m.bmw55 Privacy Policy

01Introduction

m.bmw55 ("we," "us," "our," or "the Platform") is committed to protecting and respecting the privacy of all individuals who interact with the m.bmw55 online gaming platform, accessible at mbmw55.app and all associated subdomains and mobile interfaces (collectively, the "Platform").

This Privacy Policy ("Policy") is issued pursuant to Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and applicable issuances of the National Privacy Commission ("NPC"). This Policy describes what personal information m.bmw55 collects, why we collect it, how we use and protect it, and the rights you have with respect to your personal data.

By registering an account, accessing the Platform, or interacting with any m.bmw55 service, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy.

If you have questions about this Policy or wish to exercise your data subject rights, please contact our Data Protection Officer as described in Section 14.

02Personal Data We Collect

m.bmw55 collects the following categories of personal data, depending on your interaction with the Platform:

We do not collect sensitive personal information as defined under the DPA (such as health records, political affiliations, or biometric data) unless required by law or regulatory directive.

03How We Collect Personal Data

m.bmw55 collects personal data through the following means:

• Direct submission: Information you provide when registering your account, completing KYC verification, making a deposit or withdrawal, contacting our support team, or participating in promotions.
• Automated technical collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser type, session activity, and cookie-derived data (see Section 7).
• Payment processors: Transaction data received from GCash, PayMaya, BDO, BPI, Metrobank, and other integrated payment providers when you make deposits or withdrawals. Note that m.bmw55 does not receive or store full card numbers or GCash PINs.
• Identity verification providers: During KYC verification, we may use third-party identity verification services to confirm the authenticity of government-issued documents provided by you.
• Fraud detection systems: Automated systems that analyze gameplay patterns, login behavior, and device fingerprints for the purpose of detecting and preventing fraudulent activity.

04Purposes of Processing

m.bmw55 processes your personal data for the following specific purposes:

• Account creation and management: To register your m.bmw55 account, verify your identity and eligibility, and maintain your account throughout its lifecycle.
• Service delivery: To provide you with access to casino games, sports betting, live dealer tables, and all other Platform features and services.
• Payment processing: To process deposits via GCash, PayMaya, and Philippine bank transfers, and to fulfill withdrawal requests to your registered payment method.
• KYC and regulatory compliance: To verify your age (21+), identity, and source of funds as required by applicable Philippine regulations and PAGCOR directives.
• Anti-fraud and security: To detect, prevent, and investigate fraud, money laundering, collusion, and other prohibited conduct as outlined in our Terms & Conditions.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to administer deposit limits, session limits, and self-exclusion requests.
• Customer support: To respond to your support inquiries, resolve disputes, and manage your account-related requests.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent to receive such communications.
• Platform improvement: To analyze aggregated usage data for the purpose of improving Platform performance, user experience, and game content selection.
• Legal obligations: To comply with applicable Philippine laws, including reporting obligations to PAGCOR, the AMLC, and other regulatory bodies.

05Legal Bases for Processing

Under the Philippine Data Privacy Act, m.bmw55 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to when registering your m.bmw55 account — including account management, payment processing, and service delivery.
• Legal obligation: Processing necessary to comply with applicable Philippine laws, including KYC requirements, anti-money laundering obligations, and regulatory reporting duties.
• Legitimate interests: Processing necessary for m.bmw55's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and customer support — where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

06Data Sharing and Disclosure

m.bmw55 does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: GCash, PayMaya, and Philippine bank partners to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently responsible for their data practices.
• Game providers: Licensed third-party game software providers (e.g., PG Soft, Pragmatic Play, JDB, Jili) may receive limited session data necessary to deliver game functionality. Game providers do not receive your full identity or payment data.
• Identity verification services: Third-party KYC providers who assist with age verification and document authentication during account registration or at any subsequent verification request.
• Fraud prevention and security vendors: Specialized fraud detection and cybersecurity service providers who assist in protecting the Platform and its members from fraudulent activity.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Philippine National Police (PNP), and other governmental or regulatory bodies where disclosure is required by applicable law or pursuant to a valid legal order.
• Professional advisers: Legal counsel, auditors, and other professional service providers under obligations of confidentiality, where necessary to protect m.bmw55's legal rights or comply with legal proceedings.

All third parties with whom m.bmw55 shares personal data are contractually required to process such data only for the specified purpose, to maintain confidentiality, and to implement appropriate technical and organizational security measures.

07Cookies and Tracking Technologies

m.bmw55 uses cookies and similar tracking technologies to enhance your experience on the Platform, ensure platform security, and gather analytical data. The following types of cookies are used:

• Essential cookies: Strictly necessary for the Platform to function — including session authentication, login persistence (if "Remember Me" is enabled), and security tokens. These cannot be disabled without affecting Platform functionality.
• Analytical cookies: Used to collect aggregated, anonymized data about how members use the Platform — including pages visited, session duration, and feature engagement. This data helps us improve Platform performance and content.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming configurations, to personalize your experience.
• Security cookies: Used for fraud detection and prevention, including device fingerprinting to identify suspicious login attempts and automated bot activity.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will impair Platform functionality. For more information on how to manage cookies in your browser, refer to your browser's help documentation.

m.bmw55 does not use third-party advertising cookies or tracking pixels for the purpose of serving targeted advertising by external advertisers.

