bf77 Privacy Policy

This Privacy Policy ("Policy") describes how bf77 ("the Platform," "we," "us," or "our"), operating the website at bf77.live, collects, uses, stores, and protects the personal information of users ("you," "the Player," or "the Data Subject") who access or register on the bf77 platform.

bf77 is committed to protecting the privacy and personal data of all Filipino players in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). This Policy applies to all personal data collected through the bf77 website, mobile applications, live chat, email correspondence, and any other channel through which you interact with us.

By registering an account on bf77, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the bf77 platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

bf77 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party verification and payment service providers. The categories of personal data we collect are described below.

bf77 uses your personal data only for the purposes listed below. We do not use your data for any purpose that is incompatible with the reason it was originally collected.

• Account Registration and Management: To create, verify, and maintain your bf77 player account, including processing your KYC documents and confirming your eligibility to play (21 years of age or older, as required under Philippine gaming regulations).
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment channels. All transactions are conducted in Philippine Peso (PHP / ₱).
• Platform Delivery: To provide access to bf77's casino games, live dealer tables, slot games, bingo, and sports betting markets, and to personalize your gaming experience.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct as described in our Terms & Conditions.
• Regulatory Compliance: To fulfill our obligations under Philippine gaming law, the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and any directives issued by PAGCOR or the NPC.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance via live chat and email.
• Responsible Gaming: To monitor gaming patterns, enforce responsible gaming limits you have set, and proactively reach out if we identify signs of problem gambling behavior.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive such communications. You may opt out at any time through your account settings.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the bf77 platform, fix bugs, and develop new features.

Under the Philippine Data Privacy Act of 2012, bf77 must have a lawful basis for processing your personal data. The legal bases we rely on are as follows:

• Consent: For marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual Necessity: For processing required to fulfill our obligations under the bf77 Terms & Conditions — including account management, transaction processing, and game delivery. Without this processing, we cannot provide our services to you.
• Legal Obligation: For processing required to comply with Philippine law, including KYC verification under AMLA, age verification under gaming regulations, and data retention requirements.
• Legitimate Interests: For fraud detection, platform security, responsible gaming monitoring, and internal analytics — where our legitimate interests are not overridden by your rights and freedoms as a data subject.

bf77 does not sell, rent, or trade your personal data to third parties for commercial or marketing purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the stated purpose.

• Payment Processors: We share financial data with payment service providers (e.g., GCash, PayMaya, BPI, BDO, Metrobank) solely to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC and Identity Verification Providers: We may share identity documents with licensed third-party KYC verification services to confirm your identity and age. These providers process data on our behalf under strict data processing agreements.
• Game Content Providers: Live dealer and slot game providers may receive your player ID and session data to deliver game content. They do not receive your full identity or financial data.
• Regulatory Authorities: We are required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies upon lawful request or as required by regulation.
• Fraud Prevention Networks: We may share data with industry fraud prevention services to identify and block fraudulent accounts and transactions across the online gaming sector.
• Professional Advisors: We may share data with our legal counsel, auditors, and accountants where necessary for the conduct of our business, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of bf77's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

bf77 uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies:

You can manage or delete cookies through your browser settings at any time. Note that disabling strictly necessary cookies will affect your ability to log in and use the bf77 platform. bf77 does not use cross-site tracking cookies or share cookie data with advertising networks.

bf77 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required under the Anti-Money Laundering Act (AMLA) and PAGCOR regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and tax record-keeping requirements.
• Gaming Activity Logs: Retained for two (2) years from the date of each gaming session, or longer if required for an ongoing investigation or dispute.
• Customer Support Communications: Retained for two (2) years from the date of the last communication, or until the matter is fully resolved.
• Marketing Preferences: Retained until you withdraw your consent or close your account, whichever comes first.
• Technical and Log Data: Retained for twelve (12) months from the date of collection, unless required for longer retention due to a security investigation.

When personal data is no longer required, bf77 will securely delete or anonymize it in accordance with industry best practices. Anonymized data (which cannot be used to identify you) may be retained indefinitely for statistical and analytical purposes.

bf77 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bf77's servers is encrypted using industry-standard SSL/TLS protocols — the same level of protection used by major Philippine banks.
• Two-Factor Authentication (2FA): bf77 supports 2FA for player accounts to add an additional layer of protection against unauthorized login attempts.
• Secure Data Storage: Personal and financial data is stored in encrypted databases hosted on secure servers with restricted access controls. Only authorized bf77 personnel with a legitimate business need can access your data.
• Regular Security Audits: bf77 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in our platform.
• Staff Training: All bf77 employees who handle personal data receive regular training on data protection obligations and security best practices.
• Incident Response Plan: bf77 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within 72 hours of becoming aware of the incident, as required by the Data Privacy Act of 2012.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bf77. To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond to all valid requests within 15 business days.

Please note that some rights are subject to limitations under Philippine law. For example, we may be unable to delete data that we are legally required to retain under AMLA or PAGCOR regulations. We will always explain the reason if we are unable to fulfill a request.

bf77 employs age verification measures during the registration process, including collection of date of birth and KYC document verification, to prevent underage individuals from accessing the platform. If bf77 discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data, and report the incident as required by applicable regulations.

If you are a parent or guardian and believe that your child has registered on bf77, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

bf77 primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including game content providers and KYC verification services — may process data in other countries. Where such transfers occur, bf77 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012.

These safeguards may include contractual data processing agreements that incorporate the standard data protection clauses recognized by the National Privacy Commission, or transfers to countries that have been assessed as providing an adequate level of data protection.

bf77 does not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent or a lawful basis under Philippine law.

bf77 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes, we will update the effective date at the top of this page and notify registered users via email or an in-platform notification where reasonably practicable.

We encourage you to review this Privacy Policy periodically to stay informed about how bf77 protects your personal data. Your continued use of the bf77 platform after any changes have been posted constitutes your acceptance of the updated Policy.

Minor changes — such as typographical corrections or clarifications that do not alter the substance of the Policy — may be made without specific notification to users.

Current Version: 1.0  |  Effective Date: January 1, 2026  |  Governing Law: Republic of the Philippines

bf77 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channel:

If you are not satisfied with bf77's response to your privacy request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 and protecting the data privacy rights of Filipino citizens.