55 BMW Privacy Policy

1 Introduction

55 BMW is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that when you share your personal information with us — whether during registration, when making a deposit, or when contacting our support team — you are placing trust in us to handle that information responsibly.

This Policy applies to all personal data collected through the 55 BMW website at https://55-bmw.app, our mobile-optimized platform, and any related services, features, or communications. It covers data collected directly from you as well as data collected automatically through your use of the platform.

55 BMW processes personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. We are registered with and subject to the oversight of the National Privacy Commission (NPC) of the Philippines.

If you have any questions about how 55 BMW handles your personal data, or if you wish to exercise any of your data subject rights, please refer to Section 13 of this Policy for our contact details.

2 Data We Collect

55 BMW collects personal data from you in several ways: directly when you provide it to us, automatically when you use the platform, and occasionally from third-party sources where permitted by law. The categories of personal data we collect include the following:

2.1 Data You Provide Directly

• Identity Data: Full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
• Contact Data: Email address, mobile number, and residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, or Makati).
• Verification Documents: Government-issued identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license), proof of address, and payment method documentation submitted for KYC purposes.
• Financial Data: Payment method details, GCash account references, PayMaya account references, BPI or BDO account identifiers, and transaction history on the platform.
• Account Credentials: Username and encrypted password used to access your 55 BMW account.
• Communications Data: Records of your correspondence with our customer support team, including live chat transcripts and email exchanges.
• Responsible Gaming Data: Self-exclusion requests, deposit limit settings, and other responsible gaming preferences you configure on the platform.

2.2 Data Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage Data: Pages visited, games played, wagers placed, session duration, click-through paths, and feature interactions on the platform.
• Location Data: General geographic location derived from your IP address, used for regulatory compliance and fraud prevention purposes.
• Cookie and Tracking Data: Data collected through cookies and similar technologies as described in Section 8 of this Policy.

2.3 Data from Third Parties

In certain circumstances, 55 BMW may receive personal data about you from third-party sources, including payment processors (for transaction verification), identity verification service providers (for KYC compliance), and fraud detection partners. All third-party data sources used by 55 BMW are contractually required to comply with applicable data protection laws.

3 How We Use Your Data

55 BMW uses the personal data we collect for the following purposes. We process your data only where we have a valid legal basis for doing so, as described in Section 4.

55 BMW does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have given explicit consent.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 55 BMW relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to operate your 55 BMW account, process transactions, and deliver the services you have requested.
• Legal Obligation: Processing is necessary to comply with applicable laws and regulations, including PAGCOR licensing requirements, anti-money laundering (AML) obligations under Republic Act No. 9160, and KYC requirements.
• Legitimate Interests: Processing is necessary for the legitimate interests of 55 BMW, including fraud prevention, platform security, responsible gaming monitoring, and improving our services — provided these interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent as the legal basis for processing (e.g., for marketing communications or non-essential cookies), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Data Sharing & Disclosure

55 BMW does not sell, rent, or trade your personal data to third parties. We share your personal data only in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers to assist in operating the 55 BMW platform. These include payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank partner gateways), identity verification providers, cloud hosting providers, customer support software vendors, and fraud detection services. All service providers are bound by data processing agreements that require them to process your data only on our instructions and in compliance with applicable data protection laws.

5.2 Regulatory and Law Enforcement Authorities

55 BMW may disclose your personal data to regulatory bodies, law enforcement agencies, or other government authorities where required to do so by law, court order, or regulatory directive. This includes disclosures to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) of the Philippines where applicable.

5.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 55 BMW's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that result from it.

5.4 With Your Consent

55 BMW may share your personal data with third parties in other circumstances where you have given your explicit prior consent to such sharing.

6 Data Retention

55 BMW retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with 55 BMW, plus a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under Republic Act No. 9160 (Anti-Money Laundering Act) and related regulations.
• KYC and Verification Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by applicable law or regulatory directive.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Cookie and Usage Data: Retained for periods ranging from session-only to a maximum of twenty-four (24) months, depending on the type of cookie or tracking technology used.

Upon expiry of the applicable retention period, 55 BMW will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

7 Data Security

55 BMW implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 55 BMW platform is encrypted using industry-standard SSL/TLS protocols.
• Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data is restricted to authorized 55 BMW personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: 55 BMW supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security.
• Regular Security Audits: Our platform and infrastructure undergo regular security assessments, penetration testing, and vulnerability scans conducted by qualified security professionals.
• Incident Response: 55 BMW maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the NPC and affected players in accordance with the requirements of the Data Privacy Act of 2012.

While 55 BMW takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your own account credentials.

8 Cookies & Tracking Technologies

55 BMW uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the platform, remember your preferences, and analyze how players use our services. The types of cookies we use are as follows:

• Strictly Necessary Cookies: These cookies are essential for the platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional Cookies: These cookies remember your preferences and settings (such as language preference and responsible gaming limits) to provide a more personalized experience.
• Analytics Cookies: These cookies collect anonymized information about how players use the 55 BMW platform, helping us understand which features are most popular and where improvements can be made.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, unauthorized access, and other security threats on the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 55 BMW platform. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

9 Your Data Subject Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 55 BMW:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that 55 BMW holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that 55 BMW holds about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, or where we process your data for direct marketing purposes.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 55 BMW has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 13. We will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the requirements of the Data Privacy Act of 2012.

10 Children's Privacy

The 55 BMW platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations and Philippine law governing online gaming. 55 BMW does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 55 BMW platform, please contact our support team immediately so that we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control tools and to monitor the online activities of minors in their care to prevent underage access to online gaming platforms.

11 International Data Transfers

55 BMW primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud hosting providers and technical support partners — may process data in other jurisdictions. Where personal data is transferred outside the Philippines, 55 BMW ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the NPC.
• Implementing standard contractual clauses or equivalent data transfer mechanisms approved by the NPC.
• Ensuring that all international data processors are bound by contractual obligations equivalent to those required under the Data Privacy Act of 2012.

You may request further information about the safeguards in place for international data transfers by contacting our Data Protection Officer.

12 Changes to This Privacy Policy

55 BMW reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, we will notify registered players via email or through a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how 55 BMW protects your personal data. Your continued use of the platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.

13 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 55 BMW, please contact our Data Protection Officer (DPO) or our general support team using the details below.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.