🔒 bmw365 Privacy Policy

1. Introduction

bmw365 is the Philippines' premier online casino and sports betting platform, serving Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and beyond. We are committed to protecting the privacy and personal data of every player who trusts us with their information.

This Policy applies to all personal data collected by bmw365 through the bmw365.vip website, any associated mobile applications, and all related services, features, and communications operated by bmw365. It covers data collected during account registration, gameplay, payment transactions, customer support interactions, and general browsing of the bmw365 platform.

This Policy should be read alongside the bmw365 Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the bmw365 platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, bmw365 acts as the personal information controller in respect of the personal data it collects and processes in connection with the bmw365 platform.

bmw365 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection laws and for handling data subject requests and complaints. You may contact the bmw365 DPO using the contact details provided in Section 16 of this Policy.

3. Personal Data We Collect

bmw365 collects the following categories of personal data from players and platform visitors:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used for mandatory 21+ age verification).
• Philippine mobile number and email address.
• Residential address, including barangay, city/municipality, and province.
• Government-issued identification numbers (e.g., passport number, driver's license number, SSS/UMID number) where required for KYC verification.

3.2 Financial Data

• GCash or PayMaya mobile wallet number.
• Bank account details (BPI, BDO, Metrobank) where used for deposits or withdrawals.
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references.
• Bonus and promotional credit history.

3.3 Gaming & Behavioral Data

• Game play history, including games played, bet amounts, win/loss records, and session durations.
• Sports betting selections, odds accepted, and wager outcomes.
• Responsible gaming tool usage, including deposit limits set, cooling-off periods activated, and self-exclusion requests.
• Account login history, including timestamps and IP addresses.

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, and browser type and version.
• Cookie identifiers and session tokens.
• Pages visited on bmw365.vip, time spent on each page, and navigation paths.

3.5 Communications Data

• Records of customer support interactions via live chat, email, or any other communication channel.
• Feedback, complaints, and dispute records.
• Marketing communication preferences and opt-in/opt-out records.

4. How We Collect Your Data

bmw365 collects personal data through the following means:

• Direct Collection: Information you provide when registering a bmw365 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and behavioral data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and use the bmw365 platform.
• Third-Party Sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; and, where applicable, information from Philippine government databases used to verify identity documents.
• Payment Providers: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and 7-Eleven payment processing partners.

5. How We Use Your Personal Data

bmw365 uses the personal data it collects for the following purposes:

bmw365 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

6. Legal Basis for Processing

bmw365 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and bmw365, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, KYC requirements, and gaming regulatory obligations.
• Legitimate Interests: Processing necessary for bmw365's legitimate business interests, including fraud prevention, platform security, and improving the bmw365 service, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and certain cookie uses. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing & Disclosure

bmw365 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. bmw365 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and 7-Eleven, for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party service providers engaged by bmw365 to perform identity verification and document authentication as part of the KYC process.
• Fraud Prevention & Security Providers: Specialist providers who assist bmw365 in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• IT & Platform Service Providers: Cloud hosting, data storage, and software service providers who process data on behalf of bmw365 under strict data processing agreements.
• Regulatory & Law Enforcement Authorities: Philippine government agencies, including the Anti-Money Laundering Council (AMLC) and other competent authorities, where disclosure is required by law or court order.
• Professional Advisors: Legal, accounting, and auditing firms engaged by bmw365, subject to professional confidentiality obligations.

All third-party service providers engaged by bmw365 are required to process personal data only in accordance with bmw365's instructions and applicable data protection laws. bmw365 does not permit its service providers to use your personal data for their own purposes.

8. International Data Transfers

bmw365 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines, bmw365 ensures that such transfers are carried out in compliance with the Philippine Data Privacy Act of 2012 and that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses with the receiving party.

bmw365 will not transfer your personal data to a country or territory that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.

9. Data Retention

bmw365 retains your personal data for as long as your bmw365 account remains active and for a period thereafter as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with anti-money laundering record-keeping requirements.
• Financial & Transaction Data: Retained for a minimum of 5 years from the date of each transaction, as required by Philippine anti-money laundering regulations.
• Gaming & Behavioral Data: Retained for the duration of your account and for up to 2 years following account closure for responsible gaming monitoring and dispute resolution purposes.
• Customer Support Records: Retained for up to 3 years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Marketing Preferences: Retained until you withdraw consent or request deletion, whichever is earlier.
• Technical & Log Data: Retained for up to 12 months for security monitoring and fraud detection purposes.

Upon expiry of the applicable retention period, bmw365 will securely delete or anonymize your personal data in accordance with its data disposal procedures.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by bmw365:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of Access: The right to request a copy of the personal data bmw365 holds about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data bmw365 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bmw365's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on bmw365's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe bmw365 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact the bmw365 Data Protection Officer using the contact details in Section 16. bmw365 will respond to all valid data subject requests within 15 business days of receipt. bmw365 may request proof of identity before processing a data subject request to protect against unauthorized access to your personal data.

11. Cookies & Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. bmw365 uses cookies and similar tracking technologies (such as web beacons and session tokens) to operate the platform, remember your preferences, and analyze how the platform is used.

11.2 Types of Cookies Used by bmw365

• Strictly Necessary Cookies: Essential for the bmw365 platform to function. These include session authentication cookies that keep you logged in during your gaming session. These cookies cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as your preferred language and display settings, to provide a more personalized experience on bmw365.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the bmw365 platform, helping us identify areas for improvement. bmw365 uses only first-party analytics tools for this purpose.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and account takeover attempts.

11.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies will prevent you from logging in to your bmw365 account and using the platform. Disabling functional or analytics cookies will not prevent you from using bmw365 but may affect your experience.

bmw365 does not use cookies to track your activity across unrelated third-party websites, and does not share cookie data with third-party advertisers.

12. Children's Privacy

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to bmw365, please contact us immediately at the details provided in Section 16. bmw365 will take prompt action to investigate and, where confirmed, delete the relevant data and close the account.

13. Security Measures

bmw365 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and bmw365 servers is encrypted using TLS 1.3 or higher. Personal data stored on bmw365 servers is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to bmw365 personnel and authorized service providers who have a legitimate need to access it. All access is logged and audited.
• Two-Factor Authentication: bmw365 offers two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
• Penetration Testing: bmw365 conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in the platform.
• Incident Response: bmw365 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, bmw365 will notify the National Privacy Commission and affected players in accordance with applicable Philippine law.

While bmw365 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. bmw365 cannot guarantee the absolute security of your data and encourages you to use a strong, unique password for your bmw365 account and to enable 2FA.

14. Third-Party Links

The bmw365 platform may contain links to third-party websites or services for informational purposes. bmw365 is not responsible for the privacy practices or content of any third-party websites. This Privacy Policy applies solely to the bmw365 platform at bmw365.vip and does not cover any third-party sites you may access via links on the platform.

bmw365 encourages you to review the privacy policies of any third-party websites you visit before providing any personal information to those sites.

15. Updates to This Privacy Policy

bmw365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. When material changes are made, bmw365 will notify registered players via email or an in-platform notification at least 7 days before the changes take effect, where practicable.

The most current version of this Policy will always be available on this page, with the "Last Updated" date at the top reflecting the date of the most recent revision. Your continued use of the bmw365 platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

16. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or bmw365's data processing practices, or if you wish to exercise any of your data subject rights, please contact the bmw365 Data Protection Officer:

If you are not satisfied with bmw365's response to your privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

For responsible gaming concerns, please visit the bmw365 Responsible Gaming page for dedicated support resources and self-exclusion options.