Privacy Policy

1. Overview

bblj Casino ("bblj," "we," "us," or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy describes how bblj collects, uses, stores, and discloses personal information in connection with your use of the bblj platform, including our website at bblj.app and all associated gaming services (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. bblj is registered with the National Privacy Commission (NPC) as required under Philippine law.

By registering a bblj account, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your data as described herein. If you do not agree, please discontinue use of the bblj Platform immediately.

2. Data We Collect

bblj collects the following categories of personal data from users of the Platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., Philippine passport number, SSS ID, PhilSys ID, driver's license number).
• Contact Data: Mobile number (Philippine), email address, and residential address (including city, province, and postal code).
• Financial Data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records.
• Account Data: Username, encrypted password, account preferences, bonus history, and gaming activity logs.
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and session duration.
• Usage Data: Pages visited, games played, bet amounts, win/loss records, and interaction patterns on the Platform.
• Communications Data: Records of your correspondence with bblj customer support, including live chat transcripts and email exchanges.
• Verification Data: Photographs or scanned copies of identity documents submitted for Know Your Customer (KYC) verification.

3. How We Collect Data

bblj collects personal data through the following means:

• Direct Submission: Information you provide when registering a bblj account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Technologies: Cookies, web beacons, pixel tags, and similar tracking technologies that collect technical and usage data as you interact with the Platform. See Section 9 for details.
• Third-Party Sources: Identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud prevention services, and regulatory databases, where permitted by law.
• Device Permissions: Where you grant permission, bblj may collect location data or device identifiers through the bblj mobile application to support account security and fraud prevention.

4. How We Use Your Data

bblj processes your personal data for the following purposes:

• Account Management: To create, verify, maintain, and secure your bblj account.
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver customer support.
• Regulatory Compliance: To fulfill our obligations under PAGCOR licensing conditions, the Data Privacy Act, Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• Identity Verification (KYC): To verify your identity and age (21+) as required by law and our Terms & Conditions.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other illegal activities.
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools such as deposit limits, loss limits, and self-exclusion.
• Marketing & Promotions: To send you relevant offers, bonuses, and promotional communications, where you have provided consent. You may opt out at any time.
• Platform Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the bblj Platform.
• Legal Claims: To establish, exercise, or defend legal claims involving bblj.

5. Legal Basis for Processing

bblj processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given explicit consent, such as for marketing communications or optional data collection.
• Contractual Necessity: Processing required to perform our contract with you, including account management and payment processing.
• Legal Obligation: Processing necessary to comply with applicable laws, including PAGCOR regulations, AMLA requirements, and NPC directives.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.

6. Sharing Your Data

bblj does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions.
• Identity Verification Providers: Third-party KYC and AML compliance service providers engaged to verify your identity and screen against regulatory watchlists.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where required by law or court order.
• Technology Partners: Cloud hosting providers, cybersecurity firms, and analytics platforms that support the operation of the bblj Platform, all bound by data processing agreements.
• Legal Advisors: Law firms and legal consultants engaged by bblj in connection with legal proceedings or regulatory matters.

All third parties with whom bblj shares personal data are contractually required to maintain appropriate security standards and to process data only for the specified purpose.

7. Data Retention

bblj retains your personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

• Account Data: Retained for the duration of your bblj account and for five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC Documents: Retained for five (5) years following account closure or the completion of the relevant transaction.
• Support Communications: Retained for two (2) years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, bblj will securely delete or anonymize your personal data.

8. Data Security

bblj implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bblj Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Multi-factor authentication (MFA) options for bblj account access.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Incident response procedures compliant with NPC breach notification requirements (72-hour notification for high-risk breaches).

While bblj takes all reasonable precautions, no electronic system is entirely immune to security risks. In the event of a data breach that poses a risk to your rights and freedoms, bblj will notify you and the NPC in accordance with applicable law.

9. Cookies & Tracking Technologies

bblj uses cookies and similar tracking technologies to enhance your experience on the Platform. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and game history, to personalize your bblj experience.
• Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform to help us improve performance and usability.
• Marketing Cookies: Used to deliver relevant promotional content based on your activity on the bblj Platform. These are only activated with your consent.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies may affect certain features of the bblj Platform but will not prevent you from accessing core gaming services.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bblj:

• Right to Be Informed: The right to know what personal data bblj collects and how it is processed.
• Right of Access: The right to request a copy of the personal data bblj holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact bblj's Data Protection Officer (DPO) using the details in Section 13. bblj will respond to all verified requests within thirty (30) days.

11. Minors

The bblj Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine regulations governing online casino gaming. 21+

bblj does not knowingly collect personal data from persons under 21 years of age. If we become aware that a minor has provided personal data to bblj, we will immediately suspend the relevant account and delete the associated data. If you believe a minor has registered on the bblj Platform, please contact us immediately at the details provided in Section 13.

12. Changes to This Policy

bblj reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The "Last Updated" date at the top of this page will be revised accordingly.

For material changes that significantly affect your rights or how we process your data, bblj will provide advance notice via email or in-platform notification where practicable. Your continued use of the bblj Platform following the effective date of any revised Policy constitutes your acceptance of the changes.

13. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact bblj's Data Protection Officer:

• DPO Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the bblj Platform
• Response Time: bblj aims to acknowledge all privacy requests within 72 hours and resolve them within 30 days.

If you are not satisfied with bblj's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through its official channels.