bm55 Privacy Policy

bm55 ("bm55," "we," "us," or "our") operates the online casino and gaming platform accessible at bm55.bio ("the Platform"). We are committed to protecting the personal information of every player who uses the bm55 Platform, in accordance with the Republic Act No. 10173, known as the Data Privacy Act of 2012 ("DPA"), and the regulations and issuances of the National Privacy Commission of the Philippines ("NPC").

This Privacy Policy describes the personal information bm55 collects from Filipino players and other users of the Platform, the purposes for which that information is used, the parties with whom it may be shared, and the rights you have with respect to your personal information.

By creating a bm55 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein. If you do not agree, please do not use the bm55 Platform.

This Privacy Policy is to be read alongside the bm55 Terms and Conditions, which govern your use of the Platform generally. In the event of any conflict between this Policy and the Terms and Conditions on privacy-related matters, this Privacy Policy shall prevail.

For the purposes of the Data Privacy Act of 2012, the data controller responsible for the personal information collected and processed through bm55.bio is the bm55 operating entity. As data controller, bm55 determines the purposes and means of processing your personal information.

bm55 has designated a Data Protection Officer ("DPO") who oversees compliance with applicable data protection law and this Privacy Policy. The DPO can be contacted via the email address provided in Section 15 of this Policy.

Where bm55 engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as data processors under written agreements that require them to process your data only on bm55's instructions and in compliance with applicable data protection law.

bm55 collects the following categories of personal information from players and platform users:

bm55 does not intentionally collect sensitive personal information beyond what is required for identity verification and responsible gaming age compliance. Where submission of a government-issued Philippine ID (which may contain religion, civil status, or similar sensitive data) is required for KYC purposes, only the information necessary to verify identity and age is processed; extraneous sensitive data is not retained.

bm55 collects personal information through the following means:

• Direct Collection: Information you provide directly when creating your bm55 account, completing KYC verification, making deposits or withdrawals, filling in support requests, or communicating with bm55 staff.
• Automatic Collection: Technical and usage data collected automatically when you access and navigate the bm55 Platform, including through cookies, server logs, and session tracking technologies.
• Third-Party Sources: Information received from identity verification service providers, payment processors (such as GCash or Philippine banks confirming transaction details), and fraud prevention agencies where we are legally authorized to receive such information.
• Inference: bm55 may derive insights about your gaming preferences, risk profile for responsible gaming purposes, or account security posture based on your activity data on the Platform.

bm55 uses the personal information we collect for the following purposes:

• Account Management: To create, maintain, verify, and administer your bm55 account, including processing your registration, authenticating your identity on login, and managing your account settings.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other supported Philippine payment channels, and to reconcile and maintain accurate financial records of all transactions.
• Identity Verification (KYC/AML): To verify your identity and age in compliance with applicable gaming regulations and anti-money laundering requirements, and to screen against sanctions lists and politically exposed persons databases where required by law.
• Service Delivery: To provide you with access to games, bonuses, promotions, and all other features of the bm55 Platform.
• Customer Support: To respond to your queries, resolve disputes, process complaints, and provide assistance through bm55's live chat and email support channels.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, bonus abuse, and other prohibited activities on the Platform.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to apply self-imposed limits you have set, and to comply with responsible gaming obligations under applicable regulations.
• Legal and Regulatory Compliance: To fulfill our obligations under Philippine gaming regulations, tax laws, anti-money laundering legislation, and any other applicable law.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the functionality, performance, and user experience of the bm55 Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and event updates — but only where you have consented to receive such communications and have not subsequently opted out.

bm55 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: For marketing communications and any processing activity for which we have requested and received your explicit consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual Necessity: Processing required to perform our obligations under the bm55 Terms and Conditions — including account management, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with applicable Philippine law, including KYC/AML obligations, gaming regulatory requirements, and mandatory data disclosures to authorities.
• Legitimate Interests: Processing necessary for bm55's legitimate interests in operating a secure, fair, and commercially viable platform — including fraud prevention, platform security, and analytics — where those interests are not overridden by your privacy interests or rights.

bm55 does not sell, rent, or commercially trade your personal data to third parties. We may share your personal information only in the following circumstances:

