bmw553 Privacy Policy

01 Introduction

bmw553 ("we," "us," "our") operates the online casino and sports betting platform accessible at bmw553.cam. We are a PAGCOR-licensed gaming operator serving Filipino players across the Philippines, from Metro Manila and Cebu to Davao, Quezon City, Makati, and provinces nationwide. As a licensed operator, we are bound not only by PAGCOR's operational requirements but also by the full framework of Philippine data protection law.

This Privacy Policy sets out in clear, direct language how bmw553 handles the personal data of players, visitors, and prospective members. We have written this policy to comply with Republic Act No. 10173 (the Data Privacy Act of 2012), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC).

By registering a bmw553 account or continuing to use the platform after this policy has been made available to you, you acknowledge that you have read and understood how bmw553 processes your personal data as described herein.

02 Data Controller Identity

For the purposes of the Data Privacy Act of 2012, bmw553 acts as the Personal Information Controller (PIC) in respect of personal data collected through the bmw553 platform. As the PIC, bmw553 determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with RA 10173 and applicable NPC regulations.

03 Personal Data We Collect

bmw553 collects personal data across several categories depending on the nature of your interaction with the platform. The table below summarizes the categories of data we collect, the source of collection, and the primary purpose for which each category is used.

3.1 Sensitive Personal Information

Government-issued identification numbers (such as Philippine National ID, passport number, or driver's license number) collected for KYC purposes constitute Sensitive Personal Information under RA 10173. bmw553 applies heightened security and access controls to this category of data and processes it exclusively for identity verification and anti-money laundering compliance purposes.

3.2 Data from Third Parties

bmw553 may receive personal data about you from third-party sources, including payment processors (GCash, PayMaya), financial institutions (BPI, BDO, Metrobank), fraud prevention services, and identity verification providers. Data received from these sources is used solely for the purposes for which it was shared and is subject to the same protections as data collected directly from you.

04 How bmw553 Uses Your Personal Data

bmw553 processes personal data only for specific, legitimate, and declared purposes. We do not use your data for purposes incompatible with those listed below without your explicit consent or a lawful basis under RA 10173.

• Account Registration and Management: Creating and maintaining your bmw553 account, authenticating your identity at login, and managing your account settings and preferences.
• Financial Transactions: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods; maintaining accurate transaction records.
• Identity Verification (KYC): Verifying your identity and age (21+) as required by PAGCOR and AMLA regulations before processing withdrawals above threshold amounts or as otherwise required.
• AMLA Compliance: Monitoring transactions for suspicious activity, maintaining required records, and submitting reports to the Anti-Money Laundering Council (AMLC) where legally mandated.
• Game Delivery and Platform Operation: Delivering the games and services you access, maintaining game session records, and resolving disputes regarding game outcomes.
• Customer Support: Responding to your inquiries, resolving account issues, and maintaining records of support interactions for quality assurance.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorized account access.
• Responsible Gaming: Administering deposit limits, self-exclusion requests, cool-down periods, and other responsible gaming tools you activate through your account.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates via SMS or email — only where you have provided consent or where bmw553 has a legitimate interest basis, and always with a clear opt-out mechanism.
• Platform Improvement: Analyzing usage patterns and player behavior in aggregate, anonymized form to improve the platform's performance, design, and game offering.

05 Legal Bases for Processing

Under the Data Privacy Act of 2012, bmw553 relies on the following lawful bases to process your personal data:

1. Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions you have accepted — including account management, game delivery, and financial transactions.
2. Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, AMLA reporting requirements, and NPC regulations.
3. Legitimate Interests: Processing necessary for bmw553's legitimate business interests where these do not override your fundamental rights — including fraud prevention, platform security, and aggregate analytics.
4. Consent: Processing for which you have provided explicit, informed, and freely given consent — including marketing communications. You may withdraw consent at any time without detriment to your continued use of the platform.

06 Cookies & Tracking Technologies

6.1 Types of Cookies Used

bmw553 uses cookies and similar tracking technologies on the bmw553.cam platform. The following categories of cookies are in use:

• Strictly Necessary Session cookies required for login state, security token management, and basic platform functionality. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies that remember your preferences — including language settings, responsible gaming limit configurations, and display preferences — to provide a consistent experience.
• Analytics Cookies used to collect aggregate, anonymized data about how users navigate the bmw553 platform. This data helps bmw553 identify performance issues and improve the user experience.
• Security Cookies used to detect and prevent fraudulent activity, including login anomaly detection and bot activity identification.

6.2 Managing Cookie Preferences

You may manage non-essential cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the bmw553 platform and may prevent you from logging in or accessing account features. Instructions for managing cookies in Chrome, Safari, Firefox, and Samsung Internet are available in each browser's respective help documentation.

07 Third-Party Data Sharing

bmw553 shares personal data with third parties only where necessary for legitimate operational purposes, under strict contractual data protection obligations, or where required by law. The categories of third-party recipients are as follows:

bmw553 does not share personal data with advertisers, data brokers, or any other commercial third party for the purpose of targeting you with third-party marketing. All third-party recipients who act as Personal Information Processors on bmw553's behalf are bound by data processing agreements that impose equivalent data protection standards.

