m.55bmw Privacy Policy —
Your Data, Handled with Respect

1 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173), m.55bmw acts as the Personal Information Controller (PIC) in respect of all personal data collected through the m55bmw.vip platform and its associated services.

As Personal Information Controller, m.55bmw determines the purposes and means by which personal data is processed and is responsible for ensuring that processing is conducted in accordance with applicable data protection law, PAGCOR regulatory requirements, and this Privacy Policy.

Enquiries regarding m.55bmw's data practices may be directed to our Data Protection Officer (DPO) using the contact details provided in Section 13 of this Policy.

2 Personal Data We Collect

2.1 Data Provided Directly by You

When you register an account, use platform features, or contact our support team, m.55bmw collects personal data that you provide directly, including:

• Identity data: Full legal name, date of birth, nationality;
• Contact data: Email address, Philippine mobile number, residential address;
• Verification data: Government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's licence), proof of address documents;
• Financial data: GCash account reference, PayMaya reference, bank account details (BPI, BDO, Metrobank) as applicable to your chosen payment method — note that full card numbers are never stored by m.55bmw;
• Account data: Username, encrypted password hash, account preferences, responsible gaming limit settings; and
• Communications data: Records of your interactions with m.55bmw customer support via live chat and email.

2.2 Data Collected Automatically

When you access the m.55bmw platform, certain technical data is collected automatically through standard web technologies, including:

• IP address and approximate geographic location (city or province level);
• Device type, operating system, and browser version;
• Session start and end times, pages accessed, and game sessions played;
• Referral source (where you arrived from); and
• Cookie and tracking data as described in Section 8.

2.3 Data from Third Parties

m.55bmw may receive personal data about you from third parties in defined circumstances, including:

• Payment service providers (e.g., GCash, PayMaya) for the purpose of confirming deposit and withdrawal transaction status;
• Identity verification service providers used to conduct KYC checks; and
• Fraud prevention and anti-money laundering screening services.

3 How m.55bmw Uses Your Personal Data

m.55bmw uses personal data collected from and about you for the following purposes, each of which is associated with a legal basis set out in Section 4:

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, m.55bmw processes personal data on the following lawful bases:

• Contract performance: Processing is necessary to fulfil our obligations to you under the m.55bmw Terms and Conditions — including account management, payment processing, and customer support;
• Legal obligation: Processing is required to comply with applicable law, including PAGCOR regulatory requirements for KYC, age verification, anti-money laundering obligations, and responsible gaming compliance;
• Legitimate interests: Processing is necessary for m.55bmw's legitimate business interests, including platform security, fraud prevention, and service improvement — where such interests are not overridden by your fundamental rights; and
• Consent: Where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the legality of processing carried out prior to withdrawal.

5 Data Sharing and Disclosure

5.1 Service Providers

m.55bmw engages third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under data processing agreements. These providers are permitted to use data only as directed by m.55bmw and for no other purpose. Categories of service providers include:

• Payment processors and e-wallet providers (GCash, PayMaya, partner banks);
• Identity verification and KYC service providers;
• Game content providers (who receive only anonymised player session data);
• Cloud hosting and data storage infrastructure providers; and
• Customer support technology platforms.

5.2 Regulatory and Legal Disclosure

m.55bmw may disclose personal data to government authorities, law enforcement agencies, PAGCOR, or the National Privacy Commission where required to do so by law, court order, or regulatory directive. We will notify you of such disclosure where lawfully permitted to do so.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of m.55bmw's assets, personal data held about you may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the successor entity prior to your data being transferred.

6 Data Retention

m.55bmw retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following retention schedule:

• Active account data: Retained for the duration of your account relationship with m.55bmw plus a post-closure period of 5 years to satisfy PAGCOR regulatory record-keeping requirements and applicable anti-money laundering obligations under Philippine law;
• KYC and verification documents: Retained for the period required by PAGCOR regulations and the Anti-Money Laundering Act of 2001 (as amended) — currently a minimum of 5 years from account closure;
• Transaction records: Retained for 5 years from the date of each transaction;
• Customer support communications: Retained for 3 years from the date of the interaction; and
• Marketing data (consent-based): Retained until you withdraw your consent or request deletion, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with m.55bmw's data disposal procedures.

7 Security Measures

m.55bmw implements technical and organisational security measures appropriate to the risk profile of the personal data we hold. These measures include:

• Encryption in transit: All data transferred between your device and m.55bmw servers is protected using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Sensitive personal data stored in m.55bmw's databases is encrypted at rest using industry-standard algorithms;
• Password hashing: Account passwords are stored only as one-way cryptographic hashes — m.55bmw staff cannot read your password;
• Access control: Internal access to personal data is restricted on a role-based, need-to-know basis and subject to audit logging;
• Penetration testing: m.55bmw conducts periodic security assessments of its infrastructure; and
• Incident response: m.55bmw maintains a data breach response procedure aligned with NPC notification requirements under the Data Privacy Act of 2012.

While m.55bmw implements robust security measures, no digital system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your own account credentials.

8 Cookies and Tracking Technologies

8.1 What Cookies We Use

The m.55bmw website uses cookies and similar tracking technologies to operate the platform, improve user experience, and support security functions. The categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function — including session management, login state, and security tokens. These cannot be disabled;
• Functional cookies: Remember your preferences (e.g., language, game lobby layout) to provide a personalised experience; and
• Analytics cookies: Collect anonymised, aggregated data about how players use the platform to help us identify and fix issues and improve the user experience.

8.2 Managing Cookies

You may manage non-essential cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect the functionality of the m.55bmw platform. Disabling strictly necessary cookies will prevent you from logging in or using the platform.

9 Minors and Age Restriction

If you are a parent or guardian and believe that a minor has created an m.55bmw account, please contact our support team immediately via live chat. We take underage access seriously and will act promptly upon any report.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have the following rights in respect of your personal data held by m.55bmw:

• Right to be informed: The right to know whether m.55bmw holds personal data about you, the source of that data, and how it is used;
• Right of access: The right to obtain a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal obligations;
• Right to object: The right to object to processing based on legitimate interests, including profiling and direct marketing;
• Right to data portability: The right to receive your personal data in a structured, machine-readable format for transfer to another controller; and
• Right to complain: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the rights listed above, please contact m.55bmw's Data Protection Officer using the details in Section 13. Requests will be acknowledged within 5 business days and resolved within 30 calendar days, in line with NPC guidelines.

11 International Data Transfers

The operation of a global online gaming platform requires that certain personal data is processed by service providers located outside the Philippines — including cloud infrastructure providers and game content servers hosted in other jurisdictions.

Where personal data is transferred outside the Philippines, m.55bmw ensures that appropriate safeguards are in place in accordance with the NPC's Cross-Border Data Transfer guidelines, including:

• Data processing agreements incorporating the NPC's standard contractual clauses;
• Transfer only to jurisdictions with adequate data protection standards as determined by the NPC; and
• Transfer limited strictly to what is necessary for the specific processing purpose.

12 Amendments to This Policy

m.55bmw reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable law. Where material changes are made to this Policy, we will notify registered account holders via the email address on file and/or by displaying a prominent notice on the platform.

The "Last Reviewed" date at the top of this document will be updated on each revision. Your continued use of m.55bmw following the effective date of any updated Policy constitutes your acceptance of the revised document. We recommend that you review this Policy periodically.

13 Contact and Data Protection Officer

m.55bmw has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. You may contact the DPO for any data-related enquiry, rights request, or complaint through the following channels:

m.55bmw is committed to resolving all data privacy concerns promptly and transparently. We welcome feedback on our data practices and take all privacy complaints seriously.