56bmw Privacy Policy

[01] Scope & Data Controller

This Privacy Policy applies to all personal data collected, processed, and stored by 56bmw in connection with the operation of the online gaming platform accessible at https://56bmw.co (the "Platform"). It covers data collected from registered players, visitors to the Platform, and any individual who contacts 56bmw support.

Data Controller: For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations, 56bmw is the personal information controller responsible for your data. Contact details for our Data Protection Officer (DPO) are provided in Section 16 of this policy.

[02] Definitions

• "Personal Data" — any information, whether recorded in material form or not, from which the identity of an individual is apparent or can reasonably and directly be ascertained.
• "Sensitive Personal Information" — personal data about an individual's race, ethnic origin, health, education, genetic or sexual life, offenses, government-issued identifiers, or financial information, as defined under Section 3(l) of RA 10173.
• "Processing" — any operation performed on personal data including collection, recording, organization, storage, updating, retrieval, use, consolidation, blocking, erasure, or destruction.
• "Data Subject" — the individual whose personal data is being processed; in the context of this policy, primarily registered 56bmw players and Platform visitors.
• "NPC" — the National Privacy Commission of the Philippines, the independent body that administers and implements RA 10173.
• "DPO" — the 56bmw Data Protection Officer, the designated individual responsible for overseeing the Platform's data protection compliance.

[03] Personal Data We Collect

56bmw collects personal data across several categories, depending on your interaction with the Platform. The table below summarizes the categories of data collected and their primary purposes.

[04] How We Collect Your Data

56bmw collects personal data through the following methods:

4.1 Direct Collection

Information you provide directly when you register a 56bmw account, complete identity verification, make a deposit or withdrawal request, contact our support team, or participate in a promotion. This is the primary source of personal data held by 56bmw.

4.2 Automated Technical Collection

Technical and usage data is collected automatically when you access the 56bmw Platform — including your IP address, device identifiers, browser type, and session activity data. This data is collected through standard server logs, session management systems, and analytics tools operated by or on behalf of 56bmw.

4.3 Third-Party Sources

In certain circumstances, 56bmw may receive data from third-party sources to supplement your account record — for example, identity verification results from KYC partners, or transaction confirmation data from GCash or Maya. Data received from third parties is handled in accordance with this policy and applicable law.

[05] Legal Basis for Processing

Under RA 10173, 56bmw processes your personal data on the following lawful grounds:

• Contractual necessity: Processing required to fulfill the 56bmw Terms and Conditions, including account management, payment processing, and game service delivery.
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, anti-money laundering obligations under Republic Act No. 9160, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving the 56bmw platform experience, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, promotional personalization, and any non-essential analytics, where you have given explicit, freely withdrawable consent.

[06] How We Use Your Personal Data

56bmw uses your personal data for the following purposes:

6.1 Account Operation

To create and maintain your 56bmw account, authenticate your identity at login, process deposits and withdrawals, deliver game services, credit bonuses, and manage your account settings and preferences.

6.2 Regulatory Compliance

To fulfill PAGCOR licensing obligations, comply with anti-money laundering (AML) and know-your-customer (KYC) requirements, conduct age verification (minimum 21 years of age), and respond to lawful requests from Philippine regulatory authorities.

6.3 Security and Fraud Prevention

To detect and prevent unauthorized account access, identify fraudulent transactions, monitor for multi-accounting and bonus abuse, and maintain the security and integrity of the 56bmw platform.

6.4 Responsible Gaming

To monitor player gaming patterns for indicators of problem gambling, apply responsible gaming interventions where appropriate, process self-exclusion requests, and maintain records required to enforce cooling-off periods and deposit limits.

6.5 Customer Support

To respond to support inquiries, resolve disputes, investigate complaints, and maintain records of your support interactions for quality assurance and dispute resolution purposes.

6.6 Marketing Communications (Consent-Based)

With your explicit consent, to send you information about 56bmw promotions, new game releases, and platform updates through your registered contact channels. You may withdraw consent for marketing communications at any time through your account notification settings or by contacting support.

6.7 Platform Improvement

To analyze aggregated and anonymized usage data for the purpose of improving game selection, user experience, payment processes, and platform performance. Where analytics involve identifiable data, this is handled on the basis of legitimate interests with appropriate safeguards applied.

[07] Data Sharing & Third-Party Disclosure

7.1 Service Providers

56bmw shares personal data with carefully selected third-party service providers who process data on our behalf to deliver the 56bmw Services. These include payment processors (GCash, Maya, BPI, BDO, Metrobank), identity verification partners, game platform providers (JILI, Pragmatic Play, Evolution Gaming), and IT infrastructure providers. All third-party processors are bound by data processing agreements requiring them to handle your data in accordance with RA 10173 and this policy.

7.2 Regulatory and Legal Disclosures

56bmw may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine government authorities where required by law, court order, or regulatory directive — or where disclosure is necessary to protect the rights, property, or safety of 56bmw, its players, or the public.

