bmw55 Casino – Privacy Policy

bmw55 Casino is an online gaming platform accessible at bmw55.vu, serving registered members in the Philippines and operating under PAGCOR regulatory oversight. As part of our operations, bmw55 necessarily processes personal data belonging to our members, prospective members, and website visitors.

This Privacy Policy explains, in compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 (DPA) of the Philippines and its Implementing Rules and Regulations (IRR) — how bmw55 processes personal data, the purposes for which it is used, and the rights that data subjects hold.

This Policy applies to:

• All registered members of bmw55 Casino;
• Visitors to the bmw55.vu website who have not registered an account;
• Individuals who communicate with bmw55 through support channels;
• Former members whose data is retained pursuant to statutory obligations.

This Policy does not apply to third-party websites, services, or platforms that may be linked from the bmw55 Platform. bmw55 is not responsible for the privacy practices of any third party and encourages users to review the privacy policies of any external services they access.

For the purposes of the Data Privacy Act of 2012 and its IRR, bmw55 Casino acts as the Personal Information Controller (PIC) in respect of member and visitor data collected through the Platform.

bmw55 has appointed a Data Protection Officer (DPO) responsible for overseeing the Company's data protection compliance program, handling data subject rights requests, and serving as the point of contact for the National Privacy Commission (NPC) of the Philippines.

Contact details for the bmw55 Data Protection Officer are provided in Section 15 of this Policy. All data rights requests, privacy complaints, and related inquiries should be directed to the DPO in the first instance.

bmw55 collects personal data through several channels — the registration process, account activity, KYC verification submissions, support interactions, and automatic technical collection. The categories of data collected and the context of collection are detailed below:

bmw55 does not intentionally collect special categories of sensitive personal data (e.g., racial or ethnic origin, religious beliefs, health data, political opinions) unless such data is voluntarily included in a KYC document submitted by the member. Where such data is incidentally received, it is not processed for any purpose other than document verification and is not stored separately.

bmw55 processes member personal data for the following specific purposes:

1. Account Creation and Management: To register your account, authenticate your identity at login, manage your wallet, record your gaming activity, and communicate account-related updates;
2. KYC and Identity Verification: To verify your age (21+ requirement), confirm your legal identity, and match payment account details to your registered name as required by PAGCOR and Philippine AML regulations;
3. Payment Processing: To process deposits from your GCash, Maya, or Philippine bank account, and to process withdrawal payments to your verified payment method;
4. Regulatory Compliance: To fulfill PAGCOR reporting obligations, AML/CTF (Anti-Money Laundering / Counter-Terrorism Financing) screening and reporting requirements under the AMLA, and any other applicable Philippine statutory obligations;
5. Customer Support: To handle inquiries, process complaints, investigate disputes, and provide assistance through live chat and email channels;
6. Responsible Gaming: To monitor gaming patterns for indicators of problem gambling behavior, to enforce deposit limits and self-exclusion requests, and to comply with PAGCOR responsible gaming directives;
7. Platform Security and Fraud Prevention: To detect and prevent unauthorized access, account takeover attempts, bonus abuse, collusion, and other fraudulent or prohibited activity;
8. Platform Improvement: To analyze aggregated, anonymized usage data for the purpose of improving the platform's user interface, game loading performance, and feature set;
9. Marketing Communications (where consent applies): To send promotional offers, bonus notifications, and game announcements to members who have affirmatively opted in to receive such communications.

Under the Data Privacy Act of 2012, bmw55 relies on the following legal bases for processing member personal data:

• Contract Performance: Processing necessary for the performance of the member agreement — including account operation, payment processing, and game access — is conducted on the basis of contractual necessity;
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting requirements, PAGCOR responsible gaming directives, and tax reporting obligations is conducted on the basis of legal obligation;
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregated analytics is conducted on the basis of bmw55's legitimate business interests, which do not override member privacy rights;
• Consent: Processing for optional marketing communications is conducted solely on the basis of freely given, specific, and informed consent. Consent may be withdrawn at any time without detriment to the member's account or service access.

bmw55 does not sell, rent, or trade member personal data. Data is shared with third parties only in the following limited and documented circumstances:

• Payment Service Providers: GCash (GXI), Maya (Voyager Innovations), BancNet, and participating banks are provided with the minimum transaction data necessary to process deposits and withdrawals. These entities are subject to their own privacy regulations and BSP oversight;
• KYC Verification Providers: Third-party identity verification technology partners who assist bmw55 in processing and authenticating government ID documents. All KYC partners operate under binding data processing agreements prohibiting secondary use of member data;
• Game Content Providers: Licensed game providers whose software operates on the bmw55 Platform may receive pseudonymous session identifiers and bet data for the purpose of operating their games and resolving technical disputes. They do not receive personally identifiable member information;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive member data in response to lawful orders, investigation requests, or mandatory reporting requirements;
• IT and Hosting Infrastructure: Cloud infrastructure and cybersecurity service providers who host and protect bmw55's systems operate under strict data processing agreements with access limited to system-level operations only;
• Professional Advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations may access member data only to the extent necessary to provide their services to bmw55.

Where bmw55 engages service providers — such as cloud hosting infrastructure or game content platforms — that process data outside the Republic of the Philippines, bmw55 ensures that appropriate data transfer safeguards are in place in accordance with NPC guidelines under the Data Privacy Act.

