bmw22 Privacy Policy
Your privacy matters to bmw22. This Privacy Policy explains in clear, plain language how we collect, use, store, share, and protect your personal data when you use the bmw22 online casino and sports betting platform — in full compliance with the Philippine Data Privacy Act of 2012.
Contents
- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. How We Use Your Data
- 6. Legal Basis
- 7. Sharing Your Data
- 8. Data Retention
- 9. Data Security
- 10. Cookies & Tracking
- 11. Your Rights
- 12. Minors
- 13. Policy Changes
- 14. Contact & Complaints
Your Privacy, Our Commitment: bmw22 is committed to handling your personal data responsibly, transparently, and in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC) of the Philippines. By registering and using the bmw22 platform, you acknowledge that you have read and understood this Privacy Policy.
1 Introduction
This Privacy Policy ("Policy") describes how bmw22 ("bmw22," "we," "us," or "our") collects, processes, stores, uses, and protects the personal data of individuals ("you," "Player," or "User") who access or use the bmw22 online casino and sports betting platform at bmw22.app.
bmw22 serves Filipino players across the Philippines — from Metro Manila and Makati to Cebu, Davao, Quezon City, and beyond. We understand that entrusting us with your personal information is a serious matter, and we are committed to ensuring that your data is handled with the utmost care, integrity, and legal compliance at every step.
This Policy applies to all personal data collected through the bmw22 website, mobile platform, customer support channels, and any other touchpoint associated with bmw22 services. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.
2 Data Controller
bmw22 is the data controller responsible for your personal data collected through the bmw22 platform. As data controller, bmw22 determines the purposes and means of processing your personal information and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012 and all relevant NPC issuances.
If you have any questions about how bmw22 processes your personal data, or if you wish to exercise any of your data subject rights, you may contact our designated Data Protection Officer (DPO) at: [email protected]. All privacy-related correspondence will be handled in accordance with the timelines prescribed by the Data Privacy Act.
3 Personal Data We Collect
bmw22 collects personal data that is necessary, relevant, and proportionate to the purposes for which it is processed. The categories of personal data we collect include, but are not limited to:
3.1 Identity & Contact Information
- Full legal name as it appears on government-issued identification;
- Date of birth and age verification data;
- Residential address (including city, province, and postal code);
- Email address and mobile phone number;
- Government-issued identification numbers (e.g., passport, SSS, UMID, driver's license).
3.2 Financial Information
- GCash account details, PayMaya account details, or bank account information (BPI, BDO, Metrobank) used for deposits and withdrawals;
- Transaction history, deposit amounts, withdrawal amounts, and running account balance;
- Credit or debit card details (Visa, Mastercard) where applicable — stored only in tokenized form;
- Cryptocurrency wallet addresses where cryptocurrency transactions are used.
3.3 Account & Gaming Activity Data
- bmw22 account username and encrypted password;
- Game history, betting records, wagering patterns, and session duration;
- Bonus and promotion usage history;
- Responsible gaming settings, including deposit limits, loss limits, and self-exclusion status.
3.4 Technical & Device Data
- IP address and approximate geolocation data;
- Device type, operating system, browser type and version;
- Cookies, session tokens, and similar tracking identifiers;
- Log files recording platform access times, pages visited, and features used.
3.5 Communications Data
- Records of communications with bmw22 customer support, including chat transcripts and email correspondence;
- Survey responses, feedback submissions, and promotional opt-in preferences.
Note: bmw22 does not collect sensitive personal information (such as race, religion, health data, or political affiliation) unless explicitly required by applicable law or regulation for a specific compliance purpose, in which case you will be separately informed.
4 How We Collect Your Data
bmw22 collects your personal data through the following channels and means:
| Collection Method | Examples |
|---|---|
| Direct submission | Registration forms, KYC document uploads, deposit and withdrawal requests, customer support inquiries, survey responses |
| Automated collection | Cookies, session trackers, log files, IP address logging, device fingerprinting during platform use |
| Third-party sources | Identity verification providers, payment processors (GCash, PayMaya, banks), fraud prevention services, and PAGCOR regulatory databases |
| Game providers | Game session data, bet history, and RNG outcomes from bmw22's licensed game providers and live dealer platforms |
5 How We Use Your Personal Data
bmw22 uses your personal data strictly for legitimate, specified, and explicitly stated purposes. The primary purposes for which bmw22 processes your data include:
- Account creation and management: To register your bmw22 account, verify your identity and age (21+ requirement), and maintain your account in good standing;
- Service delivery: To process deposits and withdrawals, facilitate gameplay, settle bets, and deliver promotions and bonuses you have opted into;
- KYC and regulatory compliance: To meet PAGCOR-mandated Know Your Customer (KYC) obligations, anti-money laundering (AML) requirements, and financial crime prevention duties;
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, abuse, unauthorized account access, and any conduct that threatens platform integrity;
- Customer support: To respond to your support inquiries, resolve disputes, and improve the quality of bmw22's customer service operations;
- Responsible gaming: To monitor gaming behavior for signs of problematic play and to apply responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion at your request or as required;
- Marketing communications: To send you relevant bmw22 promotions, bonus offers, and platform updates — only where you have provided explicit consent. You may withdraw this consent at any time;
- Platform improvement: To analyze aggregated usage data, optimize platform performance, and develop new features that better serve Filipino players;
- Legal obligations: To comply with applicable Philippine laws, court orders, regulatory directives, and lawful requests from competent authorities.
bmw22 does not use your personal data for any automated individual decision-making or profiling that produces legal or similarly significant effects on you, except where explicitly permitted by law and disclosed to you in advance.
