55bmw1 Privacy Policy

55bmw1 is the personal information controller (PIC) responsible for the personal data you provide when creating an account and using the 55bmw1 Platform at 55bmw1.org. 55bmw1 operates under PAGCOR authorization for the Philippine market and processes personal data in compliance with the National Privacy Commission (NPC) regulations implementing the Data Privacy Act of 2012.

55bmw1 collects only the personal data that is necessary for account operation, PAGCOR KYC compliance, Anti-Money Laundering Act obligations, and service delivery. The categories of personal data we process are set out in the table below.

55bmw1 does not collect sensitive personal information beyond what is strictly required for age and identity verification under PAGCOR regulations. We do not store full bank account or card numbers — only masked identifiers required for transaction reconciliation.

55bmw1 collects personal data through the following channels:

• Direct provision: Information you submit during account registration, KYC verification document uploads, and profile updates.
• Platform activity: Data automatically generated by your use of the 55bmw1 Platform, including gaming transactions, deposit and withdrawal requests, and live chat interactions.
• Technical collection: Device and network data collected automatically by the Platform's security and fraud detection systems, including IP address, browser fingerprint, and session metadata.
• Payment processors: Transaction confirmation data shared by GCash, PayMaya, and banking partners necessary to verify deposits and process withdrawals.
• PAGCOR regulatory systems: Information received through PAGCOR regulatory databases for license compliance, exclusion order verification, and AML screening.

55bmw1 processes personal data under the following lawful bases as defined by the Philippine Data Privacy Act of 2012 and NPC regulations:

55bmw1 uses collected personal data exclusively for the following purposes:

• Creating, verifying, and managing your 55bmw1 account in compliance with PAGCOR KYC requirements.
• Processing deposits from and withdrawals to your GCash, PayMaya, BPI, BDO, or Metrobank account.
• Administering game sessions, calculating results, recording transaction history, and computing bonus eligibility.
• Conducting Anti-Money Laundering screening and reporting suspicious transactions to AMLC as required by RA 9160.
• Verifying your age (minimum 21 years) and identity against Philippine government-issued documents.
• Detecting and preventing fraud, account takeover, bonus abuse, and other prohibited conduct described in the Terms & Conditions.
• Providing customer support via live chat and resolving account or transaction disputes.
• Administering responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion requests.
• Sending transactional notifications (e.g., deposit confirmations, withdrawal status, security alerts) via SMS to your registered Philippine mobile number.
• Sending optional promotional communications where you have provided separate consent.
• Preparing PAGCOR quarterly compliance reports (aggregate and anonymized data where possible).

55bmw1 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data may be disclosed to the following categories of recipients only to the extent necessary for the stated purpose:

• PAGCOR: Player identity, account status, and gaming activity data as required under our online gaming authorization and applicable reporting obligations.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports as mandated by RA 9160.
• National Privacy Commission (NPC): In response to lawful NPC investigations, orders, or data breach reporting obligations under RA 10173.
• Payment service providers: GCash (GXI), PayMaya, BPI, BDO, and Metrobank receive the minimum necessary payment data to process transactions on your behalf.
• Technology and security subprocessors: Third-party service providers supporting platform infrastructure, fraud detection, and KYC verification, all operating under data processing agreements with security obligations equivalent to this policy.
• Philippine law enforcement: In response to lawful court orders, subpoenas, or official requests from Philippine law enforcement authorities with proper jurisdiction.

All third-party service providers engaged by 55bmw1 are contractually bound by data processing agreements that require them to process personal data only on 55bmw1's documented instructions and to implement appropriate technical and organizational security measures.

55bmw1 retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to the following minimum retention requirements imposed by Philippine law:

• Account and KYC records: Retained for a minimum of five (5) years from account closure, as required by PAGCOR licensing conditions and AMLC regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act.
• Gaming session logs: Retained for two (2) years from the session date for dispute resolution and PAGCOR compliance purposes.
• Support communications: Retained for two (2) years from the date of the communication unless related to an unresolved dispute or legal proceeding.
• Marketing consent records: Retained for as long as the consent remains active, plus two (2) years following withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures.

55bmw1 implements technical and organizational security measures appropriate to the risk and sensitivity of the personal data processed. Our security framework includes, but is not limited to:

• AES-256 encryption of all data in transit (TLS 1.3) and at rest for sensitive personal data including KYC documents, financial data, and account credentials.
• Hashed and salted storage of account passwords — plaintext passwords are never stored or accessible to 55bmw1 staff.
• Role-based access controls ensuring that employee access to personal data is limited to the minimum necessary for their specific function.
• Real-time security monitoring and anomaly detection on all platform systems, with automated alerts for unusual access patterns.
• Regular security audits and penetration testing conducted by independent third-party security firms.
• Philippine data center residency for personal data of Philippine residents, in compliance with NPC data localization guidance.

Data Breach Notification. In the event of a personal data breach that is likely to result in a real risk of serious harm to affected data subjects, 55bmw1 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with NPC Circular 16-03 (Data Breach Notification Requirements).

Under the Philippine Data Privacy Act of 2012 and NPC regulations, you have the following rights with respect to your personal data held by 55bmw1. To exercise any right, submit a written request to the 55bmw1 Data Privacy Officer via live chat or email (plain text: [email protected]). 55bmw1 will respond within fifteen (15) business days.

55bmw1 uses cookies and similar tracking technologies for the following purposes:

• Essential cookies: Required for Platform operation, including session management and security functions. Cannot be disabled without affecting Platform functionality.
• Functional cookies: Store your preferences (e.g., language settings, preferred game categories) to improve your experience across sessions.
• Analytics cookies: Aggregate, anonymized data about Platform usage patterns used to improve performance and features. No individual player profiles are built from analytics data.
• Security cookies: Used by fraud detection systems to recognize your device and flag logins from new or unexpected devices.

Non-essential cookies may be managed through your browser settings. Disabling certain functional or security cookies may affect your ability to access or use parts of the 55bmw1 Platform. 55bmw1 does not use third-party advertising cookies or cross-site behavioral tracking.

The 55bmw1 Platform is strictly intended for individuals aged twenty-one (21) years and above, in compliance with Philippine casino gambling age restrictions. 55bmw1 does not knowingly collect personal data from individuals under the age of 21. If 55bmw1 becomes aware that personal data has been collected from an individual under 21, the account will be immediately suspended, all associated data will be deleted in accordance with NPC data disposal requirements, and any funds will be handled per PAGCOR regulatory direction.

Parents and guardians who believe a minor has created a 55bmw1 account should contact 55bmw1 support immediately via live chat. All such reports are treated with priority and handled in strict confidence.

55bmw1 reserves the right to update this Privacy Policy to reflect changes in Philippine data protection law, NPC regulations, PAGCOR licensing requirements, or 55bmw1's data processing practices. Material amendments will be communicated to registered Players via SMS to their registered Philippine mobile number at least fourteen (14) days before the effective date, except where immediate amendment is required by law or NPC direction.

The effective date of the current version is displayed at the top of this policy. Continued use of the 55bmw1 Platform following the effective date of an amendment constitutes acceptance of the revised Privacy Policy.

For any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by 55bmw1, contact the Data Privacy Officer:

If you are not satisfied with 55bmw1's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. 55bmw1 cooperates fully with all NPC investigations and complies with all NPC orders and decisions.

Document Reference: 55BMW1-PP-v3.1 · Effective: 01 January 2026 · Legal basis: RA 10173 (Data Privacy Act of 2012) · Next scheduled review: 01 January 2027