🔒 bl77 Privacy Policy

The data controller responsible for your personal information collected through the bl77 platform (bl77.lat and the official bl77 mobile application) is the bl77 operating entity, a corporation duly registered and licensed in the Philippines under PAGCOR authorization ("bl77," "we," "us," or "our").

As a data controller under Republic Act No. 10173 (the Data Privacy Act of 2012), bl77 determines the purposes and means of processing the personal data of its registered players and platform users. bl77 has registered with the National Privacy Commission (NPC) as required by law and has appointed a Data Protection Officer (DPO) to oversee data protection compliance.

Contact information for the bl77 Data Protection Officer is provided in Section 13 of this Policy.

bl77 collects the following categories of personal data from players and platform users:

• Full legal name (as it appears on your Philippine government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Philippine mobile number (for OTP verification and account recovery)
• Registered home address
• Government-issued ID type and number (PhilSys, SSS/UMID, Driver's License, Passport, or other PAGCOR-accepted IDs)
• Selfie or live photo for liveness verification during KYC

• GCash mobile number and transaction reference numbers
• Maya (PayMaya) account identifier and transaction references
• Philippine bank account details where applicable (BPI, BDO, Metrobank, and others)
• Deposit history, withdrawal requests, and transaction timestamps
• Source of funds declarations where required by AMLC regulations

• Game session records including games played, wagers placed, and outcomes
• Bonus claims, wagering progress, and promotion participation records
• Responsible gaming settings, deposit limits, and self-exclusion elections
• Customer support interaction records and complaint history

• IP address and approximate geolocation at the time of login
• Device type, operating system version, browser type, and screen resolution
• Session duration, page navigation, and feature usage patterns
• Cookies and similar tracking technologies (see Section 6)

bl77 uses the personal data we collect for the following purposes:

• Account Registration and Management: Creating and maintaining your bl77 player account, processing logins, and managing account settings
• Age and Identity Verification (KYC): Confirming that you are 21 years of age or older and verifying your identity as required by PAGCOR regulations
• Payment Processing: Processing GCash deposits, Maya withdrawals, and bank transfers to and from your bl77 account
• PAGCOR Regulatory Compliance: Meeting our obligations as a PAGCOR-licensed online gaming operator, including player reporting, audit trails, and game certification requirements
• Anti-Money Laundering (AML) Compliance: Monitoring transactions and filing reports with the Anti-Money Laundering Council (AMLC) as required by the Anti-Money Laundering Act (AMLA) and its implementing rules
• Responsible Gaming: Implementing and monitoring player-elected responsible gaming tools, detecting problem gambling indicators, and administering self-exclusion requests
• Customer Support: Responding to inquiries, resolving complaints, and providing account assistance via live chat and email
• Security and Fraud Prevention: Detecting and preventing unauthorized account access, fraud, collusion, and bonus abuse
• Marketing (with consent): Sending promotional emails, SMS offers, and bonus notifications where you have opted in. You may withdraw consent at any time
• Platform Improvement: Analyzing aggregated, anonymized usage patterns to improve bl77's games, features, and user experience

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations (IRR), bl77 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and bl77 — i.e., operating your casino account, processing deposits and withdrawals, and delivering gaming services
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, NPC registration requirements, and other applicable Philippine laws
• Consent: Marketing communications and optional data collection activities where you have provided explicit, informed, and freely given consent
• Legitimate Interest: Security monitoring, fraud detection, platform analytics, and responsible gaming monitoring, where these activities do not override your fundamental privacy rights

bl77 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only where necessary and lawful:

• PAGCOR: As required under our gaming license conditions, including player data, transaction records, and game audit logs
• Anti-Money Laundering Council (AMLC): Suspicious Transaction Reports (STRs) and Covered Transaction Reports (CTRs) as mandated by the AMLA
• National Privacy Commission (NPC): In response to lawful NPC investigations, compliance audits, or data breach notifications
• Payment Service Providers: GCash, Maya, and Philippine banks receive only the transaction data necessary to process your specific deposit or withdrawal
• KYC and Identity Verification Providers: Third-party identity verification services engaged to assist with KYC compliance, operating under data processing agreements with bl77
• Game Content Providers: Live casino and RNG game providers may receive your player ID and session data for game integrity and RTP audit purposes — they do not receive your personal identity data
• Law Enforcement: Philippine law enforcement agencies where bl77 is required by court order or applicable law to disclose player information

