bl7777 Privacy Policy

This Privacy Policy ("Policy") applies to all personal information collected, processed, stored, and disclosed by bl7777 ("bl7777," "the Company," "we," "us," or "our") in connection with the operation of the bl7777 online casino and sports betting platform, accessible at bl7777.co (the "Platform"). It applies to all individuals who register an account, browse the Platform, contact customer support, or otherwise interact with bl7777 in any capacity ("you," "your," or "Player").

By registering an account on bl7777 or by continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. If you do not agree with any part of this Policy, you should discontinue your use of the Platform.

This Policy should be read together with bl7777's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

bl7777 is the personal information controller (PIC) in respect of all personal data collected and processed through the Platform, as defined under Section 3(h) of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"). bl7777 determines the purposes for which, and the means by which, personal data is processed.

bl7777 has designated a Data Protection Officer (DPO) who is responsible for ensuring compliance with the DPA, supervising data processing activities, and serving as the primary point of contact for data subjects exercising their rights under the DPA. Contact details for the DPO are set out in Section 16 of this Policy.

bl7777 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). Certain data processing activities are carried out in compliance with PAGCOR's regulatory requirements and the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended, "AMLA"), under which bl7777 operates as a covered person subject to mandatory transaction monitoring and reporting obligations.

bl7777 collects personal information through several channels. The categories of information collected, and the circumstances in which they are collected, are described below.

3.1 Information You Provide Directly

3.2 Information Collected Automatically

When you access the Platform, bl7777's systems automatically collect certain technical and behavioural data, including:

• Device Information: Device type and model, operating system, browser type and version, screen resolution, and device identifiers;
• Network Information: IP address, mobile network carrier, and approximate geographic location derived from IP address;
• Usage Data: Pages visited, features accessed, games played, session duration, click-path data, and time stamps of all Platform interactions;
• Gaming Activity Data: Game type, bet amounts, wager outcomes, bonus usage, wagering history, and sports betting selections;
• Cookie and Tracking Data: Data collected via cookies, pixel tags, and similar technologies as described in Section 6 of this Policy.

3.3 Information From Third Parties

bl7777 may receive personal data from third parties in the following circumstances: (a) identity verification and fraud prevention service providers that cross-reference submitted KYC documents against public records or watchlists; (b) payment processors and e-wallet operators (GCash, Maya, BPI, BDO, UnionBank, and others) confirming transaction status and account name matching; (c) game providers supplying gaming activity logs for dispute resolution; and (d) regulatory authorities, law enforcement, or courts of competent jurisdiction transmitting information required for compliance purposes.

bl7777 processes personal data only for the purposes set out below, using only the minimum data necessary for each purpose:

• Account Management: Creating, maintaining, authenticating, and closing your bl7777 account; sending account-related notifications via SMS and email;
• Service Delivery: Enabling access to games, live dealer streams, sports betting markets, and all other Platform features; processing bets and displaying results;
• Payment Processing: Processing deposits and withdrawals through your chosen payment methods; reconciling transactions; handling chargebacks and disputed transactions;
• Identity Verification & KYC: Verifying your identity, age, and eligibility to use the Platform in compliance with PAGCOR licensing requirements and the DPA;
• AML & Fraud Prevention: Monitoring transactions for suspicious activity; filing Suspicious Transaction Reports (STRs) and Cash Transaction Reports (CTRs) with the Anti-Money Laundering Council (AMLC) as required by the AMLA; preventing multi-accounting, bonus abuse, and other forms of fraud;
• Responsible Gaming: Monitoring gaming behaviour for indicators of problem gambling; administering deposit limits, loss limits, session reminders, and self-exclusion programs; referring players to appropriate support resources;
• Customer Support: Responding to queries, processing complaints, investigating disputes, and maintaining records of support interactions;
• Marketing & Promotions: Sending promotional offers, bonus notifications, and personalised recommendations, subject to your marketing communication preferences (see Section 13);
• Platform Improvement: Analysing usage patterns and gameplay data to improve Platform performance, user experience, and game selection;
• Legal & Regulatory Compliance: Meeting all obligations under the DPA, AMLA, PAGCOR licensing requirements, and any other applicable Philippine law.

