bmw365 Privacy Policy

1. Scope & Data Controller

1.1 This Privacy Policy applies to all personal data collected, processed, and stored by bmw365 in connection with the operation of bmw365.club and any related Services, including the website, games platform, sportsbook, and customer support channels.

1.2 bmw365 acts as the data controller with respect to all personal data collected from registered users and visitors of bmw365.club. As data controller, bmw365 determines the purposes and means of processing your personal data.

1.3 This Privacy Policy applies to all users of bmw365.club regardless of their location within the Philippines, including users in Metro Manila, Cebu City, Davao City, Quezon City, and all other regions of the archipelago.

1.4 By registering an account or using any bmw365 Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

1.5 This policy is to be read together with the bmw365 Terms & Conditions. In the event of conflict between this Privacy Policy and the Terms & Conditions on matters relating to personal data, this Privacy Policy shall prevail.

2. Personal Data We Collect

2.1 bmw365 collects the following categories of personal data in connection with account registration, identity verification, payment processing, and platform use:

2.2 Providing certain personal data is mandatory for account registration and use of Services. Where data collection is optional, bmw365 will indicate this at the point of collection. Declining to provide mandatory data will prevent account registration or restrict access to specific Services.

3. How We Collect Your Data

3.1 bmw365 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or completing any form on bmw365.club.
• Automated collection: Technical and usage data collected automatically through cookies, session tracking, and server logs when you access bmw365.club.
• Third-party sources: Identity verification data returned by KYC service providers; fraud screening data from payment processors; geolocation data from IP address resolution services.
• Government and regulatory sources: Information shared with bmw365 by PAGCOR or other Philippine regulatory authorities in the course of licensing and compliance obligations.

3.2 bmw365 does not purchase personal data lists from third-party data brokers. All personal data held by bmw365 originates from the sources described in section 3.1 above.

4. Legal Basis for Processing

4.1 bmw365 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Performance of contract: Processing necessary to register your account, operate your wallet, process deposits and withdrawals, and deliver gaming Services as contracted under the bmw365 Terms & Conditions.
• Legal obligation: Processing required to comply with PAGCOR regulatory obligations, Philippine anti-money laundering laws (Republic Act No. 9160, as amended), KYC requirements, and tax reporting obligations.
• Consent: Processing of data for marketing communications (where applicable), optional profile personalisation, and use of non-essential cookies, where you have provided explicit, informed consent.
• Legitimate interests: Processing for fraud prevention, account security monitoring, platform improvement, and statistical analysis, where such processing does not override your fundamental privacy rights.

4.2 Where processing is based on consent, you may withdraw your consent at any time by contacting bmw365 support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5. How We Use Your Personal Data

5.1 bmw365 uses your personal data for the following purposes:

• Registering and managing your bmw365 account, including password recovery and two-factor authentication;
• Verifying your identity and age through KYC procedures prior to withdrawal processing;
• Processing deposits, withdrawals, and wallet transactions via GCash, Maya, BPI, BDO, Metrobank, USDT, and other payment channels;
• Detecting and preventing fraud, money laundering, and unauthorised account access;
• Complying with PAGCOR reporting requirements and Philippine anti-money laundering obligations;
• Providing customer support, including resolving disputes, processing complaints, and investigating account issues;
• Delivering transactional communications — including deposit confirmations, withdrawal notifications, account security alerts, and OTP messages;
• Enforcing responsible gaming measures, including monitoring for problem gambling indicators and applying account restrictions where appropriate;
• Improving bmw365's platform, games, and user interface based on aggregated usage analytics;
• Sending promotional communications where you have consented to receive them, and managing your communication preferences.

6. Sharing Your Personal Data

6.1 bmw365 does not sell, rent, or commercially exchange your personal data with third parties. Data is shared with third parties only in the following specific circumstances and under binding data processing agreements:

6.2 bmw365 requires all third-party processors to implement appropriate technical and organisational security measures consistent with those applied by bmw365, and to use your personal data solely for the contracted purpose.

7. Cookies & Tracking Technologies

7.1 bmw365.club uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve the user experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — including session management, login authentication, and security tokens. These cannot be disabled without impacting platform functionality.
• Functional cookies: Store your preferences — such as preferred language and responsible gaming settings — to provide a personalised experience across sessions.
• Analytics cookies: Collect anonymised data about how users interact with bmw365.club, including pages visited and session duration. This data is used in aggregate to improve the platform.
• Security cookies: Track device fingerprint data, IP addresses, and session identifiers to detect suspicious login behaviour and prevent account fraud.

