bh777 Privacy Policy

1 Introduction

bh777 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users who access or register on the bh777 online gaming platform at bh777.vip. This Privacy Policy ("Policy") describes how bh777 collects, uses, stores, shares, and protects personal information in connection with the provision of our online casino, sports betting, bingo, slot, and related gaming services.

This Policy applies to all personal data collected through the bh777 website, mobile-optimized platform, customer support channels, and any other touchpoints through which you interact with bh777. It covers all registered players, prospective players, and visitors to the bh777 platform.

bh777 processes personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). Where applicable, bh777 also observes internationally recognized data protection principles.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, bh777 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes. This means bh777 determines the purposes and means of processing your personal information.

Where bh777 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud infrastructure providers — those parties act as Personal Information Processors (PIPs) under bh777's instruction and are bound by appropriate data processing agreements.

3 Personal Data We Collect

bh777 collects the following categories of personal data:

Category	Examples
Identity Data	Full legal name, date of birth, gender, government-issued ID number (passport, SSS, UMID, driver's license)
Contact Data	Email address, mobile number, residential address (city, province, ZIP code)
Account Data	Username, encrypted password, account preferences, communication settings
Financial Data	GCash number, Maya account, bank account details (BPI, BDO, Metrobank, UnionBank, etc.), transaction history, deposit and withdrawal records
Gaming Data	Game history, wager amounts, win/loss records, session duration, bonus usage
Technical Data	IP address, device type, browser type and version, operating system, time zone, cookie identifiers
Usage Data	Pages visited, features used, click-through patterns, referral source
Communications Data	Support chat transcripts, email correspondence, feedback submissions

bh777 does not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly required for identity verification and regulatory compliance purposes.

4 How We Collect Personal Data

bh777 collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Technical and usage data collected automatically when you access the bh777 platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-Party Sources: Identity and fraud-screening data received from KYC verification providers, payment processors, and fraud prevention services, where you have consented to such sharing or where bh777 has a legitimate interest or legal obligation to verify your identity.
• Publicly Available Sources: In limited circumstances, bh777 may verify information against publicly available records, such as government databases, for the purpose of anti-money laundering (AML) compliance.

5 Purpose & Legal Basis for Processing

bh777 processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table summarizes our primary processing purposes and their corresponding legal bases:

Purpose	Legal Basis
Account registration and management	Performance of contract
Processing deposits and withdrawals	Performance of contract
Identity verification (KYC/AML)	Legal obligation
Fraud prevention and security monitoring	Legitimate interest / Legal obligation
Responsible gaming monitoring	Legal obligation / Legitimate interest
Customer support	Performance of contract
Sending promotional communications	Consent (opt-in)
Platform analytics and improvement	Legitimate interest
Compliance with regulatory requirements	Legal obligation

Where bh777 relies on your consent as the legal basis for processing — such as for marketing communications — you may withdraw that consent at any time by updating your account notification preferences or contacting our support team.

6 Data Sharing & Disclosure

bh777 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to facilitate deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party services that assist bh777 in verifying player identities and screening against sanctions and politically exposed persons (PEP) lists.
• Cloud Infrastructure & Hosting Providers: Secure data centers and cloud service providers that host the bh777 platform and its databases.
• Analytics Providers: Aggregated, anonymized usage data may be shared with analytics platforms to help bh777 understand platform performance and improve user experience.
• Regulatory Authorities: bh777 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or courts of competent jurisdiction where required by law or valid legal process.
• Professional Advisors: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations.

All third-party processors engaged by bh777 are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with bh777's documented instructions.

7 Data Retention

bh777 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (RA 9160, as amended).
• KYC Documents: Retained for five (5) years following account closure or the last transaction, whichever is later.
• Support Communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years to demonstrate compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with bh777's data disposal procedures.

8 Data Security

bh777 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bh777 platform.
• Encryption of sensitive data fields (including passwords and financial identifiers) at rest using industry-standard algorithms.
• Role-based access controls ensuring that bh777 staff can only access personal data necessary for their specific job functions.
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified security professionals.
• Multi-factor authentication (MFA) for administrative access to bh777 systems.
• Incident response procedures to detect, contain, and notify affected individuals and the NPC of personal data breaches within the timeframes prescribed by the DPA.

While bh777 takes all reasonable precautions to protect your data, no electronic system is entirely immune to risk. You are responsible for maintaining the confidentiality of your bh777 account credentials and for notifying us immediately if you suspect unauthorized access to your account.

9 Cookies & Tracking Technologies

bh777 uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the bh777 platform, including session management and security functions. These cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized data about how players use bh777, helping us identify areas for improvement. These are only set with your consent.
• Functional Cookies: Remember your preferences (such as language settings and game display options) to provide a more personalized experience.
• Marketing Cookies: Used to deliver relevant promotional content to you based on your interests and platform activity. These are only set with your explicit consent.

You can manage or withdraw your consent to non-essential cookies at any time through your browser settings. Note that disabling certain cookies may affect the functionality of the bh777 platform.

10 Minors & Age Restriction

If you are a parent or guardian and believe that a minor has registered on bh777 or provided personal data to us, please contact our Data Protection Officer immediately using the contact details in Section 15. We will investigate and act promptly.

11 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bh777:

• Right to Be Informed: The right to know whether bh777 holds personal data about you and to receive clear information about how it is processed — which this Policy provides.
• Right of Access: The right to request a copy of the personal data bh777 holds about you, along with information about how it is used.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your bh777 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bh777's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe bh777 has processed your personal data in violation of the DPA.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 15. bh777 will respond to all verified data subject requests within fifteen (15) business days, as required by the DPA.

12 International Data Transfers

bh777 primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where bh777 uses internationally hosted cloud infrastructure or third-party software platforms.

Where such transfers occur, bh777 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law. bh777 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

13 Third-Party Links

The bh777 platform may contain references to third-party services such as payment gateways. When you navigate away from bh777 to a third-party platform (for example, to complete a GCash or Maya transaction), that platform's own privacy policy will govern the processing of your data. bh777 is not responsible for the privacy practices of third-party platforms and encourages you to review their privacy policies before providing any personal information.

14 Amendments to This Policy

bh777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, bh777 will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect, where practicable.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the bh777 platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

15 Contact & Data Protection Officer

bh777 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO:

Data Protection Officer — bh777
Email: [email protected]
General Support: [email protected]

Please include your registered username, a description of your request, and a copy of a valid government-issued ID to help us verify your identity and process your request efficiently. bh777 aims to acknowledge all privacy-related inquiries within three (3) business days and to resolve them within fifteen (15) business days.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.