Under the Philippine Data Privacy Act of 2012, bl7777 processes your personal information on one or more of the following legal bases:

• Consent (Section 12(a) DPA): Where you have freely, specifically, and informed given consent to the processing of your personal data for a stated purpose — for example, consent to receive marketing communications, or consent to processing sensitive personal information during KYC;
• Contractual Necessity (Section 12(b) DPA): Where processing is necessary to fulfil bl7777's obligations under the Terms & Conditions you have agreed to — including account management, payment processing, and service delivery;
• Legal Obligation (Section 12(c) DPA): Where processing is necessary for compliance with a legal obligation applicable to bl7777, including obligations under the AMLA, PAGCOR licensing requirements, tax reporting requirements, and orders of competent Philippine authorities;
• Legitimate Interests (Section 12(f) DPA): Where processing is necessary for the legitimate interests of bl7777 — including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided that these interests do not override your fundamental rights and freedoms.

bl7777 uses cookies, pixel tags, local storage, and similar tracking technologies on the Platform to provide core functionality, improve your experience, and analyse usage. The categories of cookies used are described below:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, login state cookies, and security cookies that prevent cross-site request forgery. These cookies cannot be disabled without rendering the Platform non-functional;
• Functional Cookies: Remember your preferences such as preferred language, game lobby view settings, and responsible gaming tool configurations so you do not need to re-enter them each visit;
• Analytics Cookies: Collect aggregated and anonymised data about how users navigate the Platform — which pages are visited most, where users drop off, and which features are most used. This data is used solely to improve Platform design and performance;
• Security Cookies: Used for device fingerprinting and fraud detection — identifying whether a login attempt originates from a recognised device, flagging logins from unusual geographic locations, and detecting automated bot activity.

bl7777 does not use third-party advertising or social media tracking cookies. You may configure your browser to block cookies, though doing so may impair your ability to log in or access certain features of the Platform. For most core Platform features, strictly necessary cookies are the only type in use.

bl7777 does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. Your data is disclosed only in the circumstances described below:

7.1 Service Providers and Data Processors

bl7777 engages trusted third-party service providers to perform specific functions in support of the Platform's operation. These providers process personal data only on bl7777's instructions, under contractual data processing agreements that require them to maintain confidentiality and implement appropriate security measures. Service provider categories include: payment processors (GCash/Maya/BPI/BDO operator networks), identity verification and KYC service providers, cloud infrastructure and hosting providers, game platform providers, SMS gateway operators, and customer support software providers.

7.2 Regulatory and Law Enforcement Disclosure

bl7777 is required by Philippine law to disclose personal data to the following authorities without your prior consent where legally mandated:

• PAGCOR: As the licensing authority, PAGCOR has the right to access player records, transaction data, and gaming activity logs as part of its regulatory oversight functions;
• Anti-Money Laundering Council (AMLC): bl7777 is required to file Suspicious Transaction Reports (STRs) and Cash Transaction Reports (CTRs) under the AMLA. The AMLC may also issue orders requiring disclosure of specific player data;
• Bureau of Internal Revenue (BIR): Tax-related disclosures required under the National Internal Revenue Code;
• Law Enforcement and Courts: Disclosure pursuant to valid court orders, subpoenas, warrants, or lawful requests from Philippine law enforcement authorities.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of bl7777's assets, personal data held by bl7777 may be transferred to the acquiring entity as part of the transaction, subject to appropriate confidentiality and data protection safeguards. bl7777 will notify registered Players of any such transfer via the Platform and/or by email to their registered address prior to or at the time of the transfer.

Certain service providers engaged by bl7777 — including cloud infrastructure providers, game platform operators, and identity verification vendors — may process personal data in servers located outside the Philippines. Where personal data is transferred to a country that does not provide a level of data protection comparable to the Philippines, bl7777 implements appropriate safeguards to ensure that the transfer is lawful and that your data remains protected to a standard equivalent to that required under the Philippine DPA.

