At bmw5, your privacy is not an afterthought — it is a core operating principle. This Privacy Policy explains what personal information we collect, why we collect it, how it is used and protected, who we may share it with, and what rights you hold over your own data as a player on the bmw5 platform.
Six principles that define how bmw5 handles your personal information
bmw5 collects only the personal data that is strictly necessary for the purposes for which it is processed. We do not collect data speculatively or hold information longer than required. Your data footprint on the bmw5 platform is kept as narrow as the applicable regulatory and operational requirements allow.
bmw5 does not sell, rent, or trade your personal information to any unaffiliated third party for marketing or commercial purposes. Data shared with third parties is limited to what is required for service delivery, regulatory compliance, fraud prevention, and payment processing — never for profit at your expense.
All personal data stored or transmitted by bmw5 is protected using industry-standard 256-bit SSL encryption. Sensitive data such as financial information, government ID scans, and account credentials are held in access-controlled, encrypted storage environments with audit logging and regular security reviews.
Under the Philippine DPA, bmw5 players hold specific, enforceable rights over their personal data — including the rights to access, correct, delete, and object to processing. bmw5 provides clear mechanisms to exercise all these rights and responds to legitimate requests within the timeframes mandated by the NPC.
In the unlikely event of a personal data breach that poses a real risk of harm to affected players, bmw5 will notify impacted individuals and the National Privacy Commission within the timeframes prescribed under the DPA. We maintain an internal breach response protocol reviewed regularly by our compliance team.
bmw5 believes you have a right to understand exactly what happens to your personal information. This Privacy Policy is written in plain English — not deliberately obscure legal language — so that every Filipino player can understand what data bmw5 holds and why. If anything here is unclear, our support team can explain it.
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable data protection legislation, the data controller responsible for the personal information collected and processed through the bmw5 platform (accessible at https://bmw5.win) is bmw5 ("bmw5," "we," "us," "our").
As data controller, bmw5 determines the purposes and means by which your personal data is processed. bmw5 is committed to processing personal data fairly, transparently, and in accordance with all applicable Philippine data protection laws and the Philippine gaming regulatory framework administered by PAGCOR.
This Privacy Policy applies to all personal data collected by bmw5 in connection with your use of the bmw5 platform, including the website at bmw5.win, all games, promotional communications, customer support interactions, payment processing, and any other service offered by bmw5.
Scope: This Privacy Policy governs all bmw5 data processing activities. Third-party service providers integrated into the bmw5 platform (such as game studios, payment processors, and KYC verification providers) operate under their own privacy policies in addition to their data processing agreements with bmw5.
bmw5 collects the following categories of personal data from players and prospective players. Data is collected only to the extent necessary for the stated purposes described in Section 4 of this Privacy Policy.
Sensitive Personal Information: Government-issued ID images and biometric data submitted during KYC verification are classified as sensitive personal information under the Philippine DPA. bmw5 applies enhanced security measures to this category of data and processes it only for the purpose of identity verification and regulatory compliance.
bmw5 collects personal data through the following channels and methods:
Information you provide directly to bmw5 when you register an account, complete the KYC verification process, submit a deposit or withdrawal request, contact customer support, or respond to a promotional communication. This represents the primary source of personal data held by bmw5.
Technical and usage data is collected automatically through bmw5's platform infrastructure as you interact with the website, games, and account features. This includes server logs, session tracking, and platform analytics tools. These data points are collected to maintain platform performance, detect fraudulent activity, and fulfill responsible gaming monitoring obligations.
bmw5 may receive personal data about you from third-party sources in limited circumstances, including:
Where bmw5 receives data from third parties, we ensure that appropriate data sharing agreements are in place and that the third party has a legitimate basis for disclosing the data to bmw5.
bmw5 processes your personal data for the following purposes. Each purpose is supported by a specific lawful basis under the Philippine Data Privacy Act of 2012.
| Purpose | Data Categories | Lawful Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Contract |
| KYC identity and age verification (21+ compliance) | Identity, Financial | Legal Obligation |
| Processing deposits and withdrawals | Financial, Identity | Contract |
| Anti-money laundering (AML) and fraud prevention | Financial, Technical, Identity | Legal Obligation Legitimate Interest |
| Responsible gaming monitoring and player protection | Usage, RG Data | Legal Obligation Legitimate Interest |
| Customer support provision | Identity, Contact, Usage | Contract |
| Platform security and integrity monitoring | Technical, Usage | Legitimate Interest |
| Bonus, promotion, and loyalty program administration | Identity, Financial, Usage | Contract |
| Regulatory reporting to PAGCOR and other authorities | Identity, Financial | Legal Obligation |
| Platform improvement and analytics | Technical, Usage | Legitimate Interest |
| Promotional and marketing communications | Contact, Usage | Consent |
Where bmw5 relies on consent as the lawful basis for processing (for example, marketing communications), you may withdraw that consent at any time by adjusting your communication preferences in your bmw5 account settings or by contacting the bmw5 support team. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to its withdrawal.
