bm777 Privacy Policy

bm777 ("we," "us," "our") is the operator of the online gaming platform accessible at bm777.biz. We understand that your privacy matters deeply, and we take our obligations as a data controller under Philippine law seriously. This Privacy Policy describes what personal information bm777 collects, why we collect it, how we use it, who we share it with, and the rights you have regarding your own information as a registered player or visitor from the Philippines or elsewhere.

This Policy applies to all personal data processed by bm777 in connection with your use of the bm777 website, account registration, gaming activities, payment transactions, customer support interactions, and marketing communications. It should be read alongside our Terms & Conditions.

By registering a bm777 Account or continuing to use the Platform after the effective date of this Policy, you acknowledge that you have read and understood how bm777 processes your personal data as described herein.

1.1  The data controller responsible for your personal information is bm777, operating the Platform at bm777.biz under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).

1.2  bm777 has designated a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. The DPO is responsible for overseeing bm777's compliance with applicable data protection legislation and serves as the primary point of contact for data subjects wishing to exercise their rights.

1.3  You may contact the bm777 DPO at [email protected] for all privacy-related inquiries, rights requests, and complaints. bm777 aims to acknowledge all DPO communications within five (5) business days.

2.1  bm777 collects the following categories of personal data in connection with your use of the Platform:

2.2  bm777 does not intentionally collect sensitive personal information as defined under the Philippine DPA (such as health data, sexual orientation, political affiliations, or religious beliefs) unless directly relevant to a specific regulatory requirement such as responsible gaming assessments.

2.3  Where you choose not to provide personal data that bm777 requires for regulatory compliance or account operation, bm777 may be unable to open an Account, process withdrawals, or continue providing services to you.

3.1  bm777 collects personal data through the following means:

1. Directly from you: When you register an Account, complete KYC verification, make a deposit, request a withdrawal, contact support, or voluntarily provide information through any bm777 interface;
2. Automatically through the Platform: Technical data such as IP addresses, device identifiers, session cookies, and gameplay event logs are collected automatically when you access and interact with the bm777 website;
3. From payment service providers: When you make a transaction via GCash, Maya, BPI, BDO, or other Philippine payment methods, bm777 receives transaction confirmation data including reference numbers and masked account identifiers from the relevant payment gateway;
4. From identity verification providers: Where bm777 uses third-party KYC verification services to cross-reference your submitted identity documents against Philippine government records or watchlists;
5. From fraud prevention and AML systems: Automated systems may process your data against risk scoring models and PAGCOR-mandated anti-money laundering watchlists.

4.1  bm777 processes your personal data for the following specific, legitimate purposes:

5.1  Under the Philippine Data Privacy Act of 2012 (RA 10173), bm777 processes your personal data on the following lawful bases:

1. Contractual necessity: Processing required to fulfill our obligations to you under the bm777 Terms & Conditions, including account operation, payment processing, and game delivery;
2. Legal obligation: Processing required by PAGCOR regulations, Philippine AML laws (Republic Act No. 9160, as amended), the DPA itself, and other applicable Philippine legislation;
3. Legitimate interests: Processing necessary for bm777's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and analytics — where these interests are not overridden by your fundamental rights;
4. Consent: Where bm777 relies on your consent — specifically for direct marketing communications — you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

6.1  bm777 may share your personal data with the following categories of recipients:

1. Payment service providers: GCash (Mynt), Maya (Voyager Innovations), GrabPay, participating Philippine banks (BPI, BDO, Metrobank), and payment gateway operators strictly for the purpose of processing deposits and withdrawals. These providers process your financial transaction data as independent data controllers under their own privacy policies and applicable Philippine regulations;
2. Identity and KYC verification providers: Third-party services engaged to verify the authenticity of government-issued Philippine IDs and perform age and identity checks as required by PAGCOR;
3. Fraud prevention and AML service providers: Data processors engaged to operate risk-scoring models, transaction monitoring systems, and PAGCOR-mandated AML watchlist screening;
4. Game content providers: Licensed game studios (such as PG Soft, JILI, Pragmatic Play, and live casino providers) receive limited technical session data required to operate game software. These providers do not receive personally identifiable information beyond session tokens and wager data;
5. Cloud infrastructure and IT service providers: Hosting, database, security monitoring, and technical support providers operating under written data processing agreements with bm777;
6. PAGCOR and Philippine regulatory authorities: bm777 is legally required to report specified gaming, financial, and AML data to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) and other Philippine law enforcement agencies;
7. Professional advisors: Lawyers, auditors, and accountants engaged by bm777 for legal compliance, audit, and regulatory purposes, subject to applicable professional confidentiality obligations.

6.2  All third-party data processors engaged by bm777 are subject to written contractual obligations requiring them to process personal data only on bm777's instructions, to implement appropriate technical and organisational security measures, and to comply with applicable Philippine data protection law.

7.1  bm777 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the minimum retention periods mandated by Philippine law and PAGCOR regulations.

7.2  Applicable retention periods include:

1. Active account records: Retained for the duration of the Account relationship plus a minimum of five (5) years following Account closure, in accordance with Philippine AML record-keeping requirements under Republic Act No. 9160 (as amended);
2. Financial transaction records: Minimum five (5) years from the date of each transaction;
3. KYC documentation: Minimum five (5) years from Account closure or the date of the relevant KYC check;
4. Customer support communications: Minimum two (2) years from the date of the last communication, or longer where a dispute or regulatory matter remains open;
5. Marketing consent records: Retained for as long as you remain on bm777's marketing list, plus a reasonable period after opt-out to evidence compliance.

