bb77 Privacy Policy

bb77 is an online casino and sports betting platform operated under a PAGCOR license and accessible at bb77.cam. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, bb77 acts as the Personal Information Controller in respect of all personal data collected through the platform.

Our designated Data Protection Officer (DPO) can be contacted for any privacy-related enquiries, requests, or concerns:

All written communications regarding data privacy should be addressed to the DPO at the email above. bb77 does not accept data privacy requests submitted through live chat, as a written record is required for compliance purposes.

bb77 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect are as follows:

bb77 does not collect sensitive personal information as defined under the DPA (e.g., health data, political opinions, or religious beliefs) unless explicitly required for responsible gaming assessments and consented to by the player.

bb77 collects personal data through the following channels:

• Direct Collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated Collection: Technical data collected automatically when you access the bb77 platform, including IP addresses, device identifiers, and session logs via cookies and similar technologies (see Section 7);
• Third-Party Verification: Identity and address verification data received from licensed KYC/AML service providers when you submit government-issued identification documents;
• Payment Processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, and Coins.ph when you conduct financial transactions on bb77;
• Regulatory Sources: Data received from PAGCOR or Philippine law enforcement authorities in connection with regulatory compliance, licensing conditions, or lawful orders.

bb77 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable legal bases for our processing activities are:

• Contractual Necessity: Processing required to fulfil our obligations under the bb77 Terms & Conditions, including account management, game delivery, and payment processing;
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and lawful orders from Philippine courts or regulatory bodies;
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics — where these interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications, where you have freely given specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

bb77 uses your personal data for the following specific purposes:

• Creating and managing your bb77 account, including identity verification and age confirmation (21+ requirement);
• Processing deposits and withdrawals through your verified Philippine payment methods;
• Delivering casino games, sports betting, and all other services available on the bb77 platform;
• Detecting and preventing fraud, collusion, money laundering, and other prohibited activities;
• Monitoring gaming activity to identify signs of problem gambling and applying responsible gaming interventions where necessary;
• Fulfilling reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other relevant Philippine regulatory bodies;
• Communicating with you about your account, transactions, promotions (where consented), and any changes to our Terms or this Privacy Policy;
• Resolving disputes, investigating complaints, and maintaining records for regulatory audit purposes;
• Improving the bb77 platform through aggregate, anonymised analytics of player behaviour and platform performance.

bb77 shares personal data with third parties only to the extent necessary for the purposes described in this Policy, and only with parties who are contractually bound to handle your data in accordance with the DPA. Categories of third-party recipients include:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, and Coins.ph, for the purpose of processing financial transactions;
• KYC and Identity Verification Providers: Licensed third-party verification services that assist bb77 in confirming player identity and age in compliance with PAGCOR requirements;
• Game Content Providers: Licensed game studios and software providers who supply casino game content to the bb77 platform and may process limited session data for game integrity purposes;
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on bb77's behalf under strict data processing agreements;
• Regulatory and Law Enforcement Authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or lawful order;
• Professional Advisers: Legal, audit, and compliance professionals engaged by bb77, subject to professional confidentiality obligations.

bb77 does not transfer personal data to international recipients except where technically necessary for platform infrastructure, and only subject to adequate data protection safeguards consistent with the DPA's requirements for cross-border data transfers.

bb77 uses cookies and similar tracking technologies to operate the platform, maintain session security, and understand how players interact with our services. The types of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function correctly, including maintaining your logged-in session and remembering your language preferences. These cannot be disabled without impairing your use of bb77;
• Analytics Cookies: Used to collect aggregate, anonymised data about how players navigate the platform, which pages are most visited, and where technical errors occur. This data helps bb77 improve platform performance;
• Security Cookies: Used for fraud detection, bot prevention, and protecting your account from unauthorised access;
• Preference Cookies: Used to remember your personalisation settings, such as game display preferences and notification choices.

bb77 retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are:

• Active Account Data: Retained for the duration of your account and for five (5) years after account closure, in accordance with PAGCOR licensing conditions and AMLC record-keeping obligations;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• KYC/Identity Verification Documents: Retained for five (5) years after account closure or the last transaction, whichever is later;
• Customer Support Records: Retained for three (3) years from the date of the last support interaction;
• Marketing Preference Data: Retained until you withdraw consent or request deletion, plus one (1) year to maintain a suppression record;
• Technical and Log Data: Retained for up to twelve (12) months for security and platform integrity purposes.

Upon expiry of the applicable retention period, bb77 will securely delete or anonymise personal data in accordance with its data disposal procedures.

bb77's security measures include, but are not limited to:

• End-to-end encryption of all sensitive data in transit and at rest;
• Multi-factor authentication for account access and high-value transaction approvals;
• Regular penetration testing and vulnerability assessments of platform infrastructure;
• Role-based access controls ensuring that bb77 staff can only access player data on a strict need-to-know basis;
• Automated fraud detection and account security monitoring systems operating 24/7;
• Regular staff training on data protection obligations and secure data handling practices.

In the event of a personal data breach that poses a risk to your rights and freedoms, bb77 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the DPA's breach notification provisions.

bb77 primarily stores and processes personal data within servers located in the Philippines or in jurisdictions that provide an adequate level of data protection as recognised under Philippine law. Where technical infrastructure requirements necessitate the transfer of data to servers located outside the Philippines — for example, in connection with cloud hosting or game content delivery networks — bb77 ensures that:

• The recipient country or territory provides an equivalent level of data protection to that required under the DPA;
• Appropriate contractual safeguards, including data processing agreements aligned with NPC guidelines, are in place with all international data processors;
• The transfer is limited to the minimum data necessary for the specific technical purpose.

You may request information about the specific international transfers applicable to your data by contacting the bb77 DPO at [email protected].

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by bb77. To exercise any of these rights, please contact our DPO at [email protected] with the subject line "Data Rights Request" and specify clearly which right you wish to exercise.

bb77 will respond to all verified data rights requests within fifteen (15) business days. We may request proof of identity before processing any request to protect your data from unauthorised access.

All account registrations require submission of a valid Philippine government-issued ID confirming the applicant is at least 21 years of age. If bb77 becomes aware that personal data has been collected from an individual under 21, the relevant account will be immediately suspended, the personal data will be deleted, and any funds held in the account will be processed in accordance with applicable PAGCOR guidelines.

If you are a parent or guardian and believe that a minor in your care has attempted to register on bb77, please contact us immediately at [email protected] so we can investigate and take appropriate action without delay.

bb77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, bb77 will:

• Update the "Last Updated" date at the top of this page;
• Send a notification to your registered email address at least seven (7) days before the changes take effect, where those changes materially affect your rights;
• Display a prominent notice on the bb77 platform for a period of not less than fourteen (14) days following any material update.

Your continued use of the bb77 platform after the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with any changes to this Policy, you may request account closure by contacting [email protected].

If you have a concern about how bb77 has handled your personal data, we encourage you to contact our Data Protection Officer in the first instance at [email protected]. We take all privacy complaints seriously and commit to responding within fifteen (15) business days with a substantive reply.

If you are not satisfied with bb77's response to your complaint, or if you believe that bb77 is processing your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a formal complaint with the Philippine National Privacy Commission (NPC). The NPC is the independent government agency responsible for administering and enforcing data privacy law in the Philippines.