bl77 Privacy Policy — Your Data, Protected

The data controller responsible for the personal information collected on this website is the operator of bl77.biz ("bl77," "we," "our," or "us"). bl77 operates the online gaming platform accessible at bl77.biz and is responsible for determining the purposes and means by which personal data collected from Filipino players and visitors to the bl77 platform is processed.

bl77 operates its services in compliance with applicable Philippine gaming regulations and in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (hereinafter "DPA"), and its Implementing Rules and Regulations. bl77 has appointed a Data Protection Officer (DPO) as required under the DPA. Contact details for the DPO are provided in Section 15 of this Policy.

This Privacy Policy applies to all personal data processed by bl77 in connection with your use of the bl77 website, your registered Account, and any communications you have with bl77 through any channel, including live chat, email, or SMS.

bl77 collects the following categories of personal data from players and website visitors:

bl77 collects personal data through the following methods:

• Direct Collection: Information you provide when creating your bl77 Account, submitting KYC documents, making deposits or requesting withdrawals, contacting bl77 support, or completing any form or interactive feature on the bl77 platform.
• Automated Technical Collection: Technical data including your IP address, device identifiers, browser information, and session data is collected automatically through cookies and server logs when you access the bl77 website. See Section 9 for detailed cookie information.
• Payment Processors: When you deposit or withdraw via GCash, PayMaya, BPI, BDO, Metrobank, or other accepted payment methods, bl77 receives transaction confirmation data from the relevant payment processor. bl77 does not store full card numbers or e-wallet PINs — only transaction reference data necessary for reconciliation.
• Third-Party Identity Verification Services: bl77 may use authorized third-party KYC service providers to assist in verifying government ID documents and conducting liveness checks. These providers process data strictly on bl77's instruction and under contractual data processing agreements.
• Gaming Providers: Game providers integrated into the bl77 platform (such as JILI, Pragmatic Play, PG Soft, and Ezugi) may share aggregated gameplay and technical data with bl77 for session management, dispute resolution, and responsible gaming monitoring purposes.

bl77 processes your personal data for the following specific, legitimate purposes:

• Account Registration and Management: Creating and maintaining your bl77 Account, authenticating your identity at login, managing account settings and preferences, and communicating account-related notifications to your registered mobile number.
• Age and Identity Verification (KYC): Verifying that you are at least 21 years of age and that your identity matches the information provided at registration, as required by PAGCOR regulations and Philippine gaming law. This is a legal obligation bl77 cannot waive.
• Payment Processing: Processing deposits from and withdrawals to your linked payment methods (GCash, PayMaya, bank accounts), maintaining transaction records, and reconciling account balances.
• Regulatory and Legal Compliance: Fulfilling bl77's obligations under applicable Philippine gaming regulations, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and any lawful request from Philippine government authorities including PAGCOR and the Anti-Money Laundering Council (AMLC).
• Responsible Gaming Monitoring: Monitoring gameplay patterns to identify potential problem gambling behavior, applying player-requested deposit limits and self-exclusions, and complying with PAGCOR's responsible gaming framework. This processing serves both your welfare and bl77's regulatory obligations.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, unauthorized account access, money laundering, and multi-accounting, including through automated login activity monitoring and anomaly detection systems.
• Service Improvement: Analyzing aggregated, anonymized gameplay and usage data to improve the bl77 platform, optimize the user interface, and enhance the gaming experience for Filipino players. This analysis uses de-identified data wherever possible.
• Marketing Communications: Sending promotional offers, new game announcements, and platform news to players who have opted in to receive such communications. You may opt out at any time via account settings or by contacting bl77 support.
• Customer Support: Processing support requests, investigating complaints, resolving disputes, and maintaining records of communications for quality assurance purposes.

Under the Philippine Data Privacy Act of 2012, bl77 processes personal data on one or more of the following legal grounds:

• Contractual Necessity: Processing required to enter into or perform the contract between you and bl77 — specifically, the bl77 Terms & Conditions. This covers account registration, KYC, payment processing, and gaming activity.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR gaming regulations, the Anti-Money Laundering Act, and data reporting obligations. bl77 cannot waive legally mandated processing.
• Legitimate Interests: Processing necessary for bl77's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and certain optional platform features is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bl77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of third parties, strictly for the purposes described in Section 4:

• Payment Processors: GCash (Globe Fintech Innovations Inc.), PayMaya Philippines Inc., BPI, BDO, Metrobank, and card network operators (Visa, Mastercard) receive the minimum data required to process your transactions and confirm payment outcomes.
• KYC and Identity Verification Providers: Authorized third-party identity verification services may receive your government ID documents and biometric verification data for the sole purpose of identity and age verification on bl77's behalf. These providers operate under strict data processing agreements and are prohibited from using your data for any other purpose.
• Game Providers: Integrated game providers (JILI, Pragmatic Play, PG Soft, Ezugi) receive session tokens and gameplay data necessary for game delivery, fair play certification, and dispute resolution. These providers do not receive your identity or financial data.
• Regulatory Authorities: bl77 may be required by law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities acting under lawful authority. bl77 will inform you of such disclosures where legally permitted to do so.
• IT Infrastructure and Cloud Service Providers: bl77 uses third-party hosting, database, and security service providers to operate the platform. These providers act as data processors under bl77's instruction and are contractually prohibited from accessing or using player data beyond the scope required to deliver their services to bl77.

