5 bmw Privacy Policy

Introduction

5 bmw (referred to in this document as "5 bmw," "we," "us," or "our") is committed to protecting the privacy and personal data of every individual who interacts with our platform. This Privacy Policy has been prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines (NPC).

This Privacy Policy explains the personal data we collect from and about you when you visit the 5 bmw website, register an account, make a deposit, place wagers, participate in promotions, contact our support team, or otherwise engage with any part of the 5 bmw service. It describes the purposes for which we process your data, the legal bases upon which we rely, the parties with whom we may share your information, how long we retain it, the security measures we apply to protect it, and the rights available to you under Philippine law.

We encourage you to read this Policy carefully and in its entirety. If you have any questions about how 5 bmw handles your personal data, please contact our Data Privacy Officer at the details provided in Section 2 below.

Data Controller & Data Privacy Officer

2.1 Identity of the Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for the personal data of 5 bmw players is the operator of the 5bmw.vu platform.

2.2 Data Privacy Officer

5 bmw has appointed a Data Privacy Officer (DPO) in accordance with Section 21 of the DPA 2012 and Rule VI of its Implementing Rules and Regulations. The DPO is responsible for overseeing compliance with data privacy obligations and handling privacy-related inquiries and complaints.

You may contact the 5 bmw Data Privacy Officer using the following contact details:

We aim to acknowledge all data privacy inquiries within three (3) Philippine business days and to provide a substantive response within fifteen (15) business days.

Personal Data We Collect

The categories of personal data that 5 bmw may collect about you, depending on how you interact with the platform, include the following:

3.1 Identity & Contact Information

• Full legal name (first name, middle name, last name);
• Date of birth and age;
• Philippine residential address;
• Philippine mobile telephone number (Globe, Smart, DITO, or other local network);
• Email address (where provided);
• Government-issued identification document type and number (e.g., PhilSys ID, UMID, driver's license, passport).

3.2 Financial & Transaction Information

• GCash account number or registered mobile number;
• Maya account details;
• Bank account numbers (BPI, BDO, Metrobank, or other Philippine banks used for InstaPay/PesoNet transactions);
• Deposit and withdrawal transaction records, including amounts, timestamps, and payment references;
• Wallet balance history.

3.3 Gaming Activity Data

• Game session records (games played, duration, dates, and times);
• Wagering history (bets placed, outcomes, amounts won and lost);
• Bonus and promotion usage records;
• VIP tier and loyalty points history.

3.4 Technical & Device Data

• IP address at the time of account access;
• Device type, model, and operating system;
• Browser type and version;
• Mobile network carrier;
• Session tokens and authentication logs;
• Device fingerprint data used for fraud prevention.

3.5 Communications Data

• Records of communications with 5 bmw customer support (live chat transcripts, email correspondence);
• Feedback, complaints, and dispute records;
• Promotional communication preferences and opt-in/opt-out records.

How We Collect Personal Data

5 bmw collects personal data through the following means:

4.1 Data You Provide Directly

Information you provide when you register a 5 bmw account, complete KYC verification, make a deposit or withdrawal request, contact 5 bmw support, participate in a promotion, or update your account profile settings.

4.2 Data Collected Automatically

Technical data collected automatically when you access the 5 bmw platform, including IP address, device identifiers, browser information, session data, and interaction logs. This data is collected through standard web server logs, cookies, and similar tracking technologies as described in Section 9 of this Policy.

4.3 Data from Payment Processors

Transaction confirmation data received from GCash, Maya, InstaPay-participating banks, PesoNet-participating banks, and other payment processors when you make a deposit or receive a withdrawal. 5 bmw receives transaction references and confirmation statuses — we do not receive or store full payment credentials such as GCash PINs or online banking passwords.

4.4 Data from Verification Providers

Verification data received from KYC identity verification service providers engaged by 5 bmw to validate the authenticity of government-issued identification documents submitted during account verification.

Purposes of Processing & Legal Bases

The table below sets out the primary purposes for which 5 bmw processes your personal data and the corresponding legal basis under the Data Privacy Act of 2012 for each processing activity:

Where 5 bmw relies on your consent as the legal basis for processing (such as for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent for marketing communications, update your preferences in your account settings or contact 5 bmw support.

Sharing of Personal Data

6.1 General Principle

5 bmw does not sell, rent, or commercially license your personal data to any third party. Personal data is shared only in the circumstances described below, and only to the extent necessary for the stated purpose.

6.2 Categories of Recipients

• Payment processors: GCash (Mynt), Maya Philippines Inc., GrabPay, BancNet (for InstaPay and PesoNet), and other payment service providers engaged for the processing of deposits and withdrawals. These processors receive only the data necessary to complete the specific financial transaction.
• KYC and identity verification providers: Third-party service providers engaged to verify the authenticity of identification documents submitted during KYC procedures. These providers are contractually bound to use verification data solely for verification purposes.
• Game content providers: Platform providers and game studios that supply casino games, live dealer services, sports betting infrastructure, or bingo systems to 5 bmw. These providers may receive pseudonymised session and wagering data required to deliver and settle game outcomes.
• IT and hosting service providers: Third-party cloud infrastructure, server hosting, and data security service providers engaged by 5 bmw to operate the Platform securely. These providers act as data processors under written data processing agreements.
• Regulatory and law enforcement authorities: Government bodies including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or any court or law enforcement agency where 5 bmw is legally required to disclose personal data.
• Professional advisers: Lawyers, auditors, accountants, and other professional advisers engaged by 5 bmw, subject to professional confidentiality obligations.

