Privacy Policy

1. Introduction

bmy77 ("bmy77", "we", "us", "our") operates the online gaming platform accessible at https://bmy77.cam (the "Platform"). We are committed to protecting the privacy and personal data of all players who access and use the Platform, particularly those residing in the Republic of the Philippines.

This Privacy Policy ("Policy") has been prepared in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC) of the Philippines. This Policy applies to all personal information collected, processed, stored, or disclosed by bmy77 in connection with the Platform and all related services.

By registering an account on bmy77, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not access or use the bmy77 Platform.

Please read this Policy together with our Terms and Conditions, which also govern your use of the Platform and may contain additional information relevant to the handling of your personal data.

2. Personal Data We Collect

bmy77 collects personal data that is necessary, adequate, and not excessive relative to the purposes for which it is collected and processed. The categories of personal information we may collect include:

2.1. Identity and Registration Data

• Full legal name (first name, middle name, last name)
• Date of birth and age verification information
• Gender
• Nationality and country of residence
• Government-issued identification number and document type (e.g., Philippine driver's license number, passport number, PhilSys ID number, SSS ID, GSIS ID)
• Copies of government-issued identification documents submitted for KYC verification
• Proof of address documents (e.g., utility bills, bank statements)

2.2. Contact Information

• Email address
• Mobile telephone number
• Residential or mailing address (including barangay, city/municipality, province, region, and postal code)

2.3. Account and Transaction Data

• bmy77 account username and encrypted password credentials
• Account registration date and history of account status changes
• Deposit and withdrawal transaction records, including amounts, dates, times, and payment methods used
• Gaming history, including games played, bets placed, results, and session durations
• Bonus and promotion redemption history
• Account balance and transaction statements
• Communication records with bmy77 customer support

2.4. Financial and Payment Data

• GCash mobile number and account details (where GCash is used for transactions)
• PayMaya account details (where PayMaya is used)
• Bank account details for BPI, BDO, Metrobank, UnionBank, and other Philippine banks, including account name, account number, and bank branch (where bank transfer is used)
• Transaction reference numbers and payment processor identifiers

bmy77 does not store full credit or debit card numbers on our servers. Card transactions, where applicable, are processed by certified third-party payment service providers under their own applicable PCI-DSS compliant data security standards.

2.5. Technical and Device Data

• IP address and approximate geolocation data derived therefrom
• Device type, device identifier, and operating system
• Browser type and version
• Session login and logout timestamps
• Pages visited, features accessed, and navigation patterns within the Platform
• Referring URL (the website from which you navigated to bmy77, if applicable)
• Error logs and diagnostic information generated during Platform use

2.6. Sensitive Personal Information

Under the Data Privacy Act of 2012, certain categories of information are classified as sensitive personal information and are subject to heightened protection. bmy77 may, in limited circumstances and only to the extent required for compliance with legal obligations or for the protection of player welfare, process information that could be considered sensitive personal information under the DPA, including information about problem gambling status arising from responsible gaming assessments or self-exclusion requests. Such information is handled with strict access controls and is used solely for the purpose for which it was disclosed.

3. How We Collect Your Personal Data

bmy77 collects your personal data through the following means:

• Direct collection: When you complete the account registration form, submit KYC verification documents, make deposits or withdrawals, contact our customer support team, participate in promotions, or complete any other form or request on the Platform.
• Automated collection: Through cookies, web beacons, pixel tags, server logs, and similar tracking technologies as you navigate and interact with the bmy77 Platform. Please refer to Section 7 (Cookies and Tracking Technologies) for more detail.
• Third-party sources: From payment service providers (GCash, PayMaya, banks) to verify transaction details; from identity verification service providers engaged to assist with KYC processes; and from fraud detection and anti-money laundering screening services. Any data received from third parties is handled in accordance with this Policy and applicable law.

