bh777 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how bh777 ("bh777," "we," "us," "our") collects, uses, stores, shares, and protects personal data in connection with the online gaming platform operated at https://bh777.one ("the Platform"). This Policy applies to all visitors, registered players, and any other individuals whose personal data is processed by bh777 in connection with the Platform.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and applicable issuances of the National Privacy Commission ("NPC"). By registering an account or using the Platform, you acknowledge that you have read, understood, and agreed to the practices described in this Policy.

2 Data Controller Identity

For the purposes of the DPA and this Policy, bh777 acts as the personal information controller ("PIC") in respect of personal data collected from players and users of the Platform. bh777 has appointed a Data Privacy Officer ("DPO") who is responsible for overseeing compliance with this Policy and the DPA. Contact details for the DPO are provided in Section 14 of this Policy.

3 Personal Data We Collect

3.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Email address
• Philippine mobile number
• Username and encrypted password
• Government-issued identification document number and images (upon KYC request)
• Proof of address documentation (upon KYC request)

3.2 Financial Data

• GCash account number (where used as payment method)
• Maya / PayMaya account details (where used)
• Bank account name and number for withdrawal processing (BPI, BDO, Metrobank, and others)
• Transaction history, deposit amounts, withdrawal amounts, and wallet balance records

3.3 Gaming Activity Data

• Game sessions, bet history, wager amounts, game outcomes, and session durations
• Sports betting selections and results
• Bonus and promotional usage history
• Responsible gaming tool usage (deposit limits set, self-exclusion periods)

3.4 Technical & Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser type and version
• Session identifiers and authentication tokens
• Platform usage logs and error reports

3.5 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with bh777
• Responses to voluntary surveys or promotions

4 How We Collect Your Data

bh777 collects personal data through the following means:

• Direct provision: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Data collected automatically as you use the Platform, including through cookies, session logs, and device fingerprinting technology used for fraud prevention and security purposes.
• Third-party sources: Data received from payment processors (GCash, Maya, banks) to verify transaction completion; data from identity verification service providers during KYC; data from fraud prevention and anti-money laundering screening services.

5 Legal Basis & Purposes of Processing

bh777 processes personal data only where a lawful basis exists under the DPA. The primary bases and corresponding purposes are:

• Performance of contract: Processing necessary to register your account, maintain your wallet, process deposits and withdrawals, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations, KYC/AML screening, age verification, and tax reporting requirements.
• Legitimate interests: Fraud detection and prevention, platform security, abuse prevention, customer support, responsible gaming programme administration, and platform improvement analytics — where these interests are not overridden by your privacy rights.
• Consent: Direct marketing communications, optional surveys, and personalisation features — where you have provided explicit, informed consent that may be withdrawn at any time.

6 Disclosure of Personal Data to Third Parties

bh777 does not sell or rent personal data to third parties. We may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash (Mynt), Maya / PayMaya, and Philippine banking partners — for processing deposits and withdrawals.
• Identity verification providers: KYC/AML service providers engaged to verify identity documents and conduct sanctions screening.
• Game software providers: Third-party game developers and live casino operators whose games are hosted on the bh777 Platform — limited to session and bet data required to deliver the game.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities — where legally required.
• IT & security service providers: Cloud infrastructure, cybersecurity, and fraud prevention vendors engaged under data processing agreements that bind them to handle data in accordance with the DPA.

All third-party service providers engaged by bh777 are required to implement appropriate technical and organisational security measures and to process personal data only on bh777's documented instructions.

7 Cross-Border Data Transfers

Some of bh777's third-party service providers — including cloud infrastructure and game software providers — may process personal data on servers located outside the Philippines. Where such cross-border transfers occur, bh777 ensures that appropriate safeguards are in place, including contractual clauses requiring the recipient to maintain standards equivalent to those required under the DPA and its IRR. bh777 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

8 Data Retention

bh777 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Key retention periods include:

• Account and transaction records: Retained for a minimum of five (5) years following account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
• KYC documentation: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Support communications: Retained for three (3) years from the date of the communication.
• Marketing consent records: Retained for as long as your account is active and for two (2) years thereafter.
• Technical logs: Retained for up to twelve (12) months, except where retained longer for fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

9 Cookies & Tracking Technologies

The bh777 Platform uses cookies and similar tracking technologies to operate core Platform functionality, maintain your session state, prevent fraud, and (where you consent) to analyse usage patterns and personalise your experience. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled without breaking core functionality such as login sessions and wallet access.
• Security cookies: Used for fraud detection, CSRF protection, and device fingerprinting to protect your bh777 account.
• Analytics cookies: Used (subject to your consent) to understand how players use the Platform so we can improve it. Data is processed in aggregate and anonymised form where possible.
• Preference cookies: Used to remember your Platform settings and preferences (e.g., language, display preferences).

You may manage non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the bh777 Platform.

10 Security Measures

bh777 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit;
• Encrypted storage of sensitive personal data and financial records at rest;
• Multi-factor authentication requirements for administrative access to data systems;
• Regular penetration testing and vulnerability assessments;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Real-time fraud monitoring and anomaly detection systems;
• Regular employee training on data privacy and information security obligations.

11 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by bh777:

bh777 will respond to data subject requests within thirty (30) days of receipt. Complex requests may require up to sixty (60) days; you will be notified of any extension.

12 Children's Privacy

The bh777 Platform is strictly for adults aged 21 years and older. bh777 does not knowingly collect personal data from individuals under 21 years of age. If bh777 becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be closed. If you believe a minor has registered on the bh777 Platform, please notify us immediately at [email protected] so we can take appropriate action.

13 Amendments to This Policy

bh777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered players via email at least seven (7) days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the bh777 Platform after the effective date of any change constitutes acceptance of the revised Policy.

14 Contact & Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or bh777's data processing practices, please contact the bh777 Data Privacy Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: Data Privacy Request — [Your Name / Account Username]
• Live Chat: 24/7 via the bh777 Platform chat interface
• Response time: Within 30 days of receipt of your request

You also have the right to file a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with bh777's response to your privacy concern.