7.3 No Data Sales

56bmw does not sell, rent, trade, or otherwise provide your personal data to third parties for their own marketing or commercial purposes. Your data is not a product. It is handled solely in service of delivering and improving the 56bmw experience for Filipino players.

[08] Data Retention

56bmw retains your personal data for as long as your account is active and for such additional periods as required by law or legitimate business necessity. The following retention principles apply:

• Active account data (identity, contact, gaming, and financial data) is retained for the duration of your account's active status.
• Transaction and financial records are retained for a minimum of five (5) years from the date of the transaction, in compliance with AML record-keeping requirements under RA 9160.
• Identity verification documents are retained for a minimum of five (5) years from the date of account closure or last transaction, whichever is later.
• Support correspondence is retained for three (3) years from the date of the relevant interaction.
• Marketing consent records are retained for the period of the consent plus three (3) years to demonstrate compliance.
• Technical and usage logs are retained for up to twelve (12) months in identifiable form, then anonymized or deleted.

Upon the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized, such that it can no longer be associated with an identifiable individual.

[09] Data Security

56bmw implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Security measures in place include:

• TLS 1.3 encryption for all data transmitted between your device and the 56bmw platform;
• Encryption at rest for sensitive personal data stored on 56bmw servers;
• Salted and hashed storage of account passwords — passwords are never stored in plain text;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication available to players for account access, and required for high-value withdrawal requests;
• Automated session timeout after periods of inactivity to reduce unauthorized access risk.

[10] Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 56bmw. To exercise any of these rights, contact our Data Protection Officer as described in Section 16.

56bmw will respond to verified data subject requests within thirty (30) days of receipt. Where the complexity or volume of requests requires additional time, we will notify you of an extension and the reason for it.

[11] Cookies & Tracking Technologies

11.1 What Are Cookies

Cookies are small text files stored on your device when you visit the 56bmw platform. They allow the platform to remember your preferences, maintain your logged-in session, and gather anonymous usage statistics to help improve the platform.

11.2 Types of Cookies Used

• Strictly necessary cookies: Essential for the platform to function — including session authentication cookies that keep you logged in to your 56bmw account. These cannot be disabled without rendering core functions unavailable.
• Functional cookies: Remember your preferences (such as language settings) to provide a more personalized experience across sessions.
• Analytics cookies: Collect anonymized data about how the platform is used — pages visited, features accessed, session duration — to help 56bmw identify improvements. No personally identifiable data is transmitted to analytics partners.

11.3 Cookie Management

You may manage or disable non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair the function of the 56bmw platform, including the ability to log in. Disabling analytics cookies will not affect your ability to use the platform.

[12] Minors

The 56bmw platform is strictly for individuals who are 21 years of age or older. 56bmw does not knowingly collect personal data from minors. If we become aware that personal data has been collected from an individual under 21 years of age, that data will be deleted promptly, the associated account will be closed, and any transactions will be voided in accordance with the 56bmw Terms and Conditions.

If you believe that a minor has registered a 56bmw account or that their personal data has been submitted to the Platform, please contact our support team immediately at [email protected] so that we can investigate and take appropriate action.

[13] Cross-Border Data Transfers

Some of 56bmw's service providers — including game platform operators and certain technology infrastructure partners — may process personal data on servers located outside the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, 56bmw ensures that appropriate safeguards are in place, including:

• Data processing agreements requiring the recipient to provide a level of data protection at least equivalent to that required under RA 10173;
• Transfer only to jurisdictions that the NPC has deemed to provide adequate data protection;
• Standard contractual clauses or equivalent binding instruments where other safeguards are not available.

56bmw will not transfer your personal data to a foreign jurisdiction that does not provide adequate protection without your explicit consent or as otherwise required by Philippine law.

[14] Data Breach Response

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 56bmw will:

• Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and applicable breach notification requirements;
• Notify affected data subjects without undue delay where the breach is likely to result in a high risk to their rights — including the nature of the breach, data categories affected, likely consequences, and measures taken or proposed to address it;
• Document the breach and the response actions taken in 56bmw's internal breach register, maintained for inspection by the NPC upon request.

56bmw maintains an incident response plan that is reviewed and tested regularly to ensure that breach detection, containment, and notification can be executed within required timelines.

[15] Changes to This Privacy Policy

56bmw may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory guidance from the NPC. Material changes will be communicated to registered players via the contact details on file (email notification or in-platform notice) at least seven (7) days before the revised policy takes effect, unless a shorter notice period is required by law.

Your continued use of the 56bmw platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of and, where applicable, consent to the changes. Where material changes require fresh consent under RA 10173 (e.g., new processing purposes), we will seek that consent before the new processing begins.

The current version of this Privacy Policy is always available at https://56bmw.co/privacy-policy. The "Last updated" date at the top of this page reflects the date of the most recent substantive revision.

[16] Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or 56bmw's handling of your personal data — including requests to exercise your data subject rights — please contact the 56bmw Data Protection Officer: