Contents
- 1. Introduction & Scope
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. Legal Basis for Processing
- 6. How We Use Your Data
- 7. Cookies & Tracking
- 8. Data Sharing
- 9. Data Retention
- 10. Data Security
- 11. Your Rights
- 12. Minors
- 13. Cross-Border Transfers
- 14. Third-Party Links
- 15. Policy Updates
- 16. Contact & DPO
Introduction & Scope
This Privacy Policy ("Policy") is issued by bnw55 ("bnw55," "we," "us," "our") and applies to all personal information collected through the bnw55 online gaming platform accessible at bnw55.club, including all associated subdomains, mobile-optimized pages, game lobbies, payment interfaces, promotional pages, and customer support channels (collectively, the "Platform").
This Policy is issued pursuant to and in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC") of the Philippines. Where applicable, this Policy also reflects the standards set by the Philippine Amusement and Gaming Corporation ("PAGCOR") with respect to the handling of player data on licensed online gaming platforms.
By accessing the bnw55 Platform, creating an Account, or submitting any personal information to us in any form, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform and should contact our support team to request Account closure.
Data Controller Identity
For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for personal information collected through the bnw55 Platform is:
Platform: bnw55.club
Data Protection Officer Contact: [email protected]
Support Hours: 24 hours a day, 7 days a week
As data controller, bnw55 determines the purposes and means of processing personal information collected through the Platform. Where bnw55 engages third-party service providers to process personal data on its behalf, such providers act as data processors and are bound by data processing agreements consistent with the requirements of the DPA.
bnw55 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Policy, handling data subject rights requests, and serving as the point of contact for the National Privacy Commission.
Personal Data We Collect
bnw55 collects personal information that is necessary, adequate, and not excessive in relation to the purposes for which it is processed. The categories of personal data we collect include:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Registration & KYC |
| Contact Data | Philippine mobile number (+63), email address, residential address | Registration & KYC |
| Identity Documents | Government-issued ID (UMID, Passport, Driver's Licence, SSS ID, PhilSys ID) — image and extracted data | KYC Verification |
| Financial Data | GCash number, Maya account, bank account details (name, account number), transaction history, deposit/withdrawal records | Payment Processing |
| Account Data | Username, encrypted password hash, account preferences, responsible gaming settings, bonus history | Account Operation |
| Gaming Activity Data | Game sessions played, wagers placed, wins and losses, game provider interactions, session durations | Platform Use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, network carrier | Automated Collection |
| Usage Data | Pages visited, navigation paths, time on page, click events, feature interactions | Automated Collection |
| Communications Data | Live chat transcripts, support ticket contents, email correspondence, feedback submissions | Customer Support |
bnw55 does not collect sensitive personal information (as defined under Section 3(l) of the DPA) unless it is strictly necessary for regulatory compliance purposes, in which case it will be collected with your explicit consent and handled under enhanced security controls.
How We Collect Your Data
bnw55 collects personal information through the following mechanisms:
- Direct submission: Information you provide when creating your bnw55 Account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in a promotion.
- Automated technical collection: Technical and usage data collected automatically when you access the Platform, including via cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for full cookie details.
- Payment service providers: Transaction confirmation data and partial payment instrument identifiers received from GCash, Maya, InstaPay, and other integrated payment partners when you process a deposit or withdrawal.
- Identity verification partners: Where bnw55 uses a third-party KYC verification service, identity data submitted during KYC is processed by that partner in accordance with their own privacy policy and bnw55's data processing agreement with them.
- Game providers: Session and game outcome data generated when you play games powered by third-party providers (JILI, PG Soft, Pragmatic Play, etc.) is transmitted to bnw55 for wallet crediting, dispute resolution, and reporting purposes.
- Fraud prevention services: Risk scoring and fraud detection data from third-party anti-fraud platforms used to protect bnw55 and its players from fraudulent activity.
Legal Basis for Processing
Under the Data Privacy Act of 2012, bnw55 processes personal information on the following legal bases:
- Contractual necessity: Processing required to perform the contract between bnw55 and the Player — including account creation, game operation, payment processing, and customer support. Without this processing, bnw55 cannot provide the Platform service.
- Legal obligation: Processing required for bnw55 to comply with applicable Philippine law, including the Anti-Money Laundering Act (AMLA, RA 9160 as amended), the Data Privacy Act (RA 10173), PAGCOR licensing conditions, and tax reporting requirements.
- Legitimate interests: Processing carried out for bnw55's legitimate business interests where such interests are not overridden by the Player's privacy rights — including fraud prevention, platform security, and Platform improvement analytics.
- Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for the sending of marketing communications, promotional notifications, and personalised bonus offers. You may withdraw this consent at any time through your Account settings or by contacting support.
How We Use Your Personal Data
bnw55 uses personal information collected from Filipino players for the following specific purposes:
- Account registration and management: Creating, maintaining, and administering your bnw55 Account, including processing login requests and enforcing security settings.
- Identity and age verification: Confirming that you are at least 21 years of age and are who you represent yourself to be, in compliance with PAGCOR requirements and the DPA.