08 Data Security Measures

bmw553 implements technical and organizational security measures appropriate to the sensitivity of the personal data we hold. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and bmw553 servers is encrypted in transit.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial data, is stored in encrypted form on secured servers.
• Access Controls: Access to personal data is restricted to bmw553 personnel and authorized third parties on a strict need-to-know basis, governed by role-based access control policies.
• Two-Factor Authentication: Account login security on the bmw553 platform supports SMS-based two-factor authentication for additional protection against unauthorized access.
• Penetration Testing: bmw553 conducts periodic security assessments of its platform infrastructure to identify and remediate vulnerabilities.
• Incident Response: bmw553 maintains a data breach response procedure aligned with NPC notification requirements. In the event of a breach that poses a real risk to data subjects, bmw553 will notify the NPC and affected individuals within the timeframes prescribed by the Data Privacy Act.

09 Data Retention

bmw553 retains personal data only for as long as necessary for the purposes for which it was collected, subject to any longer retention period required by applicable Philippine law. The principal retention periods applied by bmw553 are as follows:

• Account and Identity Data: Retained for the duration of your active membership and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction as required by AMLA implementing regulations.
• Communications Data (Support Records): Retained for two (2) years from the date of the final communication in a support interaction, unless a related dispute or investigation requires longer retention.
• Technical and Usage Data: Retained for up to twelve (12) months, after which it is aggregated and anonymized or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, to demonstrate compliance with consent management requirements.

Upon expiry of the applicable retention period, bmw553 will securely delete or irreversibly anonymize personal data, provided there is no active legal hold, ongoing investigation, or regulatory requirement that mandates continued retention.

10 Your Data Subject Rights

Under Republic Act No. 10173, you have the following rights with respect to your personal data held by bmw553. You may exercise any of these rights by contacting bmw553's Data Protection Officer as described in Section 14.

• Right to Be Informed: The right to be notified that your personal data is being or will be processed, and to receive this Privacy Policy prior to data collection.
• Right of Access: The right to reasonable access to your personal data, including the categories of data held, the purposes of processing, and the recipients to whom data has been disclosed.
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal data held by bmw553. Many data fields can be corrected directly from your account dashboard.
• Right to Erasure / Right to Be Forgotten: The right to request deletion of personal data where retention is no longer necessary for the declared purpose, where consent has been withdrawn, or where processing was unlawful — subject to bmw553's legal retention obligations under PAGCOR and AMLA requirements.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on bmw553's legitimate interests. Objections to marketing processing will be honored immediately.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe bmw553 has processed your personal data in violation of RA 10173.

11 Children's Privacy and the 21+ Rule

The bmw553 platform is strictly intended for adults who are at least twenty-one (21) years of age, as required under PAGCOR regulations and Philippine gambling law. bmw553 does not knowingly collect personal data from individuals under the age of 21.

During account registration, bmw553 requires date of birth information and conducts age verification as part of its KYC process. Where bmw553 discovers or has reason to believe that a registered account belongs to a person under the age of 21, the account will be immediately suspended, all associated data will be reviewed, and the matter will be escalated to bmw553's compliance team for handling in accordance with PAGCOR's requirements.

12 Cross-Border Data Transfers

Some of the third-party service providers used by bmw553 — including certain game software providers and IT infrastructure partners — may process or store personal data outside the Philippines. Where such cross-border transfers occur, bmw553 ensures that adequate safeguards are in place as required by the Data Privacy Act and NPC regulations, including:

• Contractual clauses that impose data protection standards equivalent to those required under RA 10173;
• Transfers only to countries or organizations that the NPC has recognized as providing an adequate level of data protection; and
• Additional safeguards where the destination country does not provide an adequate level of protection, as required by applicable NPC guidance.

By using the bmw553 platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines for the purposes described in this policy, subject to the safeguards described above.

13 Updates to This Privacy Policy

bmw553 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC regulations, PAGCOR requirements, or our own data processing practices. The effective date at the top of this policy indicates when the current version entered into force.

Where amendments are material — meaning they significantly affect your rights or the manner in which bmw553 processes your personal data — bmw553 will provide advance notice via SMS or email to your registered contact details at least seven (7) days before the changes take effect. Where changes are minor or technical, bmw553 may update the policy without advance notice.

Your continued use of the bmw553 platform after the effective date of any amendment constitutes your acknowledgment of the updated policy. If you do not accept an amendment, you may request account closure in accordance with bmw553's Terms & Conditions.

14 Contact & Data Protection Officer

For all matters relating to this Privacy Policy, the exercise of your data subject rights, or any concern about how bmw553 handles your personal data, please contact bmw553's Data Protection Officer using the following channels:

• Email (DPO): [email protected] — please include "Data Privacy Request" in the subject line
• Live Chat: Available 24 hours a day, 7 days a week, via the live chat function on the bmw553 platform — ask to be connected to a Data Privacy Officer
• Response Language: English and Tagalog
• Response Time: Within fifteen (15) business days of receipt of your request

If you are not satisfied with bmw553's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through its official complaint-filing procedures.