Privacy Policy

1 Introduction

bmw888 operates a PAGCOR-licensed online casino and sports betting platform serving Filipino adults aged 21 and above. In the course of providing our services, bmw888 collects and processes personal data about registered members and visitors to the bmw888 platform.

This Privacy Policy applies to all personal data processing activities conducted by bmw888 in connection with the operation of bmw888.co and all associated services, games, tools, and features (collectively, the "Platform"). It covers data collected via our website, mobile web application, customer support channels, and marketing communications.

By registering an account on bmw888, accessing the Platform, or otherwise interacting with our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please discontinue use of the bmw888 Platform and contact support to close your account.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), bmw888 is the Personal Information Controller (PIC) in respect of the personal data of all registered members and Platform visitors.

bmw888 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and RA 10173. You may contact the DPO using the contact details set out in Section 15 of this Policy.

bmw888 is registered with the Philippine National Privacy Commission (NPC) as required under RA 10173 and complies with all NPC-issued advisories, circulars, and guidelines applicable to online gaming platform operators.

3 Personal Data We Collect

bmw888 collects different categories of personal data depending on how you interact with the Platform. The table below summarizes the main categories of data we collect:

bmw888 does not intentionally collect sensitive personal information (SPI) as defined under RA 10173 — such as health data, religious affiliation, or political views — unless specifically required and declared for a defined processing purpose.

4 How We Collect Your Data

bmw888 collects personal data through the following means:

• Direct Collection: Information you provide directly during account registration, KYC submission, deposit and withdrawal requests, customer support interactions, and survey responses.
• Automated Technical Collection: Data collected automatically by our Platform when you visit bmw888.co — including IP address, browser type, device identifiers, page views, click-stream data, and session metadata — via server logs, cookies, and similar technologies.
• Payment Processors: Confirmation data returned by GCash, PayMaya, and partner Philippine banks following deposit or withdrawal transactions. bmw888 does not store full payment card numbers.
• Identity Verification Providers: KYC verification results and document authenticity confirmations from third-party identity verification service providers engaged by bmw888.
• PAGCOR & Regulatory Sources: Data shared with bmw888 by PAGCOR in connection with self-exclusion registries, responsible gaming programs, or regulatory compliance requirements.

5 How We Use Your Personal Data

bmw888 processes your personal data for the following purposes:

1. Account Management: Creating, maintaining, verifying, and securing your bmw888 account.
2. Identity Verification (KYC): Verifying your identity and age (21+) as required by PAGCOR and Philippine Anti-Money Laundering Act (AMLA) regulations.
3. Payment Processing: Processing deposits, withdrawals, and maintaining financial transaction records as required by PAGCOR and AMLC.
4. Gaming Operations: Providing access to casino games, sports betting, live dealer tables, bingo, and other Platform features.
5. Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, account takeover, and other illegal conduct.
6. Responsible Gaming: Monitoring gaming behavior to identify problem gambling indicators and administering responsible gaming tools, cooling-off periods, and self-exclusion programs.
7. Regulatory Compliance: Meeting all reporting, record-keeping, and audit obligations imposed by PAGCOR, the AMLC, the NPC, and other Philippine regulatory authorities.
8. Customer Support: Responding to enquiries, resolving disputes, and providing account assistance.
9. Marketing (Consent-Based): Sending promotional communications, bonus offers, and platform updates to members who have opted in to marketing communications. You may withdraw consent at any time.
10. Platform Improvement: Analyzing usage data in aggregate form to improve Platform features, game selection, and user experience.

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, bmw888 processes personal data on the following lawful bases:

• Contractual Necessity: Processing necessary to perform our contractual obligations to you under the bmw888 Terms and Conditions — including account operation, game access, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing requirements, AMLA obligations, NPC directives, and other applicable Philippine laws and regulations.
• Legitimate Interests: Processing necessary for bmw888's legitimate business interests — including fraud prevention, platform security, responsible gaming enforcement, and internal analytics — where such interests do not override your data rights.
• Consent: Processing conducted on the basis of your freely given, specific, informed, and unambiguous consent — primarily for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Sharing of Personal Data

bmw888 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly limited to what is necessary for the purposes described in this Policy:

• PAGCOR: As required under our gaming license, bmw888 shares player activity data, KYC records, and suspicious transaction reports with PAGCOR.
• Anti-Money Laundering Council (AMLC): Transaction records and covered transaction reports as mandated by Republic Act No. 9160 (AMLA) and its amendments.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other Philippine payment partners receive the data necessary to process your deposits and withdrawals.
• Identity Verification Providers: KYC data shared with licensed third-party identity verification service providers under data processing agreements.
• Game Software Providers: Technical gaming data shared with certified game software providers (e.g., Pragmatic Play, PG Soft, Evolution) to resolve game disputes and audit game outcomes.
• IT & Infrastructure Providers: Cloud hosting, server, and cybersecurity service providers who process data on bmw888's behalf under contractual data protection obligations.
• Law Enforcement: Philippine law enforcement agencies and courts, where bmw888 is required by law or court order to disclose personal data.