Such safeguards include contractual clauses imposing DPA-equivalent obligations on the recipient entity, and where applicable, confirmation that the recipient country's data protection framework has been assessed as adequate by the National Privacy Commission of the Philippines. bl7777 will not transfer personal data to recipients outside the Philippines who cannot provide appropriate data protection guarantees.

bl7777 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any legal, regulatory, or contractual retention obligations. The following retention periods apply as a general guide:

Upon expiry of the applicable retention period, bl7777 will securely delete or anonymise personal data so that it can no longer be associated with any identifiable individual, unless a further legal or regulatory obligation requires its continued retention.

bl7777 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your device and bl7777's servers is encrypted using Transport Layer Security (TLS) version 1.3 with 256-bit encryption — the same standard used by major Philippine banks;
• Encryption at Rest: Sensitive personal data including KYC documents, financial details, and passwords are stored in encrypted form using AES-256 encryption. Passwords are hashed using bcrypt and are never stored in plaintext;
• Access Controls: Access to production systems containing personal data is restricted to bl7777 personnel with a documented business need, enforced through role-based access control, multi-factor authentication, and audit logging;
• Network Security: bl7777's production infrastructure is protected by web application firewalls, DDoS mitigation systems, and intrusion detection and prevention systems;
• KYC Document Security: Identity documents submitted during KYC are stored in dedicated secure document storage systems with strict access controls and are not stored on the same systems as general Platform data;
• Data Breach Response: bl7777 maintains an incident response procedure for personal data breaches. In the event of a breach likely to give rise to a real risk to the rights of data subjects, bl7777 will notify the National Privacy Commission within 72 hours of discovery and will notify affected Players without undue delay as required by the DPA.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by bl7777. To exercise any of these rights, contact bl7777's DPO using the contact details in Section 16. bl7777 will respond to verified requests within ten (10) business days or such extended period as may be required by the complexity of the request.

Requests to exercise DPA rights must be submitted in writing (by email) to bl7777's DPO. bl7777 may require verification of your identity before processing a right-exercise request to ensure data is not disclosed to or altered by unauthorised persons. If you are not satisfied with bl7777's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC).

If bl7777 discovers or is credibly informed that personal data has been collected from a person under the age of 21, bl7777 will immediately suspend the associated account, void any wagers placed, and initiate a review of the account. Any funds deposited by an underage person will be returned to the deposit source (after deduction of any regulatory compliance costs) following completion of the review.

Parents or guardians who believe that a person under 21 in their care has created an account on bl7777 are encouraged to contact bl7777's customer support or DPO immediately. bl7777 will cooperate with any PAGCOR investigation into underage gambling incidents and will report confirmed cases to relevant authorities as required by applicable law.

bl7777 may send you marketing communications — including promotional offers, bonus notifications, game recommendations, and news about new Platform features — via SMS to your registered Philippine mobile number and/or by email to your registered email address. Marketing communications are sent only where you have provided your consent or where a legitimate interests basis exists (e.g., informing existing players of promotions directly related to games they have played).

You may withdraw your consent to marketing communications at any time by: (a) updating your communication preferences in your bl7777 account settings; (b) clicking the "unsubscribe" link included in any marketing email; or (c) contacting bl7777 customer support and requesting removal from the marketing list. Withdrawal of marketing consent does not affect the lawfulness of marketing communications sent prior to withdrawal.

Withdrawal of marketing consent does not affect the receipt of operational communications — such as account security alerts, deposit confirmations, withdrawal notifications, and OTP messages — which are sent on the basis of contractual necessity and cannot be opted out of while your account remains active.

The bl7777 Platform does not contain links to third-party websites or services for commercial or advertising purposes. To the extent that any third-party game providers or payment gateways are accessed through the Platform, those third parties operate under their own privacy policies in respect of any personal data collected directly by them through their own systems. bl7777 is not responsible for the privacy practices of third-party game providers or payment processors and encourages you to review the privacy policies of those providers.

bl7777 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or Platform functionality. Where an amendment is material — meaning it could meaningfully affect your rights as a data subject or significantly alter the purposes for which your personal data is processed — bl7777 will provide not less than fourteen (14) days' advance notice prior to the effective date of the change, via a prominent notice on the Platform and, where practicable, by email to your registered address.

For minor, non-material amendments (such as typographical corrections or clarifications that do not alter the substance of any data processing purpose), bl7777 may publish the updated Policy without advance notice, with changes taking effect upon publication. The "Effective Date" displayed at the top of this page will always reflect the date of the most recent revision. Continued use of the Platform after any revised Policy becomes effective constitutes your acceptance of the changes.

For questions, complaints, or requests relating to this Privacy Policy, the exercise of your DPA rights, or any data protection concern, please contact bl7777 through the following channels:

• Data Protection Officer (DPO): [email protected] (plain text — not a clickable link)
• General Support: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat widget on the bl7777 Platform
• FAQ: bl7777 FAQ

If you are not satisfied with bl7777's response to a data protection concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). The NPC's contact information is publicly available on its official government website.