55bme Privacy Policy

This Privacy Policy applies to all personal data collected and processed by 55bme in connection with the operation of the online casino and sports betting platform accessible at https://55bme.app (the "Platform"). It applies to:

• All registered players who hold an active or inactive 55bme account
• Visitors who browse the 55bme website without registering
• Individuals who contact 55bme customer support, whether or not they are registered players
• Individuals whose data is submitted to 55bme as part of a KYC verification process

This policy must be read in conjunction with the 55bme Terms & Conditions. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions on the specific topic of personal data processing, this Privacy Policy shall prevail.

For the purposes of the Data Privacy Act of 2012 and applicable international data protection frameworks, the data controller responsible for your personal data is the operator of the 55bme platform.

All enquiries relating to the processing of personal data — including requests to exercise data subject rights, questions about this Privacy Policy, and data breach notifications — should be directed to:

55bme collects personal data in several categories depending on how you interact with the platform. The following table sets out the categories of data collected, examples of specific data points within each category, and the primary purpose for which each category is used.

55bme collects personal data through the following channels and mechanisms:

• Directly from you: Information you provide when registering an account, completing the KYC verification process, making a deposit or withdrawal request, contacting customer support, or updating your account profile.
• Automatically from your device: Technical data collected passively when you visit the 55bme website or use the platform, including IP address, device identifiers, browser information, and session activity, collected via server logs and first-party cookies.
• From payment providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors when you initiate a deposit or withdrawal. 55bme does not receive or store your full payment credentials from these providers.
• From identity verification services: Verification results from KYC processing services used to confirm the authenticity of identity documents submitted to 55bme.
• From game providers: Game session data, wagering records, and outcome logs transmitted by certified third-party game studios whose titles are hosted on the 55bme platform.

55bme uses personal data only for the purposes set out in this Privacy Policy. The primary purposes for which your data is processed are:

55bme processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contract performance: Processing necessary to perform the contract between you and 55bme established by your acceptance of the Terms & Conditions upon account registration — principally account operation, payments, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulatory requirements, KYC and AML obligations, and any lawful direction from a competent court or government authority.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where such processing does not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and the use of non-essential cookies, where you have given explicit, freely-given, informed, and specific consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

55bme does not sell your personal data. We share personal data with third parties only in the following limited circumstances:

• Payment Processors: GCash, PayMaya, and Philippine banking partners receive the transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and regulatory obligations.
• KYC and Identity Verification Services: Identity document data is shared with licensed verification service providers for the purpose of completing mandatory KYC checks. These providers are contractually bound to process your data only for this purpose.
• Game Providers: Session and wagering data is transmitted to and from certified third-party game studios to deliver and record game outcomes. Game providers receive only the data necessary to operate the specific game session.
• Regulatory and Law Enforcement Authorities: 55bme will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, courts, or law enforcement agencies where required by law or valid legal process.
• Professional Advisers: Personal data may be disclosed to legal counsel, auditors, or compliance consultants acting under professional confidentiality obligations, in connection with the operation and legal defence of the 55bme platform.

55bme uses first-party cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit the 55bme website. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the platform to function. These enable you to log in to your account, navigate between game categories, and maintain your session state. These cookies cannot be disabled without rendering the platform inoperable.
• Performance Cookies: Collect anonymised information about how visitors use the 55bme platform, such as page load times and error reports. This information is used to improve platform performance. No personally identifiable data is collected by performance cookies.
• Functional Cookies: Remember your preferences, such as preferred language, responsible gaming settings, and display preferences, to personalise your experience on return visits.
• Analytics Cookies: Used by 55bme's internal analytics to understand aggregate usage patterns across the platform. Data collected is anonymised before analysis and is not linked to individual player identities.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core gaming functions of the 55bme platform, but may limit certain personalisation features.

55bme retains personal data for as long as is necessary to fulfil the purposes for which it was collected, taking into account applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account and transaction records: Retained for a minimum of five (5) years from the date of the last transaction or account closure, in compliance with the Anti-Money Laundering Act of 2001 and PAGCOR record-keeping requirements.
• KYC identity documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction that triggered the verification.
• Customer support communications: Retained for three (3) years following the resolution of the relevant support interaction, unless a longer period is required for ongoing legal proceedings.
• Technical and usage logs: Retained for twelve (12) months for security and fraud detection purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of consent validity plus two (2) years following withdrawal, as evidence of lawful marketing communication.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 55bme's data disposal procedures. Where anonymisation is not technically feasible, data is destroyed using secure erasure methods.

55bme implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 55bme platform
• Encryption at rest for sensitive personal data, including KYC documents and financial records
• Role-based access controls ensuring that personal data is accessible only to 55bme staff who require it for their specific function
• Multi-factor authentication for all staff access to systems containing personal data
• Regular security assessments and vulnerability testing of the platform infrastructure
• Contractual data processing agreements with all third-party service providers who handle personal data on 55bme's behalf

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to the personal data 55bme holds about you. These rights may be exercised by contacting the 55bme data privacy contact at any time:

55bme will respond to verified data subject requests within fifteen (15) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notification to the requesting individual. Identity verification will be required before a data subject request is actioned, to prevent fraudulent disclosure of personal data to third parties.

55bme strictly prohibits the registration and use of the platform by persons under 21 years of age. The platform does not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in the KYC process, and accounts will be closed, and any data collected will be deleted, upon discovery that the account holder is underage.

The 55bme platform operates with infrastructure, game provider systems, and service partners whose servers or processing facilities may be located outside the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, 55bme takes the following steps to ensure adequate protection:

• Assessing the adequacy of data protection standards in the recipient jurisdiction
• Implementing contractual safeguards, including data processing agreements incorporating standard contractual clauses, with all international service providers who handle personal data
• Ensuring that game providers and payment processors handling data outside the Philippines are certified and audited to international security standards (PCI-DSS for payment data; ISO 27001 for information security where applicable)

Personal data is never transferred internationally for any purpose other than the specific operational purposes described in this Privacy Policy.

55bme reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, regulatory guidance, or platform features. The Effective Date shown at the top of this page will be updated upon each revision.

For material changes — those that significantly affect how your personal data is processed or your data rights — 55bme will provide advance notice via email to your registered address and via a prominent banner on the platform, no fewer than seven (7) days prior to the change taking effect.

Non-material changes, such as clarifications of existing provisions that do not alter substantive data processing activities, may be made without advance notice. We encourage you to review this Privacy Policy periodically to stay informed of how 55bme handles your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 55bme, please contact us through the following channels:

If you are not satisfied with 55bme's response to a privacy concern or data subject request, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC). Information on the NPC complaints process is available through the NPC's official resources.

55bme takes all privacy complaints seriously and will cooperate fully with NPC investigations. We are committed to resolving data privacy concerns promptly, transparently, and in accordance with our obligations under Philippine law.