7.2 You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of bmw365.club, including the ability to maintain a login session.

7.3 bmw365 does not use cookies to serve third-party advertising or to track your activity on websites other than bmw365.club.

8. Data Retention

8.1 bmw365 retains personal data for no longer than is necessary to fulfil the purposes described in this Privacy Policy, subject to the minimum retention periods required by applicable Philippine law and PAGCOR regulations.

8.2 The following retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by the Anti-Money Laundering Act of the Philippines (RA 9160, as amended by RA 10365);
• Transaction and financial records: Retained for a minimum of five (5) years following the relevant transaction, consistent with PAGCOR and Bureau of Internal Revenue requirements;
• Gaming history: Retained for the duration of the account relationship plus five (5) years post-closure, for regulatory reporting and dispute resolution purposes;
• Customer support communications: Retained for three (3) years following resolution of the relevant support case;
• Marketing preferences and consent records: Retained for the duration of the account relationship, plus one (1) year following withdrawal of consent or account closure;
• Technical and usage data (non-personal aggregated): May be retained indefinitely in anonymised form for platform analytics and improvement purposes.

8.3 Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised using industry-standard data destruction methods.

9. Data Security

9.1 bmw365 implements a layered data security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Security measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and bmw365 servers;
• Encryption at rest for stored personal data, identity documents, and financial records;
• Role-based access controls limiting staff access to personal data strictly to those whose job function requires it;
• Multi-factor authentication requirements for all staff with access to personal data systems;
• Continuous monitoring for suspicious access patterns and data exfiltration attempts;
• Regular third-party security audits and penetration testing of bmw365 infrastructure;
• Incident response procedures to identify, contain, and report data breaches within 72 hours of discovery, consistent with NPC notification requirements.

9.2 Notwithstanding bmw365's security measures, no data transmission over the internet is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for reporting any suspected unauthorised access to your account to bmw365 support immediately.

10. Your Rights as a Data Subject

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data bmw365 holds about you:

10.2 To exercise any of your rights, contact bmw365's Data Protection Officer using the contact details in Section 14. bmw365 will acknowledge data subject requests within 5 business days and respond substantively within 15 business days. Where additional time is required, you will be notified with an explanation and an estimated completion date.

10.3 bmw365 may request identity verification before processing data subject requests, to prevent unauthorised access to account data.

11. Children and Minors

11.1 bmw365.club is not directed at, and is not intended for, use by any person under the age of 21. If bmw365 becomes aware that personal data has been collected from an individual under 21, the account will be immediately suspended, the data will be securely deleted, and the matter will be reported to PAGCOR.

11.2 Parents and guardians who believe that a minor may have registered an account on bmw365 should contact bmw365 support immediately. bmw365 will investigate and take appropriate action within 48 hours of receiving such a report.

12. Cross-Border Data Transfers

12.1 Certain personal data processed by bmw365 may be transferred to, stored in, or processed by service providers located outside the Philippines, including game content providers and technology infrastructure providers.

12.2 Where personal data is transferred outside the Philippines, bmw365 ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act of 2012. Such safeguards include binding data processing agreements requiring the receiving party to implement data protection standards at least equivalent to those required under Philippine law.

12.3 bmw365 does not transfer personal data to jurisdictions that do not provide an adequate level of data protection unless appropriate contractual safeguards are in place and have been approved by the bmw365 Data Protection Officer.

13. Updates to This Privacy Policy

13.1 bmw365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or bmw365's data processing practices. The current version of the Privacy Policy, displaying the effective date of the most recent revision, is always available at bmw365.club/privacy-policy.

13.2 Where updates are material — including changes to the purposes for which your data is processed, the categories of third parties with whom data is shared, or your rights as a data subject — bmw365 will provide advance notice of at least fourteen (14) days via a platform notification or by email to your registered address.

13.3 Your continued use of bmw365.club following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you object to changes that materially affect your rights, you may request account closure in accordance with the bmw365 Terms & Conditions.

14. Contact & Data Protection Officer

14.1 bmw365 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Philippine Data Privacy Act of 2012. The DPO serves as the primary contact for all data subject rights requests and privacy-related inquiries.

14.2 To exercise your data subject rights, lodge a privacy complaint, or make any other inquiry regarding bmw365's handling of your personal data, please contact bmw365 using the details below:

14.3 If you believe that bmw365 has not adequately addressed your privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC's complaint procedures is available on the NPC's official website.