bm555 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is published by bm555 ("bm555," "we," "us," "our") and applies to all personal information collected from individuals ("you," "the Player," "the User") who access or use the bm555 online casino and sports betting platform, whether via web browser, mobile browser, or any bm555-branded application.

1.2 bm555 operates in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines ("DPA"), its implementing rules and regulations, and applicable PAGCOR regulatory requirements relating to player data and identity verification.

1.3 By registering an account, making a deposit, or otherwise using the bm555 platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the bm555 platform.

1.4 This Policy should be read in conjunction with the bm555 Terms & Conditions and Responsible Gaming Policy.

2. Information We Collect

2.1 Identity and Account Data. When you register and verify your bm555 account, we collect: full legal name; date of birth; nationality; government-issued identification numbers (e.g., Philippine passport, SSS, UMID, driver's licence); and a photograph or scan of your identification document, as required by KYC regulations.

2.2 Contact Data. We collect your registered email address, Philippine mobile phone number, and residential address as provided during registration or account updates.

2.3 Financial Data. We collect your payment method details (e.g., GCash registered mobile number, BPI/BDO account details) and transaction records including deposits, withdrawals, and bonuses — all denominated in Philippine Peso (PHP). We do not store full bank card numbers; payment card data is processed by PCI-DSS compliant payment processors.

2.4 Gaming Activity Data. We record all bets, game sessions, wagering histories, outcomes, and bonus activity associated with your bm555 account for operational, compliance, and responsible gaming monitoring purposes.

2.5 Technical and Device Data. We automatically collect your IP address, device identifiers, browser type and version, operating system, session timestamps, and approximate geolocation data when you access bm555.

2.6 Communications Data. We retain records of communications between you and the bm555 support team, including live chat transcripts, email correspondence, and any documents you submit in connection with support requests or disputes.

3. How We Collect Your Data

3.1 bm555 collects personal data through the following means:

• Directly from you — through account registration forms, KYC document uploads, payment forms, support contacts, and any other information you voluntarily provide;
• Automatically — through cookies, web server logs, analytics tools, and similar technologies as you interact with the bm555 platform;
• From third parties — including identity verification service providers, payment processors, fraud detection services, and PAGCOR-mandated compliance databases, where permitted by law.

4. How We Use Your Personal Data

4.1 bm555 processes your personal data for the following purposes:

1. Account management — creating, maintaining, verifying, and securing your bm555 account;
2. Service delivery — enabling you to deposit, play games, place bets, and withdraw winnings on the bm555 platform;
3. Identity and age verification — confirming that you meet the minimum age requirement of 21 years and that your identity matches your registered account details, as required by PAGCOR;
4. Payment processing — facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment channels;
5. Legal and regulatory compliance — fulfilling obligations under the Data Privacy Act, PAGCOR regulations, Anti-Money Laundering Act (AMLA), and related Philippine laws;
6. Fraud prevention and security — detecting and preventing unauthorised access, fraudulent transactions, and abuse of the bm555 platform;
7. Responsible gaming — monitoring account activity to identify patterns consistent with problem gambling and to enforce self-exclusion or limit requests;
8. Customer support — responding to your inquiries, resolving disputes, and managing your account at your request;
9. Platform improvement — analysing usage patterns to improve the bm555 user experience, game selection, and technical performance;
10. Marketing communications — where you have given explicit consent, sending promotional offers, bonus notifications, and updates relevant to your activity on bm555.

5. Legal Basis for Processing

5.1 Under the Data Privacy Act of 2012, bm555 processes your personal data on the following legal grounds:

• Contractual necessity — processing required to perform the bm555 Terms & Conditions to which you are a party (account management, payment processing, game delivery);
• Legal obligation — processing required to comply with PAGCOR licensing conditions, AMLA compliance, and other applicable Philippine laws;
• Legitimate interests — processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests do not override your fundamental rights;
• Consent — processing for optional purposes such as marketing communications, where you have provided explicit, freely given, informed consent that you may withdraw at any time.

