bb777 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how bb777 ("bb777," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "your," or "Player") who access or use the bb777 online casino platform at bb777.one (the "Platform").

bb777 is committed to protecting the privacy and personal data of all its players, particularly those based in the Philippines. This Policy is drafted in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on bb777, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.

02 Who We Are

bb777 is an online gaming and casino platform operating under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). The Platform serves Filipino players across the country, including those in Metro Manila, Cebu, Davao, Quezon City, Makati, and other regions of the Philippines.

For the purposes of the Data Privacy Act of 2012, bb777 acts as the Personal Information Controller (PIC) in respect of the personal data it collects directly from players. Where bb777 engages third-party service providers to process data on its behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable Philippine law.

bb777 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Policy. You may contact the DPO through the contact details provided in Section 15 of this Policy.

03 Personal Data We Collect

bb777 collects personal data from you in the following categories, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Nationality and country of residence
• Email address and mobile number
• Username and encrypted password

3.2 KYC Verification Data

• Copies of government-issued photo ID (e.g., PhilSys National ID, passport, driver's license, UMID, SSS ID, PRC ID)
• Proof of address (e.g., utility bill, bank statement dated within 90 days)
• Selfie or liveness check image for identity verification
• Source of funds documentation where required by PAGCOR or AMLA regulations

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (GCash account number, PayMaya account, BPI/BDO/Metrobank account details — stored in tokenized form only)
• Transaction amounts in Philippine Peso (PHP)
• Bonus and promotional activity records

3.4 Gaming Activity Data

• Game session logs, bet history, win/loss records
• Game preferences and platform usage patterns
• Responsible gaming tool usage (deposit limits, session timers, self-exclusion records)

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform access timestamps and login history

3.6 Communications Data

• Records of your communications with bb777's customer support team
• Feedback, survey responses, and complaint records
• Email and live chat correspondence

04 How We Use Your Personal Data

bb777 uses the personal data it collects for the following specific purposes:

bb777 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, bb777 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and bb777 — specifically, to operate your account, process transactions, and provide gaming services as described in the Terms and Conditions.
• Legal Obligation: Processing is required to comply with bb777's legal obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for bb777's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and improving the quality of its services, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending you promotional communications and marketing materials — bb777 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by contacting our support team or updating your communication preferences in your account settings.

06 Sharing Your Personal Data

bb777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party identity verification services engaged by bb777 to conduct age and identity checks in compliance with PAGCOR and AMLA requirements.
• Game Software Providers: Licensed game developers and content providers whose games are available on the bb777 Platform, to the extent necessary to deliver game services and maintain game integrity.
• IT and Cloud Service Providers: Hosting, data storage, and cybersecurity service providers who process data on bb777's behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other lawful process.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by bb777, subject to professional confidentiality obligations.

All third parties with whom bb777 shares personal data are required to handle that data in accordance with applicable Philippine data protection law and bb777's data protection standards. bb777 does not permit third-party processors to use your data for their own independent purposes.

07 Cookies & Tracking Technologies

bb777 uses cookies and similar tracking technologies on the Platform to enhance your user experience, maintain session security, and gather analytics data. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations to provide a more personalized experience.
• Analytics Cookies: Collect anonymized data about how players use the Platform — such as which games are most popular and how long sessions last — to help bb777 improve its services. This data is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized account access, and bot traffic on the Platform.

By continuing to use the bb777 Platform after being presented with our cookie notice, you consent to the use of non-essential cookies as described above. You may manage your cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform.

08 Data Security

bb777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data in transit is protected by TLS 1.2 or higher encryption. Sensitive data at rest, including payment credentials and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized bb777 personnel and third-party processors on a strict need-to-know basis. All access is logged and regularly audited.
• Two-Factor Authentication (2FA): bb777 offers and encourages the use of 2FA for player accounts to provide an additional layer of security beyond username and password.
• Penetration Testing: bb777's Platform and infrastructure undergo regular penetration testing and security audits by independent cybersecurity specialists.
• Incident Response: bb777 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, bb777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required by the Data Privacy Act.
• Staff Training: All bb777 personnel who handle personal data receive regular training on data protection obligations and security best practices.