4. Purposes for Which We Use Your Personal Data

bmy77 uses your personal data only for the specific purposes for which it was collected or for other compatible purposes recognized under the Data Privacy Act of 2012. The primary purposes for which your data is processed include:

Purpose	Description
Account Management	Creating and maintaining your bmy77 account, verifying your identity and age (21+ requirement), and managing account settings and preferences.
Service Delivery	Providing access to games, processing bets, awarding winnings, and delivering all Platform features and services you use.
Payment Processing	Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other approved payment channels.
KYC & AML Compliance	Fulfilling Know Your Customer and Anti-Money Laundering obligations under Philippine law, including Republic Act No. 9160 (Anti-Money Laundering Act) as amended.
Fraud & Security	Detecting, investigating, and preventing fraudulent activity, unauthorized account access, bonus abuse, and other security threats.
Responsible Gaming	Administering deposit limits, loss limits, self-exclusion requests, and other responsible gaming tools; identifying players who may need support.
Customer Support	Responding to inquiries, resolving disputes, and improving the quality of our support services using communication records.
Marketing & Promotions	Sending promotional communications, bonus offers, and platform updates to players who have not opted out. You may opt out at any time via account settings or by contacting support.
Legal Compliance	Complying with applicable Philippine laws, regulations, and lawful orders from competent authorities, including PAGCOR, the NPC, and law enforcement agencies.
Platform Improvement	Analyzing aggregated usage data to improve the Platform's performance, game selection, user interface, and overall player experience.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, bmy77 processes your personal data on one or more of the following lawful bases:

• Consent: Where you have freely given, specific, informed, and unambiguous consent to the processing of your personal data for one or more specific purposes, such as receiving marketing communications.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and bmy77 (i.e., the Terms and Conditions you agreed to upon registration), including account management, payment processing, and service delivery.
• Legal Obligation: Where processing is necessary for bmy77 to comply with a legal obligation, including KYC requirements, AML obligations, PAGCOR reporting requirements, and NPC directives.
• Legitimate Interests: Where processing is necessary for bmy77's legitimate interests or those of a third party, provided those interests do not override your fundamental rights and freedoms. This includes fraud prevention, platform security, and internal analytics.
• Vital Interests: Where processing is necessary to protect the vital interests of you or another natural person, which may arise in the context of responsible gaming interventions.

6. Sharing and Disclosure of Your Personal Data

bmy77 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1. Service Providers and Processors

bmy77 engages trusted third-party service providers to assist in delivering the Platform and associated services. These include payment processing companies (GCash, PayMaya, partner banks), identity verification service providers, game software providers (whose software powers the games on the Platform), cloud hosting and infrastructure providers, and customer support platform providers. All such service providers are bound by data processing agreements requiring them to handle your personal data in accordance with applicable law and solely on bmy77's documented instructions.

6.2. Regulatory and Law Enforcement Authorities

bmy77 will disclose your personal data to competent governmental authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies, where required to do so by applicable Philippine law, valid legal process, or court order. bmy77 will, where legally permitted, endeavor to notify you of such disclosure requests prior to complying.

6.3. Business Transfers

In the event that bmy77 undergoes a merger, acquisition, restructuring, or sale of all or a substantial portion of its assets, your personal data may be transferred to the successor entity as part of that transaction, subject to applicable data privacy law requirements, including notification to affected data subjects where required.

6.4. Affiliated Entities

bmy77 may share your personal data with affiliated companies within its corporate group for the purposes of internal administration, consolidated reporting, and delivery of group-wide services, subject to appropriate data sharing agreements and consistent with this Policy.

7. Cookies and Tracking Technologies

bmy77 uses cookies and similar tracking technologies on the Platform to enhance your gaming experience, maintain session security, and gather analytical information about Platform usage.

