bme55 Privacy Policy
Your Data. Your Rights. Our Duty.

01 Introduction

bme55 is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is the foundation of any relationship between a gaming operator and its players, and we take our data protection obligations seriously.

This Policy applies to all personal data collected through the bme55 website, mobile platform, live chat, email communications, and any other channel through which you interact with bme55. It covers data collected from registered players, prospective players who browse the Platform without registering, and individuals who contact bme55 support.

This Policy is governed by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable PAGCOR data handling requirements. bme55 is registered with the National Privacy Commission (NPC) of the Philippines as required by law.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, bme55 is the personal information controller responsible for your personal data. This means bme55 determines the purposes and means by which your personal data is processed.

bme55 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the bme55 DPO are provided in Section 14 of this Policy.

03 Personal Data We Collect

bme55 collects personal data that is necessary to provide our services, comply with legal and regulatory obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect are set out in the table below.

bme55 does not collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required by law or with your explicit consent. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health information except where required for responsible gaming purposes.

04 How We Use Your Personal Data

bme55 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your bme55 player account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide access to games, process bets, credit winnings, process deposits and withdrawals, and deliver all other features of the bme55 Platform.
• KYC and Regulatory Compliance: To verify your identity and age (21+), comply with PAGCOR licensing requirements, and meet anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats to the Platform and its players.
• Responsible Gaming: To monitor gaming behaviour, identify players who may be at risk of problem gambling, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance through live chat, Viber, and email.
• Communications: To send you transactional communications (account confirmations, withdrawal notifications, security alerts) and, where you have consented, promotional communications about bme55 offers and new games.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the bme55 Platform.
• Legal Obligations: To comply with applicable Philippine laws, respond to lawful requests from regulatory authorities , and enforce our Terms & Conditions.

bme55 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

05 Legal Basis for Processing

bme55 processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing that is necessary to perform our contract with you — specifically, to operate your bme55 account, process transactions, and deliver the services you have registered for.
• Legal Obligation: Processing that is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AML/CTF obligations, and tax reporting requirements.
• Legitimate Interests: Processing that is necessary for bme55's legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

06 Data Sharing & Disclosure

bme55 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and on a strictly need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay partners, for the purpose of processing deposits and withdrawals. These providers are bound by their own data protection obligations.
• Identity Verification Providers: Third-party KYC service providers who assist bme55 in verifying player identities and ages in compliance with PAGCOR requirements.
• Technology and Hosting Providers: Cloud hosting, platform infrastructure, and software providers who process data on bme55's behalf under strict data processing agreements.
• Game Content Providers: Third-party game studios whose games are available on the bme55 Platform may receive limited technical data (such as session tokens) necessary to deliver their games. They do not receive your identity or financial data.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law or regulatory directive.
• Law Enforcement: Philippine law enforcement agencies, where bme55 is legally required to disclose information in connection with a criminal investigation or court order.

All third parties with whom bme55 shares personal data are required to handle that data in accordance with applicable data protection laws and bme55's data protection standards. bme55 does not permit third-party service providers to use your personal data for their own purposes.

07 Cookies & Tracking Technologies

bme55 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyse usage patterns, and deliver a personalised experience. The types of cookies used by bme55 are as follows:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how players use the bme55 Platform, such as which pages are visited most frequently and how long sessions last. This data helps bme55 improve the Platform experience.
• Functional Cookies: These cookies remember your preferences, such as your preferred language and display settings, to provide a more personalised experience on return visits.
• Marketing Cookies: With your consent, bme55 may use cookies to deliver relevant promotional content about bme55 games and offers. You may opt out of marketing cookies at any time through your account settings.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bme55 Platform. For more information about managing cookies, refer to your browser's help documentation.

08 Data Retention

bme55 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting requirements.

The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of five (5) years following the date of each transaction, as required by Philippine AML regulations.
• Communications Data: Live chat transcripts and support correspondence are retained for up to two (2) years from the date of the interaction.
• Technical and Usage Data: Retained for up to twelve (12) months from the date of collection, after which it is anonymised or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

When personal data is no longer required, bme55 will securely delete or anonymise it in accordance with our data disposal procedures.

09 Data Security

bme55 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-Bit SSL Encryption: All data transmitted between your device and the bme55 Platform is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including financial information and identity documents, is stored in encrypted form on secure servers.
• Access Controls: Access to personal data is restricted to bme55 employees and contractors who have a legitimate need to access it in the course of their duties. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: bme55 offers two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorised access.
• Regular Security Audits: bme55 conducts regular security assessments and penetration testing to identify and address potential vulnerabilities in the Platform.
• Incident Response: bme55 maintains a data breach response plan. In the event of a breach affecting your personal data, bme55 will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by Philippine law.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bme55:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data bme55 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data bme55 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bme55's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on bme55's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe bme55 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact the bme55 Data Protection Officer using the contact details in Section 14. bme55 will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case bme55 will notify you of the extension and the reasons for it.

Please note that some rights are subject to limitations. For example, bme55 may be unable to delete personal data that it is legally required to retain under PAGCOR or AMLC regulations.

11 Children's Privacy and the 21+ Rule

The bme55 Platform is strictly intended for adults aged 21 years and above. bme55 does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is a strict legal requirement under Philippine law and PAGCOR regulations governing online gambling.

bme55 employs age verification procedures during the registration process and as part of KYC checks to prevent underage individuals from accessing the Platform. If bme55 discovers that personal data has been collected from a person under the age of 21, that account will be immediately closed, all associated data will be deleted (subject to any legal retention obligations), and any deposited funds will be returned to the original payment method.

If you are a parent or guardian and believe that a minor in your care has registered a bme55 account, please contact bme55 support immediately so that the account can be closed and the data removed.

12 International Data Transfers

bme55 primarily processes and stores personal data within the Philippines. In some cases, personal data may be transferred to and processed in countries outside the Philippines — for example, where bme55 uses cloud hosting infrastructure or technology service providers with servers located abroad.

Where personal data is transferred outside the Philippines, bme55 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include:

• Transferring data only to countries that the National Privacy Commission has determined provide an adequate level of data protection.
• Entering into data transfer agreements with recipient organisations that incorporate standard contractual clauses approved by the National Privacy Commission.
• Ensuring that recipient organisations are bound by binding corporate rules or equivalent data protection standards.

You may request further information about the safeguards bme55 has in place for international data transfers by contacting the Data Protection Officer.

13 Updates to This Privacy Policy

bme55 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, bme55 will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date of the most recent update is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how bme55 protects your personal data. Your continued use of the bme55 Platform following the publication of an updated Policy constitutes your acceptance of the changes.

If you do not agree with any changes to this Policy, you should stop using the Platform and may request account closure in accordance with the bme55 Terms & Conditions.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bme55, please contact our Data Protection Officer through any of the following channels:

• Email: [email protected] (mark your message "Attention: Data Protection Officer")
• Live Chat: Available 24/7 on the bme55 Platform — ask to be connected to the Data Protection team.
• Viber Community: Reach the bme55 support team via the official Viber community for real-time assistance.

If you are not satisfied with bme55's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC can be reached through their official website at privacy.gov.ph.

bme55 is committed to resolving all data privacy concerns promptly and transparently. Our support team — fluent in both English and Filipino — is available around the clock to assist you.