bmw5 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly in accordance with the purposes described in this Privacy Policy and subject to appropriate contractual safeguards:
bmw5 is required by law to share certain personal data and transaction records with PAGCOR and other applicable Philippine regulatory, judicial, or law enforcement authorities. Disclosure to these entities is made only to the extent required by applicable legal obligations, court orders, or regulatory directives.
bmw5 engages accredited third-party identity verification services to perform KYC checks on behalf of the platform. These providers receive the minimum data necessary to perform identity verification and are contractually restricted from using player data for any other purpose. All KYC providers engaged by bmw5 are required to comply with applicable Philippine data protection standards.
Transaction data necessary to process deposits and withdrawals is shared with GCash, Maya, BPI, BDO, Metrobank, and other accepted payment service providers. These institutions are themselves regulated entities subject to Bangko Sentral ng Pilipinas ("BSP") oversight and independent data protection obligations.
Third-party game studios whose content is made available through the bmw5 platform may receive technical session data (such as game round identifiers and bet amounts) for the purpose of game result generation and audit logging. Individual player identity data is not shared with game content providers beyond what is required for jackpot verification and regulatory reporting.
bmw5 uses third-party fraud detection and prevention services to protect the integrity of the platform and its players. These services may process technical and transactional data to identify patterns of fraudulent activity. All fraud prevention partners operate under data processing agreements that limit data use to fraud prevention purposes only.
Data Processing Agreements: All third parties who receive personal data from bmw5 are required to enter into formal data processing agreements that bind them to appropriate data protection standards, restrict data use to the stated purpose, and require notification to bmw5 in the event of any security incident involving player data.
bmw5 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention guidelines apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data (active accounts) | Duration of account + 5 years after closure | Regulatory obligation (AML/KYC) |
| Financial transaction records | 5 years from transaction date | Philippine AML Act requirements |
| KYC documentation (ID images, verification records) | 5 years from submission or account closure | Regulatory obligation |
| Support interaction records (chat logs, emails) | 2 years from interaction date | Legitimate interest (dispute resolution) |
| Technical logs (access, session, error logs) | 12 months from collection | Security and fraud detection |
| Marketing preferences and consent records | Until withdrawal of consent + 1 year | Accountability obligation |
| Self-exclusion and responsible gaming records | Duration of exclusion + 5 years | Player protection obligation |
Upon expiry of the applicable retention period, bmw5 will securely delete or anonymize personal data. Where data is anonymized, it may be retained indefinitely for statistical analysis and platform improvement purposes, as it can no longer be linked to an identifiable individual.
Data subject to an active dispute, investigation, or regulatory inquiry will be retained beyond the standard retention period until the matter is fully resolved.
bmw5 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:
Your Responsibility: While bmw5 takes extensive measures to secure your data, the security of your bmw5 account also depends on you maintaining a strong, unique password and enabling 2FA. bmw5 will never ask for your password through any channel. If you suspect your account has been compromised, contact support immediately via the in-account live chat.
bmw5 uses cookies and similar tracking technologies to provide, improve, and secure the platform experience. A cookie is a small text file stored on your device by your web browser when you visit bmw5.win. Cookies are used by bmw5 for the following purposes:
These cookies are essential for the bmw5 platform to function and cannot be disabled without impairing core functionality. They include session tokens that maintain your logged-in state, security tokens that protect against cross-site request forgery, and load balancing cookies that ensure platform stability. Strictly necessary cookies do not require your consent as they are essential to the service you have requested.
bmw5 uses analytics cookies to collect aggregated information about how players use the platform — including which pages are visited most frequently, where players encounter errors, and how long sessions last. This data is used to improve platform performance and user experience. Analytics data is processed in aggregated, de-identified form where possible.
Functional cookies enable bmw5 to remember your preferences — such as your preferred language, last played game category, and display settings — so that your experience is consistent across visits. These cookies store non-sensitive preference data only.
You may manage or disable non-essential cookies through your browser settings. Most browsers allow you to view, block, or delete cookies via their privacy or security settings. Disabling certain cookies may affect the functionality of the bmw5 platform. bmw5 does not use cookies for cross-site behavioral advertising or to track your activity on third-party websites.
Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by bmw5. bmw5 is committed to facilitating the exercise of these rights in a timely and respectful manner.
You have the right to be informed of the purposes, scope, and methods of personal data collection and processing before or at the time of collection. This Privacy Policy is bmw5's primary instrument for fulfilling this obligation.
You have the right to request a copy of the personal data bmw5 holds about you, including information about how it is being used and to whom it has been disclosed. Submit access requests via the in-account support chat or by email to [email protected].
If any personal data bmw5 holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. For basic account details, corrections can be made directly through your bmw5 account settings. For identity data, corrections require KYC document resubmission.
You may request deletion of your personal data where it is no longer necessary for the original purpose, you withdraw consent (where consent was the lawful basis), or processing is unlawful. Note that regulatory retention obligations may limit erasure where legal requirements mandate retention.
You have the right to object to the processing of your personal data on grounds of legitimate interest, including profiling. You also have the right to object to direct marketing at any time by updating your communication preferences in your bmw5 account dashboard.
Where processing is based on consent or contractual necessity and is carried out by automated means, you may request your personal data in a structured, commonly used, machine-readable format to transfer to another controller. Contact bmw5 support to submit a portability request.
To exercise any of the above rights, contact the bmw5 Data Protection Officer (DPO) via the in-account live chat support or by email. bmw5 will acknowledge your request within five (5) business days and respond substantively within fifteen (15) business days, extendable by a further ten (10) business days where the complexity of the request reasonably requires it.
Where bmw5 is unable to fulfill a request in whole or in part — for example due to a conflicting regulatory retention obligation — bmw5 will explain the reason clearly and in writing. If you believe your data rights have been violated, you may lodge a complaint with the National Privacy Commission of the Philippines at the NPC's official contact channels.
bmw5 does not knowingly collect personal data from any individual under the age of 21 years. The bmw5 platform is strictly intended for adults who meet the minimum age requirement of 21 years in accordance with applicable Philippine gaming regulations.
Age verification is a mandatory component of the KYC process applied to all bmw5 accounts before withdrawal privileges are activated. Where bmw5 discovers that an account has been registered by or is being used by an individual under the age of 21, the account will be immediately suspended, any balance held will be reviewed, and the matter will be handled in accordance with applicable regulatory requirements.
If you are a parent or guardian and believe your child under 21 has registered an account on bmw5 or submitted personal information to the platform, please contact the bmw5 support team immediately via live chat or at [email protected]. bmw5 will take prompt action to address the situation, including account suspension and data deletion.
The bmw5 platform is designed to serve the Philippine market. Personal data collected from Filipino players is primarily processed and stored within data infrastructure serving the Philippine region. In certain operational contexts — particularly in relation to third-party game studio providers, fraud prevention services, and KYC verification providers who may operate internationally — your personal data may be transferred to and processed in jurisdictions outside the Philippines.
Where cross-border transfers of personal data occur, bmw5 ensures that appropriate safeguards are in place as required under Section 21 of the Philippine Data Privacy Act and NPC issuances on cross-border data transfers. These safeguards include contractual clauses that bind recipient parties to data protection standards equivalent to those applicable under Philippine law.
bmw5 does not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal data without implementing supplementary measures to address the privacy risks of such transfer.
bmw5 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or operational context. The "Last Updated" date displayed at the top of this Policy indicates when the most recent revision was made.
For material changes — those that significantly affect your rights or the nature of data processing — bmw5 will notify registered players via their registered email address and/or through a prominent in-platform notification at least fourteen (14) days before the changes take effect. For non-material changes such as clarifications, corrections, or administrative updates, the revised Policy will be posted with an updated date without advance individual notification.
Continued use of the bmw5 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with a material change to this Policy, you may close your account in accordance with the procedure described in the bmw5 Terms and Conditions and contact bmw5 to exercise your erasure rights where applicable.
bmw5 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and for handling data subject rights requests and privacy-related inquiries.
You may contact the bmw5 DPO or the general support team for any privacy-related matter through the following channels:
When submitting a data rights request, please provide your full registered name, the email address associated with your bmw5 account, a clear description of your request, and any relevant reference numbers. Providing complete information at the outset enables bmw5 to handle your request more efficiently.
Related Policies: This Privacy Policy should be read alongside the bmw5 Terms & Conditions and Responsible Gaming Policy, both of which contain provisions relevant to the processing of your personal data and the protection of your rights as a bmw5 player.
bmw5 keeps your personal information safe, private, and fully under your control. Ready to experience everything the platform has to offer — with complete confidence in how your data is handled?