6 Legal Basis for Processing
bmw22 processes your personal data on one or more of the following lawful criteria under the Data Privacy Act of 2012:
| Legal Basis | Application |
|---|---|
| Consent | Marketing communications, optional data collection beyond core service requirements, and cookie use beyond strictly necessary cookies |
| Contractual necessity | Account registration, payment processing, gameplay, and all core platform services you use as a bmw22 player |
| Legal obligation | KYC verification, AML compliance, age verification (21+), PAGCOR regulatory reporting, and data retention requirements |
| Legitimate interest | Fraud detection, platform security, responsible gaming monitoring, and internal analytics for service improvement |
7 Sharing Your Personal Data
bmw22 does not sell, rent, or trade your personal data to third parties for their independent commercial purposes. We share your personal data only in the following limited and controlled circumstances:
7.1 Service Providers
bmw22 engages trusted third-party service providers to support platform operations. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, KYC and AML compliance platforms, cloud hosting services, customer support tools, and licensed game content providers. All such providers are contractually bound to process your data solely on bmw22's instructions and in compliance with applicable data protection law.
7.2 Regulatory and Legal Authorities
bmw22 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), courts, law enforcement agencies, or other competent governmental authorities in the Philippines where such disclosure is required by law, court order, or regulatory directive. bmw22 will notify you of such disclosure where legally permitted to do so.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of bmw22's business, your personal data may be transferred to the relevant successor entity. You will be informed of any such transfer and your rights in relation to it in advance.
7.4 With Your Consent
bmw22 may share your data with other parties not described above where you have provided your explicit, informed, and freely given consent to such sharing.
Your data stays in safe hands. All third parties with whom bmw22 shares your personal data are required to implement appropriate technical and organizational security measures and to handle your data only for the specified, lawful purposes for which it was shared.
8 Data Retention
bmw22 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:
| Data Category | Retention Period |
|---|---|
| Account registration and identity data | Duration of account plus 5 years after closure |
| Transaction and financial records | Minimum 5 years from transaction date (AMLC requirement) |
| KYC verification documents | 5 years from account closure or last transaction |
| Gaming and betting activity logs | 3 years from date of activity |
| Customer support records | 3 years from date of interaction |
| Marketing consent records | Until consent is withdrawn, plus 2 years |
| Cookie and technical log data | 13 months from collection, or as specified in cookie settings |
Upon expiry of the applicable retention period, bmw22 will securely delete, anonymize, or pseudonymize your personal data in accordance with NPC-recommended disposal standards. Where deletion is not immediately feasible due to technical constraints, your data will be isolated and protected from further processing until deletion is complete.
9 Data Security
bmw22 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:
- Encryption: All data transmitted between your device and bmw22 servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including financial credentials and identity documents, is encrypted using AES-256 encryption;
- Access controls: Access to personal data within bmw22's systems is strictly limited to authorized personnel on a need-to-know basis, with role-based access controls and audit logging of all data access events;
- Tokenization: Payment card details are tokenized and never stored in full by bmw22's own systems. Card processing is handled by PCI-DSS-compliant payment processors;
- Intrusion detection: bmw22 operates continuous network monitoring, intrusion detection systems, and regular penetration testing to identify and remediate security vulnerabilities;
- Incident response: bmw22 maintains a documented personal data breach response procedure. In the event of a data breach affecting your rights and freedoms, bmw22 will notify the NPC and affected individuals in accordance with the timelines prescribed by the Data Privacy Act.
While bmw22 takes all reasonable steps to protect your data, no method of electronic transmission or storage is entirely infallible. You are also responsible for maintaining the security of your own bmw22 account by using a strong, unique password and not sharing your login credentials with any third party.
10 Cookies & Tracking Technologies
bmw22 uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the bmw22 platform, ensure platform security, and gather analytics that help us improve our services.
Types of Cookies We Use
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Strictly necessary | Session management, login authentication, security tokens, load balancing | No — essential for platform operation |
| Functional | Remembering your language preference, display settings, and responsible gaming configurations | No — directly supports your experience |
| Analytics | Aggregated usage statistics, feature engagement, and performance monitoring to improve bmw22 services | Yes — opt-in via cookie banner |
| Marketing | Tracking interactions with promotional content and personalizing bonus offers where you have opted in | Yes — explicit consent required |
You may manage your cookie preferences through your browser settings or through bmw22's cookie preference centre at any time. Please note that disabling strictly necessary cookies may affect the functionality of the bmw22 platform. Blocking all cookies will prevent you from logging in to your bmw22 account.
