bmw365 Privacy Policy

This Privacy Policy ("Policy") describes how bmw365 ("Company," "we," "us," "our") collects, uses, stores, and discloses personal information obtained from Players and visitors of the bmw365 Platform at bmw365.one. This Policy applies to all personal data collected through the Platform, whether provided during registration, gameplay, payment transactions, customer support interactions, or general use of our website.

bmw365 acts as the Personal Information Controller as defined under the Philippine Data Privacy Act of 2012 (RA 10173). By registering on bmw365 or otherwise using the Platform, you consent to the data practices described in this Policy.

1 Who We Are — Data Controller

bmw365 is an online gaming platform operating under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR). The bmw365 platform is accessible at bmw365.one and is operated by the bmw365 management team headquartered in the Philippines.

For all matters relating to this Privacy Policy or the processing of your personal data, you may contact our Data Protection Officer (DPO) at: [email protected] (plain text — not a clickable link).

2 Personal Data We Collect

bmw365 collects the following categories of personal data:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data unless specifically required by PAGCOR regulations for identity verification purposes.

3 How We Collect Your Data

bmw365 collects personal data through the following means:

• Direct provision: Information you submit during registration, KYC verification, deposit/withdrawal requests, and customer support inquiries;
• Automated technologies: Cookies, session logs, IP tracking, and device fingerprinting when you access the bmw365 Platform;
• Third-party sources: Identity verification services, payment processors (GCash, PayMaya, Philippine banks), and fraud prevention providers where necessary for compliance;
• PAGCOR reporting systems: Data shared between bmw365 and PAGCOR as required under our operating licence conditions.

4 How We Use Your Personal Data

bmw365 processes your personal data for the following purposes:

• Creating and managing your bmw365 Player Account;
• Verifying your identity and age in compliance with PAGCOR's KYC requirements;
• Processing deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers;
• Detecting and preventing fraud, money laundering, and prohibited conduct;
• Complying with anti-money laundering (AML) obligations and PAGCOR reporting requirements;
• Delivering customer support and resolving disputes;
• Administering bonuses, promotions, and loyalty programmes;
• Monitoring for responsible gaming concerns and administering self-exclusion or deposit limit requests;
• Sending transactional communications (deposit confirmations, withdrawal status, security alerts) via SMS to your registered Philippine mobile number or email;
• Improving the bmw365 Platform through anonymised usage analytics.

5 Legal Basis for Processing

bmw365 processes your personal data under the following legal bases as provided under the Philippine Data Privacy Act of 2012:

• Consent: Where you have given explicit consent, including acceptance of this Policy at registration and opt-in to promotional communications;
• Contractual necessity: Processing required to fulfil the Player Agreement (Terms and Conditions) between you and bmw365 — including account management, payment processing, and game provision;
• Legal obligation: Processing required for compliance with PAGCOR regulations, AML laws (Republic Act No. 9160 as amended), and other applicable Philippine legislation;
• Legitimate interests: Processing for fraud prevention, security monitoring, and service improvement, where these interests do not override your data protection rights.

6 Data Sharing and Disclosure

bmw365 does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances:

• PAGCOR: As required under our licence conditions, bmw365 submits player activity reports to PAGCOR. This includes gaming activity data and identity records for regulatory review;
• Payment processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other Philippine payment partners receive the minimum data necessary to process your transactions;
• Identity verification services: Third-party KYC providers accredited under Philippine law receive identity data to verify government-issued IDs;
• Law enforcement: bmw365 will disclose personal data to Philippine law enforcement authorities or courts where legally required or where we reasonably believe disclosure is necessary to prevent fraud or harm;
• Corporate transactions: In the event of a merger, acquisition, or restructuring involving bmw365, your data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third parties who process your data on bmw365's behalf are required to maintain appropriate data security measures and are prohibited from using your data for purposes beyond those specified by bmw365.

7 Data Retention

bmw365 retains your personal data for as long as is necessary for the purposes outlined in this Policy, subject to the following retention standards:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, as required by PAGCOR and AML regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction in accordance with Philippine AML law;
• KYC documents: Retained for five (5) years from account closure or last transaction, whichever is later;
• Support communications: Retained for three (3) years from the date of the interaction;
• Technical logs: Retained for twelve (12) months unless required for ongoing security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with bmw365's data disposal procedures.

8 Cookies and Tracking Technologies

bmw365 uses cookies and similar tracking technologies to operate the Platform, maintain session security, and improve user experience. The types of cookies used by bmw365 include:

• Strictly necessary cookies: Required for the Platform to function — including session management, login authentication, and security tokens. These cannot be disabled;
• Functional cookies: Remember your language preferences, game lobby filters, and display settings to personalise your experience;
• Analytics cookies: Collect anonymised data about how Players use bmw365 to help us improve Platform performance. No personally identifiable information is included in analytics data.

bmw365 does not use third-party advertising cookies or cross-site tracking cookies. You may manage functional and analytics cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the bmw365 Platform.

9 Your Data Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by bmw365:

To exercise any of these rights, contact our Data Protection Officer at [email protected]. bmw365 will respond to all verified data rights requests within fifteen (15) business days.

10 Data Security

bmw365 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bmw365 servers;
• AES-256 encryption for personal data stored in bmw365 databases;
• Multi-factor authentication for all bmw365 administrative access;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and penetration testing conducted by independent third parties;
• Incident response procedures meeting the NPC's 72-hour breach notification requirement.

In the event of a personal data breach that is likely to prejudice your rights and freedoms, bmw365 will notify affected Players and the National Privacy Commission within the timeframes required by Philippine law.

11 Minors and Age Verification

Parents and guardians who become aware that a minor has accessed bmw365 are requested to contact us immediately at [email protected] so that we can take prompt corrective action.

12 Updates to This Privacy Policy

bmw365 reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes will be communicated to registered Players via their registered mobile number or email address at least seven (7) days prior to the amended Policy taking effect. The updated Policy will be published on this page with a revised effective date.

Your continued use of bmw365 following the effective date of any revision constitutes your acceptance of the updated Policy. If you disagree with any changes, you may close your account by contacting our support team.

13 Contact Our Data Protection Officer

For all data privacy inquiries, access requests, corrections, deletion requests, or complaints, please contact bmw365's Data Protection Officer:

This Privacy Policy was last reviewed and updated on 1 June 2026. bmw365 is regulated by PAGCOR and committed to full compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.