7.1. Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery (CSRF) attacks, and cookies that remember your preferred language and regional settings. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Allow the Platform to remember choices you have made — such as your preferred game display settings, responsible gaming tool configurations, and notification preferences — to provide a more personalized experience.
• Analytical Cookies: Help bmy77 understand how players interact with the Platform by collecting information about pages visited, features used, and error events encountered. This data is used in aggregate, anonymized form to improve Platform performance and user experience.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, unauthorized account access, and other security threats. These cookies are essential to Platform security and cannot be disabled.

You may manage non-essential cookies through your browser settings. Most modern browsers allow you to view, block, and delete cookies. Please note that disabling certain cookies may affect the functionality of the bmy77 Platform.

8. Data Retention

bmy77 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable law, or as otherwise communicated to you at the time of collection. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission, as required under the Anti-Money Laundering Act and its implementing rules.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the last communication, or longer where relevant to an ongoing dispute or investigation.
• Marketing preferences: Retained until you withdraw your consent or request deletion, subject to any applicable legal retention obligation.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or otherwise rendered inaccessible in a manner compliant with applicable data privacy standards.

9. Data Security

bmy77 implements comprehensive organizational and technical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bmy77 servers
• Encrypted storage of passwords using industry-standard one-way hashing algorithms (passwords are never stored in plain text)
• Role-based access controls ensuring that only authorized bmy77 personnel with a legitimate need can access your personal data
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure
• Two-factor authentication (2FA) options for player accounts
• Comprehensive data breach response procedures aligned with NPC notification requirements
• Ongoing training of bmy77 personnel on data privacy obligations and security best practices

10. Your Rights Under the Data Privacy Act of 2012

As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by bmy77. You may exercise these rights by submitting a written request to our Data Protection Officer (DPO) using the contact details in Section 14.

bmy77 will respond to verified data subject rights requests within fifteen (15) days of receipt, or within such timeframe as may be prescribed by the NPC. We may request proof of identity before fulfilling a data subject rights request to ensure we are disclosing information only to the correct individual. If you are not satisfied with bmy77's response to a data subject rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children and Minors

The bmy77 Platform is strictly intended for adults. In compliance with Philippine law and PAGCOR regulations, all players must be at least twenty-one (21) years of age. bmy77 does not knowingly collect personal data from individuals under the age of 21. If bmy77 becomes aware that personal data has been collected from an individual below the minimum age requirement, all such data will be promptly deleted, the associated account will be terminated, and any transactions will be voided in accordance with our Terms and Conditions.

If you are a parent or guardian and believe that a minor under your care has provided personal information to bmy77, please contact our Data Protection Officer immediately using the contact details in Section 14 of this Policy.

12. International Data Transfers

bmy77 primarily stores and processes your personal data on servers located within or serving the Philippine market. However, some of our third-party service providers — including game software developers, cloud infrastructure providers, and payment processors — may process data in jurisdictions outside the Philippines.

Where such cross-border transfers occur, bmy77 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and applicable NPC guidelines. These safeguards may include standard contractual clauses, data transfer agreements, or reliance on the adequacy of the data protection laws of the receiving jurisdiction as determined by the NPC.

13. Changes to This Privacy Policy

bmy77 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable legal and regulatory requirements. When material changes are made, we will notify registered players by email to the address on file and/or by posting a prominent notice on the bmy77 Platform prior to the effective date of the revised Policy.

The effective date at the top of this document indicates when this version of the Policy came into force. We encourage you to review this Policy periodically. Your continued use of the bmy77 Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Us and Data Protection Officer

bmy77 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or complaints about how bmy77 handles your personal data, or if you wish to exercise any of your data subject rights, please contact our DPO using the following channels:

• Live Chat: Available 24/7 directly on the bmy77 Platform
• Email: [email protected]

Please mark your communication "Attn: Data Protection Officer" to ensure it is directed to the appropriate team. bmy77 will acknowledge receipt of your inquiry within five (5) business days and endeavor to resolve your concern within fifteen (15) business days, or such longer period as may be required for complex requests.

If you are not satisfied with bmy77's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for overseeing compliance with the Data Privacy Act of 2012.