22bmw Privacy Policy

1 Introduction

This Privacy Policy applies to all personal data collected by 22bmw from users of the online gaming platform accessible at https://22bmw.cam, including all associated mobile-optimized web interfaces and services (collectively, the "Platform").

22bmw acts as the data controller for all personal information collected through the Platform. In this role, we determine the purposes and means of processing your personal data, and we are responsible for ensuring compliance with applicable Philippine data protection laws.

This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the 22bmw platform. Any capitalized terms not defined in this Privacy Policy shall have the meanings assigned to them in the Terms and Conditions.

2 Information We Collect

22bmw collects several categories of personal information from users of the Platform. The scope of data collection is determined by regulatory requirements, platform functionality, and security considerations.

2.1 Information You Provide Directly

When you register for a 22bmw account, you provide the following personal data:

• Full Legal Name: Your complete name as it appears on government-issued identification documents.
• Date of Birth: Required to verify that you meet the minimum age requirement of 21 years.
• Email Address: Used for account communications, security notifications, and promotional offers (where you have consented).
• Mobile Phone Number: A Philippine mobile number for account verification, two-factor authentication, and customer support contact.
• Residential Address: Your current address in the Philippines.
• Username and Password: Your chosen login credentials for accessing the Platform.
• Payment Information: Details of your GCash, Maya, bank account, or other payment method used for deposits and withdrawals. Note that 22bmw does not store full credit/debit card numbers; payment processing is handled through secure third-party payment gateways.

2.2 KYC Verification Documents

In compliance with PAGCOR regulations and anti-money laundering (AML) requirements, 22bmw collects identity verification documents including:

• Scanned copies or photographs of government-issued IDs (SSS, PhilHealth, Driver's License, Passport, UMID, Voter's ID);
• Proof of address documents (utility bills, bank statements, or government correspondence);
• Selfie photographs holding your ID for identity confirmation purposes;
• Proof of payment method ownership (screenshots of GCash/Maya account details, bank statements showing account holder name).

2.3 Automatically Collected Information

When you access or use the 22bmw Platform, we automatically collect certain technical and usage data, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers.
• IP Address and Geolocation: Your IP address and approximate geographic location (city-level) derived from it.
• Session Data: Login timestamps, session duration, pages visited, games played, bet history, and transaction records.
• Cookies and Similar Technologies: As described in Section 7 below.

2.4 Communications and Support

When you contact 22bmw customer support via live chat, email, or other channels, we collect and retain records of those communications, including message content, timestamps, and resolution outcomes.

3 How We Use Your Personal Data

22bmw processes your personal information for the following purposes:

3.1 Account Administration

To create, maintain, and manage your 22bmw player account; to process your registration; to verify your identity and age; and to authenticate your login sessions.

3.2 Transaction Processing

To process deposits, withdrawals, bet placements, winnings payouts, bonus credits, and all other financial transactions on the Platform. This includes verifying payment method ownership and preventing fraudulent transactions.

3.3 Regulatory Compliance

To comply with legal obligations imposed by PAGCOR, the Philippine Anti-Money Laundering Council (AMLC), and other Philippine regulatory authorities. This includes KYC verification, AML monitoring, suspicious activity reporting, and maintaining records as required by law.

3.4 Platform Security and Fraud Prevention

To detect, prevent, and investigate fraudulent activity, bonus abuse, collusion, use of prohibited betting strategies, multi-accounting, money laundering, and other violations of our Terms and Conditions. This may involve automated monitoring systems and manual review by our compliance team.

3.5 Customer Support

To respond to your inquiries, resolve disputes, provide technical assistance, and improve the quality of 22bmw customer service.

3.6 Platform Improvement and Analytics

To analyze Platform usage patterns, game preferences, and user behavior in aggregate and anonymized form to improve our game offerings, user interface design, and overall service quality.

3.7 Marketing Communications (With Consent)

Where you have provided explicit consent, we may use your email address or mobile number to send promotional offers, bonus announcements, and marketing communications related to 22bmw services. You may withdraw this consent at any time by unsubscribing via the link provided in marketing emails or by contacting customer support.

3.8 Responsible Gaming

To monitor your gaming activity for patterns indicative of problem gambling and to enforce deposit limits, loss limits, session time controls, and self-exclusion requests that you have configured in accordance with our Responsible Gaming Policy.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, 22bmw processes your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions you agreed to when creating your 22bmw account — including providing gaming services, processing transactions, and maintaining account security.
• Legal Compliance: Processing is necessary to comply with legal obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), tax reporting requirements, and other applicable Philippine laws.
• Legitimate Interests: Processing is necessary for our legitimate business interests in preventing fraud, ensuring platform security, improving services, and enforcing our Terms — provided these interests do not override your fundamental rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, we rely on your explicit, freely given, informed consent, which you may withdraw at any time.

5 Data Sharing and Disclosure

22bmw does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may, however, share your data in the following limited circumstances:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including payment processing (GCash, Maya, bank gateways), identity verification services, cloud hosting infrastructure, customer support software, and data analytics tools. These providers are contractually bound to process your data only on our instructions and to maintain appropriate security measures.

