Privacy Policy

01 Introduction

bmw333 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our platform. We understand that entrusting us with your personal information is a significant act of confidence, and we take that responsibility seriously.

This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). It sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by bmw333.

Please read this Privacy Policy carefully before using the bmw333 platform. If you have any questions about how we handle your personal data, you are encouraged to contact our Data Protection Officer using the details provided in Section 16 of this Policy.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection legislation, the data controller responsible for your personal data is bmw333, operating the platform at https://bmw333.xyz, with its principal place of business in Manila, Philippines.

bmw333 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. The DPO can be contacted at [email protected] with the subject line "Data Protection Officer — Privacy Inquiry."

03 Personal Data We Collect

bmw333 collects the following categories of personal data from players and website visitors:

3.1 Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification purposes — players must be 21 years of age or older);
• Nationality and country of residence;
• Copies of government-issued identification documents (e.g., Philippine passport, driver's license, SSS/UMID card, PhilSys National ID).

3.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address (including barangay, city/municipality, province, and postal code).

3.3 Financial Data

• GCash or PayMaya / Maya account details (mobile number associated with the e-wallet);
• Bank account details for bank transfer transactions (bank name, account name, account number);
• Debit card details (card number, expiry date — we do not store full card numbers on our servers);
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used.

3.4 Technical Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Session identifiers and authentication tokens;
• Log data including pages visited, features accessed, and timestamps.

3.5 Gaming Data

• Game history, including games played, wagers placed, outcomes, and winnings;
• Bonus and promotion usage history;
• Responsible gaming settings, including deposit limits, session limits, and self-exclusion status.

3.6 Communications Data

• Records of communications between you and bmw333 customer support, including live chat transcripts, email correspondence, and support ticket history.

04 How We Collect Your Data

bmw333 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Data collected automatically when you access the bmw333 platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 10);
• Third-party sources: Data received from identity verification service providers, payment processors, fraud prevention agencies, and regulatory bodies where permitted by applicable law.

05 How We Use Your Personal Data

bmw333 uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your bmw333 player account;
• Identity and age verification: To verify that you are who you say you are and that you meet the minimum age requirement of 21 years;
• Payment processing: To process deposits, withdrawals, and refunds in Philippine Peso (PHP);
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activities;
• Regulatory compliance: To comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Customer support: To respond to your inquiries, complaints, and support requests;
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion;
• Platform improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the bmw333 platform;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.

06 Legal Basis for Processing

bmw333 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you (i.e., to provide the bmw333 gaming platform and associated services);
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC directives;
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Data Sharing & Disclosure

bmw333 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya / Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing financial transactions;
• Identity verification providers: Third-party KYC and age verification service providers engaged to assist with player verification;
• Game providers: Software providers whose games are hosted on the bmw333 platform, to the extent necessary for game operation and fairness auditing;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulatory obligation;
• Law enforcement: Philippine law enforcement agencies, where required by a valid legal order, warrant, or subpoena;
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by bmw333, subject to professional confidentiality obligations.

08 International Data Transfers

bmw333 is based in the Philippines and primarily processes personal data within the Philippines. However, some of our third-party service providers — including game software providers and cloud infrastructure partners — may be located in other countries.

Where personal data is transferred outside the Philippines, bmw333 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. Such safeguards may include contractual data protection clauses, adequacy decisions, or other mechanisms recognized by the National Privacy Commission.

09 Data Retention

bmw333 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your account's existence and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and AMLA obligations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained for as long as you remain subscribed to marketing communications, plus three (3) years following unsubscription, to demonstrate compliance with consent requirements;
• Technical and log data: Retained for up to twelve (12) months from the date of collection, unless a longer retention period is required for security investigation purposes.

Upon expiry of the applicable retention period, bmw333 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

10 Cookies & Tracking Technologies

bmw333 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data that helps us improve our services. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the bmw333 platform to function correctly. They enable core features such as user authentication, session management, and security controls. These cookies cannot be disabled without significantly impairing your ability to use the platform.

10.2 Analytics Cookies

bmw333 uses analytics cookies to collect aggregated, anonymized data about how players interact with the platform — including which pages are visited most frequently, how long sessions last, and which features are used. This data helps us identify areas for improvement. Analytics data is not linked to your personal identity.

10.3 Functional Cookies

Functional cookies remember your preferences — such as your preferred language, display settings, and responsible gaming configurations — so that you do not need to re-enter them each time you visit the platform.

10.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the bmw333 platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bmw333:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy;
• Right of Access: The right to request a copy of the personal data bmw333 holds about you, along with information about how it is being used;
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that bmw333 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please submit a written request to our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." bmw333 will respond to all valid requests within thirty (30) days of receipt, or within such extended period as permitted by applicable law where the request is complex or numerous.

12 Children's Privacy

The bmw333 platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. bmw333 does not knowingly collect personal data from individuals under the age of 21.

If bmw333 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. Any deposits made by an underage player will be refunded, less any amounts already wagered, in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that your child has registered on the bmw333 platform, please contact us immediately at [email protected] so that we can take appropriate action.

13 Security Measures

bmw333 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the bmw333 platform is encrypted in transit using industry-standard TLS 1.3 protocols;
• AES-256 Encryption at Rest: Sensitive personal data and financial information stored on bmw333 servers is encrypted using AES-256 encryption;
• Access Controls: Access to personal data is restricted to bmw333 personnel and authorized third parties who have a legitimate need to access it, and is governed by role-based access control policies;
• Two-Factor Authentication: bmw333 supports two-factor authentication (2FA) for player accounts and enforces 2FA for all internal administrative access to systems containing personal data;
• Regular Security Audits: bmw333 conducts regular internal and third-party security audits and penetration tests to identify and remediate vulnerabilities;
• Data Breach Response: bmw333 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, bmw333 will notify the National Privacy Commission and affected individuals within the timeframes required by the Data Privacy Act of 2012.

While bmw333 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are encouraged to use a strong, unique password for your bmw333 account and to enable two-factor authentication for maximum protection.

14 Third-Party Links

The bmw333 platform may contain references to third-party services, such as payment processors and game providers. These third parties operate their own privacy policies, which are independent of bmw333's Privacy Policy. bmw333 is not responsible for the privacy practices of third-party services and encourages you to review their respective privacy policies before providing any personal data to them.

15 Changes to This Privacy Policy

bmw333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material, bmw333 will notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the bmw333 platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how bmw333 is protecting your personal data.

16 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bmw333 handles your personal data, please contact our Data Protection Officer through the following channel:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Information about how to file a complaint with the NPC is available through official Philippine government channels.