1. Data Controller
bmw777, the operator of the online gaming platform accessible at bmw777.vu (hereinafter "bmw777," "we," "us," or "our"), is the Data Controller responsible for the personal data of players who register and use the bmw777 Platform. As Data Controller, bmw777 determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its implementing rules and regulations.
All inquiries regarding this Privacy Policy and the exercise of data subject rights should be directed to bmw777 via the contact information provided in Section 14 of this Policy.
2. Personal Data We Collect
2.1 Registration Data
When you create a bmw777 account, we collect the following personal data:
- Your registered Philippine mobile number (primary account identifier).
- Full legal name (required for KYC verification and withdrawal processing).
- Date of birth (to verify that you meet the 21+ age requirement under applicable Philippine gaming standards).
- Account password (stored as a cryptographic hash — never in plain text).
2.2 Identity Verification (KYC) Data
For account verification and compliance with applicable regulations, bmw777 may collect:
- Government-issued Philippine ID documents (PSA National ID / PhilSys, UMID, SSS ID, Driver's License, Passport, PRC ID, or Voter's ID).
- A selfie photograph for biometric matching against your ID document.
- Proof of address documentation where required by enhanced due diligence procedures.
- Source of funds documentation for high-value transaction reviews.
2.3 Financial Data
To facilitate deposits and withdrawals, bmw777 collects:
- GCash mobile number or Maya account identifier used for transactions.
- Bank account details (account name and number) for bank transfer withdrawals.
- Transaction records including deposit amounts, withdrawal requests, and wallet balances.
bmw777 does not store full credit card numbers, CVV codes, or complete bank account credentials beyond what is necessary for the immediate transaction. Payment processing through third-party providers is subject to those providers' own security and data handling standards.
2.4 Gaming Activity Data
bmw777 records all gaming activity on your account, including:
- Game sessions, including games played, bets placed, outcomes, and wins/losses.
- Bonus and promotion usage history.
- Responsible gaming tool settings and self-exclusion requests.
2.5 Technical & Device Data
When you access bmw777, our systems automatically collect:
- IP address and approximate geographic location.
- Device type, operating system, and browser type and version.
- Session timestamps, page views, and navigation paths within the Platform.
- Cookie identifiers and session tokens (see Section 9).
3. How We Collect Your Data
bmw777 collects personal data through the following channels:
- Directly from you: when you register an account, complete KYC verification, make deposits or withdrawal requests, contact customer support, or participate in promotions.
- Automatically: through cookies, server logs, and analytics tools when you access and navigate the bmw777 Platform.
- From third-party service providers: including KYC verification partners, payment processors (GCash, Maya, BPI, BDO), and fraud detection services — where you have provided consent for such sharing or where such sharing is required by law.
4. Purposes of Processing
bmw777 processes your personal data for the following specific, legitimate purposes:
- Account Management: creating, maintaining, and operating your bmw777 player account, including authentication and account security.
- Payment Processing: facilitating deposits via GCash, Maya, and bank transfers, and processing withdrawal requests to verified payment accounts.
- Identity Verification (KYC): verifying your identity, age (21+ requirement), and source of funds in compliance with applicable anti-money laundering (AML) and counter-terrorism financing (CTF) obligations.
- Gaming Services: providing access to online slots, live casino games, bingo, fishing games, and sports betting markets available on bmw777.
- Responsible Gaming: monitoring gaming patterns to identify potential problem gambling behaviour and administering self-exclusion, deposit limit, and session time tools.
- Customer Support: responding to your enquiries, complaints, and service requests submitted via live chat or email.
- Fraud Prevention & Security: detecting and preventing fraudulent activity, multi-accounting, bonus abuse, and unauthorised access to player accounts.
- Legal & Regulatory Compliance: meeting bmw777's obligations under applicable Philippine law, PAGCOR-related regulatory requirements, and any mandatory reporting obligations.
- Platform Improvement: analysing aggregated, anonymised usage data to improve Platform performance, game offerings, and user experience.
- Direct Communications: sending account-related notifications (transaction confirmations, security alerts, OTPs) to your registered mobile number, where these are necessary for service delivery.
5. Legal Basis for Processing
bmw777 processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:
- Contractual Necessity: processing necessary to perform our obligations under the Terms & Conditions you entered into when registering a bmw777 account (account management, payment processing, gaming services).
- Legal Obligation: processing required to comply with bmw777's legal and regulatory obligations (KYC, AML/CTF reporting, age verification, gaming regulation compliance).
- Legitimate Interests: processing necessary for bmw777's legitimate business interests, including fraud prevention, security, Platform improvement, and responsible gaming monitoring — provided such interests are not overridden by your privacy rights.
- Consent: where bmw777 relies on your consent to process specific categories of data (such as optional marketing communications), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
6. Data Sharing & Third Parties
bmw777 does not sell your personal data. We may share your data with the following categories of third parties, solely to the extent necessary for the purposes described in this Policy:
- Payment Processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, and other payment service providers to facilitate deposits and withdrawals.
- KYC Verification Partners: identity verification service providers that assist with document validation and biometric matching for account verification.
- Gaming Platform Providers: JILI, Fachai, PG Soft, Pragmatic Play, Evolution Gaming, Asia Gaming, and other game studio providers whose games are hosted or embedded on bmw777 — limited to session-level data necessary for game functionality.
- Fraud Prevention & Security Services: third-party risk management and fraud detection providers that analyse transaction and behavioural data to protect bmw777 and its players.
- Regulatory & Law Enforcement Authorities: where bmw777 is required to disclose your information under applicable Philippine law, a court order, or instruction from a competent regulatory authority.
