BME55 Privacy Policy — How We Handle Your Personal Data

1. Introduction

BME55 operates the online sportsbook and gaming platform at bme55.net, serving registered players in the Philippines. This Privacy Policy describes how BME55 ("we", "us", "our", "the Platform") collects, uses, stores, shares, and protects the personal information of players and visitors ("you", "your").

This Policy applies to all personal data collected through the BME55 website, mobile platform, and any customer support or communications channels. It should be read alongside the BME55 Terms and Conditions and Responsible Gaming Policy, both of which form part of your agreement with us.

BME55 is committed to protecting the privacy and dignity of every Filipino player who uses our platform. We take our obligations under the Philippine Data Privacy Act of 2012 (Republic Act 10173) seriously, and we have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable privacy regulations.

---

2. Personal Data We Collect

BME55 collects personal data across several categories depending on your interaction with the platform. Below is a breakdown of the types of information we gather and the context in which it is collected.

2.1 Registration Data

When you create a BME55 account, we collect the following information:

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Philippine mobile number
• Email address
• Home address (required for full account verification)
• Username and encrypted password

2.2 Identity Verification Data

For the purpose of Know Your Customer (KYC) compliance and to process withdrawal requests, BME55 may request copies of:

• A valid government-issued Philippine ID (e.g., PhilSys National ID, passport, driver's licence, SSS ID, UMID, or voter's ID)
• Proof of your payment method (e.g., screenshot of your GCash account showing your name and registered mobile number)
• Selfie or photo verification in some cases for high-value accounts or flagged transactions

These documents are processed and stored securely. BME55 does not retain physical copies and uses document data solely for identity verification purposes.

2.3 Transaction and Payment Data

We collect records of all deposits, withdrawals, and betting transactions processed through your BME55 account, including amounts, timestamps, payment method identifiers (e.g., the last four digits of your card or the registered name on your GCash wallet), and transaction reference numbers. We do not store full card numbers or GCash PINs — these are handled by our payment processors.

2.4 Betting and Gaming Activity

BME55 retains records of your betting history, including the markets you wagered on, stake amounts, odds accepted, and settlement outcomes. This data is used for account management, dispute resolution, and responsible gaming monitoring.

2.5 Device and Usage Data

When you access BME55, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent, and navigation patterns within the platform
• Session duration and login timestamps

This information helps us detect fraud, improve platform performance, and provide a better experience for Filipino players on mobile devices.

2.6 Communications Data

If you contact BME55 through customer support, email, or any feedback channel, we retain records of that correspondence including the content of your messages and our responses. This is used for quality assurance, dispute resolution, and ongoing support.

---

3. How We Use Your Personal Data

BME55 uses your personal data for the following purposes:

---

4. Legal Basis for Processing Your Data

Under the Philippine Data Privacy Act of 2012, BME55 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you under the BME55 Terms and Conditions — including operating your account, processing payments, and settling bets.
• Legal obligation: Processing necessary to comply with Philippine laws and regulations, including AML and KYC requirements applicable to licensed gaming operators.
• Legitimate interest: Processing for fraud prevention, platform security, and the responsible gaming monitoring necessary to protect both players and the integrity of the platform.
• Consent: Where you have explicitly opted in — for example, to receive promotional communications from BME55. You may withdraw this consent at any time through your account settings or by contacting support.

---

5. Data Sharing and Third Parties

BME55 does not sell or rent your personal data to third parties. We share personal data only in the following limited circumstances:

5.1 Payment Processors

To process your GCash, Maya, bank transfer, or card transactions, BME55 shares relevant payment information with licensed payment processors and financial institutions. These processors are bound by their own privacy and security obligations and are only permitted to use your data for the specific transaction purpose.

5.2 Identity Verification Providers

For KYC compliance, BME55 may use third-party identity verification services to validate your government-issued Philippine ID. These providers process your document data securely and are contractually prohibited from using it for any purpose other than the verification requested by BME55.

5.3 Regulatory and Legal Authorities

BME55 may disclose your personal data to Philippine government agencies, law enforcement, or regulatory bodies when required by law — for example, in response to a court order, a lawful investigation, or a request from an AML compliance authority. We will notify you of such disclosures where legally permitted to do so.