• Payment Processors: bm55 shares the minimum necessary personal and financial information with GCash (G-Xchange, Inc.), PayMaya (Maya Bank), and other licensed Philippine payment service providers to facilitate the processing of your deposits and withdrawals.
• Identity Verification Providers: bm55 may share your identification documents and personal details with licensed identity verification and KYC service providers to verify your identity and age as required by applicable regulations.
• Fraud and Security Service Providers: bm55 may share relevant account or transaction data with fraud detection and prevention partners to protect the integrity of the Platform and its players.
• Game Providers: Where games on the bm55 Platform are provided by third-party game studios, certain technical data (such as a session token or anonymized player identifier) may be shared with that studio to facilitate game delivery. These providers are not permitted to use this data for any purpose other than delivering the game.
• Legal and Regulatory Authorities: bm55 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and courts of competent jurisdiction where required or permitted by applicable Philippine law.
• Corporate Transactions: In the event of a merger, acquisition, or transfer of bm55's business, personal data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

bm55 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small data file placed on your device when you visit bm55.bio. bm55 uses the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core functionality such as account login session management, security token storage, and payment flow continuity. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: These cookies collect anonymized information about how visitors use the Platform — such as which pages are visited most often and whether users receive error messages — to help bm55 improve user experience.
• Functionality Cookies: These cookies remember preferences you have set, such as language or display settings, to personalize your experience on the bm55 Platform.
• Security Cookies: Used to authenticate users, prevent fraudulent use of login credentials, and protect player account data during sessions.

You may control cookie usage through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in and using core Platform features. bm55 does not use cookies for third-party behavioral advertising.

bm55 retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or permanently anonymized such that it can no longer be attributed to any individual player. Where deletion is not technically feasible (for example, data in encrypted backup storage), bm55 will isolate and protect the data from further processing until deletion is possible.

bm55 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bm55.bio;
• Encryption of stored personal data and financial information;
• Access controls ensuring that bm55 staff can only access personal data on a need-to-know basis relevant to their specific role;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Continuous monitoring of Platform systems for security anomalies, unauthorized access attempts, and suspicious activity;
• Regular security assessments and penetration testing of Platform infrastructure;
• Employee training on data privacy obligations and secure data handling practices.

No data transmission over the internet or storage system can be guaranteed to be 100% secure. While bm55 takes all reasonable precautions to protect your personal data, you acknowledge that there is an inherent risk in transmitting data electronically and that bm55 cannot guarantee absolute security against all possible threats.

bm55 primarily processes personal data within the Philippines. In certain operational circumstances — for example, where bm55 uses cloud infrastructure providers, game studios, or technical service providers with operations outside the Philippines — your personal data may be transferred to and processed in countries outside the Republic of the Philippines.

Where such international transfers occur, bm55 ensures that appropriate safeguards are in place to protect your personal information to a standard equivalent to that required under Philippine data protection law. These safeguards may include:

• Contractual clauses with recipients that impose data protection obligations equivalent to those applicable in the Philippines;
• Ensuring that the recipient country has been recognized by the NPC as providing an adequate level of data protection;
• Other legally recognized transfer mechanisms under the Data Privacy Act of 2012.

You may request further information about the safeguards in place for international transfers of your personal data by contacting our Data Protection Officer at the address in Section 15.

bm55 is strictly a 21+ platform. The collection and processing of personal information from individuals under 21 years of age is not intended and is not permitted. bm55 does not knowingly collect personal information from minors.

Age verification is performed during the registration process and at the point of first withdrawal through submission of a valid government-issued Philippine identification document. If bm55 discovers or has reason to believe that personal information has been collected from an individual under the age of 21, the account will be immediately suspended, the personal data will be reviewed, any deposits will be refunded, all winnings will be forfeited, and the data will be deleted from our systems as soon as practicable.

To exercise any of the data rights described in the summary section above, you may submit a request to bm55 using the contact details provided in Section 15. To protect the security of your account, bm55 may require you to verify your identity before processing a data rights request.

bm55 will respond to all verifiable data rights requests within thirty (30) calendar days of receipt. In cases of complexity or high volume of requests, bm55 may extend this period by a further thirty (30) days, in which case you will be notified of the extension and the reason for it.

bm55 will not charge a fee for processing a data rights request unless the request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be levied or the request may be refused, with written reasons provided.

Where a data rights request involves data that bm55 is legally required to retain (for example, KYC records required under the Anti-Money Laundering Act), bm55 will inform you of this retention obligation and process the request to the extent permissible under the applicable law.

bm55 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform operations. The effective date at the top of this document will be updated whenever a material change is made.

Where changes are material — meaning they significantly affect how we use your personal data or your rights in relation to that data — bm55 will provide notice through one or more of the following channels: a notification posted on the Platform, an SMS to your registered Philippine mobile number, or an email to your registered address, where applicable.

Your continued use of the bm55 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the changes, you must cease using the Platform and may close your bm55 account in accordance with the Terms and Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how bm55 is protecting your information.

If you have questions about this Privacy Policy, wish to exercise a data right, or wish to report a data privacy concern, please contact bm55 using the following channels:

• Data Protection Officer (DPO) — Email: [email protected] (subject line: "Data Privacy Request" or "DPO Inquiry"). The DPO will respond to all privacy-related inquiries within 5 business days.
• General Support — Live Chat: Available 24/7 within the bm55 Platform after login. Suitable for general account and privacy questions. For formal data rights requests, email contact is recommended for documentation purposes.

If you are unsatisfied with bm55's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), which can be reached through its official government website and official contact channels.