Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how bw555 ("bw555," "we," "us," "our") collects, uses, stores, discloses, and otherwise processes personal data in connection with the bw555 online gaming platform accessible at bw555.org and any associated mobile-optimised interfaces (the "Platform").

This Policy applies to all individuals who access or use the bw555 Platform, including registered players, applicants for account registration, and visitors who browse the Platform without registering. By accessing the Platform or creating a bw555 account, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

bw555 operates in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). Where applicable, bw555 also observes the requirements of PAGCOR's data governance framework as a condition of its gaming licence.

2. Data Controller Information

The data controller responsible for your personal data processed through the bw555 Platform is bw555, reachable through the contact details set out in Section 14 of this Policy. Where bw555 engages third-party processors (such as payment service providers, game providers, or KYC verification services), bw555 remains the data controller and those third parties act as data processors under written data processing agreements consistent with DPA requirements.

3. Personal Data We Collect

Depending on how you interact with the bw555 Platform, we may collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, government-issued identification number (e.g., Philippine National ID, passport, or driver's licence number), and a photograph or selfie for identity verification purposes.
• Contact Data: Registered mobile number (Philippine format), email address, and residential or billing address.
• Account Data: Username, encrypted password, account registration date, login history including IP addresses and device identifiers, and account verification status.
• Financial Data: GCash account number or mobile number, Maya account details, bank account or card details where applicable, transaction history including deposit amounts, withdrawal requests, and processing timestamps.
• Gaming Data: Gameplay history, game session durations, wager amounts, win and loss records, bonus usage history, and responsible gaming tool settings such as deposit limits and self-exclusion status.
• Technical Data: IP address, browser type and version, device operating system, screen resolution, referring URLs, and session cookies.
• Communication Data: Records of live chat conversations, email correspondence, and any other communications with bw555 support.

4. How We Collect Personal Data

bw555 collects personal data through the following means:

• Direct submission: Information you provide when registering a bw555 account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to surveys or promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and analytics tools.
• Third-party sources: Identity verification and fraud prevention data from licensed KYC and AML service providers; payment data from GCash, Maya, BPI, BDO, and other payment partners; and publicly available information used to verify identity or comply with regulatory obligations.

5. Purposes and Legal Bases for Processing

bw555 processes your personal data for the following purposes, each supported by a legal basis under the DPA:

• Account registration and management: Processing is necessary for the performance of the contract between you and bw555, including verification of your identity, age (21+), and eligibility to use the Platform.
• Payment processing: Processing your deposits and withdrawals in PHP via GCash, Maya, and other supported methods is necessary for contract performance.
• Regulatory compliance: bw555 processes identity and transaction data to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act of the Philippines, and NPC requirements. This processing is legally mandated.
• Responsible gaming: Monitoring gaming behaviour to detect and address problem gambling patterns is conducted both as a contractual obligation and in compliance with PAGCOR's responsible gaming framework.
• Platform security and fraud prevention: Processing technical and account data to detect unauthorised access, fraud, multi-accounting, and other prohibited conduct is based on bw555's legitimate interest in protecting the integrity of the Platform and its players.
• Marketing communications: Sending you promotional offers, bonus notifications, and product updates is conducted on the basis of your consent at the time of registration, which you may withdraw at any time through your account settings.
• Analytics and platform improvement: Aggregated and anonymised usage data is analysed to improve Platform features. This processing is based on bw555's legitimate interest in maintaining and improving its services.

6. Disclosure of Personal Data to Third Parties

bw555 does not sell or rent your personal data to third parties for their own marketing purposes. We may disclose your personal data to the following categories of recipients, strictly for the purposes described in this Policy:

• Payment service providers: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), and licensed Philippine banks to facilitate transactions.
• KYC and AML service providers: Licensed identity verification and anti-money laundering screening services engaged to fulfill PAGCOR and legal compliance requirements.
• Game content providers: Certified third-party game providers receive the minimum data necessary to authenticate your gaming session. Game providers do not receive your financial or identity documentation.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement agencies as required by Philippine law or valid legal process.
• Professional advisors: Legal counsel, auditors, and insurers, subject to contractual confidentiality obligations.