These safeguards include: binding contractual clauses requiring the recipient to apply equivalent data protection standards; verification that the receiving jurisdiction provides an adequate level of data protection as determined by the NPC; or obtaining specific member consent where required by applicable NPC issuances.

Members may request information about the specific safeguards applied to cross-border data transfers relating to their personal data by submitting a written request to the bmw55 Data Protection Officer.

bmw55 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is permanently deleted or irreversibly anonymized using methods that prevent re-identification. Anonymized, aggregated data derived from member activity may be retained indefinitely for statistical and analytical purposes.

bmw55 uses cookies and similar technologies to operate the Platform and improve the member experience. The following cookie categories are used:

• Strictly Necessary Cookies: Session authentication tokens and security cookies required for the Platform to function. These cannot be disabled without preventing access to the Platform. No personal data is transmitted externally via these cookies;
• Functional Cookies: Cookies that remember your game lobby preferences, language settings, and interface customizations between sessions. These are set for up to 90 days and are not shared with any third party;
• Analytics Cookies: Anonymized cookies used to measure aggregate Platform usage — page visit counts, game category popularity, session duration distributions. These cookies do not identify individual members and the resulting data is processed only by bmw55 internally;
• No Advertising or Third-Party Tracking Cookies: bmw55 does not deploy advertising network cookies, social media pixel trackers, or any other third-party behavioral tracking technology on the Platform.

You may manage your cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent normal Platform access. Blocking functional cookies will result in your preferences not being remembered between sessions.

bmw55 implements a multi-layered technical and organizational security framework to protect member personal data against unauthorized access, accidental loss, destruction, and unlawful processing. Key security measures include:

In the event of a personal data breach that is likely to pose a risk to the rights and freedoms of affected members, bmw55 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03.

Affected members will be notified directly without undue delay where the breach is likely to result in high risk to their rights — such as financial harm or identity theft. Notifications will be sent to the registered email address or mobile number associated with the affected account and will include a description of the nature of the breach, the data involved, likely consequences, and the steps bmw55 is taking to address it.

As a data subject under the Data Privacy Act of 2012, you hold the following rights in respect of your personal data held by bmw55. To exercise any of these rights, submit a written request to the bmw55 Data Protection Officer (contact details in Section 15). Requests will be acknowledged within 5 business days and substantively responded to within 15 business days.

• Right to Be Informed: The right to know what personal data bmw55 holds about you, the purposes for which it is processed, and who it is shared with — this Policy fulfills our initial notification obligation;
• Right of Access: The right to obtain a copy of the personal data bmw55 holds about you in a structured, machine-readable format;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. For name corrections, supporting ID documentation will be required;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose collected and where no statutory retention obligation applies. Note that KYC and financial records are subject to mandatory retention periods under AMLA and PAGCOR regulations that cannot be overridden by an erasure request;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another personal information controller where technically feasible;
• Right to Object: The right to object to the processing of your personal data on the basis of legitimate interests, including profiling, direct marketing, and research purposes. Where you object to marketing processing, your opt-out will be honored immediately;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe bmw55 has processed your personal data in violation of the Data Privacy Act. The NPC may be contacted through privacy.gov.ph.

If a parent or guardian has reason to believe that their minor child (under 21 years of age) has registered an account on bmw55, they should contact the bmw55 Data Protection Officer immediately with supporting documentation. bmw55 will take immediate action to investigate, suspend the account, and ensure all personal data belonging to the minor is permanently deleted in accordance with NPC guidelines on the processing of data of minors.

bmw55 may send promotional communications — including bonus offers, new game announcements, VIP program updates, and special event invitations — to members who have expressly opted in to receive such communications.

Your marketing preferences are captured at registration and may be updated at any time through your account settings. The following marketing channels are managed separately, meaning an opt-out from email marketing does not automatically apply to SMS marketing and vice versa:

• Email marketing (promotional newsletters and bonus notifications);
• SMS marketing (time-sensitive promotions and reload offers);
• In-platform notifications (bonus availability alerts and game launch announcements displayed within the Platform when you are logged in).

Transactional communications — including deposit confirmations, withdrawal notifications, KYC verification updates, security alerts, and password reset messages — are sent regardless of marketing preferences, as they are necessary for the operation of your account. These are not marketing communications and are not subject to opt-out.

bmw55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidelines, PAGCOR regulatory requirements, or changes to our data processing practices. The version date and version number at the top of this Policy will be updated to reflect each revision.

Where amendments are material — meaning they substantively change how your data is used or the rights you hold — bmw55 will notify active members via registered email address and display a prominent notice upon login for a period of no less than fourteen (14) days prior to the amended Policy taking effect.

Continued use of the bmw55 Platform following the effective date of any amended Privacy Policy constitutes acceptance of the revised terms. If you do not agree to an amended Policy, you should cease using the Platform and may request account closure and data erasure (subject to statutory retention obligations) by contacting the DPO.

For all privacy-related inquiries, data subject rights requests, breach notifications, or complaints, please contact the bmw55 Data Protection Officer through the following channels:

• Data Protection Officer — bmw55 Casino
• Email: [email protected]  (Subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 through the bmw55 Platform — identify yourself and state your request is a privacy matter for priority routing
• Response Commitment: Acknowledgment within 5 business days; substantive response within 15 business days