55mbw Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 55mbw ("the Company," "we," "us," "our") collects, uses, discloses, and safeguards personal information relating to individuals ("you," "Player," "User") who register for or use the 55mbw online gaming platform accessible at 55mbw.app and all associated pages (collectively, "the Platform").

This Policy applies to all personal data processed by 55mbw in connection with the operation of the Platform, including data collected from registered players, prospective players who browse the Platform without registering, and individuals who contact 55mbw customer support.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable circulars issued by the National Privacy Commission (NPC) of the Philippines. 55mbw is also subject to PAGCOR data governance requirements applicable to licensed online gaming operators.

By using the 55mbw Platform or providing personal data to 55mbw, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree, you must cease using the Platform immediately.

2. Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for personal data processed through the 55mbw Platform is:

55mbw
Operating under PAGCOR regulation
Philippines
Email: [email protected]

55mbw has registered its data processing activities with the National Privacy Commission as required by Republic Act No. 10173.

3. Personal Data We Collect

55mbw collects the following categories of personal data from Platform users:

4. How We Collect Your Data

55mbw collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, updating account settings, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, and session activity logs via cookies and similar technologies (see Section 11).
• Third-party payment providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors when you make deposits or request withdrawals.
• Identity verification services: Data returned by third-party KYC verification services used to validate government-issued Philippine ID documents in compliance with PAGCOR requirements.
• Regulatory sources: Where required by PAGCOR or Philippine anti-money laundering law, 55mbw may verify data against regulatory databases.

5. Legal Basis for Processing

55mbw processes personal data under the following legal bases as recognized by the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the agreement between 55mbw and the Player — including account creation, payment processing, game delivery, and bonus management.
• Legal obligation: Processing required to comply with PAGCOR licensing requirements, Anti-Money Laundering Act (Republic Act No. 9160 as amended), Data Privacy Act, and other applicable Philippine law.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and improvement of 55mbw services, where such interests are not overridden by your data rights.
• Consent: For processing activities not covered by the above legal bases — such as sending promotional communications — 55mbw will seek your explicit consent, which may be withdrawn at any time.

6. How We Use Your Personal Data

55mbw uses your personal data for the following purposes:

• Creating, managing, and maintaining your 55mbw player account
• Verifying your identity and age (21+ requirement) in compliance with PAGCOR mandates
• Processing deposits and withdrawals via GCash, PayMaya, and other supported Philippine payment methods
• Delivering game services, including live dealer via Vivo Live, online bingo, slots, color game, Lucky Dice, and sports betting
• Administering bonuses, promotions, and loyalty rewards
• Providing customer support and resolving account disputes
• Detecting and preventing fraud, collusion, and prohibited activities
• Complying with PAGCOR regulatory requirements and anti-money laundering obligations
• Monitoring responsible gaming indicators and administering self-exclusion, deposit limits, and cooling-off periods
• Sending transactional communications (account notifications, deposit confirmations, OTPs)
• Sending promotional communications where you have consented to receive them
• Improving the technical performance and user experience of the 55mbw Platform

7. Disclosure of Personal Data to Third Parties

55mbw does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. Personal data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers: GCash (Mynt), PayMaya (Maya Bank), BPI, BDO, Metrobank, and other payment processors to facilitate deposits and withdrawals.
• Game content providers: Licensed game studios and live dealer operators (including Vivo Live) who deliver game content on the 55mbw Platform, to the extent required for game session management.
• KYC verification providers: Third-party identity verification services used to validate Philippine government-issued ID documents.
• IT infrastructure and hosting providers: Cloud hosting and technical infrastructure providers who process data on behalf of 55mbw under binding data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or regulation.
• Legal and professional advisers: Lawyers, accountants, and auditors subject to professional confidentiality obligations, where necessary for legal compliance or dispute resolution.

All third-party data processors engaged by 55mbw are required to process personal data only on documented instructions from 55mbw and are bound by confidentiality and data security obligations commensurate with Philippine data protection requirements.

8. International Data Transfers

The 55mbw Platform engages game content providers and technical service providers whose infrastructure may be located outside the Philippines. Where personal data is transferred outside the Philippines, 55mbw ensures that such transfers are subject to adequate safeguards in accordance with the Data Privacy Act of 2012 and NPC guidelines, including:

• Binding data processing agreements incorporating standard contractual clauses recognized by the NPC
• Transfers to jurisdictions with equivalent data protection standards as assessed by the NPC
• Where required, specific NPC authorization for cross-border data transfers

Specifically, live dealer game data processed through Vivo Live may be routed through servers in Southeast Asian data centers. All such transfers are governed by contractual data protection obligations.