08Data Retention

m.bmw55 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering requirements.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Gaming activity data: Retained for a minimum of two (2) years following the relevant gaming session, for dispute resolution and regulatory compliance purposes.
• Support communications: Retained for two (2) years following the closure of each support case.
• Marketing consent records: Retained for the duration of your account plus three (3) years to demonstrate compliance with consent requirements.
• Technical and log data: Retained for twelve (12) months in a directly accessible format, and for up to three (3) years in archived form for security and investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents reconstruction of the original data.

09Data Security Measures

m.bmw55 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the Platform;
• Encryption of sensitive data at rest using AES-256 encryption standards;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Role-based access controls ensuring that only authorized personnel access personal data on a strict need-to-know basis;
• Regular third-party penetration testing and security audits of Platform infrastructure;
• 24/7 security monitoring and intrusion detection systems;
• Formal data breach response procedures compliant with NPC notification requirements under the DPA.

In the event of a personal data breach that poses a real risk of harm to affected data subjects, m.bmw55 will notify the National Privacy Commission and affected individuals within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03 and its amendments.

While m.bmw55 takes all reasonable steps to protect your data, no internet transmission is completely secure. You are responsible for maintaining the security of your m.bmw55 login credentials and for promptly notifying us if you suspect unauthorized access to your account.

10Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by m.bmw55:

• Right to be informed: The right to be notified of how your personal data is collected, processed, and used — fulfilled through this Privacy Policy.
• Right of access: The right to obtain confirmation of whether m.bmw55 holds personal data about you, and to receive a copy of that data in a readable format.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update basic account information (mobile number, email) through your account settings at any time.
• Right to erasure (right to be forgotten): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to m.bmw55's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe your data rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to verified requests within fifteen (15) business days. We may require identity verification before processing rights requests.

11Children's Privacy — 21+ Platform

The m.bmw55 Platform is strictly intended for individuals aged twenty-one (21) years and above in accordance with applicable Philippine law. m.bmw55 does not knowingly collect personal data from individuals under the age of 21.

If m.bmw55 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete all associated personal data, and report the matter to the appropriate Philippine authorities if warranted.

Parents and guardians who have reason to believe that their child under 21 has accessed m.bmw55 or provided personal data to the Platform should contact our Data Protection Officer immediately at the contact details provided in Section 14. m.bmw55 will cooperate fully to address such concerns.

This policy reflects our absolute commitment to preventing underage gambling, which is illegal under Philippine law and inconsistent with our Responsible Gaming obligations. Age verification is conducted during account registration and may be repeated at any time during the account lifecycle.

12International Data Transfers

Some of the third-party service providers engaged by m.bmw55 — including game software providers and cloud infrastructure vendors — may be located outside the Philippines. Where personal data is transferred to a recipient in a foreign country, m.bmw55 ensures that such transfers comply with the requirements of the Philippine Data Privacy Act, including that:

• The recipient country provides a level of data protection substantially equivalent to that under Philippine law; or
• The recipient has contractually agreed to data protection standards at least equivalent to those required by the DPA, through standard contractual clauses or other approved mechanisms; and
• The transfer is limited to the minimum personal data necessary for the specific processing purpose.

m.bmw55 will not transfer personal data to any jurisdiction that the National Privacy Commission has identified as providing inadequate data protection, without implementing additional safeguards approved by the NPC.

13Changes to This Privacy Policy

m.bmw55 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Where changes are material — meaning they significantly affect your privacy rights or how we handle your personal data — m.bmw55 will provide advance notice through:

• A prominent notice on the Platform displayed upon your next login;
• An SMS notification to your registered Philippine mobile number; or
• Where applicable, direct contact from our Data Protection Officer.

The effective date at the top of this Policy will be updated to reflect the date any revised version takes effect. Your continued use of the m.bmw55 Platform following the effective date of a revised Privacy Policy constitutes your acceptance of the changes. The most current version of this Policy is always accessible at mbmw55.app/privacy-policy.

We encourage you to review this Policy periodically to stay informed about how m.bmw55 protects your personal information.

14Contact & Data Protection Officer

m.bmw55 has designated a Data Protection Officer ("DPO") in compliance with Section 21 of the Philippine Data Privacy Act of 2012. The DPO is responsible for overseeing m.bmw55's data protection compliance program and for responding to data subject rights requests and privacy complaints.

You may contact the m.bmw55 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 within the m.bmw55 Platform — select "Privacy / Data Protection" as the inquiry category for direct DPO routing.
• Email: [email protected] — please include "Data Protection Request" in the subject line. Response target: within fifteen (15) business days.
• Written Correspondence: Philippines — data protection inquiries may be addressed to m.bmw55, serving Manila, Cebu, Davao, and nationwide.

If you are not satisfied with m.bmw55's response to a privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines.

This Privacy Policy was last updated on 1 January 2026 and is effective from that date. m.bmw55 operates as an online gaming platform in the Philippines. Must be 21+ to access the Platform. Gambling involves risk — please play responsibly.