- IT Infrastructure & Cloud Service Providers: hosting, database, and cloud infrastructure providers that process data on bmw777's behalf under strict data processing agreements.
All third-party service providers engaged by bmw777 are required to maintain appropriate technical and organisational security measures and to process personal data only on bmw777's documented instructions.
7. Data Retention
bmw777 retains your personal data only for as long as necessary for the purposes described in this Policy, subject to applicable legal requirements. The following general retention periods apply:
- Active account data: retained for the duration of your account's existence on bmw777 plus a minimum of five (5) years after account closure, in compliance with AML/CTF record-keeping requirements.
- KYC and identity verification documents: retained for a minimum of five (5) years from the date of verification, in accordance with applicable financial regulations.
- Transaction records: retained for a minimum of five (5) years as required under Philippine AML and gaming regulatory frameworks.
- Customer support records: retained for three (3) years from the date of the last relevant interaction.
- Technical and device data (logs): retained for up to twelve (12) months for security and fraud prevention purposes.
Upon the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with bmw777's data destruction procedures.
8. Data Security
bmw777 implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction:
- Transport Layer Security: all data transmitted between your device and bmw777's servers is encrypted using TLS 1.2 or higher (HTTPS). The padlock icon in your browser confirms the active secure connection.
- Encryption at Rest: sensitive data fields (including KYC documents and payment identifiers) are encrypted using AES-256 in bmw777's databases.
- Password Security: account passwords are never stored in plain text. bmw777 uses industry-standard cryptographic hashing with salting to store password credentials.
- Access Controls: internal access to player data is restricted on a strict need-to-know basis, with role-based access controls and audit logging of all data access events.
- OTP Authentication: login from unrecognised devices triggers mandatory SMS OTP verification to your registered Philippine mobile number.
- Fraud Monitoring: automated systems monitor account activity in real time for patterns consistent with unauthorised access, fraudulent transactions, or account compromise.
Despite these measures, no system is completely immune to security breaches. In the event of a data breach that poses a risk to your rights and interests, bmw777 will notify affected players and the National Privacy Commission (NPC) in accordance with applicable breach notification requirements under the DPA.
9. Cookies & Tracking Technologies
bmw777 uses the following categories of cookies and similar tracking technologies on bmw777.vu:
- Strictly Necessary Cookies: required for the Platform to function (session authentication, security tokens, load balancing). These cannot be disabled without impairing Platform functionality.
- Performance & Analytics Cookies: collect anonymised data on how players navigate bmw777 (pages visited, session duration, error rates) to help us improve Platform performance and usability. bmw777 uses privacy-respecting analytics tools for this purpose.
- Functional Cookies: remember your preferences (language, game category filters, responsible gaming settings) to personalise your bmw777 experience across sessions.
You may manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of some bmw777 features. bmw777 does not use third-party advertising or tracking cookies.
10. Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, bmw777 players have the following rights with respect to their personal data:
- Right to be Informed: the right to be told what personal data bmw777 holds about you and how it is used — which is the primary purpose of this Privacy Policy.
- Right to Access: the right to request a copy of the personal data bmw777 holds about you.
- Right to Rectification: the right to request correction of inaccurate or incomplete personal data in your bmw777 account.
- Right to Erasure: the right to request deletion of your personal data, subject to bmw777's legal retention obligations (e.g., KYC records cannot be deleted during mandatory retention periods).
- Right to Object: the right to object to processing of your personal data for direct marketing purposes.
- Right to Data Portability: the right to receive a machine-readable copy of personal data you have provided to bmw777.
- Right to Damages: the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
- Right to File a Complaint: the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe bmw777 has violated your data privacy rights.
To exercise any of these rights, contact bmw777 via live chat or email (see Section 14). We will respond to verified requests within fifteen (15) business days in accordance with NPC guidelines.
11. Children's Privacy
The bmw777 Platform is strictly restricted to individuals who are 21 years of age or older. bmw777 does not knowingly collect personal data from persons under this age. If bmw777 becomes aware that personal data has been collected from a person under 21, the account will be immediately suspended and the data deleted or returned to the extent practicable under applicable legal requirements. If you believe a minor has accessed bmw777, please notify us immediately via live chat or at [email protected].
12. Cross-Border Data Transfers
bmw777 may transfer your personal data to servers and service providers located outside the Philippines where necessary for Platform operations, including live casino game studio providers and cloud infrastructure partners. Any such cross-border transfers are conducted with appropriate safeguards, including contractual data protection obligations binding on the receiving party, to ensure a level of protection equivalent to that provided under the Philippine Data Privacy Act of 2012. bmw777 does not transfer your personal data to jurisdictions that do not provide adequate data protection standards without implementing appropriate safeguards.
13. Amendments to This Policy
bmw777 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform services. Material changes will be communicated to registered players via SMS notification to the registered Philippine mobile number prior to taking effect. The date of the most recent revision is displayed at the top of this page. Continued use of the bmw777 Platform following notification of an amendment constitutes acceptance of the revised Privacy Policy.
14. Contact & Data Protection
For all privacy-related enquiries, data subject rights requests, or concerns about bmw777's handling of your personal data, please contact us through the following channels:
- Live Chat: Available 24/7 on bmw777.vu — the fastest channel for privacy enquiries.
- Email: [email protected] — please include "Privacy Request" in your subject line for data subject rights requests.
bmw777's support and compliance team will acknowledge receipt of your request within two (2) business days and complete the request within fifteen (15) business days, extendable by an additional fifteen (15) business days where the request is complex or involves a large volume of data.