7. International Data Transfers

Some of bw555's third-party service providers, including game content providers and cloud infrastructure partners, may process data outside the Philippines. Where such transfers occur, bw555 ensures that appropriate safeguards are in place consistent with NPC guidelines, including contractual data transfer agreements, to protect your personal data to the same standard as within the Philippines.

8. Data Retention

bw555 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and thereafter as required by applicable Philippine law. In particular:

• Account and transaction records are retained for a minimum of five (5) years following account closure, consistent with PAGCOR licensing requirements and the Anti-Money Laundering Act.
• KYC identity documents are retained for the duration of the account and for five (5) years after closure.
• Communication and support records are retained for three (3) years.
• Technical and server log data is retained for twelve (12) months.

Following the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an identifiable individual.

9. Cookies and Tracking Technologies

The bw555 Platform uses cookies and similar tracking technologies to maintain your session, remember your preferences, prevent fraud, and analyse Platform usage. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without preventing access to the Platform.
• Functional cookies: Store your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect aggregated data about how players navigate the Platform to help bw555 improve functionality and content.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the bw555 Platform, including the login function.

10. Security of Personal Data

bw555 implements technical and organisational security measures appropriate to the sensitivity of the personal data processed, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bw555 servers.
• Encryption of sensitive data at rest, including financial account details and identity documents.
• Role-based access controls limiting employee access to personal data to those with a legitimate operational need.
• Regular internal and third-party security audits and penetration testing.
• Two-factor authentication available to all registered bw555 players to protect account access.

Notwithstanding these measures, no data transmission over the internet is entirely secure. bw555 cannot guarantee the absolute security of data transmitted to the Platform and encourages players to use strong, unique passwords and to enable two-factor authentication on their bw555 account.

11. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data processed by bw555:

• Right to be informed: The right to know what personal data bw555 collects and processes about you, the purposes of processing, and your rights — as provided in this Policy.
• Right of access: The right to obtain a copy of your personal data held by bw555, subject to reasonable verification of your identity.
• Right to rectification: The right to correct inaccurate or incomplete personal data. Most account information can be updated directly in your bw555 account settings; identity documents require submission through support.
• Right to erasure: The right to request deletion of personal data where bw555 has no continuing legal or contractual basis to retain it. Note that regulatory retention obligations under PAGCOR and the AMLA may preclude immediate erasure.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used format.
• Right to object: The right to object to processing based on bw555's legitimate interest, including direct marketing. You may withdraw marketing consent at any time through your bw555 account settings.
• Right to lodge a complaint: The right to submit a complaint to the National Privacy Commission if you believe bw555 has processed your personal data in breach of the DPA.

To exercise any of these rights, contact bw555 using the details in Section 14. bw555 will respond to verified requests within fifteen (15) business days.

12. Children and Minors

The bw555 Platform is strictly intended for persons aged 21 years and above. bw555 does not knowingly collect or process personal data of individuals below the minimum age requirement. Account registration requires age verification as part of the KYC process. If bw555 becomes aware that personal data of a minor has been collected, the account will be immediately suspended, data will be deleted to the extent legally permissible, and the matter will be reported to PAGCOR if required by applicable regulations.

13. Changes to This Privacy Policy

bw555 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR requirements. Material changes will be communicated via a prominent notice on the bw555 Platform or by email to your registered address at least seven (7) days prior to the effective date. The "Last Updated" date at the top of this Policy will reflect the most recent revision. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

14. How to Contact Us

For privacy-related enquiries, requests to exercise your data subject rights, or to contact bw555's Data Protection Officer, please use the following:

• Email: [email protected]
• Live Chat: Available 24/7 via the bw555 Platform

All privacy requests will be acknowledged within three (3) business days. Identity verification may be required before processing access, rectification, or erasure requests to ensure data is disclosed only to the account holder.