This Privacy Policy explains how m.bmw55 collects, uses, stores, shares, and protects the personal information of registered Players and website visitors in accordance with the Philippines' Data Privacy Act of 2012 and PAGCOR's data handling requirements.
Your privacy is important to m.bmw55. This policy explains clearly how your data is handled. Jump to any section:
Before diving into the full legal text, here are the six core principles that guide how m.bmw55 handles your personal information.
m.bmw55 collects only the personal data that is strictly necessary for account management, regulatory compliance, payment processing, and security. We do not collect data speculatively or for purposes unrelated to your use of the platform.
All personal data and financial information stored by m.bmw55 is protected using industry-standard encryption and access controls. Payment credentials are never stored on our servers — all financial authentication occurs through your chosen payment provider's own secure systems.
m.bmw55 does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Data is shared with third parties only where operationally necessary and under strict contractual obligations.
Under the Data Privacy Act of 2012, Filipino data subjects have clearly defined rights over their personal information. m.bmw55 maintains processes to respond to access, correction, deletion, and objection requests within the timeframes required by law.
This policy is written to be understood — not to obscure how data is used behind complex legal language. Where processing requires your consent rather than a legal or regulatory obligation, that consent is sought clearly and separately.
m.bmw55's data practices are designed to meet the requirements of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and the National Privacy Commission's implementing rules and regulations.
This Privacy Policy ("Policy") is issued by m.bmw55 ("m.bmw55," "we," "us," or "our") and describes how we collect, use, process, store, disclose, and protect the personal information of individuals ("Data Subjects") who register accounts on the m.bmw55 platform, interact with our website at mbmw55.vip, or otherwise engage with our services.
This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). As a platform operating under PAGCOR guidelines and serving Filipino players across the Philippines — from Metro Manila and Cebu to Davao and beyond — m.bmw55 recognises its obligations as a personal information controller under Philippine data protection law.
By registering an account on m.bmw55, you acknowledge that you have read and understood this Policy and that you consent to the collection and use of your personal data as described herein, to the extent that such processing is based on consent. For processing based on legal obligation, contract performance, or legitimate interest, consent is not required but you are entitled to be informed, which is the purpose of this document.
This Policy should be read together with the m.bmw55 Terms and Conditions and Responsible Gaming Policy, which together govern the overall relationship between m.bmw55 and its registered Players.
For the purposes of the Data Privacy Act of 2012, m.bmw55 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. As the PIC, m.bmw55 determines the purposes and means by which personal data is processed.
Platform: m.bmw55
Website: mbmw55.vip
Data Protection Officer Contact: [email protected]
Regulatory Framework: Republic Act No. 10173 (Data Privacy Act of 2012), PAGCOR Online Gaming Regulations
Where m.bmw55 engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification services, or IT infrastructure providers), those parties act as Personal Information Processors (PIPs) and are contractually required to process data only on m.bmw55's instructions and in compliance with applicable Philippine data protection law.
m.bmw55 collects the following categories of personal data, depending on your interaction with the Platform:
| Category | Data Elements | Legal Basis |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government ID type and number | Legal Obligation Contract |
| Contact Data | Philippine mobile number, email address, residential address | Contract |
| KYC Documents | Photographic copies of government-issued ID (PhilSys, Passport, Driver's License, Voter's ID, SSS/GSIS/PhilHealth/Pag-IBIG) | Legal Obligation |
| Financial Data | GCash number, Maya number, bank account name and number (BPI, BDO, Metrobank), deposit and withdrawal transaction records | Legal Obligation Contract |
| Gameplay Data | Game session logs, bet amounts, game outcomes, win/loss records, game preferences, session duration | Contract Legitimate Interest |
| Device & Technical Data | IP address, browser type and version, device type, operating system, screen resolution, time zone | Legitimate Interest |
| Behavioural Data | Pages visited, features used, click paths, session length, navigation patterns within the Platform | Legitimate Interest |
| Communication Data | Records of support interactions, live chat transcripts, emails, and complaint correspondence | Contract Legal Obligation |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, session time alerts, cooling-off period records | Legal Obligation |
m.bmw55 does not collect sensitive personal information as defined by the DPA (such as health information, sexual orientation, or religious beliefs) unless specifically required by applicable law or PAGCOR regulatory direction and only with appropriate safeguards in place.
m.bmw55 collects personal data through the following channels and methods:
The majority of personal data is collected directly from you when you: complete the account registration form; submit identity documents for KYC verification; make a deposit or withdrawal; contact the m.bmw55 support team; participate in a promotion or survey; or update your account profile or responsible gaming settings.
