bmw77 Privacy Policy

1. Introduction

bmw77 ("bmw77," "the Platform," "we," "us," "our") operates an online gaming platform accessible at bmw77.asia, serving Filipino players under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). This Privacy Policy applies to all personal data processed in connection with the bmw77 platform, including but not limited to account registration, gameplay, financial transactions, customer support interactions, and marketing communications.

By registering an account or accessing the bmw77 platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the bmw77 platform.

2. Data Controller

bmw77 is the data controller of personal data collected through the platform. As a PAGCOR-licensed operator, bmw77 is subject to the data governance requirements issued by PAGCOR in addition to the obligations imposed by the National Privacy Commission (NPC) of the Philippines under the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

bmw77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection laws. The DPO may be contacted via the support channel at [email protected].

3. Personal Data We Collect

3.1 Identity and Registration Data

• Full legal name as it appears on government-issued identification
• Date of birth (used to verify the 21+ age requirement mandated by PAGCOR)
• Philippine mobile number and/or email address
• Username and encrypted password credentials
• Government-issued ID document type, number, and issuing authority

3.2 Financial Data

• GCash, Maya/PayMaya, or bank account details linked to your bmw77 account for deposit and withdrawal processing
• Transaction history including deposit amounts, withdrawal requests, bet amounts, and winnings denominated in Philippine Peso (₱)
• Source-of-funds documentation where required by PAGCOR's AML compliance framework

3.3 Technical and Device Data

• IP address and geolocation data at the time of login and each session
• Device type, operating system, browser type and version
• Session timestamps and duration
• Cookie identifiers and similar tracking data (see Section 11)

3.4 Gameplay and Behavioral Data

• Game history, bet records, and wagering patterns
• Responsible gaming tool usage (deposit limits, self-exclusion activations)
• Customer support interaction transcripts and communications

3.5 Marketing Data

• Communication preferences and marketing consent status
• Promotional campaign participation and bonus redemption history

4. How We Collect Personal Data

bmw77 collects personal data through the following channels:

• Directly from you — during account registration, KYC verification submission, deposit and withdrawal requests, customer support enquiries, and responsible gaming tool activations.
• Automatically — through cookies, device fingerprinting, server logs, and analytics tools during your use of the bmw77 website or application.
• From third parties — identity verification service providers, PAGCOR databases, payment processors (GCash, Maya, BPI, BDO, Metrobank), and credit reference or AML screening services, where permitted by law.

5. Purposes of Data Processing

bmw77 processes your personal data for the following purposes:

• Account administration: Creating, maintaining, verifying, and securing your bmw77 player account.
• Age and identity verification: Confirming that you are at least 21 years of age and that your identity matches the information provided during registration, as required by PAGCOR.
• Payment processing: Facilitating deposits and withdrawals in Philippine Peso through approved payment channels.
• Regulatory compliance: Meeting obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (AMLA), and the Terrorism Financing Prevention and Suppression Act.
• Fraud and AML detection: Monitoring transactions and gameplay patterns to detect suspicious activity, protect the platform's integrity, and comply with PAGCOR and AMLC reporting obligations.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Responsible gaming: Administering deposit limits, session controls, and self-exclusion tools to protect player welfare.
• Marketing: Sending promotional communications where you have provided consent, and personalizing platform content based on your gaming preferences.
• Platform improvement: Analyzing usage patterns to improve the bmw77 platform, game offerings, and user experience.

6. Legal Basis for Processing

bmw77 processes your personal data on the following legal grounds under the Philippine Data Privacy Act:

• Consent: For marketing communications and non-essential analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual necessity: For account administration, payment processing, and all processing necessary to fulfill the bmw77 Terms & Conditions to which you have agreed.
• Legal obligation: For KYC, AML compliance, PAGCOR regulatory reporting, and cooperation with lawful requests from Philippine government authorities including the NPC, PAGCOR, and AMLC.
• Legitimate interests: For fraud detection, platform security, and platform improvement activities, where these interests do not override your fundamental rights.