6. Data Sharing & Disclosure

6.1 bm555 may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• PAGCOR and regulatory authorities — as required by licensing conditions and applicable Philippine gaming regulations;
• Anti-money laundering bodies — as required under the Anti-Money Laundering Act of 2001 (RA 9160) and the AMLC's reporting requirements;
• Payment processors — GCash, Maya, BPI Online, and other approved payment partners to facilitate transactions;
• KYC and identity verification providers — third-party services engaged to verify identity documents and screen players against sanctions lists;
• Game content providers — to the extent necessary for providing specific game titles on the bm555 platform;
• Legal and professional advisors — lawyers, auditors, and consultants engaged under confidentiality obligations;
• Law enforcement and courts — where required by valid legal order, subpoena, or applicable law.

6.2 All third parties with whom bm555 shares personal data are contractually obligated to maintain data confidentiality and to process your information only for the specified, agreed purpose.

7. Data Security

7.1 bm555 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bm555 servers;
• Encrypted storage of sensitive data at rest;
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Two-factor authentication options for player accounts;
• Intrusion detection and real-time monitoring systems.

7.2 While bm555 employs industry-standard security practices, no system is completely impenetrable. In the event of a personal data breach that is likely to give rise to a high risk to your rights, bm555 will notify affected players and the National Privacy Commission (NPC) within the timeframes prescribed by the Data Privacy Act.

8. Data Retention

8.1 bm555 retains your personal data for as long as your account is active and for such additional periods as are required by law or legitimate business need. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by AMLA and PAGCOR regulations;
• Transaction and gaming activity records are retained for a minimum of five (5) years for compliance and audit purposes;
• Marketing consent records are retained for the duration of the consent and for a reasonable period thereafter to demonstrate compliance;
• Support communications are retained for up to three (3) years following resolution.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bm555's data disposal procedures.

9. Cookies & Tracking Technologies

9.1 bm555 uses cookies and similar tracking technologies on the platform for the following purposes:

• Essential cookies — required for account login sessions, security tokens, and platform functionality. These cannot be disabled without affecting your ability to use bm555;
• Analytics cookies — used to understand how players navigate and use the platform so we can improve the user experience;
• Preference cookies — used to remember your settings and customisations on the bm555 platform.

9.2 You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the bm555 platform.

10. Your Data Rights

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bm555:

• Right to be informed — to be notified about how your data is collected and processed (this Policy fulfils that obligation);
• Right to access — to request a copy of the personal data bm555 holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure — to request deletion of your personal data where it is no longer necessary, subject to legal retention obligations;
• Right to object — to object to processing based on legitimate interests, including direct marketing;
• Right to data portability — to receive your personal data in a structured, machine-readable format;
• Right to lodge a complaint — with the National Privacy Commission (NPC) of the Philippines.

10.2 To exercise any of the above rights, contact bm555 support. Requests will be processed within thirty (30) days. Identity verification may be required before fulfilling data access or portability requests.

11. Children and Minors

11.1 The bm555 platform is strictly restricted to persons aged 21 years and above. bm555 does not knowingly collect personal data from individuals under this age. If we become aware that personal data has been submitted by an individual who does not meet the minimum age requirement, the account will be immediately suspended, all data will be reviewed, and appropriate action — including account closure and notification to PAGCOR — will be taken.

11.2 If you are a parent or guardian and believe that a minor has registered on bm555, please contact support immediately at the address provided in Section 15.

12. Third-Party Services

12.1 The bm555 platform may link to or incorporate third-party services (such as payment gateways). These third parties operate under their own privacy policies, and bm555 is not responsible for the data practices of third-party providers. We recommend reviewing the privacy policies of any third-party payment providers you use in connection with your bm555 account.

13. International Data Transfers

13.1 In the course of providing its services, bm555 may transfer personal data to third-party service providers located outside the Philippines — for example, cloud infrastructure providers or KYC verification services operating internationally. Where such transfers occur, bm555 ensures they are conducted in compliance with the Data Privacy Act's requirements for cross-border data transfers, including ensuring that receiving parties maintain an adequate level of data protection.

14. Updates to This Policy

14.1 bm555 may update this Privacy Policy periodically to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered players via email or prominent notice on the bm555 platform. The "Last Updated" date at the top of this page reflects the most recent revision.

14.2 Continued use of the bm555 platform following notification of a revised Policy constitutes acceptance of the updated terms.

15. Contact & Data Privacy Officer

15.1 For questions, data access requests, or privacy complaints, you may contact bm555 at:

15.2 You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe bm555 has not handled your personal data in accordance with the Data Privacy Act of 2012.