The bl77 platform uses cookies and similar technologies to operate core platform functions, maintain your login session, and analyze platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the bl77 platform to function — session management, authentication tokens, and security controls. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences, language settings, and game lobby filters to improve your bl77 experience across sessions.
• Analytics Cookies: Collect anonymized data about how players navigate the bl77 platform — page views, session duration, error events. Used to identify and fix usability issues. No personally identifiable information is included in analytics data.
• Marketing Cookies (consent-based): Used to deliver relevant bl77 promotions where you have opted into marketing communications. You may withdraw consent via your account settings or browser cookie controls.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the bl77 platform from functioning correctly.

bl77 retains your personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention standards:

• Active Account Data: Retained for the duration of your active bl77 account relationship
• KYC Identity Documents: Retained for a minimum of five (5) years after account closure, as required by PAGCOR KYC regulations and AMLA record-keeping obligations
• Financial Transaction Records: Retained for a minimum of five (5) years per AMLA Section 9 record-keeping requirements
• Game Session Logs: Retained for a minimum of three (3) years for PAGCOR audit and player dispute resolution purposes
• Customer Support Records: Retained for two (2) years after ticket closure
• Marketing Consent Records: Retained for the duration of the consent period plus three (3) years for compliance documentation

Upon expiry of the applicable retention period, bl77 will securely delete or anonymize your personal data in accordance with NPC disposal guidelines.

bl77 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data in transit between your device and bl77 servers
• AES-256 encryption for personal data and financial records stored in bl77 databases
• PCI-DSS compliant handling of payment transaction data
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular third-party penetration testing and security audits as required under PAGCOR technical standards
• Multi-factor authentication requirements for bl77 staff accessing player data systems
• Isolated network architecture separating player data databases from public internet access

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bl77 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required under RA 10173.

As a data subject under the Philippine Data Privacy Act, you may exercise the following rights with respect to your bl77 personal data at any time:

• Right to Be Informed: You have the right to receive clear, transparent information about how bl77 processes your personal data — which is the purpose of this Privacy Policy.
• Right of Access: Request a copy of the personal data bl77 holds about you. bl77 will respond within 15 business days of a valid request.
• Right to Rectification: Request correction of any inaccurate or incomplete personal data in your bl77 account. Basic account details can be updated via Account Settings; name and ID corrections require KYC re-verification.
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data where it is no longer necessary for the purposes collected, or where processing was based solely on consent you have since withdrawn. Note: bl77 is legally required to retain certain data (KYC, transaction records) under PAGCOR and AMLA rules even after account closure — erasure requests for such data will be noted and actioned after the mandatory retention period expires.
• Right to Object: Object to processing of your personal data for direct marketing purposes at any time. Object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) for transfer to another service.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe bl77 has processed your personal data in violation of RA 10173.

Parents, guardians, or any person who believes that a minor may have registered on the bl77 platform should contact bl77 Customer Support immediately at [email protected]. bl77 takes underage access violations extremely seriously and will cooperate fully with all relevant Philippine regulatory and law enforcement authorities.

The bl77 platform integrates with third-party services including GCash, Maya, Philippine banking systems, live casino game providers, and KYC verification services. These third parties operate under their own privacy policies and data protection frameworks. bl77 ensures that all third-party processors engaged by bl77 are bound by data processing agreements that require them to protect your personal data to standards at least equivalent to those described in this Privacy Policy.

bl77 is not responsible for the privacy practices of independently operated third-party platforms. Where the bl77 platform contains links to third-party websites (which are minimal and limited to regulatory and licensing references), bl77 recommends reviewing the privacy policies of those external sites independently.

bl77 may update this Privacy Policy periodically to reflect changes in our data processing practices, new regulatory requirements, or updates to PAGCOR licensing conditions. Material changes — those that significantly affect how we collect, use, or share your personal data — will be communicated to registered players by email to their registered address at least 14 days before taking effect.

The effective date of the current version of this Privacy Policy is displayed at the top of this page. The most current version will always be accessible at bl77.lat/privacy-policy. Continued use of the bl77 platform after the effective date of any update constitutes your acknowledgment of the revised Policy.

For all privacy-related inquiries, data subject rights requests, or concerns regarding bl77's data processing practices, please contact: