bl7 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how bl7 ("bl7," "we," "us," or "our"), the operator of the online gaming platform at bl7.org (the "Platform"), collects, uses, stores, and protects the personal information of users ("you," "your," or "Player") who access or use the Platform.

bl7 is committed to protecting the privacy and personal data of every player on the Platform. We operate in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations, as administered by the National Privacy Commission (NPC).

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

2 Data We Collect

bl7 collects personal data that is necessary to provide you with a secure, compliant, and personalized gaming experience. The categories of personal data we collect are as follows:

We do not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect information about your race, religion, political affiliations, or health status unless specifically required by law.

3 How We Use Your Data

bl7 uses the personal data we collect for the following specific purposes. We will not use your data for any purpose that is incompatible with those listed below without first obtaining your consent.

• Account Creation and Management: To register your bl7 account, verify your identity and age (21+), and maintain your account in good standing throughout your time on the Platform.
• Service Delivery: To provide access to games, process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and deliver the full range of bl7 Platform features.
• Regulatory Compliance: To fulfill our obligations under Philippine law, including anti-money laundering (AML) requirements, Know Your Customer (KYC) obligations, and reporting duties to relevant authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the Platform and its players.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through our 24/7 support channels.
• Responsible Gaming: To monitor gaming patterns, enforce deposit and session limits you have set, and identify players who may be at risk of problem gambling so that appropriate support can be offered.
• Personalization: To tailor your bl7 experience, including game recommendations, promotional offers, and interface preferences, based on your activity on the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and Platform updates — but only where you have given your explicit consent to receive such communications. You may opt out at any time.
• Analytics and Improvement: To analyze Platform usage patterns, identify technical issues, and continuously improve the quality, performance, and security of the bl7 Platform.
• Legal Claims: To establish, exercise, or defend legal claims in the event of a dispute involving your account or use of the Platform.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its implementing rules, bl7 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your bl7 account, process transactions, and deliver gaming services as described in our Terms & Conditions.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including AML laws, KYC requirements, and any orders issued by competent regulatory authorities.
• Legitimate Interests: Processing is necessary for bl7's legitimate business interests, including fraud prevention, Platform security, and service improvement, provided those interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

bl7 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data only in the following limited circumstances:

• Payment Processors: We share necessary financial data with payment service providers — including GCash, PayMaya, BPI, BDO, and Metrobank — solely to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable data protection laws.
• Identity Verification Providers: We engage accredited third-party KYC and AML service providers to assist with identity verification and fraud screening. These providers process your data strictly on our instructions and are contractually prohibited from using it for any other purpose.
• Technology and Infrastructure Partners: We work with cloud hosting, cybersecurity, and analytics providers who may process your data on our behalf as data processors. All such providers are subject to data processing agreements that require them to maintain appropriate security standards.
• Regulatory and Law Enforcement Authorities: We may disclose your personal data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other competent Philippine authorities where required by law, court order, or regulatory directive.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of bl7's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
• With Your Consent: We may share your data with other third parties where you have given your explicit prior consent to such sharing.

In all cases where we share your data with third parties, we take reasonable steps to ensure that those parties maintain appropriate technical and organizational security measures consistent with this Policy and applicable Philippine data protection law.

6 Cookies & Tracking Technologies

bl7 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze how the Platform is used. A cookie is a small text file placed on your device when you visit the Platform.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the bl7 Platform. For full details on the cookies we use, please refer to our Cookie Notice, which is available within the Platform's account settings section.

7 Data Retention

bl7 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Philippine law.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC and Verification Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship.
• Support Communications: Customer support records are retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, after which it will be deleted or anonymized within thirty (30) days.

Upon expiry of the applicable retention period, bl7 will securely delete or anonymize your personal data in a manner that prevents reconstruction or identification.

8 Data Security

bl7 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the bl7 Platform is encrypted using industry-standard SSL/TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit.
• Encrypted Data Storage: Sensitive personal data, including financial information and identity documents, is stored in encrypted form on secured servers with restricted access controls.
• Access Controls: Access to personal data within bl7 is strictly limited to authorized personnel who require it to perform their job functions. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: bl7 supports and encourages the use of two-factor authentication (2FA) on player accounts to provide an additional layer of security against unauthorized access.
• Regular Security Audits: bl7 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in our systems and infrastructure.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, bl7 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

9 Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bl7. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data bl7 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most account information directly through your bl7 account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to bl7's overriding legal obligations.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: If you believe that bl7 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

bl7 will respond to all verified data rights requests within fifteen (15) business days of receipt. We may request proof of identity before processing any request to protect against unauthorized access to your data.

10 Children's Privacy

The bl7 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. bl7 does not knowingly collect, process, or store personal data from individuals under the age of 21.

If bl7 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and take appropriate action in accordance with our Terms & Conditions and applicable law.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to bl7, please contact us immediately at the details provided in Section 14 so that we can take prompt corrective action.

11 Third-Party Links

The bl7 Platform may contain references to third-party services, such as payment providers and responsible gaming resources. While bl7 takes care to reference only reputable third parties, we have no control over the privacy practices or content of external websites or services.

This Privacy Policy applies solely to the bl7 Platform at bl7.org. bl7 is not responsible for the privacy policies or data handling practices of any third-party services you may access in connection with your use of the Platform. We encourage you to review the privacy policies of any third-party services before providing them with your personal data.

12 International Data Transfers

bl7 primarily stores and processes your personal data within the Republic of the Philippines. In certain circumstances — for example, where we engage cloud infrastructure or technology service providers whose servers are located outside the Philippines — your personal data may be transferred to and processed in other jurisdictions.

Where such transfers occur, bl7 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include contractual data processing agreements, standard contractual clauses, or transfers to jurisdictions recognized as providing an adequate level of data protection.

13 Changes to This Policy

bl7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the bl7 Platform informing players of the change.
• Where required by law or where changes are significant, send a notification to your registered email address.

Your continued use of the bl7 Platform following the posting of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Policy, you must stop using the Platform and may request account closure by contacting our support team.

We recommend reviewing this Privacy Policy at least once every three months to stay informed of how bl7 handles your personal data.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way bl7 handles your personal data, please contact our Data Protection Officer (DPO). We are committed to addressing all privacy-related inquiries promptly and transparently.

Data Protection Officer — bl7
Email: [email protected]
General Support: [email protected]
Live Chat: Available 24/7 via the bl7 Platform

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

For responsible gaming support and self-exclusion tools, please visit our Responsible Gaming page.