Privacy Policy — bm77 Data Protection Commitment
At bm77, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains exactly what personal information we collect, how we use it, who we share it with, and how you can exercise your rights as a data subject under Philippine law.
Six Principles That Guide How bm77 Handles Your Data
Minimal Data Collection
bm77 only collects personal information that is strictly necessary for account registration, identity verification, payment processing, and regulatory compliance. We do not gather data beyond what serves a clear, lawful purpose.
Secure Storage & Transmission
All personal data stored by bm77 is protected using industry-standard encryption at rest and in transit. Our systems employ TLS 1.3 for all data transfers and AES-256 encryption for data stored on our servers.
No Sale of Personal Data
bm77 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Any sharing of data with service providers is done under strict contractual obligations and only on a need-to-know basis.
Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have enforceable rights — including the right to access, correct, erase, and object to the processing of your personal data. bm77 makes exercising these rights straightforward via your account dashboard or by contacting our Data Protection Officer directly.
PAGCOR & AMLA Compliance
As a PAGCOR-regulated platform operating in the Philippines, bm77 is required to collect and retain certain player data under the Anti-Money Laundering Act (AMLA) and PAGCOR's Know Your Customer (KYC) rules. We comply fully with all applicable regulatory obligations.
Transparent Communication
bm77 will notify you of any material changes to this Privacy Policy via your registered email address before those changes take effect. We believe you should always know exactly how your data is being used — no surprises, no hidden clauses.
Contents
01 Who We Are
bm77 (accessible at bm77.ws) is an online casino and sports betting platform that serves Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and surrounding areas. bm77 operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the laws of the Republic of the Philippines.
For the purposes of this Privacy Policy, bm77 acts as the data controller responsible for determining how and why your personal information is processed. When we engage third-party service providers to process personal data on our behalf — such as payment processors and identity verification providers — those providers act as data processors under written agreements that bind them to protect your data in accordance with applicable Philippine law.
This Privacy Policy applies to all personal information collected through bm77.ws, including account registration, deposit and withdrawal transactions, game activity, customer support interactions, and marketing communications. It does not apply to third-party websites or services that may be linked from our platform — those are governed by their own privacy policies.
02 Data We Collect
bm77 collects personal information only to the extent necessary to provide our gaming services, comply with Philippine regulatory requirements, and protect the integrity of our platform. The categories of data we collect are described below.
Account Registration Data
When you create a bm77 account, we collect your full legal name, date of birth, residential address in the Philippines, email address, and a valid Philippine mobile number capable of receiving SMS verification codes. This information is required to establish your identity as a registered player.
Identity Verification (KYC) Data
To comply with PAGCOR's Know Your Customer requirements and the Philippine Anti-Money Laundering Act, bm77 may request copies of government-issued identification documents such as a PhilSys National ID, passport, or driver's license, as well as proof of residential address (such as a recent utility bill or bank statement issued in the Philippines). Biometric data embedded in government IDs is processed only by our licensed KYC verification provider and is not stored on bm77's own servers.
Financial Data
bm77 collects records of all deposit and withdrawal transactions associated with your account, including amounts, timestamps, payment method references (e.g., masked GCash mobile numbers, masked bank account numbers), and transaction IDs. bm77 does not store full credit or debit card numbers, CVV codes, or online banking credentials on our servers.
Gaming Activity Data
We maintain records of your gaming activity on bm77, including game sessions, bet amounts, wins and losses, sports markets wagered on, and session duration. This data is used for account management, dispute resolution, responsible gaming monitoring, and regulatory reporting.
Device & Technical Data
When you access bm77, our servers automatically log your IP address, browser type and version, device type, operating system, screen resolution, and referring URL. This technical data is used for security monitoring, fraud prevention, and platform performance optimization.
Customer Support Data
When you contact bm77 via live chat or email, we retain records of those communications — including your name, contact details, the nature of your query, and any supporting information you provide — for quality assurance, dispute resolution, and regulatory compliance purposes.
| Data Category | Examples | Purpose |
|---|---|---|
| Registration Data | Name, DOB, email, mobile number | Account creation, identity verification |
| KYC Documents | Government ID, proof of address | PAGCOR / AMLA compliance |
| Financial Data | GCash reference, bank account (masked) | Payment processing, AML monitoring |
| Gaming Activity | Bet history, session logs, win/loss records | Account management, responsible gaming |
| Technical Data | IP address, browser, device type | Security, fraud prevention |
| Support Communications | Live chat logs, email correspondence | Dispute resolution, quality assurance |
03 How We Use Your Data
bm77 processes your personal information for the following specific purposes. We do not use your data for any purpose that is incompatible with what is described here without first obtaining your explicit consent or establishing a new lawful basis for processing.
- To create, manage, and maintain your bm77 player account, including verifying your identity and age eligibility in line with PAGCOR's 21+ requirement.
- To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, and PESONet in Philippine Peso (PHP).
- To deliver the gaming services offered on bm77, including slot games, live casino tables, sports betting markets, sabong, and e-bingo.