- Payment processing: Facilitating deposits and withdrawals through GCash, Maya, BPI, BDO, and other accepted Philippine payment methods; reconciling wallet balances; and processing refunds where applicable.
- Game operation: Enabling you to play slot games, live casino games, e-Bingo, and fishing games on the Platform; crediting winnings to your wallet; and resolving game-related disputes.
- Fraud prevention and platform security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorized account access, and other illegal conduct.
- Regulatory compliance: Fulfilling KYC, AML, and other regulatory reporting obligations to PAGCOR, AMLC, BIR, and the NPC as required by law.
- Customer support: Responding to your queries, resolving complaints, and improving the quality of support services through case tracking and quality monitoring.
- Responsible gaming: Monitoring gaming patterns to identify indicators of problem gambling, applying responsible gaming limits at your request, and facilitating self-exclusion.
- Platform analytics and improvement: Analyzing aggregated and anonymized usage data to understand player behavior, optimize Platform performance, and develop new features.
- Marketing communications (with consent only): Sending you promotional offers, bonus notifications, and platform updates via email or SMS where you have consented to receive such communications. You can opt out at any time.
Cookies & Tracking Technologies
The bnw55 Platform uses cookies and similar tracking technologies to provide a functional, secure, and personalized user experience. A cookie is a small text file stored on your device when you visit a website. bnw55 uses the following categories of cookies:
| Cookie Type | Purpose | Required? |
|---|---|---|
| Strictly Necessary | Session authentication, security tokens, CSRF protection, load balancing, geo-restriction enforcement | Yes — cannot be disabled |
| Functional | Language preferences, game lobby layout settings, responsible gaming display preferences | Recommended |
| Analytics | Page view counts, user flow analysis, feature usage metrics — processed in aggregated, anonymized form only | Optional (consent) |
| Security / Fraud | Device fingerprinting for anomaly detection, VPN and proxy identification, duplicate account detection | Yes — security essential |
You may manage cookie preferences through your browser settings. Disabling strictly necessary or security cookies will affect your ability to log in and use the Platform securely. Disabling analytics cookies does not affect your ability to play games or make transactions.
Data Sharing & Disclosure
bnw55 does not sell, rent, or trade your personal information to third parties for their own marketing purposes under any circumstances. Personal data may be shared only in the following specific situations:
- Game providers: Necessary session data is shared with third-party game studios (JILI, PG Soft, Pragmatic Play, and others) solely to enable game operation and resolve disputes. Game providers are contractually prohibited from using this data for any other purpose.
- Payment processors: Transaction data necessary to process deposits and withdrawals is shared with GCash, Maya, BPI, BDO, Metrobank, and other integrated payment partners operating in the Philippines.
- KYC and identity verification services: Identity document data submitted during account verification may be processed by a third-party KYC partner engaged by bnw55 under a data processing agreement.
- Fraud prevention and security services: Technical data may be processed by anti-fraud platforms to identify and prevent unauthorized or illegal account activity.
- Regulatory and law enforcement authorities: bnw55 will disclose personal information to PAGCOR, AMLC, BIR, NPC, Philippine National Police, or other authorized government bodies where required by law, regulation, court order, or lawful request.
- Professional advisers: Legal counsel, auditors, and compliance consultants engaged by bnw55 may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.
- Business transfers: In the event of a merger, acquisition, or asset sale, player data may be transferred to the acquiring entity subject to equivalent data protection obligations. Affected players will be notified in advance where required by law.
All third-party processors engaged by bnw55 are required to process personal data only for specified, compatible purposes, to maintain appropriate security measures, and to comply with applicable Philippine data protection law.
Data Retention
bnw55 retains personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | 5 years from account closure | AMLA & PAGCOR requirements |
| Transaction records | 5 years from transaction date | AMLA, BIR, and PAGCOR requirements |
| KYC documents | 5 years from account closure | AMLA requirements |
| Gaming activity logs | 3 years from last activity | Dispute resolution & regulatory audit |
| Support communications | 3 years from case closure | Dispute resolution |
| Marketing consent records | Until withdrawn + 1 year | Consent audit trail |
| Anonymized analytics data | Indefinite (no personal identifiers) | Statistical and improvement purposes |
Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized using industry-standard data destruction processes. Where bnw55 is required by law to retain data beyond the above periods, the data will be kept in a restricted-access archive until the legal obligation is satisfied.
Data Security Measures
bnw55 implements a layered security architecture to protect personal information against unauthorized access, disclosure, alteration, and destruction. Key security measures include:
- Encryption in transit: All communications between your device and the bnw55 Platform are encrypted using TLS 1.2 or higher with 256-bit SSL certificates. No personal data is transmitted over unencrypted connections.
- Encryption at rest: Sensitive personal data stored in bnw55's databases — including identity documents and financial data — is encrypted at rest using AES-256 encryption.
- Password security: Passwords are never stored in plain text. All passwords are processed through a cryptographic one-way hashing algorithm with per-user salting, ensuring that even bnw55 personnel cannot recover a player's password.
