bf777 Privacy Policy

1.1 bf777 ("bf777," "we," "us," or "our") operates the online gaming platform accessible at bf777.one (the "Platform"). We are committed to safeguarding the privacy of all users ("you," "Player," or "User") who access or use the Platform.

1.2 This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bf777. This Policy applies to all personal data collected through the Platform, including data collected during registration, gameplay, financial transactions, customer support interactions, and any other use of the Platform.

1.3 This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your use of the bf777 Platform.

1.4 bf777 processes personal data in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations. We are committed to upholding the rights of data subjects as provided under Philippine law.

2.1 bf777 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1.1 Registration & Identity Data:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Nationality
• Username and password (stored in encrypted form)
• Email address
• Mobile phone number

2.1.2 Identity Verification (KYC) Data:

• Government-issued photo identification (e.g., Philippine passport, driver's license, national ID, SSS/GSIS card)
• Proof of address (e.g., utility bill, bank statement)
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account)
• Selfie or live photo for identity confirmation

2.1.3 Financial Data:

• Deposit and withdrawal transaction records
• Payment method details (e.g., GCash number, bank account details, card details — stored in tokenized or masked form)
• Account balance history

2.1.4 Gaming Activity Data:

• Game history, wager amounts, and outcomes
• Session duration and frequency of play
• Bonus and promotion usage
• Responsible gaming tool usage (e.g., deposit limits, self-exclusion requests)

2.1.5 Technical & Device Data:

• IP address and geolocation data
• Device type, operating system, and browser information
• Cookies and similar tracking technologies (see Section 6)
• Login timestamps and session logs

2.1.6 Communications Data:

• Records of live chat, email, and other communications with bf777 customer support
• Survey responses and feedback submissions

3.1 bf777 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your bf777 account, including verifying your identity and eligibility to use the Platform.
• Age Verification: To confirm that you are at least 21 years of age, as required by applicable Philippine gaming regulations.
• KYC & Compliance: To fulfill our legal obligations under Philippine anti-money laundering laws, gaming regulations, and the Data Privacy Act of 2012.
• Payment Processing: To process deposits, withdrawals, and other financial transactions on the Platform.
• Game Provision: To provide you with access to games, track your gaming activity, and calculate winnings and bonuses.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming patterns, identify potential problem gambling behavior, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct.
• Marketing & Promotions: To send you promotional offers, bonuses, and news about bf777 — but only where you have given your consent to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features and performance of the bf777 Platform.
• Legal Compliance: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities including PAGCOR.

4.1 bf777 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its implementing rules:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., the Terms & Conditions) — for example, to process your deposits, provide access to games, and pay out winnings.
• Legal Obligation: Processing is required to comply with our legal obligations, including KYC verification, anti-money laundering reporting, and age verification requirements under Philippine gaming regulations.
• Legitimate Interests: Processing is necessary for bf777's legitimate interests, such as fraud prevention, platform security, and improving our services — provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as sending marketing communications, we rely on your explicit consent. You may withdraw your consent at any time by contacting customer support or updating your account preferences.

5.1 bf777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and identity verification services that assist us in confirming your identity and age.
• Game Software Providers: Licensed game studios and software providers whose games are available on the bf777 Platform, to the extent necessary to deliver gameplay.
• Regulatory Authorities: PAGCOR and other Philippine government agencies, where disclosure is required by law or regulation.
• Law Enforcement: Philippine law enforcement agencies, courts, or other public authorities where disclosure is required by a valid legal order or where we believe disclosure is necessary to prevent fraud, money laundering, or other illegal activity.
• IT & Security Service Providers: Third-party providers who assist us in operating, maintaining, and securing the bf777 Platform.
• Professional Advisors: Lawyers, auditors, and other professional advisors who are bound by confidentiality obligations.

5.2 All third parties with whom bf777 shares personal data are required to handle that data in accordance with applicable privacy laws and bf777's data protection standards. We do not permit third parties to use your personal data for their own purposes beyond the scope of the services they provide to bf777.

6.1 bf777 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support security and fraud prevention measures. A cookie is a small text file placed on your device when you visit the Platform.

6.2 The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that help detect fraudulent activity. These cannot be disabled.
• Functional Cookies: Allow the Platform to remember your preferences, such as your language settings and display preferences, to provide a more personalized experience.
• Analytics Cookies: Help us understand how players interact with the Platform — for example, which games are most popular and how long sessions typically last. This data is used in aggregate form to improve the Platform.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests and gaming activity. These are only placed with your consent.

6.3 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bf777 Platform. Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform.

7.1 bf777 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering regulations.
• KYC & Identity Documents: Retained for a minimum of five (5) years following the end of the business relationship, as required by applicable law.
• Financial Transaction Records: Retained for a minimum of five (5) years following the date of the transaction.
• Gaming Activity Logs: Retained for a minimum of three (3) years following the date of the activity.
• Customer Support Communications: Retained for a minimum of two (2) years following the resolution of the relevant inquiry or dispute.
• Marketing Consent Records: Retained for as long as you remain a registered player and for one (1) year following account closure.

7.2 When personal data is no longer required, bf777 will securely delete or anonymize it in accordance with our internal data disposal procedures.

8.1 bf777 takes the security of your personal data seriously. We implement a range of technical and organizational measures designed to protect your data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bf777 Platform
• Encryption of sensitive data at rest, including passwords and payment details
• Multi-factor authentication options for player accounts
• Regular security audits and penetration testing
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Continuous monitoring for suspicious activity and potential data breaches
• Staff training on data protection and information security best practices

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bf777 will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and its implementing rules.

9.1 Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by bf777:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data bf777 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

9.2 To exercise any of the rights listed above, please contact bf777's Data Protection Officer via the contact details provided in Section 13. We will respond to all verified requests within thirty (30) days, as required by the Data Privacy Act of 2012.

10.1 If bf777 becomes aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account.

10.2 If you are a parent or guardian and believe that your child has registered on the bf777 Platform or provided us with personal data, please contact our customer support team immediately so that we can take appropriate action.

11.1 The bf777 Platform may contain links to third-party websites or services, such as payment providers or game software studios. This Privacy Policy applies only to the bf777 Platform and does not cover the privacy practices of any third-party websites or services.

11.2 bf777 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party services you access through or in connection with the bf777 Platform.

12.1 bf777 reserves the right to update or modify this Privacy Policy at any time. When material changes are made, we will notify registered players by email or by posting a prominent notice on the Platform. The date of the most recent revision is indicated at the top of this page.

12.2 Your continued use of the bf777 Platform following the effective date of any changes to this Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

13.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way bf777 handles your personal data, please contact our Data Protection Officer (DPO):

• Live Chat: Available 24/7 directly on the bf777 Platform
• Email: [email protected]

13.2 If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.