09 Data Retention

bb777 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and Registration Data: Retained for the duration of your active account, plus a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AMLA regulations.
• KYC Verification Documents: Retained for a minimum of five (5) years from the date of verification, or longer if required by AMLA or other applicable law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• Gaming Activity Logs: Retained for a minimum of two (2) years from the date of each session, for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last communication, unless the matter involves an ongoing dispute or legal proceeding.
• Marketing Consent Records: Retained for the duration of your consent, plus three (3) years after withdrawal of consent, to demonstrate compliance.

Upon expiry of the applicable retention period, bb777 will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where anonymization is used, the resulting data may be retained indefinitely for statistical and analytical purposes, as it can no longer be linked to any individual.

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by bb777:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data bb777 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data bb777 holds about you.
• Right to Erasure or Blocking: You have the right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, or where processing is unlawful. Note that this right may be limited where bb777 is required to retain data by law.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to bb777's overriding legitimate grounds.
• Right to Damages: You have the right to claim compensation for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that bb777 has violated your data privacy rights.

To exercise any of the above rights, please contact bb777's Data Protection Officer using the contact details in Section 15. bb777 will respond to all data subject requests within fifteen (15) business days of receipt, as required by the Data Privacy Act.

11 Children & Minors

The bb777 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing casino-style gambling. bb777 does not knowingly collect personal data from any person under the age of 21.

If bb777 discovers or has reason to believe that personal data has been collected from a person under the age of 21, it will immediately take the following steps:

• Suspend the relevant account pending investigation;
• Delete all personal data associated with the underage individual from its systems;
• Refund any deposits made, subject to verification of the source of funds;
• Report the matter to PAGCOR and, where appropriate, to relevant Philippine child protection authorities.

If you are a parent or guardian and believe that your child has registered on the bb777 Platform, please contact our support team immediately. We will investigate and take appropriate action without delay.

12 International Data Transfers

bb777 primarily stores and processes personal data within the Philippines. However, in certain circumstances — such as where bb777 engages cloud service providers or game software partners with infrastructure located outside the Philippines — your personal data may be transferred to, stored in, or processed in countries other than the Philippines.

Where such international transfers occur, bb777 ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries that the National Privacy Commission has determined provide an adequate level of data protection;
• Implementing standard contractual clauses or binding corporate rules that require the recipient to protect your data to a standard equivalent to that required under Philippine law;
• Obtaining your explicit consent to the transfer where required by the Data Privacy Act.

By using the bb777 Platform, you acknowledge that your personal data may be transferred internationally as described in this section, subject to the safeguards outlined above.

13 Third-Party Services & Links

The bb777 Platform may contain references to third-party services, such as payment processors (GCash, PayMaya, BPI, BDO, Metrobank) and game software providers. When you interact with these third-party services, you may be subject to their own privacy policies and data practices, which are separate from and independent of this Policy.

bb777 is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party services you use in connection with your bb777 account. bb777 selects its third-party partners carefully and requires them to maintain data protection standards consistent with Philippine law, but cannot guarantee the practices of independent third parties beyond the scope of its contractual arrangements with them.

14 Updates to This Privacy Policy

bb777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, bb777 will notify registered players by email or by displaying a prominent notice on the Platform prior to the changes taking effect. Your continued use of the bb777 Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

bb777 recommends that you review this Privacy Policy periodically to stay informed of how your personal data is being protected. If you have any questions about changes to this Policy, please contact our Data Protection Officer using the details in Section 15.

15 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or bb777's handling of your personal data, please contact our Data Protection Officer using the following details:

bb777 will acknowledge receipt of your inquiry within three (3) business days and will endeavor to resolve all data privacy concerns within fifteen (15) business days. For complex matters, bb777 will keep you informed of progress and provide a final response within thirty (30) business days.

If you are not satisfied with bb777's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.

bb777 takes all data privacy complaints seriously and is committed to resolving them fairly, transparently, and in accordance with Philippine law. We value the trust that Filipino players place in us and will always strive to handle your personal data with the highest standards of care and integrity.