- To comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine laws and regulations.
- To detect, investigate, and prevent fraud, money laundering, match-fixing, and other prohibited activities on the platform.
- To administer and enforce bonuses, promotional offers, and loyalty rewards in accordance with applicable terms and conditions.
- To operate our responsible gaming program, including monitoring for signs of problem gambling and facilitating deposit limits, cooling-off periods, and self-exclusion requests.
- To respond to customer support queries, complaints, and regulatory inquiries in a timely and accurate manner.
- To send transactional and account-related notifications such as deposit confirmations, withdrawal status updates, and security alerts.
- To send marketing and promotional communications where you have given your express consent to receive them, and to manage your marketing preferences.
- To analyze platform usage, improve user experience, and optimize our product offering for Filipino players.
04 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, bm77 relies on one or more of the following lawful bases when processing your personal data:
- Contractual Necessity: Processing is required to perform our contract with you — specifically, to operate your bm77 account, process transactions, and deliver gaming services.
- Legal Obligation: Processing is necessary to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
- Legitimate Interests: Processing is necessary for bm77's legitimate interests in preventing fraud, ensuring platform security, and improving our services — provided those interests are not overridden by your fundamental rights and freedoms.
- Consent: For processing activities that are not covered by the above bases — such as sending marketing communications and using non-essential cookies — bm77 relies on your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time.
05 Sharing Your Data
bm77 does not sell your personal information to third parties. We may share your data with the following categories of recipients only to the extent necessary and under appropriate safeguards:
Regulated Payment Processors
To facilitate deposits and withdrawals, bm77 shares relevant transaction data with licensed payment service providers including GCash, Maya, BPI, BDO, Metrobank, and other BSP-regulated financial institutions. These providers receive only the minimum data required to complete the requested transaction and are bound by their own regulatory obligations under BSP and Philippine banking law.
Identity Verification Providers
bm77 uses a licensed third-party KYC service provider to verify the identity and age of players submitting government-issued ID documents. This provider operates under a data processing agreement with bm77 and is prohibited from using your KYC data for any purpose other than identity verification on bm77's behalf.
Game Content Providers
The slot games, live casino products, and other gaming content available on bm77 are supplied by third-party game providers. These providers may receive anonymized session and gameplay data for the purpose of game performance monitoring and RNG certification. Personal identification data is not shared with game providers unless specifically required for a licensed product.
Regulatory Bodies
bm77 is required by law to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies upon their lawful request or as required by applicable reporting obligations. bm77 will disclose personal data to law enforcement or judicial authorities when required by a valid legal process.
Professional Advisers
bm77 may share personal data with lawyers, auditors, accountants, and insurers in the context of professional advisory services, subject to professional confidentiality obligations.
06 Cookies & Tracking Technologies
bm77 uses cookies and similar tracking technologies on bm77.ws to ensure the platform functions correctly, maintain your logged-in session, remember your preferences, and analyze how Filipino players interact with our site. The cookies we use fall into the following categories:
Strictly Necessary Cookies
These cookies are essential for bm77 to function. They maintain your login session, protect against cross-site request forgery (CSRF) attacks, and ensure secure communication between your browser and our servers. These cookies cannot be disabled without breaking the platform's core functionality.
Performance & Analytics Cookies
bm77 uses analytics tools to collect anonymized data about how players navigate the site — including pages visited, session duration, and error reports. This data helps us identify performance issues and improve the player experience. These cookies are only placed with your consent.
Functional Cookies
Functional cookies remember your preferences such as language settings, preferred payment method, and display options. They improve your experience by reducing the need to re-enter information on each visit. These cookies are placed with your consent.
You may manage your cookie preferences at any time via your browser settings or our on-site cookie preference panel. Please note that disabling strictly necessary cookies will affect your ability to log in and use the bm77 platform. For more detail on the specific cookies in use, please refer to our Cookie Information page accessible from the bm77.ws footer.
07 Data Retention
bm77 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years post-closure | PAGCOR licensing requirement |
| KYC / Identity Documents | Duration of account + 5 years post-closure | AMLA obligations (RA 9160) |
| Transaction Records | 5 years from date of transaction | AMLA / BSP regulations |
| Gaming Activity Logs | 3 years from date of activity | PAGCOR audit requirements |
| Customer Support Records | 3 years from date of communication | Dispute resolution / legal claims |
| Marketing Consent Records | Until consent is withdrawn + 1 year | DPA compliance (RA 10173) |
After the applicable retention period expires, bm77 will securely delete or anonymize your personal data in accordance with our data destruction procedures. Anonymized data — from which you cannot be personally identified — may be retained indefinitely for aggregate analytics and reporting purposes.
08 Data Security
bm77 implements a comprehensive set of technical and organizational security measures designed to protect your personal information from unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:
- TLS 1.3 encryption for all data transmitted between your device and bm77's servers, ensuring that your login credentials, financial information, and personal data cannot be intercepted in transit.