When you access the m.bmw55 Platform through a browser or mobile device, certain technical data is automatically collected by our servers and analytics tools. This includes your IP address, device identifiers, browser information, and your navigation behaviour within the Platform. This data is collected using cookies, server logs, and similar technologies, as described in Section 12 of this Policy.
In limited circumstances, m.bmw55 may receive personal data about you from third-party sources, including: payment providers (GCash, Maya, BPI, BDO, Metrobank) for the purpose of verifying transaction authenticity; KYC verification service providers engaged to assist with identity document authentication; and fraud prevention and anti-money laundering screening databases, as required under Philippine AMLA obligations.
m.bmw55 processes personal data for the following specific and legitimate purposes:
Under the Data Privacy Act of 2012, m.bmw55 processes personal data on one or more of the following lawful bases:
Where processing is not required by law or contract, m.bmw55 relies on your freely given, specific, and informed consent — for example, for marketing communications and optional behavioural analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Processing required to perform our obligations under the Terms and Conditions — including account creation, gameplay facilitation, and payment processing — is necessary for the performance of a contract to which you are a party.
Processing required for KYC compliance, AML reporting, PAGCOR regulatory submissions, and the implementation of responsible gaming tools mandated by regulation is carried out to fulfill legal obligations applicable to m.bmw55 as a licensed gaming operator.
Processing for fraud prevention, platform security, internal analytics, and system performance monitoring is carried out on the basis of m.bmw55's legitimate interests, provided those interests are not overridden by your fundamental rights and freedoms.
m.bmw55 does not sell, rent, or trade your personal data to any third party for their independent commercial purposes. Your data is shared with third parties only in the circumstances described below, and only to the extent necessary for the relevant purpose.
m.bmw55 engages the following categories of third-party service providers who process personal data on our behalf and under our instruction, bound by data processing agreements that impose appropriate security and confidentiality obligations:
m.bmw55 is obligated to disclose personal data to regulatory authorities and law enforcement agencies in the following circumstances: compliance with PAGCOR's reporting requirements; compliance with AMLA reporting obligations to the Anti-Money Laundering Council (AMLC); response to valid court orders, subpoenas, or government directives; and investigation of criminal activity where required by Philippine law.
In the event of a merger, acquisition, corporate restructuring, or sale of assets involving m.bmw55, personal data held by m.bmw55 may be transferred to the acquiring or successor entity as part of that transaction, subject to appropriate data protection safeguards and notification to affected Data Subjects as required by the DPA.
Reminder: m.bmw55 will never ask you to share your personal data through unofficial channels such as Facebook Messenger, Viber, Telegram, or SMS from unknown numbers. Any such request should be treated as a phishing attempt and reported to our support team.
Certain service providers engaged by m.bmw55 — including cloud infrastructure providers and some game software providers — may process personal data outside of the Philippines. Where such international transfers occur, m.bmw55 takes appropriate steps to ensure that the receiving party provides a level of data protection equivalent to that required under the Data Privacy Act of 2012.
Such steps may include: entering into data transfer agreements incorporating standard contractual clauses approved by the National Privacy Commission; ensuring that the recipient country has been assessed to provide adequate data protection; or obtaining your explicit consent for the specific international transfer where no other safeguard is applicable.
If you have questions about specific international transfer arrangements affecting your data, please contact the m.bmw55 Data Protection Officer using the contact details in Section 15.
m.bmw55 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following indicative retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account plus 5 years following closure | AMLA and PAGCOR requirements |
| KYC documents | Duration of account plus 5 years following closure | AMLA reporting obligations |
| Transaction records | 5 years from the date of each transaction | AMLA, Tax Code, PAGCOR |
| Gameplay logs | 3 years from the date of each game session | Legitimate interest, regulatory audit |
| Support communications | 3 years from the date of each interaction | Contract, legitimate interest |
| Marketing consent records | Until consent is withdrawn, plus 1 year | Accountability under DPA |
| Self-exclusion records | Indefinitely (or as directed by PAGCOR) | Responsible gaming legal obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where data must be retained for longer due to an ongoing legal dispute or regulatory investigation, retention will be extended as necessary and you will be notified where practicable.
m.bmw55 implements and maintains appropriate technical and organisational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to, the following:
Data Breach Notification: In the event of a personal data breach that is likely to give rise to a real risk of serious harm to Data Subjects, m.bmw55 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected Data Subjects without undue delay, in accordance with NPC Circular No. 16-03 and the DPA IRR.