11 Your Data Subject Rights
Under the Data Privacy Act of 2012, you have specific rights in relation to your personal data held by bmw22. bmw22 is committed to facilitating the exercise of these rights promptly and without undue restriction. Your rights include:
Right to Access
Request a copy of the personal data bmw22 holds about you and information about how it is being processed.
Right to Rectification
Request correction of any inaccurate or incomplete personal data bmw22 holds about you.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
Right to Object
Object to the processing of your personal data for direct marketing purposes or processing based on legitimate interests.
Right to Block or Restrict
Request that bmw22 restricts the processing of your data in specific circumstances, such as while a rectification request is being assessed.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format to transfer to another controller where technically feasible.
Right to Withdraw Consent
Withdraw your consent to data processing at any time where processing is based on consent, without affecting the lawfulness of prior processing.
Right to Complain
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe bmw22 has not handled your data lawfully.
To exercise any of these rights, please submit your request in writing to [email protected] with the subject line "Data Subject Request." bmw22 will acknowledge your request within three (3) business days and respond in full within fifteen (15) business days, or within the period prescribed by the NPC for complex requests.
bmw22 may require you to verify your identity before processing your request to prevent unauthorized disclosure of your personal data. No fee is charged for exercising your data subject rights, except in cases of manifestly unfounded or excessive requests.
12 Minors & Age Restriction
21+ Only: The bmw22 platform is strictly prohibited for individuals under the age of twenty-one (21) years. bmw22 does not knowingly collect, use, or store personal data from minors. If bmw22 discovers that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account closed without exception.
If you are a parent or guardian and believe that your child or a person under 21 in your care has registered on bmw22 or submitted personal data to bmw22, please contact us immediately at [email protected]. We will investigate and take immediate action to delete the data and close the account.
bmw22 employs age verification procedures during registration and may request documentary proof of age at any time. These measures are designed to prevent underage access and to comply with PAGCOR's responsible gaming and player protection requirements under Philippine law.
13 Changes to This Privacy Policy
bmw22 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The revised Policy will be published on this page with an updated effective date.
Where a change is material — meaning it significantly affects your rights or the way bmw22 processes your personal data — bmw22 will notify registered players via email or through a prominent in-platform notification at least fourteen (14) days before the change takes effect, where technically practicable.
Your continued use of the bmw22 platform after the effective date of any revised Policy constitutes your acknowledgment and acceptance of the updated terms. bmw22 recommends that you review this Policy periodically to remain informed of how your data is being protected.
14 Contact & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or bmw22's data processing practices, please reach out to our Data Protection Officer:
bmw22 Data Protection Officer
Email: [email protected]
Subject line: Privacy Policy Inquiry / Data Subject Request
Response time: Within 3 business days (acknowledgment) — 15 business days (full response)
Platform: bmw22.app — serving Filipino players across the Philippines
If you are not satisfied with bmw22's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, the independent body responsible for overseeing compliance with the Data Privacy Act of 2012. bmw22 cooperates fully with all NPC investigations and directives.
For responsible gaming concerns — including self-exclusion, deposit limits, or gaming behavior support — please visit bmw22's dedicated Responsible Gaming page for full details of available player protection tools and resources.
Six pillars of our commitment to your personal data security and privacy rights
Data Privacy Act Compliant
bmw22 processes all player data in full compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and all NPC implementing rules. Our Data Protection Officer actively oversees compliance and handles all data subject requests in accordance with prescribed timelines and standards.
AES-256 Encryption at Rest
All sensitive personal and financial data stored on bmw22 systems — including identity documents, payment details, and account credentials — is protected using AES-256 encryption. Data in transit between your device and bmw22 servers is secured with TLS encryption, keeping your information safe from interception.
PCI-DSS Payment Security
bmw22 partners with PCI-DSS-compliant payment processors for all card transactions. bmw22 never stores full card numbers on its own systems — your payment details are tokenized and handled exclusively by certified processors. GCash and PayMaya transactions follow e-money issuer security standards required by the Bangko Sentral ng Pilipinas.
Strict KYC & Age Verification
bmw22 enforces rigorous Know Your Customer procedures and the PAGCOR-mandated 21-year minimum age requirement for all players. Identity and age verification is required before withdrawal processing. Any account found to belong to a person under 21 years of age is closed immediately and all associated data is deleted without exception.
No Data Selling — Ever
bmw22 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data is shared only with trusted service providers operating under strict contractual data protection obligations, or with regulatory authorities as required by Philippine law. Your information is never monetized beyond the bmw22 platform.
Full Control of Your Data
bmw22 respects your rights under the Data Privacy Act — access, rectification, erasure, objection, portability, and consent withdrawal are all available to you at any time. Submit a request to our Data Protection Officer at [email protected] and we will respond within the timelines required by the National Privacy Commission.
Play with Confidence at bmw22
Your privacy is protected. Your data is secure. bmw22 is a PAGCOR-regulated platform built for Filipino players who deserve both great gaming and genuine peace of mind. Ready to play? Players must be 21 years or older.
21+ only. Please play responsibly. bmw22 operates in compliance with PAGCOR regulations. Gambling involves financial risk.