5.4 Service Providers

BME55 works with trusted technology and support service providers (such as cloud hosting providers and customer support platforms) who may process personal data on our behalf. All such providers are bound by data processing agreements that require them to protect your information and process it only under our instructions.

---

6. Cookies and Tracking Technologies

BME55 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device that helps us recognise you, maintain your session, and understand how you use the platform.

We use the following types of cookies:

• Strictly necessary cookies: Required for the platform to function — including session management, login authentication, and security features. These cannot be disabled.
• Performance and analytics cookies: Help us understand how Filipino players navigate BME55 so we can identify areas for improvement. Data collected is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences such as language settings and previously selected payment methods to provide a more convenient experience.
• Marketing cookies (opt-in only): Used to personalise promotional communications if you have consented to receiving them. You can opt out at any time through your account settings.

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the BME55 platform.

---

7. Data Retention

BME55 retains your personal data for as long as necessary to fulfil the purposes outlined in this Policy, or as required by Philippine law. The following general retention periods apply:

• Active account data: Retained for the duration of your account's active status and for a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Identity verification documents: Retained for the period required by applicable KYC regulations, typically five (5) years from the date of verification.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing preferences: Retained until you withdraw your consent or close your account, whichever comes first.

After the applicable retention period, your data will be securely deleted or anonymised in accordance with BME55's data destruction procedures.

---

8. Data Security

BME55 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the BME55 servers
• Encrypted storage of sensitive account data including passwords (which are hashed and never stored in plain text)
• Access controls that limit employee access to personal data to only those with a genuine operational need
• Regular security audits and vulnerability assessments of the BME55 platform
• Two-factor authentication (2FA) available for all player accounts
• Continuous monitoring for suspicious access patterns and anomalous account activity

While BME55 takes data security seriously, no internet-based platform can guarantee absolute security. You also play an important role in protecting your account — please use a strong, unique password and never share your BME55 login credentials with anyone.

---

9. Your Rights Under Philippine Data Privacy Law

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by BME55:

To exercise any of these rights, contact the BME55 Data Protection Officer at support@bme55.net with the subject line "Data Privacy Request". We will acknowledge your request within 5 business days and respond fully within 30 days, in line with NPC guidelines.

---

10. Children's Privacy

BME55 is strictly an adult platform. We do not knowingly collect personal data from individuals under 21 years of age. Registration on BME55 requires confirmation that you are at least 21 years old, and we take reasonable steps to verify age during the KYC process.

If we become aware that personal data has been collected from a person under 21 years old, we will immediately suspend the associated account and delete the relevant data. If you are a parent or guardian and believe your child has created a BME55 account, please contact us immediately at support@bme55.net.

---

11. Cross-Border Data Transfers

Some of BME55's service providers and technology infrastructure operate outside the Philippines. Where your personal data is transferred to a jurisdiction outside the country, BME55 ensures that appropriate safeguards are in place to protect your information to a standard equivalent to the protections required under the Philippine Data Privacy Act.

These safeguards may include contractual clauses, data processing agreements, or reliance on the recipient country's adequacy determination by the National Privacy Commission. BME55 will only transfer your data outside the Philippines where a lawful basis for doing so exists and where the transfer is necessary for a purpose described in this Policy.

---

12. Updates to This Privacy Policy

BME55 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes — such as collecting new categories of personal data or changing how we share information — we will notify registered players via email or a prominent notice on the platform at least 7 days before the changes take effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Continued use of BME55 after any update constitutes your acknowledgement of the revised Policy.

---

13. Contact Us and Filing a Complaint

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how BME55 handles your personal information, please contact our Data Protection Officer:

Email: support@bme55.net
Subject line: "Data Privacy Request" or "Privacy Complaint"

We will acknowledge your message within 5 business days. Our team is available 24 hours a day, 7 days a week, and our Filipino support staff understand the local context behind your enquiry.

If you believe your data privacy rights have been violated and you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint is available through the NPC's official channels.