- Access controls: Access to personal data within bnw55's systems is restricted on a strict need-to-know basis, enforced by role-based access controls and multi-factor authentication for internal systems.
- Intrusion detection and monitoring: bnw55 employs continuous network monitoring, intrusion detection systems, and anomaly alerting to identify and respond to security threats in real time.
- Vendor security assessments: Third-party processors are subject to security assessments and contractual security obligations before being granted access to bnw55 player data.
- Data breach response: bnw55 maintains a documented data breach response plan. In the event of a breach likely to cause harm to data subjects, bnw55 will notify the National Privacy Commission within 72 hours and affected players as required by the DPA.
Your Data Subject Rights
Under the Data Privacy Act of 2012, as a data subject you hold the following rights with respect to personal information that bnw55 holds about you. To exercise any right, submit a written request to [email protected] from your registered email address.
- Right to be Informed: The right to be notified of what personal data is being collected, how it is being used, and with whom it may be shared — fulfilled by this Privacy Policy.
- Right of Access: The right to request a copy of the personal data bnw55 holds about you. Requests will be fulfilled within 10 business days of identity verification.
- Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your Account. Some rectifications may require re-verification of identity documents.
- Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to bnw55's legal retention obligations under AMLA and PAGCOR requirements.
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes. Upon receipt of a valid objection, bnw55 will cease all marketing communications immediately.
- Right to Data Portability: The right to receive a copy of personal data you have provided to bnw55 in a structured, commonly used, machine-readable format.
- Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe bnw55 has processed your personal data in violation of the DPA. We encourage you to contact us first to attempt resolution.
- Right to Damages: The right to claim compensation for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data under Section 16(f) of the DPA.
bnw55 will respond to rights requests within 15 business days. Where a request involves complex or voluminous data, we will inform you of the expected extended timeline. We may need to verify your identity before processing a rights request to prevent unauthorized disclosure.
Minors & Age Restriction
The bnw55 Platform is strictly for individuals aged 21 years and above. bnw55 does not knowingly collect or process personal information from individuals under 21 years of age.
If bnw55 becomes aware that personal information has been collected from a person under 21, the relevant Account will be immediately suspended, all associated personal data will be deleted (subject to any contrary legal obligation), and the matter will be referred to appropriate authorities where legally required.
Parents and guardians who believe a minor may have accessed the bnw55 Platform should contact us immediately at [email protected] with the relevant Account details so that the Account can be reviewed and closed.
Cross-Border Data Transfers
Some of the third-party game providers, technology service providers, and fraud prevention platforms used by bnw55 may process personal data on servers located outside the Philippines. Where such cross-border transfers occur, bnw55 ensures that:
- The receiving country or organization provides an adequate level of data protection, or
- Appropriate contractual safeguards are in place through data processing agreements that impose equivalent data protection obligations on the recipient, or
- The transfer is necessary for the performance of the contract between bnw55 and the Player (e.g., game operation by a provider operating servers in a third country).
Cross-border transfers of personal data are conducted in compliance with Section 21 of the Data Privacy Act and the NPC's guidelines on cross-border data transfers. Where practicable, personal data is stored on servers located within the Philippines or within jurisdictions recognized as having adequate data protection frameworks.
Third-Party Links & External Platforms
The bnw55 Platform does not contain links to third-party websites outside the bnw55 domain. However, where game providers operate their own player portals or where payment partners redirect you to their own interfaces during payment processing, please note that those external platforms operate under their own privacy policies, which bnw55 has no control over.
bnw55 is not responsible for the privacy practices, security measures, or content of any third-party platform accessed during payment processing or game operation. We recommend reviewing the privacy policies of any third-party service you interact with during use of the bnw55 Platform.
Updates to This Privacy Policy
bnw55 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance from the NPC or PAGCOR, or operational changes to the Platform.
Material changes to this Policy will be communicated to registered players via email notification to the registered email address and/or a prominent notice on the Platform at least 14 days before the amendment takes effect, except where a shorter notice period is required to comply with an urgent legal obligation.
The effective date of the current version of this Policy is displayed at the top of this page. Your continued use of the Platform after the effective date of an amendment constitutes acceptance of the revised Policy. If you do not accept a material change, you should stop using the Platform and contact support to close your Account before the amendment takes effect.
bnw55 recommends that registered players review this Policy periodically — at minimum once every six months — to remain informed of how their personal data is being processed.
Contact & Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by bnw55, please contact our Data Protection Officer using the following details:
Email: [email protected]
Live Chat: Available 24/7 within the bnw55 Platform
Response target: Within 24 hours for email; under 3 minutes for live chat
When submitting a data rights request, please include your registered email address and a brief description of your request. Identity verification will be required before personal data is disclosed or deleted.
If you are not satisfied with bnw55's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.
bnw55 is committed to resolving all legitimate data privacy concerns promptly and transparently. We take every complaint seriously and treat privacy protection as a core operational responsibility — not merely a legal checkbox.