bmy777 Privacy Policy

1. Data Controller Identity

For the purposes of Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules and regulations, bmy777 is the Personal Information Controller in respect of personal data collected through the Platform. This means bmy777 determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing is carried out lawfully, fairly, and transparently.

bmy777 operates under the regulatory oversight of PAGCOR (Philippine Amusement and Gaming Corporation) and is subject to applicable Philippine laws including, without limitation, the Data Privacy Act of 2012, the Anti-Money Laundering Act (as amended), and PAGCOR's licensing conditions regarding player data management.

For all data privacy inquiries, the bmy777 Data Privacy Point of Contact may be reached at: [email protected]

2. Personal Data We Collect

bmy777 collects the following categories of personal data in connection with the operation of its Platform:

3. How We Collect Your Data

bmy777 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or respond to a survey.
• Automatically through Platform use: Through cookies, server logs, and similar technologies that record technical information about your device and session each time you interact with the Platform.
• From payment processors: When you initiate a GCash, Maya, BPI, BDO, or other payment method transaction, relevant transaction confirmation data is received from the processing institution.
• From third-party game providers: Game outcome and session data associated with your bmy777 account are transmitted by our licensed game providers for record-keeping and dispute resolution purposes.
• From identity verification services: Where bmy777 uses a third-party KYC verification service to cross-reference submitted identity documents against relevant databases, confirmation data is received from that service.

4. Purposes of Processing

bmy777 processes your personal data for the following specific purposes:

1. Account creation and management: To register your bmy777 account, verify your identity, maintain your profile, and manage your account settings.
2. Age and identity verification (KYC): To verify that you meet the minimum age requirement of 21 years and to comply with PAGCOR's KYC obligations for regulated gaming operators.
3. Payment processing: To process your GCash, Maya, bank transfer, and other deposit and withdrawal transactions accurately and securely.
4. Game delivery and fairness: To deliver game content, record game outcomes, resolve disputes, and maintain accurate win/loss records.
5. Regulatory compliance and fraud prevention: To comply with PAGCOR licensing conditions, Anti-Money Laundering Act obligations, and AMLC reporting requirements; and to detect, investigate, and prevent fraudulent or prohibited activity on the Platform.
6. Customer support: To respond to your inquiries, resolve complaints, and improve the quality of bmy777's support services.
7. Responsible gaming: To administer and enforce deposit limits, self-exclusion requests, and session time controls as requested by you or mandated by PAGCOR.
8. Marketing communications: Where you have explicitly opted in, to send you promotional offers, bonus notifications, and platform updates via SMS or email. You may opt out at any time.
9. Platform improvement: To analyze aggregated and anonymized usage data to improve the performance, design, and functionality of the bmy777 Platform.
10. Security: To monitor for unauthorized account access, detect suspicious login patterns, and maintain the integrity of bmy777's security infrastructure.

5. Legal Bases for Processing

Under the Data Privacy Act of 2012 and its implementing rules, bmy777 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and bmy777 — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing required for bmy777 to comply with PAGCOR licensing requirements, the Anti-Money Laundering Act, AMLC directives, NPC regulations, and other applicable Philippine law.
• Legitimate interest: Processing carried out for bmy777's legitimate interests — principally fraud prevention, Platform security, and anonymized analytics — where such interests are not overridden by your privacy rights.
• Consent: For specific processing activities — such as marketing communications and optional data collection beyond core operational needs — bmy777 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without penalty.

6. Data Sharing & Disclosure

bmy777 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent strictly necessary:

• PAGCOR and Philippine government authorities: bmy777 is legally required to share relevant player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government bodies upon lawful request or as part of mandatory regulatory reporting.
• Payment processors: Transaction data is shared with GCash, Maya, BPI, BDO, and other payment institutions solely for the purpose of processing your deposits and withdrawals.
• Licensed game providers: Game session and account data is exchanged with our licensed game providers (e.g., PG Soft, JILI, Evolution, Pragmatic Play) solely to facilitate game delivery and dispute resolution.
• KYC verification services: Identity document data submitted during KYC may be processed by a contracted third-party identity verification provider operating under data processing agreements with bmy777.
• Technical service providers: bmy777 uses contracted technical partners — including cloud hosting providers, fraud detection systems, and customer support tools — who process data strictly on bmy777's instructions under binding data processing agreements.
• Law enforcement: Where bmy777 is required by court order, warrant, or other legally binding directive to disclose personal data to Philippine law enforcement agencies, it will comply in accordance with applicable law.