8 Data Retention

bmw888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. Our standard retention periods are as follows:

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized. Anonymized data may be retained indefinitely for aggregate analytics purposes.

9 Security Measures

bmw888 implements comprehensive technical, organizational, and administrative security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption on all data transmitted between your device and bmw888 servers.
• AES-256 Encryption for personal data stored in bmw888 databases.
• Multi-Factor Authentication (MFA) for administrative access to bmw888 systems containing personal data.
• Role-Based Access Controls limiting employee access to personal data strictly to what is required for their job function.
• Penetration Testing and regular security audits conducted by independent cybersecurity specialists.
• 24/7 Security Monitoring and intrusion detection systems monitoring for unauthorized access attempts.
• Employee Data Protection Training covering RA 10173 obligations, data handling procedures, and incident response protocols.

While bmw888 employs industry-standard security measures, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. You are responsible for maintaining the confidentiality of your account password and login credentials.

10 Cookies & Tracking Technologies

bmw888 uses cookies and similar tracking technologies (collectively, "cookies") on the Platform for the purposes described below. A cookie is a small text file placed on your device by your browser when you visit bmw888.co.

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences (e.g., language settings, game view preferences) to personalize your bmw888 experience.
• Performance & Analytics Cookies: Collect anonymized data about how players use the Platform — pages visited, session duration, error occurrences — to help bmw888 improve our services.
• Marketing Cookies (Consent Required): Used only with your explicit consent to track your engagement with bmw888 promotions and deliver relevant offers. These are not activated without your opt-in.

You can manage or disable non-essential cookies at any time through your browser settings or by updating your preferences via the bmw888 Platform. Disabling strictly necessary cookies may impair Platform functionality.

11 Your Data Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to the personal data bmw888 holds about you:

To exercise any of these rights, please submit a written request to our Data Protection Officer at [email protected] with the subject line "Data Rights Request." bmw888 will acknowledge your request within 3 business days and respond substantively within 15 business days, as required under RA 10173.

12 Minors & Age Restriction

The bmw888 Platform is strictly for adults aged 21 years and above, in compliance with PAGCOR's minimum age requirements for online casino gaming in the Philippines. bmw888 does not knowingly collect personal data from individuals under the age of 21.

If bmw888 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately close the relevant account, forfeit any funds deposited, and permanently delete all associated personal data. Any winnings generated by an underage account will be forfeited.

13 Cross-Border Data Transfer

In some cases, personal data collected by bmw888 may be processed or stored on servers or by service providers located outside the Philippines — for example, in connection with cloud hosting services, game software providers, or international payment processing infrastructure.

Any transfer of personal data outside the Philippines is conducted in compliance with the cross-border transfer provisions of RA 10173 and applicable NPC regulations. Before transferring personal data internationally, bmw888 ensures that the recipient country provides an adequate level of data protection or that appropriate contractual safeguards are in place.

By using the bmw888 Platform and accepting this Privacy Policy, you consent to the transfer of your personal data to other countries for the purposes described in this Policy, subject to the safeguards described above.

14 Personal Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bmw888 will comply with RA 10173's breach notification requirements, which include:

• Notifying the Philippine National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required under NPC Circular No. 16-03.
• Notifying affected data subjects — including bmw888 members — when the breach is likely to result in a real risk of serious harm, without undue delay.
• Providing notification that includes the nature of the breach, the categories and approximate number of individuals affected, likely consequences, and the measures bmw888 has taken or proposes to take to address the breach.

bmw888 maintains an internal data breach response plan and regularly tests our incident response procedures to ensure rapid and effective action in the event of a security incident.

15 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bmw888, please contact our Data Protection Officer:

If you are not satisfied with bmw888's response to your privacy concern, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC). The NPC is the regulatory body responsible for enforcing RA 10173 in the Philippines.

16 Changes to This Privacy Policy

bmw888 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or PAGCOR/NPC regulatory guidance.

When we make material changes to this Privacy Policy, we will notify registered members via email to the address on file and post a notice on the bmw888 Platform. The updated Policy will take effect on the date stated in the "Last Updated" heading at the top of this page.

Your continued use of the bmw888 Platform after the effective date of any amendments constitutes your acknowledgment and acceptance of the revised Privacy Policy. The current version of this Privacy Policy is always available at bmw888.co/privacy-policy.

This Privacy Policy was last updated on January 1, 2026.