Each Cypress PSoC or PRoC chip has got an internal unique ID which you can retrieve with CyGetUniqueID() API. See "System Reference Guides from Creator help menu)
Oh, it's for products that we want to sell , so the bluetooth device address have to be unique (at least the 24 bits Organization Unique Identifier) and purchased from IEEE. If i understand correctly.
This is a question better asked to a direct cypress employee to ensure following the rules.
Still, I believe they mention that you are at least free to use their ID numbers/values for development purposes at the very least.
The bluetooth address can use the Cypress OUI with the "Silicon generated 'Company Assigned' part of device address".