As a Data Subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by m.bmw55. To exercise any of these rights, contact the m.bmw55 Data Protection Officer at the details in Section 15. We will respond within the timeframes required by the DPA — generally within 15 business days of receiving a valid request.
Request confirmation of whether m.bmw55 holds your personal data, and obtain a copy of the data we hold about you, together with information about how it is processed.
Request correction of any inaccurate or incomplete personal data held about you. Note that certain account data may only be amended subject to identity verification and PAGCOR compliance requirements.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent. This right is subject to overriding legal retention obligations under AMLA and PAGCOR rules.
Object to processing carried out on the basis of legitimate interest, including direct marketing. Where you object to direct marketing, m.bmw55 will cease such processing immediately upon receipt of a valid objection request.
Request your personal data in a structured, commonly used, machine-readable format where technically feasible, enabling you to transfer your data to another service provider where applicable.
Withdraw your consent to marketing communications or optional analytics at any time, without affecting the lawfulness of processing conducted prior to withdrawal. Use the unsubscribe link in any m.bmw55 marketing email or contact support directly.
Filing a Complaint: If you believe that m.bmw55 has not processed your personal data in accordance with the Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on the NPC complaints process is available through the NPC's official channels.
The m.bmw55 Platform uses cookies and similar technologies (including local storage and session tokens) to facilitate Platform functionality, maintain your login session, analyse usage patterns, and deliver a consistent user experience across your visits.
Required for the Platform to function — including session management, authentication tokens, and security cookies. Cannot be disabled without breaking core Platform functionality.
Help m.bmw55 understand how Players navigate the Platform — which pages are most visited, where sessions end, and how the mobile experience differs from desktop. These cookies collect anonymized or pseudonymized data.
Remember your settings and preferences, such as your preferred lobby display, language settings, and responsible gaming tool configurations, so you don't need to reset them on each visit.
Where you have consented, these cookies track your engagement with m.bmw55 promotions and may be used to show you relevant bonus offers. You can withdraw consent at any time through your browser settings or by contacting support.
You can manage or disable non-essential cookies through your browser settings. Most modern browsers on Android and iOS allow you to block or delete cookies through the browser's privacy settings menu. Note that disabling strictly necessary cookies will prevent you from logging in or using core Platform features. For mobile browsers, cookie management is typically found under Settings → Privacy.
m.bmw55 does not knowingly collect or process personal data of individuals under the age of 21. Registration on the Platform is restricted to individuals aged 21 and above, as required by PAGCOR regulations. Age verification is conducted as part of the KYC process. If m.bmw55 becomes aware that personal data of a person under 21 has been collected, that data will be deleted immediately and the associated account will be permanently closed. If you believe that a minor has created an account on m.bmw55, please notify us immediately at [email protected].
m.bmw55 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, PAGCOR regulatory requirements, or NPC guidance. The effective date at the top of this Policy will be updated whenever a material change is made.
Where a change is material — meaning it significantly affects how your personal data is used or your rights as a Data Subject — m.bmw55 will provide advance notice by email to your registered address or by prominent in-Platform notification. For changes that are minor or technical in nature, updating the published Policy on this page without separate notification is sufficient.
We encourage you to review this Policy periodically, particularly before making a deposit or engaging with new Platform features. Your continued use of the Platform after any Policy update constitutes your acknowledgment of the revised terms.
For all privacy-related queries, data subject access requests, consent withdrawals, or complaints relating to m.bmw55's handling of your personal data, please contact the m.bmw55 Data Protection Officer through the following channel. All requests are handled confidentially and in accordance with the timeframes required by the Data Privacy Act of 2012.
Email: [email protected]
Subject line: "Privacy / Data Request — [Your Full Name]"
Response target: Within 15 business days for standard data subject requests
Available: 24 hours a day, 7 days a week via email
If you are not satisfied with m.bmw55's response to a privacy complaint, or if you believe that your rights under the Data Privacy Act of 2012 have not been adequately respected, you may lodge a complaint directly with the National Privacy Commission of the Philippines through the NPC's official complaint channels.
500+ certified games, instant GCash cashouts, and a platform built on transparency and compliance. For Filipino players 21 and above.
21+ only · PAGCOR guidelines · Data Privacy Act compliant · Play responsibly