bl77 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with bl77's data destruction procedures. Where data cannot be immediately deleted due to technical constraints, it is placed in a restricted archive and access is limited pending scheduled deletion.

bl77 implements the following technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure:

• Encryption in Transit: All data transmitted between your device and bl77 servers is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all pages on bl77.biz, including the login page, cashier, and support interface.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial data, and password hashes — is stored using AES-256 encryption in bl77's database infrastructure.
• Access Controls: Access to personal data within bl77's internal systems is restricted to authorized personnel whose role requires such access. All internal data access is logged, and access privileges are reviewed on a regular schedule.
• Password Security: Player passwords are stored as salted cryptographic hashes. bl77 does not store plain-text passwords and cannot retrieve a player's password — only reset it via OTP verification to the registered mobile number.
• Penetration Testing and Security Audits: bl77 conducts regular security assessments of its platform infrastructure, including penetration testing by independent security professionals, to identify and remediate vulnerabilities.
• Incident Response: bl77 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to player rights, bl77 will notify the National Privacy Commission within 72 hours and affected players without undue delay, as required under the DPA and its IRR.

bl77 uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyze traffic patterns. A cookie is a small text file stored on your device when you visit bl77.biz. bl77 uses the following categories of cookies:

You can manage non-essential cookie preferences through your bl77 Account settings or your browser's cookie management tools. Note that disabling essential cookies will prevent the bl77 platform from functioning correctly and may make it impossible to log in or use the cashier.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you hold the following rights with respect to your personal data processed by bl77:

The bl77 platform is strictly intended for adults aged 21 years and above. bl77 does not knowingly collect personal data from individuals under the age of 21. The minimum age requirement at bl77 exceeds the standard age of majority under Philippine law, in compliance with PAGCOR gaming regulations applicable to online casino platforms.

If bl77 discovers that personal data has been collected from a person under the age of 21, we will immediately and permanently close the associated Account, void any gameplay and balances, and securely delete all personal data associated with that Account. If you are a parent or guardian and believe your child has registered at bl77, please contact our support team immediately via live chat.

bl77 sends promotional communications — including new game announcements, deposit bonuses, and platform updates — only to players who have explicitly opted in to receive such communications at registration or via their Account settings. Marketing communications are sent via SMS to your registered Philippine mobile number, and where applicable, via in-platform notifications.

You may withdraw consent to receive marketing communications at any time by updating your preferences in your bl77 Account settings, or by contacting bl77 support via live chat. Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal, and does not affect your ability to use any other feature of the bl77 platform.

bl77 does not share your contact information with third-party marketers. Promotional communications you receive will be from bl77 directly regarding bl77 products and services only.

Some of bl77's third-party service providers — including cloud infrastructure, KYC verification, and game providers — may be located outside the Philippines. Where personal data is transferred outside of the Philippines, bl77 ensures that such transfers are carried out in compliance with the DPA and NPC-issued guidelines on cross-border data transfers.

bl77 implements appropriate safeguards for cross-border transfers, which may include contractual data processing agreements incorporating standard contractual clauses, or transfer to recipients in jurisdictions recognized by the NPC as providing adequate data protection. bl77 does not transfer personal data to countries or territories identified as high-risk for data privacy without additional safeguards in place.

bl77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, bl77 will notify registered players by displaying a prominent notice on the bl77 platform and, where required by law, by sending a notification to your registered mobile number, with a minimum of 7 days' notice before the amended Policy takes effect.

The "Last Updated" date at the top of this document indicates when the most recent substantive changes were made. Non-material amendments — such as typographical corrections or clarifications that do not alter your rights — may be made without prior notice and will be reflected in the updated Policy on this page.

Your continued use of the bl77 platform after an updated Privacy Policy takes effect constitutes your acceptance of the updated Policy. If you do not agree with changes to the Privacy Policy, you should cease use of the bl77 platform and contact bl77 to request account closure.

bl77 has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act of 2012 and the NPC's registration requirements for personal information controllers. The DPO is responsible for overseeing bl77's compliance with the DPA and this Privacy Policy, and for handling data rights requests and privacy-related complaints from Filipino players.

For any questions, concerns, or requests relating to your personal data and privacy rights at bl77, you may contact the bl77 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via bl77.biz. This is the fastest channel for urgent data privacy matters including account data requests and complaint escalation. Average response time is under 3 minutes.
• Email: [email protected] — for the attention of the Data Protection Officer. Please mark privacy-related emails clearly in your subject line. bl77 will acknowledge receipt within 5 business days and respond substantively within 15 business days.

This Privacy Policy is effective as of 1 January 2026 and supersedes all prior versions of the bl77 Privacy Policy. This document is accessible at all times at bl77.biz/privacy-policy.