7. Data Sharing and Disclosure

bmw77 does not sell your personal data to third parties. Data may be shared in the following circumstances:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment providers receive financial data necessary to process your transactions.
• Identity verification providers: Third-party KYC service providers process identity document data on behalf of bmw77 to fulfill PAGCOR verification requirements.
• Regulatory authorities: PAGCOR, the AMLC (Anti-Money Laundering Council), the National Privacy Commission, and other Philippine government bodies may receive data as required by law or upon lawful request.
• Game content providers: Game studios and platform providers may receive pseudonymized gameplay data necessary to operate their games within the bmw77 environment.
• IT and security service providers: Cloud infrastructure, security monitoring, and analytics providers operating under data processing agreements that require equivalent data protection standards.

All third-party data processors engaged by bmw77 are contractually bound to process your data only for the specified purpose and to maintain appropriate security standards consistent with the Data Privacy Act.

8. International Data Transfers

Some bmw77 service providers, including game content studios and cloud infrastructure providers, may operate servers outside the Philippines. Where personal data is transferred internationally, bmw77 ensures that adequate safeguards are in place — including contractual data transfer clauses approved by the National Privacy Commission or equivalent mechanisms — to maintain a level of data protection consistent with the Philippine Data Privacy Act.

9. Data Retention

bmw77 retains personal data for the following periods, or longer where required by law:

• Active account data: Retained for the duration of your account's active status and for five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years as required under the Anti-Money Laundering Act.
• KYC documentation: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing data: Retained until consent is withdrawn or the account is closed, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with bmw77's data disposal procedures.

10. Security Measures

bmw77 implements technical and organizational security measures appropriate to the sensitivity of the data processed, including:

• TLS 1.3 encryption for all data in transit between your device and bmw77 servers
• Encryption at rest for sensitive personal and financial data
• Multi-factor authentication for player accounts and internal administrative access
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular penetration testing and vulnerability assessments of bmw77 systems
• Incident response procedures aligned with NPC breach notification requirements

In the event of a personal data breach that triggers the NPC's notification thresholds under the Data Privacy Act, bmw77 will notify affected individuals and the National Privacy Commission within the timeframes prescribed by law.

11. Cookies and Tracking Technologies

bmw77 uses cookies and similar technologies to operate and improve the platform. Categories of cookies used include:

• Strictly necessary cookies: Required for platform functionality including authentication session management. Cannot be disabled without impacting platform operation.
• Performance and analytics cookies: Collect anonymized data about how players use the bmw77 platform to inform improvements. Used with your consent.
• Preference cookies: Store your language and display preferences to improve your session experience.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the bmw77 platform.

12. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by bmw77:

• Right to be informed: The right to know how your data is collected, used, and shared — as set out in this Privacy Policy.
• Right to access: The right to request a copy of the personal data bmw77 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bmw77's legal retention obligations.
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to object: The right to object to processing based on legitimate interests, including profiling and direct marketing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, contact bmw77's Data Protection Officer at [email protected]. bmw77 will respond to verifiable requests within thirty (30) days as required by the Data Privacy Act.

13. Children's Privacy

The bmw77 platform is strictly restricted to individuals aged 21 and above as required by PAGCOR regulations. bmw77 does not knowingly collect personal data from individuals below the age of 21. If bmw77 identifies that an account has been registered by an individual who does not meet the age requirement, the account will be immediately suspended and all personal data associated with the account will be deleted in accordance with applicable law and PAGCOR guidelines.

14. Policy Updates

bmw77 may update this Privacy Policy periodically to reflect changes in applicable law, PAGCOR regulatory requirements, or our data processing practices. The "Effective Date" at the top of this document indicates when the current version took effect. Where changes materially affect your rights, bmw77 will provide notice via the platform or your registered contact details. Continued use of bmw77 following publication of an updated Privacy Policy constitutes acceptance of the revised terms.

15. Contact and Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or bmw77's data processing practices, please contact bmw77's Data Protection Officer:

• Email: [email protected] (plain text — not a link)
• Live Chat: Available 24/7 via the bmw77 platform support widget

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph if you believe bmw77 has not handled your personal data in accordance with the Data Privacy Act.