1.Data Controller Identity
The data controller responsible for your personal information processed in connection with the bm55 Platform is the bm55 operating entity, a company operating under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR) and registered with the National Privacy Commission (NPC) of the Philippines in accordance with RA 10173.
For all data privacy matters, including the exercise of data subject rights, you may contact bm55's designated Data Protection Officer (DPO) at the contact details set out in Section 14 of this Policy.
2.Categories of Personal Data We Collect
bm55 collects the following categories of personal data from Players and Platform visitors:
Identity & Contact Data:
- Full legal name as it appears on a Philippine government-issued ID
- Date of birth (used to verify the 21+ age requirement under PAGCOR regulations)
- Philippine mobile number (primary contact and OTP verification channel)
- Email address (secondary contact and account communications)
- Physical address in the Philippines (required for enhanced KYC verification)
Identity Verification (KYC) Data:
- Images or scans of government-issued Philippine identification documents (PhilSys ID, passport, LTO licence, UMID, SSS card, Voter's ID)
- Selfie photographs submitted for facial verification against ID documents
- Proof of address documents (utility bills, bank statements)
Financial Data:
- GCash account number or Maya wallet number linked to your bm55 account
- Bank account details (BPI, BDO, UnionBank) where provided for withdrawal processing
- Transaction history including deposit amounts, withdrawal amounts, dates, and payment methods
Gaming Activity Data:
- Bet history, game session logs, game outcomes, and wagering patterns across all bm55 Games
- Bonus utilisation records, VIP tier status, and loyalty point history
Technical & Device Data:
- IP address, device type, operating system, browser type and version
- Login timestamps, session duration, and Platform interaction logs
- Cookie identifiers and similar tracking technologies (see Section 9)
bm55 does not collect sensitive personal information (as defined under RA 10173, including health data, political affiliations, or religious beliefs) except where directly relevant to a responsible gaming assessment requested by the Player.
3.How We Collect Your Personal Data
bm55 collects your personal data through the following means:
- Direct collection: Information you provide when registering an account on bm55, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
- Automated collection: Technical and device data collected automatically when you access the bm55 Platform through cookies, web server logs, and analytics tools.
- Third-party sources: Identity verification data obtained from third-party KYC service providers during the account verification process; fraud and AML screening data from financial intelligence tools used by bm55 for compliance purposes.
- Payment processors: Transaction confirmation data from GCash, Maya, BPI, BDO, and other payment partners when processing your deposits and withdrawals.
4.Purposes of Personal Data Processing
bm55 processes your personal data for the following purposes:
- Account creation and management: To register your bm55 account, verify your identity and age (21+), and maintain your Player profile.
- Service delivery: To operate Games, process deposits and withdrawals, credit bonuses, and provide all features of the bm55 Platform.
- Legal and regulatory compliance: To fulfil PAGCOR licensing obligations, comply with the Philippine Anti-Money Laundering Act (AMLA), conduct AML and counter-terrorism financing (CTF) screening, and respond to lawful requests from Philippine regulatory and law enforcement authorities.
- Fraud prevention and security: To detect and prevent fraudulent activity, account takeovers, collusion, and other prohibited conduct on the bm55 Platform.
- Responsible gaming: To monitor gaming patterns for indicators of problem gambling and to operate deposit limits, self-exclusion, and cooling-off features in accordance with PAGCOR responsible gaming requirements.
- Customer support: To respond to your queries, complaints, and support requests via live chat and email.
- Marketing communications: To send you promotional offers, bonus notifications, and Platform updates, subject to your marketing preferences and opt-out rights.
- Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the bm55 Platform experience for Filipino players.
5.Legal Basis for Processing
bm55 processes your personal data on the following legal bases under the Philippine Data Privacy Act:
- Contractual necessity: Processing required to perform the bm55 Terms and Conditions contract with you, including account management, game operation, and payment processing.
- Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, NPC registration requirements, and lawful orders from Philippine authorities.
- Legitimate interests: Processing for fraud prevention, Platform security, and responsible gaming monitoring, where bm55's interests are not overridden by your data protection rights.
- Consent: Processing for direct marketing communications, where you have given explicit consent. You may withdraw marketing consent at any time without affecting other processing.
6.Data Sharing and Disclosure
bm55 does not sell, rent, or trade your personal data to third parties for commercial purposes. bm55 may share your personal data with the following categories of recipients solely to the extent necessary for the purposes described in this Policy:
- PAGCOR and Philippine regulatory authorities: As required by bm55's operating licence and applicable Philippine law, including mandatory reporting of AML suspicious transaction reports (STRs).
- Payment service providers: GCash, Maya, BPI, BDO, UnionBank, and other payment partners receive only the transaction data necessary to process your deposits and withdrawals.
- KYC and identity verification providers: Third-party identity verification services that process your ID documents and selfie photographs to complete KYC verification on bm55's behalf, subject to data processing agreements.
- Game technology providers: JILI Games, Evolution Gaming, PG Soft, Pragmatic Play, and other licensed game suppliers receive anonymised or pseudonymised session data necessary for game operation and dispute resolution.
- IT infrastructure and security providers: Cloud hosting, DDoS protection, and cybersecurity service providers who process Platform data under strict data processing agreements with bm55.