9. Data Security Measures

55mbw implements technical and organizational security measures appropriate to the sensitivity of personal data processed. These measures include:

• Encryption in transit: All communications between your device and 55mbw servers are protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive personal data stored in 55mbw databases is encrypted at rest using industry-standard algorithms.
• Password security: Player passwords are stored using irreversible cryptographic hashing with unique salts. 55mbw staff cannot access or recover your password.
• Access controls: Access to personal data is restricted to 55mbw personnel who require it to perform their assigned functions, governed by role-based access controls.
• Two-factor authentication: 55mbw supports and encourages the use of two-factor authentication (OTP via SMS) for player logins to reduce unauthorized account access risk.
• Security monitoring: 55mbw maintains continuous security monitoring and intrusion detection systems across its platform infrastructure.
• Incident response: 55mbw maintains a documented data breach response plan. In the event of a personal data breach, affected players and the NPC will be notified in accordance with the Data Privacy Act's mandatory notification requirements.

Notwithstanding these measures, no data transmission or storage system can guarantee absolute security. Players are advised to use strong, unique passwords and enable two-factor authentication on their 55mbw accounts.

10. Data Retention

55mbw retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following retention considerations:

• Active accounts: Personal data is retained for the duration of your 55mbw account and for a period of five (5) years following account closure, as required by PAGCOR anti-money laundering record-keeping requirements.
• KYC documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, as required by the Anti-Money Laundering Act (RA 9160 as amended).
• Transaction records: Financial transaction data (deposits, withdrawals, gaming transactions) is retained for seven (7) years in compliance with Philippine tax and financial record-keeping regulations.
• Customer support records: Communication records with customer support are retained for three (3) years for dispute resolution and quality assurance purposes.
• Technical logs: Server and access logs are retained for a maximum of ninety (90) days, unless specific records are flagged as relevant to an ongoing security investigation.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original data.

11. Cookies and Tracking Technologies

The 55mbw Platform uses cookies and similar tracking technologies to operate the Platform, maintain user sessions, and improve the player experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session management and login authentication. These cannot be disabled without preventing core Platform functionality.
• Performance cookies: Used to collect anonymized analytics data about how players use the Platform (pages visited, session duration, error rates) to improve Platform performance. No personally identifiable data is collected through performance cookies.
• Functional cookies: Used to remember your preferences (e.g., preferred language, game category filters) to personalize your experience on the 55mbw Platform.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized account access attempts.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 55mbw Platform. 55mbw does not use cookies for cross-site behavioral advertising.

12. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to personal data held by 55mbw:

• Right to be informed: The right to be notified of how your personal data is collected and processed — satisfied by this Privacy Policy.
• Right of access: The right to request a copy of the personal data 55mbw holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your 55mbw account.
• Right to erasure / blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, unlawful, or based on withdrawn consent — subject to 55mbw's legal obligations to retain certain records.
• Right to object: The right to object to processing of your personal data for specific purposes, including direct marketing communications.
• Right to data portability: The right to request your personal data in a structured, commonly used format for transfer to another data controller, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 55mbw has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact 55mbw's Data Protection Officer using the contact details in Section 13. 55mbw will respond to data subject requests within fifteen (15) business days of receipt, as required by the Data Privacy Act and NPC regulations.

Please note that certain rights are subject to limitations under applicable law — for example, 55mbw may be legally required to retain transaction data for a defined period even after an account closure request.

13. Contact and Data Protection Officer

For privacy-related inquiries, data subject rights requests, or concerns about how 55mbw processes your personal data, please contact:

Data Protection Officer – 55mbw
Email: [email protected]
Subject line: "Data Privacy Request – [Your Account Number]"
Response time: Within 15 business days as required by NPC regulations

For complaints that cannot be resolved with 55mbw directly, you may contact the National Privacy Commission (NPC) of the Philippines through its official channels.

14. Changes to This Privacy Policy

55mbw reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered players via the contact details on file (SMS or email) with a minimum notice period of seven (7) days before the updated Policy takes effect.

The effective date of the most recent revision is displayed at the top of this page. Continued use of the 55mbw Platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

Players are encouraged to review this Privacy Policy periodically. If you have any concerns about changes to this Policy, please contact our Data Protection Officer before the effective date of the revision.