Privacy Policy

This Privacy Policy ("Policy") is issued by m.bmw55 ("the Company," "we," "us," "our") and applies to all personal data collected, processed, stored, and used in connection with the m.bmw55 online casino platform, accessible at mbmw55.org and any associated mobile-optimized interfaces (collectively, "the Platform").

This Policy is intended to inform you — as a registered player, prospective player, or visitor to the Platform ("you," "your," "the Data Subject") — of your rights and our obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By accessing or using the m.bmw55 Platform, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, which together form the complete agreement governing your use of m.bmw55.

For the purposes of the Philippine Data Privacy Act of 2012, m.bmw55 is the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. As the PIC, m.bmw55 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

m.bmw55 has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection compliance within the Company and serving as the primary point of contact for data subject inquiries and complaints. Contact details for the DPO are provided in Section 14 of this Policy.

Where m.bmw55 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and cloud infrastructure providers — those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to process your data only in accordance with m.bmw55's instructions and applicable law.

m.bmw55 collects the following categories of personal data in connection with your use of the Platform:

m.bmw55 collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 8 for details on our cookie practices.
• Third-party sources: Identity verification data from licensed KYC providers; fraud and sanctions screening data from compliance databases; payment verification data from GCash, PayMaya, and partner banks.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

m.bmw55 does not purchase personal data from data brokers or third-party marketing lists.

m.bmw55 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — including account management, game provision, deposit and withdrawal processing, and customer support.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for m.bmw55's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your rights and interests.
• Consent: Where we rely on your consent for specific processing activities — such as sending you promotional communications — you may withdraw that consent at any time by contacting our DPO or updating your account communication preferences.

m.bmw55 uses your personal data for the following purposes:

• Creating and managing your m.bmw55 player account, including verifying your identity and age (21+ requirement).
• Processing deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers.
• Providing access to casino games, live dealer tables, slots, bingo, and other Platform features.
• Administering bonuses, promotions, and loyalty programs.
• Complying with PAGCOR licensing conditions, AMLA reporting obligations, and other regulatory requirements.
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited conduct.
• Monitoring gameplay for responsible gaming purposes, including identifying signs of problem gambling and enforcing self-exclusion requests.
• Providing customer support and resolving disputes.
• Sending you transactional communications (account notices, security alerts, withdrawal confirmations).
• Sending you promotional communications about m.bmw55 offers and new games, where you have consented to receive such communications.
• Improving the Platform through analytics and user experience research.

m.bmw55 does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, and partner Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the financial data necessary to process your transactions.
• KYC and identity verification providers: Licensed third-party providers receive identity documents and biometric data solely for the purpose of verifying your identity in compliance with PAGCOR and AMLA requirements.
• Game software providers: Licensed game providers may receive pseudonymized gameplay data necessary to operate their games on the Platform.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive data as required by law or regulatory order.
• Cloud and infrastructure providers: Hosting and infrastructure providers process data on our behalf under strict data processing agreements and are not permitted to use your data for their own purposes.
• Legal proceedings: We may disclose personal data where required by a valid court order, subpoena, or other legal process issued by a Philippine court or competent authority.

m.bmw55 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game display options to improve your experience.
• Analytics cookies: Collect anonymized data about how players use the Platform to help us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized account access attempts.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. m.bmw55 does not use third-party advertising or behavioral tracking cookies.

m.bmw55 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

m.bmw55 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• AES-256 encryption for data at rest and TLS 1.3 for data in transit.
• Multi-factor authentication for all administrative access to systems containing personal data.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• 24/7 security monitoring and intrusion detection systems.
• Regular staff training on data protection and information security obligations.
• Documented incident response procedures aligned with NPC breach notification requirements.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by m.bmw55:

• Right to be informed: The right to be told what personal data we collect, how we use it, and with whom we share it — as set out in this Policy.
• Right of access: The right to request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to processing of your personal data based on legitimate interests, including direct marketing.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all valid requests within fifteen (15) business days as required by the Data Privacy Act. We may request proof of identity before processing your request.

The m.bmw55 Platform is strictly intended for persons aged 21 years and older. m.bmw55 does not knowingly collect personal data from individuals under the age of 21. The minimum age for casino-style gambling in the Philippines is 21 years, as required by PAGCOR regulations.

If m.bmw55 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data collected, and report the matter to PAGCOR as required by regulation.

m.bmw55 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When we make material changes to this Policy, we will notify you by posting a prominent notice on the Platform and, where required by law, by sending you a direct notification via your registered email address or mobile number.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically. Your continued use of the m.bmw55 Platform following the posting of an updated Policy constitutes your acceptance of the changes, to the extent permitted by applicable law.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by m.bmw55, please contact our Data Protection Officer:

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.