Privacy Policy

1 Introduction

1.1 bl7 is committed to protecting the privacy and security of your personal data. This Policy applies to all personal data collected through the bl7 website at https://bl7.one, any associated mobile applications, and all related services and communications.

1.2 By registering an account with bl7 or by continuing to use the bl7 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

1.3 This Policy should be read together with bl7's Terms & Conditions, which govern your use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

1.4 bl7 acts as the personal information controller in respect of the personal data you provide to us. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently in accordance with applicable Philippine data protection law.

2 Personal Data We Collect

2.1 bl7 collects the following categories of personal data from players and platform users:

2.2 bl7 does not collect sensitive personal information (as defined under the Philippine Data Privacy Act) unless strictly required for regulatory compliance, such as government-issued ID details for age and identity verification. Such sensitive data is handled with the highest level of care and access controls.

2.3 You are not obligated to provide all requested personal data; however, failure to provide certain mandatory information (such as identity and contact data) may prevent bl7 from creating or maintaining your account.

3 How We Collect Your Data

3.1 bl7 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access and use the bl7 platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from licensed KYC service providers; fraud and risk data from payment processors; and publicly available information where permitted by law.

3.2 bl7 does not purchase personal data lists from third-party data brokers or marketing companies. All personal data we hold is collected directly from you or from trusted service providers acting on our behalf.

4 How We Use Your Personal Data

4.1 bl7 uses your personal data for the following purposes:

• To create, verify, and manage your bl7 player account;
• To process deposits, withdrawals, and other financial transactions;
• To verify your identity and age in compliance with PAGCOR regulations and Philippine law;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity;
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) reporting to the AMLC;
• To provide customer support and respond to your inquiries;
• To monitor and improve the performance, security, and user experience of the bl7 platform;
• To send you account-related notifications and service updates;
• To send you marketing communications about bl7 promotions and offers, where you have given your consent;
• To support responsible gaming monitoring and to enforce self-exclusion requests.

4.2 bl7 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

5 Legal Basis for Processing

5.1 bl7 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management and transaction processing;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements and AML obligations;
• Legitimate interests: Processing necessary for bl7's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent, particularly for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

6.1 bl7 does not sell, rent, or trade your personal data to third parties. We may share your personal data only in the following limited circumstances:

• Service providers: Trusted third-party vendors who assist bl7 in operating the platform, including payment processors (GCash, Maya, Philippine banks), KYC verification providers, IT infrastructure providers, and customer support platforms. These providers are contractually bound to process your data only on bl7's instructions and in accordance with applicable data protection law;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or regulation;
• Law enforcement: Philippine law enforcement agencies where disclosure is required pursuant to a valid legal order, warrant, or subpoena;
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of bl7's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

6.2 bl7 does not transfer your personal data outside the Philippines except where strictly necessary for the operation of the platform and subject to appropriate safeguards in accordance with the Data Privacy Act.

7 Cookies & Tracking Technologies

7.1 bl7 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and understand how you use the platform.

7.2 bl7 uses the following types of cookies:

• Strictly necessary cookies: Essential for the platform to function correctly, including session management and security features. These cannot be disabled;
• Functional cookies: Remember your preferences and settings to provide a more personalized experience;
• Analytics cookies: Help us understand how players use the platform so we can improve performance and user experience. Data collected is aggregated and anonymized where possible;
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

7.3 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bl7 platform. Strictly necessary cookies cannot be disabled as they are essential for platform operation.

8 Data Retention

8.1 bl7 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

8.2 The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AML regulatory requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations;
• Technical and usage data: Retained for up to two (2) years from collection, unless required for longer periods for security or legal purposes;
• Marketing data: Retained until you withdraw your consent or opt out of marketing communications.

8.3 When personal data is no longer required, bl7 will securely delete or anonymize it in accordance with our data disposal procedures.

9 Data Security

9.1 bl7 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bl7 platform;
• Encryption of sensitive data at rest, including financial and identity information;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bl7 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act.

9.3 While bl7 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your bl7 account credentials confidential and for notifying us immediately of any suspected unauthorized access to your account.

10 Your Data Subject Rights

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by bl7:

10.2 To exercise any of the above rights, please contact bl7's Data Protection Officer using the contact details provided in Section 13. bl7 will respond to all data subject requests within thirty (30) days of receipt, or within such extended period as permitted by applicable law.

10.3 bl7 may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties.

11 Children's Privacy

11.1 bl7 does not knowingly collect, use, or store personal data from individuals under the age of 21. If bl7 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data and close the associated account.

11.2 If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to bl7, please contact us immediately using the details in Section 13 so that we can take appropriate action.

12 Updates to This Privacy Policy

12.1 bl7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The revised Policy will be posted on this page with an updated effective date.

12.2 Where changes to this Policy are material, bl7 will notify registered players via email or through a prominent notice on the bl7 platform prior to the changes taking effect. Your continued use of the bl7 platform following notification of material changes constitutes your acceptance of the updated Policy.

12.3 We encourage you to review this Privacy Policy periodically to stay informed about how bl7 is protecting your personal data.

13 Contact Us & Data Protection Officer

13.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by bl7, please contact our Data Protection Officer (DPO):

13.2 For general support inquiries, you may also reach our customer support team at [email protected] or via 24/7 live chat on the bl7 platform.

13.3 If you are not satisfied with bl7's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.