- Law enforcement: Philippine law enforcement authorities, courts, or other public bodies when bm55 is required to disclose data by law, court order, or in the prevention of crime.
bm55 requires all third-party processors to maintain appropriate technical and organisational security measures and to process personal data only on documented instructions from bm55 in compliance with RA 10173.
7.International Data Transfers
Some of bm55's third-party service providers (including game technology providers and cloud infrastructure partners) may be located or operate servers outside the Philippines. Where personal data is transferred outside the Philippines, bm55 ensures that such transfers are made in compliance with the cross-border data transfer requirements of RA 10173 and NPC guidelines, including the use of appropriate contractual safeguards such as standard contractual clauses or transfer impact assessments.
bm55 will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without implementing appropriate supplementary safeguards.
8.Data Retention
bm55 retains your personal data for as long as your Account is active and for a period thereafter as required by applicable Philippine law and PAGCOR regulations. Specific retention periods applicable to bm55 include:
- Account and KYC data: Retained for a minimum of five (5) years following account closure, in accordance with AMLA record-keeping requirements applicable to covered persons under Philippine law.
- Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction or gaming session.
- Customer support records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
- Marketing consent records: Retained for as long as you maintain a bm55 Account, and for one (1) year following account closure or consent withdrawal.
Following the expiry of the applicable retention period, bm55 will securely delete or anonymise your personal data such that it can no longer be attributed to you.
9.Cookies & Tracking Technologies
bm55 uses cookies and similar tracking technologies on the Platform for the following purposes:
- Essential cookies: Required for the Platform to function, including session management, login authentication, and security. These cannot be disabled without breaking core Platform functionality.
- Analytics cookies: Used to understand how Filipino players interact with the bm55 Platform, which games are most popular, and where technical issues arise. Analytics data is aggregated and pseudonymised.
- Preference cookies: Store your Platform preferences such as language settings and display options.
- Marketing cookies: Used to track your interactions with bm55 promotional content, subject to your consent. You may opt out of marketing cookies via the cookie preference centre on the Platform.
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the bm55 Platform.
10.Your Data Subject Rights
As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by bm55:
- Right to be informed: The right to be notified of how your personal data is collected and processed, as provided in this Policy.
- Right of access: The right to obtain a copy of your personal data held by bm55 and information about how it is processed.
- Right to rectification: The right to correct inaccurate or incomplete personal data in your bm55 Account.
- Right to erasure: The right to request deletion of your personal data, subject to bm55's legal retention obligations under AMLA and PAGCOR regulations.
- Right to data portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller.
- Right to object: The right to object to processing of your personal data for direct marketing purposes at any time.
- Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe bm55 has violated your data privacy rights.
To exercise any of the above rights, contact bm55's Data Protection Officer as described in Section 14. bm55 will respond to data subject rights requests within fifteen (15) calendar days of receipt, extendable to thirty (30) days for complex requests.
Certain rights (particularly erasure) may be limited where bm55 is required to retain data under AMLA, PAGCOR regulations, or other applicable Philippine law. bm55 will always explain the basis for any such limitation.
11.Security Measures
bm55 implements the following technical and organisational security measures to protect your personal data:
- 256-bit SSL/TLS encryption for all data in transit between your device and the bm55 Platform.
- Encryption of stored personal data and financial records at rest using industry-standard algorithms.
- Role-based access controls limiting access to personal data to bm55 employees and contractors with a demonstrated need-to-know.
- Multi-factor authentication requirements for bm55 staff accessing systems containing personal data.
- Regular third-party security penetration testing and vulnerability assessments of the bm55 Platform infrastructure.
- Automated anomaly detection and fraud monitoring systems operating 24/7.
In the event of a personal data breach that poses a real risk of serious harm to Filipino players, bm55 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay in accordance with NPC Circular 16-03.
12.Children's and Underage Players' Privacy
The bm55 Platform is strictly intended for individuals who are at least twenty-one (21) years of age, in accordance with PAGCOR's minimum age requirements for online casino-style gaming in the Philippines. bm55 does not knowingly collect personal data from persons under 21 years of age.
If bm55 becomes aware that personal data has been collected from a player who is under 21 years of age, bm55 will immediately suspend the associated Account, return any real-money balance in accordance with applicable regulations, and securely delete the personal data of the underage individual to the extent permitted by law.
If you are a parent or guardian and believe your child under 21 has registered an account on bm55, please contact bm55 support immediately so the account can be investigated and closed.
13.Changes to This Privacy Policy
bm55 may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable Philippine law, PAGCOR requirements, or the bm55 Platform's features. Material changes to this Policy will be communicated to registered Players via the mobile number or email address on their Account with at least seven (7) days' notice prior to the effective date of the change.
Continued use of the bm55 Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Players are encouraged to review this Policy periodically.
14.Contact & Data Protection Officer
For all data privacy queries, data subject rights requests, or concerns regarding bm55's handling of your personal data, you may contact bm55's Data Protection Officer through the following channels:
- Email: [email protected] (please include "Privacy / DPO Request" in your subject line)
- Live Chat: Available 24/7 via the bm55 Platform
If you are not satisfied with bm55's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph (reference only — not a hyperlink).
bm55's DPO is registered with the NPC as required by the Philippine Data Privacy Act and its Implementing Rules and Regulations. DPO contact details are on file with the NPC.