7. Cookies & Tracking Technologies

bmy777 uses cookies and similar tracking technologies to deliver, maintain, and improve the Platform. Cookies are small data files stored on your device by your browser. bmy777 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your bmy777 session. They cannot be disabled without disrupting Platform functionality.
• Functional Cookies: Enable the Platform to remember your preferences — such as language settings and responsible gaming limits — to provide a more personalized experience.
• Analytics Cookies: Used to collect aggregated and anonymized information about how players use the Platform, enabling bmy777 to identify and fix technical issues and improve user experience. No personally identifying information is included in analytics data.
• Security Cookies: Used to detect and prevent fraudulent login attempts, session hijacking, and other security threats to your bmy777 account.

You may configure your browser to reject or delete cookies. Please note that disabling strictly necessary cookies may affect your ability to log in to and use the bmy777 Platform. bmy777 does not use third-party advertising cookies or cross-site tracking cookies.

8. Data Retention

bmy777 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR's record-keeping standards for licensed gaming operators.
• Financial transaction records: Retained for a minimum of five (5) years following the relevant transaction, in compliance with the Anti-Money Laundering Act's record retention requirements.
• Game activity records: Retained for a minimum of three (3) years following the relevant session, for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years following the resolution of the relevant inquiry or complaint.
• Marketing preference data: Retained until you withdraw consent for marketing communications or close your account, whichever is earlier.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with bmy777's data disposal protocols. Where data is anonymized rather than deleted, the anonymized data is no longer personal data and may be retained indefinitely for analytical purposes.

9. Data Security

bmy777 implements a multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• Transport encryption: All data transmitted between your browser and the bmy777 Platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Password hashing: Passwords are stored using strong one-way cryptographic hashing algorithms. bmy777 staff cannot retrieve your password in plain text.
• Access controls: Access to personal data within bmy777's systems is restricted to authorized personnel on a need-to-know basis. All internal data access is logged and auditable.
• Intrusion detection: bmy777's infrastructure includes automated intrusion detection and rate-limiting systems to identify and block unauthorized access attempts.
• Third-party audits: bmy777 engages third-party security firms to conduct periodic penetration testing and security audits of its Platform and data infrastructure.
• Data breach response: In the event of a data breach that poses a risk to your rights and freedoms, bmy777 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected players as required by NPC Circular 16-03.

10. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by bmy777:

To exercise any of these rights, contact the bmy777 Data Privacy Team at [email protected] with the subject line "Data Privacy Request." bmy777 will acknowledge your request within 2 business days and provide a substantive response within 15 business days. Where additional time is required for complex requests, bmy777 will notify you with an estimated completion date.

If you are not satisfied with bmy777's response to your privacy request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children & Minors

The bmy777 Platform is strictly intended for individuals who are at least 21 years of age, as required by PAGCOR's regulations governing real-money casino-style gaming in the Philippines. bmy777 does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted as part of bmy777's mandatory KYC process. If bmy777 discovers that personal data has been collected from an individual who is under 21 years of age, the account will be immediately suspended, all personal data associated with that account will be deleted (subject to any legal retention obligations), and any deposited funds will be returned to the registered payment method.

12. Cross-Border Data Transfers

In the course of operating the bmy777 Platform, your personal data may be processed on servers or by service providers located outside the Philippines — for example, cloud infrastructure providers or third-party game providers with servers in other jurisdictions.

Where personal data is transferred outside the Philippines, bmy777 ensures that such transfers are subject to appropriate safeguards, including contractual data protection agreements that require the recipient to uphold data protection standards equivalent to those required under Philippine law. bmy777 will not transfer personal data to a jurisdiction that does not provide an adequate level of data protection without your explicit consent or a lawful contractual safeguard in place.

13. Policy Amendments

bmy777 may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the services offered on the Platform. Material changes — particularly those that affect how your data is used or expand the categories of data collected — will be communicated to registered players via email and/or a prominent notice on the Platform at least seven (7) days before taking effect.

Minor amendments — such as corrections, formatting updates, or clarifications that do not materially change your rights or our obligations — may be made without advance notice. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the bmy777 Platform following notification of a material change constitutes acceptance of the revised Privacy Policy.

14. Contact & Complaints

For all questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data by bmy777, please contact:

bmy777 Data Privacy Team
Email: [email protected]
Subject line: "Data Privacy Request"

bmy777 commits to acknowledging all data privacy inquiries within 2 business days and providing a full substantive response within 15 business days of receipt. If your concern involves a potential data breach or immediate security risk to your account, please mark your message as urgent and our security team will respond as a priority.

If you are not satisfied with how bmy777 has handled your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the government body responsible for enforcing the Data Privacy Act of 2012.