7.3  Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised or aggregated data (which can no longer identify any individual) may be retained indefinitely for statistical and analytical purposes.

8.1  bm777 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

1. 256-bit SSL/TLS encryption for all data transmitted between your device and bm777 servers;
2. Bcrypt hashing with salt for all stored account passwords — bm777 cannot retrieve your plaintext password;
3. Multi-factor authentication (MFA) for all bm777 administrative and operational system access;
4. Firewalls, intrusion detection systems, and regular vulnerability scanning on all production infrastructure;
5. Role-based access controls ensuring that only authorised personnel can access personal data relevant to their specific function;
6. Regular security training for all bm777 staff who handle personal data;
7. Documented incident response procedures, including notification obligations to the National Privacy Commission (NPC) under the Philippine DPA.

8.2  In the event of a personal data breach that poses a real risk of serious harm to affected individuals, bm777 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay in accordance with Section 20(f) of Republic Act No. 10173.

8.3  While bm777 takes all reasonable precautions, no internet-based platform can guarantee absolute security against all possible threats. Players are encouraged to use strong, unique passwords and to protect their own devices and credentials as set out in the bm777 Terms & Conditions.

9.1  bm777 uses cookies and similar tracking technologies on the Platform for the purposes described in this section. A "cookie" is a small text file placed on your device by the bm777 website.

9.2  bm777 uses the following categories of cookies:

1. Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state. You cannot opt out of strictly necessary cookies while using the Platform;
2. Functional cookies: Remember your preferences such as language settings and responsible gaming limit configurations. These enhance your experience but are not essential to Platform operation;
3. Analytics cookies: Used by bm777 to understand how players interact with the Platform, identify technical issues, and measure the effectiveness of content. Data collected is aggregated and does not identify you personally;
4. Marketing cookies: Used to deliver relevant promotional offers based on your activity on the bm777 Platform. These are only placed where you have consented to marketing communications.

9.3  You may manage cookie preferences through your browser settings. Disabling cookies other than strictly necessary cookies may affect the functionality of the bm777 Platform. Details on managing cookies are available in the help documentation of your browser (Chrome, Safari, Firefox, etc.).

10.1  As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by bm777:

10.2  To exercise any of the rights listed above, please contact the bm777 DPO at [email protected] with the subject line "Data Privacy Rights Request." bm777 may ask you to verify your identity before processing your request. There is no charge for a first rights request within any twelve-month period.

11.1  With your consent, bm777 may send you promotional communications by SMS to your registered Philippine mobile number, email, or push notification. These may include information about new games, current offers, reload bonuses, VIP program updates, and other promotions relevant to your bm777 account.

11.2  You may opt out of marketing communications at any time by:

1. Updating your communication preferences in bm777 Account Settings;
2. Replying "STOP" to any bm777 SMS;
3. Clicking "Unsubscribe" in any bm777 marketing email; or
4. Contacting bm777 support directly via live chat or at [email protected].

11.3  Opting out of marketing communications does not affect your receipt of transactional communications, which include account notifications, deposit confirmations, withdrawal updates, security alerts, and OTP messages. These are sent on a strictly operational basis and cannot be disabled while your Account is active.

12.1  bm777 does not knowingly collect, process, or retain personal data belonging to individuals under the age of 21 years. The registration process requires all applicants to confirm their date of birth and to complete identity verification, which includes documentary proof of age.

12.2  If bm777 becomes aware that personal data belonging to a person under 21 has been collected — whether through misrepresentation of age or any other means — bm777 will immediately suspend the Account, conduct an investigation, forfeit any associated balances accumulated through underage play, and delete the personal data of the minor to the extent not required to be retained by PAGCOR regulations or Philippine law.

12.3  If you are a parent or guardian and believe that a person under 21 in your care has registered on the bm777 Platform, please contact bm777 support immediately via live chat or at [email protected].

13.1  Some of bm777's third-party service providers — including cloud infrastructure providers, game studios, and fraud prevention systems — may process personal data on servers located outside the Philippines.

13.2  Where personal data is transferred outside the Philippines, bm777 ensures that such transfers are made only to recipients in countries that provide an adequate level of protection for personal data, or under contractual arrangements that impose obligations equivalent to those under the Philippine DPA, as required by the National Privacy Commission's rules on cross-border data transfers.

13.3  bm777 does not transfer personal data to recipients in countries that do not provide adequate data protection without appropriate safeguards in place. Players may request information about cross-border transfer safeguards by contacting the bm777 DPO.

14.1  bm777 reserves the right to update this Privacy Policy at any time. The most current version will always be available at bm777.biz/privacy-policy. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

14.2  Where changes materially affect Players' rights or the nature of data processing, bm777 will provide advance notice via email to registered Players or via a prominent notice on the Platform prior to the changes taking effect.

14.3  Continued use of the bm777 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with material changes, you may close your Account and request deletion of your data in accordance with Section 10 above.

15.1  For all privacy-related inquiries, data rights requests, or concerns about bm777's handling of your personal data, please contact the bm777 Data Protection Officer:

15.2  If you are not satisfied with bm777's response to your privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC), the independent supervisory authority responsible for enforcing Republic Act No. 10173. Information about filing a complaint with the NPC is available through the official Philippine government website. bm777 cooperates fully with NPC investigations.