6.3 Cross-Border Data Transfers

Where personal data is processed by service providers located outside the Philippines, 5 bmw implements appropriate safeguards in accordance with Section 21 of the DPA 2012 and NPC rules on cross-border data transfers, including the use of contractual clauses that require receiving parties to apply data protection standards at least equivalent to those applicable in the Philippines.

Data Retention

5 bmw retains personal data for no longer than is necessary for the purposes for which it was collected, subject to applicable legal retention obligations. The general retention principles applied by 5 bmw are as follows:

• Account and identity data — retained for the duration of the account relationship and for a period of five (5) years following permanent account closure, in accordance with AMLA and gaming regulatory record-keeping requirements.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (as amended) and its implementing rules.
• Gaming activity data — retained for a period of three (3) years from the date of each game session, or such longer period as may be required by applicable gaming regulations.
• KYC documents — retained for five (5) years from the date of verification or the date of account closure, whichever is later.
• Customer support communications — retained for a period of two (2) years from the date of the last communication in each support thread, unless retention for a longer period is necessary in connection with an ongoing dispute or legal proceeding.
• Technical and device logs — retained for a period of twelve (12) months from the date of collection, unless required for longer retention in connection with a security investigation.

Upon the expiry of the applicable retention period, personal data will be securely deleted, destroyed, or anonymised so that it can no longer be linked to an identifiable individual.

Security Measures

5 bmw implements a comprehensive set of technical, organisational, and physical security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, without limitation:

• Transport Layer Security (TLS): All connections to 5 bmw are encrypted using TLS 1.2 or higher. HTTP connections are automatically redirected to HTTPS.
• Password security: Account passwords are hashed using bcrypt with individual salting. Passwords are never stored in plain text and cannot be retrieved by 5 bmw staff.
• Access controls: Access to personal data within 5 bmw's systems is restricted on a strict need-to-know basis. Staff access is controlled by role-based permissions with multi-factor authentication required for administrative access.
• Device fingerprinting and anomaly detection: Automated systems monitor login activity for anomalies including logins from unrecognized devices or unusual geographic locations, triggering enhanced verification steps where applicable.
• Two-factor authentication (2FA): Available to all 5 bmw account holders via SMS OTP. Players are strongly encouraged to enable 2FA to protect their accounts.
• Penetration testing: 5 bmw commissions periodic independent security testing of the platform to identify and remediate vulnerabilities before they can be exploited.
• Incident response: 5 bmw maintains a data breach response procedure consistent with NPC Circular 16-03 on personal data breach management, including notification timelines to affected data subjects and the NPC as required.

Notwithstanding the foregoing, no security system is impenetrable. Players are reminded that they share responsibility for the security of their accounts, including maintaining the confidentiality of their passwords and enabling available security features such as 2FA.

Cookies & Similar Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files placed on your device by the 5 bmw website when you visit. They allow the Platform to recognise your device across multiple sessions, maintain your logged-in state, store your preferences, and collect analytical information about how the Platform is used.

9.2 Types of Cookies Used by 5 bmw

• Strictly necessary cookies: Required for the Platform to function correctly. These include session authentication cookies that maintain your logged-in state and security cookies that support fraud prevention. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Used to remember your preferences, such as your preferred language, game display settings, and notification preferences. These cookies improve your experience but are not strictly necessary for basic Platform functionality.
• Analytical cookies: Used to collect aggregated, anonymised information about how visitors interact with the Platform — such as which pages are visited most frequently and how long players spend on particular sections. This information is used to improve the Platform. Analytical data is not linked to individual identities.
• Security and fraud prevention cookies: Used to support 5 bmw's device fingerprinting and anomaly detection systems, helping to identify unauthorised access attempts and suspicious login patterns.

9.3 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive a notification when a new cookie is set. Note that disabling strictly necessary cookies may prevent you from logging in to or using certain features of the 5 bmw Platform. Instructions for managing cookies in common browsers are available through your browser's help documentation.

Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by 5 bmw. These rights may be exercised by contacting the 5 bmw Data Privacy Officer at the contact details in Section 2.

5 bmw will respond to valid data rights requests within a reasonable period, generally within fifteen (15) Philippine business days. Where requests are complex or numerous, this period may be extended by a further fifteen (15) business days, of which you will be notified. 5 bmw may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to or deleted at the request of an unauthorised party.

Data of Minors

If 5 bmw becomes aware that it has inadvertently collected personal data from an individual who is under twenty-one (21) years of age, it will promptly take steps to delete that data and terminate the associated account. Any person who has reason to believe that a minor has registered a 5 bmw account should notify our Data Privacy Officer immediately using the contact details in Section 2.

Parents or legal guardians who discover that a person under their care has provided personal data to 5 bmw without authorization are encouraged to contact us promptly so that we may take immediate corrective action.

Updates to This Privacy Policy

5 bmw reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or the structure of our Platform and services. The current effective version of this Privacy Policy will always be accessible at 5bmw.vu/privacy-policy.

Where changes to this Privacy Policy are material — meaning they significantly affect the rights or expectations of data subjects — 5 bmw will notify affected players via a notice posted on the Platform and/or by SMS or email to registered contact details, with at least seven (7) days' advance notice before the amended Policy takes effect.

Your continued use of the 5 bmw Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement with the updated Policy. If you do not agree with changes to this Privacy Policy, please cease using the Platform and contact 5 bmw support to request account closure.

The version of this Privacy Policy dated 01 January 2026 supersedes all prior versions. The effective date and version number are displayed at the top of this document and in the document badge in the page header.