- AES-256 encryption for sensitive personal data stored in bm77's databases, including KYC documents and financial records.
- Role-based access controls (RBAC) ensuring that bm77 staff can only access personal data that is strictly necessary for their specific role. Access logs are maintained and audited regularly.
- Multi-factor authentication (MFA) required for all bm77 staff accounts with access to player personal data systems.
- Regular penetration testing and vulnerability assessments conducted by qualified third-party security specialists.
- A formal incident response procedure. In the event of a personal data breach that is likely to prejudice the rights and freedoms of data subjects, bm77 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.
09 Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by bm77. These rights may be exercised at any time by contacting our Data Protection Officer at the details provided in Section 14 of this Policy.
- Right to Be Informed: You have the right to be informed about how bm77 collects and processes your personal information — which is the purpose of this Privacy Policy.
- Right of Access: You may request a copy of the personal information bm77 holds about you, including information about how it is being processed. bm77 will respond to verified access requests within 30 days.
- Right to Rectification: If your personal information is inaccurate or incomplete, you have the right to request that bm77 correct it. You can update basic account information directly through your bm77 account settings.
- Right to Erasure: You may request that bm77 delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw your consent, or where processing is unlawful. Please note that this right is subject to bm77's legal obligations to retain data under AMLA and PAGCOR regulations.
- Right to Object: You have the right to object to bm77 processing your personal data on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately.
- Right to Data Portability: Where technically feasible and legally permitted, you may request a copy of your personal data in a structured, machine-readable format for transfer to another data controller.
- Right to Lodge a Complaint: If you believe that bm77 has processed your personal data in violation of RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
10 Children & Minors
bm77 is strictly an adult gaming platform. In compliance with PAGCOR regulations, registration and participation is limited to individuals who are 21 years of age or older. bm77 does not knowingly collect personal information from individuals under the age of 21.
During registration, bm77 requires you to declare your date of birth and, where triggered by risk-based criteria, to submit a valid government-issued ID to verify your age. Any account found to have been registered by a minor will be immediately closed, all associated funds will be returned to the payment method used for deposits (less any bonuses or winnings), and the matter may be reported to PAGCOR and relevant Philippine authorities as required by law.
If you are a parent or guardian and have reason to believe that a minor in your care has registered on bm77 without your knowledge, please contact our Data Protection Officer immediately at the details in Section 14. We will investigate and take appropriate action promptly.
11 Marketing Communications
bm77 may send you promotional communications about bonuses, new game releases, sports betting markets, and special events — but only where you have given your express consent to receive them during registration or through your account communication preferences.
You may withdraw your consent to receive marketing communications at any time by:
- Clicking the "Unsubscribe" link included in any marketing email sent by bm77.
- Updating your communication preferences directly in the Notifications section of your bm77 account settings.
- Contacting our support team via live chat or at the email address in Section 14 and requesting removal from our marketing list.
Withdrawal of marketing consent will not affect your ability to use the bm77 platform or receive transactional and account-related communications that are necessary for the operation of your account (such as deposit confirmations, withdrawal notifications, and security alerts). These transactional messages will continue regardless of your marketing preferences.
12 Cross-Border Data Transfers
bm77's primary data processing infrastructure is located within the Philippines or in data centers that maintain equivalent data protection standards. In limited circumstances, personal data may be processed by third-party service providers whose infrastructure is located outside the Philippines — for example, cloud infrastructure providers or international game content suppliers.
Where such cross-border transfers occur, bm77 ensures that appropriate safeguards are in place as required by the Philippine Data Privacy Act and NPC guidelines. These safeguards include contractual data processing agreements that require receiving parties to maintain data protection standards at least equivalent to those required under RA 10173, and — where required by the NPC — prior notification of cross-border data flows.
13 Changes to This Privacy Policy
bm77 may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to Philippine law, new PAGCOR or NPC guidelines, or improvements to our platform and services. The "Last Reviewed" date at the top of this page will be updated whenever material changes are made.
For material changes that significantly affect how bm77 processes your personal data, we will notify you via email to your registered bm77 address at least 14 days before the changes take effect. We may also display a prominent notice on bm77.ws during this notification period.
Your continued use of the bm77 platform after a revised Privacy Policy takes effect constitutes your acknowledgment of the updated policy. If you do not agree with any changes to this Privacy Policy, you should stop using bm77 and request account closure by contacting our support team.
14 Contact & Data Protection Officer
bm77 has appointed a Data Protection Officer (DPO) responsible for overseeing our compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to how bm77 handles your personal data — including requests to exercise your data subject rights — please contact our DPO using the details below.
Please note that bm77 may need to verify your identity before processing any data subject rights request to protect against unauthorized access to your personal information. This verification process is a security measure and does not affect your rights under RA 10173.
Your Data is Safe — Now Enjoy the Game
bm77 is built on trust, transparency, and Philippine-grade data protection. Now that you understand how we keep your information secure, dive into the full bm77 experience — slots, live casino, sports betting, and more, all in Philippine Peso.