your first withdrawal and as required by PAGCOR's responsible gaming framework.
• Detecting and preventing fraud, money laundering, and other illegal activity on the bl77 platform.
• Delivering customer support via 24/7 live chat and email.
• Administering bonuses, promotions, and the bl77 VIP loyalty program.
• Monitoring platform usage and gaming activity for responsible gaming purposes, including identifying players who may be exhibiting signs of problem gambling.
• Complying with applicable laws, regulations, and requests from PAGCOR or other lawful authorities in the Philippines.
• Improving the bl77 platform through aggregated, anonymised usage analytics.
• Sending you promotional communications about bl77 offers and features where you have consented to receive such communications.

7 Third-Party Data Sharing

bl77 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. Personal data is shared with third parties only in the following circumstances:

• Payment processors — GCash (GXI), Maya (PayMaya Philippines), BPI, BDO, and other payment service providers receive the minimum data necessary to process your transactions.
• KYC and identity verification providers — third-party KYC services receive copies of your identity documents and personal details to perform the identity verification process.
• Game technology providers — game providers such as JILI Gaming, PG Soft, Pragmatic Play, and others receive gaming session data necessary to operate games, settle bets, and maintain game integrity.
• Fraud and compliance screening services — AML and fraud detection partners receive transaction and identity data for the purpose of regulatory compliance screening.
• Legal and regulatory authorities — PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), law enforcement, and courts may receive data when bl77 is required to disclose it by valid Philippine law, court order, or regulatory requirement.
• Professional advisers — lawyers, auditors, and other advisers may receive data on a strictly need-to-know basis under obligations of confidentiality.

All third-party service providers who process personal data on behalf of bl77 are required to do so under written data processing agreements that mandate data protection standards consistent with RA 10173.

8 Cookies and Tracking Technologies

bl77.cam uses cookies and similar tracking technologies to operate the platform, maintain your login session, and collect basic usage analytics. The cookies bl77 uses include:

• Strictly necessary cookies — required for the platform to function, including session management and security cookies. These cannot be disabled without breaking platform functionality.
• Functional cookies — remember your preferences such as language settings and game lobby filters to improve your experience on subsequent visits.
• Analytics cookies — collect aggregated, anonymised data about how players use the bl77 platform, which pages are most visited, and how the lobby is navigated. This helps bl77 improve the platform.

bl77 does not use third-party advertising cookies or cross-site tracking cookies. You can manage cookie settings through your browser preferences; however, disabling strictly necessary cookies will affect platform functionality.

9 Data Retention

bl77 retains your personal data for the following periods:

• Active accounts — personal data is retained for the lifetime of your bl77 account while it remains active.
• Closed accounts — following account closure, bl77 retains your personal data for a minimum of five (5) years. This retention period is required by PAGCOR's AML compliance obligations and Philippine financial record-keeping rules.
• KYC documents — identity verification documents are retained for a minimum of five (5) years after the date of verification or after account closure, whichever is later.
• Transaction records — deposit and withdrawal records are retained for a minimum of five (5) years for AML and tax compliance purposes.
• Support communications — live chat and email records are retained for three (3) years.

After the applicable retention period has elapsed and where no ongoing legal obligation requires continued retention, bl77 will securely delete or anonymise your personal data.

10 Security Measures

bl77 implements the following technical and organisational security measures to protect your personal data:

• SSL/TLS encryption — all data transmitted between your device and bl77's servers is encrypted in transit using industry-standard SSL/TLS protocols.
• Password hashing — your bl77 account password is stored as a one-way cryptographic hash. bl77 employees cannot read your password, and it cannot be extracted even in the event of a data breach.
• Two-factor authentication (2FA) — bl77 offers optional 2FA for all account holders via SMS to your registered Philippine mobile number. bl77 strongly recommends enabling 2FA.
• Access controls — access to player personal data within bl77 is restricted to authorised personnel on a role-based, need-to-know basis. Employees do not have broad access to player data.
• Security monitoring — bl77 monitors platform activity for suspicious login patterns, unusual transaction activity, and other indicators of security compromise.
• Penetration testing and audits — bl77 conducts periodic security assessments of its platform and data infrastructure.

11 Children's Privacy and Age Restriction

bl77 Casino does not knowingly collect personal data from individuals under the age of 21. The bl77 platform is strictly for adults aged 21 years and older, in accordance with PAGCOR's minimum age requirements for online gaming in the Philippines.

If bl77 discovers that it has inadvertently collected personal data from a person under 21 years of age, that account will be immediately closed, any winnings will be voided, and deposited funds will be returned to the originating payment source. The personal data of the underage individual will be deleted promptly following necessary compliance procedures.

If you have reason to believe that a person under 21 has created a bl77 account, please contact the bl77 support team immediately via the 24/7 live chat.

12 Cross-Border Data Transfers

Some of bl77's third-party service providers — including game technology providers and KYC verification services — may process personal data outside the Philippines. Where such transfers occur, bl77 ensures that appropriate safeguards are in place to provide an adequate level of data protection equivalent to the protections required under RA 10173.

These safeguards include contractual data protection clauses with the receiving parties and, where applicable, reliance on the NPC's approved transfer mechanisms for cross-border data flows.

13 Exercising Your Privacy Rights

To exercise any of your rights under the Philippine Data Privacy Act of 2012 — including the right to access, correct, object, or request erasure of your personal data — please contact the bl77 support team via the 24/7 live chat inside your account dashboard, or by email at [email protected] (plain text — not a clickable link).

bl77 will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days with appropriate notice to you.

There is no charge for exercising your privacy rights in standard circumstances. bl77 reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, repetitive, or excessive.

Before processing any data rights request, bl77 may need to verify your identity to ensure that data is not disclosed to or modified by an unauthorised party. This verification step is a security measure, not a barrier to exercising your rights.

14 Data Breach Response

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, bl77 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under RA 10173.

Affected bl77 players whose personal data has been compromised in a high-risk breach will be notified without undue delay via their registered email address or Philippine mobile number. The notification will describe the nature of the breach, the data affected, the likely consequences, and the steps bl77 is taking in response.

bl77 maintains an internal data breach response procedure and conducts post-incident reviews to prevent recurrence of security incidents.

15 Updates to This Privacy Policy

bl77 reserves the right to amend this Privacy Policy at any time. When material changes are made, the updated Policy will be posted on the bl77.cam website with a revised effective date. Where changes are significant, bl77 will provide additional notice to registered players via the email address or mobile number on file.

Your continued use of the bl77 platform following the posting of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the updated Policy, you should discontinue use of the platform and contact support to close your account.

16 Contact and Data Privacy Officer

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how bl77 handles your personal information, please contact us through the following channels:

• 24/7 Live Chat: Available inside your bl77 account dashboard after logging in at bl77.cam.
• Email: [email protected] — this address is displayed as plain text and is not a clickable link.

All privacy-related requests are handled by the bl77 compliance and support team. Concerns relating to data protection rights will be escalated to bl77's designated data protection point of contact.

If you are not satisfied with bl77's response to a privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC) through their official channels.