5.2 Game Providers

When you play games supplied by third-party game studios integrated into the 22bmw platform, certain gameplay data (bet amounts, game outcomes, session timestamps) may be shared with those providers for game operation, RNG verification, and licensing compliance purposes. Game providers are prohibited from using this data for any purpose other than game delivery and regulatory compliance.

5.3 Regulatory and Law Enforcement Authorities

22bmw may disclose your personal data to PAGCOR, the AMLC, the National Privacy Commission, or other Philippine government agencies when required by law, in response to valid legal process (subpoenas, court orders), or when we believe disclosure is necessary to prevent fraud, enforce our Terms, or protect the rights, property, or safety of 22bmw, our users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets involving 22bmw, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Privacy Policy.

5.5 With Your Consent

We may share your data with other parties when you have given explicit consent for a specific purpose, and we will always inform you of the sharing arrangement and the recipient's identity.

6 Data Retention

22bmw retains your personal data for as long as your account remains active and for a reasonable period thereafter, as required by Philippine law and regulatory obligations. Specific retention periods are as follows:

• Account Information: Retained indefinitely while your account is active; for a minimum of 5 years after account closure for audit and compliance purposes.
• Transaction Records: Retained for a minimum of 10 years in accordance with PAGCOR licensing requirements and the Bureau of Internal Revenue tax record retention mandate.
• KYC/AML Documents: Retained for a minimum of 10 years after the termination of the player relationship, as required by anti-money laundering regulations.
• Customer Support Communications: Retained for a minimum of 2 years from the date of the last communication.
• Technical/Analytics Data: Retained for a maximum of 12 months in aggregated and anonymized form.

Upon the expiration of the applicable retention period, 22bmw will securely delete or anonymize your personal data, unless an exception applies (e.g., an ongoing dispute, regulatory investigation, or legal hold).

7 Cookies & Tracking Technologies

The 22bmw Platform uses cookies and similar tracking technologies to enhance your user experience, analyze site usage, and maintain your login session. These include:

7.1 Essential Cookies

Session Cookies: These are temporary cookies that are deleted when you close your browser. They store your session ID and enable 22bmw to remember you during your active browsing session, maintain your login status, and protect against unauthorized access.

Authentication Cookies: Used to verify your identity and maintain secure access to your account.

7.2 Functional Cookies

These cookies remember your preferences (language selection, theme preferences, game favorites) to provide a personalized experience on subsequent visits.

7.3 Analytics Cookies

We use Google Analytics and similar tools to collect anonymized data about how you interact with the Platform — which pages you visit, how long you stay, what games you play, and where you came from. This data helps us understand user behavior patterns and optimize the Platform. No personally identifiable information is shared with Google Analytics.

7.4 Cookie Consent

When you first visit 22bmw, you will see a cookie consent banner. Essential cookies are placed automatically as they are necessary for Platform functionality. You may opt out of functional and analytics cookies by adjusting your browser settings or managing your cookie preferences through our preference center.

7.5 Do Not Track (DNT)

Some browsers include a Do Not Track feature. 22bmw does not currently respond to DNT signals, but you can disable cookies through your browser settings to achieve a similar effect.

8 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data held by 22bmw:

8.1 Right to Access

You have the right to request a copy of all personal data that 22bmw holds about you. To exercise this right, contact our Privacy Officer at [email protected] with the subject line "Data Access Request." We will provide the information within 15 days.

8.2 Right to Rectification

If any personal data held by 22bmw is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it. Contact our Privacy Officer to submit a rectification request.

8.3 Right to Erasure ("Right to be Forgotten")

Subject to certain legal and regulatory exceptions, you may request the deletion of your personal data. However, 22bmw may need to retain certain data for compliance purposes (e.g., KYC records for PAGCOR, transaction records for tax authorities). We will inform you of any data that cannot be deleted and the reasons why.

8.4 Right to Restriction of Processing

You may request that we restrict the processing of your personal data while we verify accuracy or assess the legality of a processing activity. During a restriction period, we will store your data but not actively use it for most purposes.

8.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format (such as CSV) and to transmit that data to another controller. To exercise this right, contact our Privacy Officer.

8.6 Right to Object

You have the right to object to the processing of your personal data for marketing purposes. To opt out of marketing communications, click the "Unsubscribe" link in any marketing email or contact customer support.

8.7 Right to Lodge a Complaint

If you believe that 22bmw has violated your privacy rights or failed to comply with the Data Privacy Act, you may lodge a formal complaint with the National Privacy Commission (NPC) at https://www.privacy.gov.ph/.

9 Data Security

22bmw implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction:

9.1 Encryption

All data transmitted between your device and 22bmw servers is encrypted using TLS 1.2 or higher (minimum 256-bit SSL/TLS encryption). Payment and sensitive personal data are encrypted both in transit and at rest.

9.2 Secure Infrastructure

22bmw stores player data on secure servers in monitored data centers with restricted access, biometric authentication, and 24/7 surveillance. Servers are protected by firewalls and intrusion detection systems.

9.3 Access Controls

Access to personal data is restricted to 22bmw employees, contractors, and authorized third-party service providers who have a legitimate business need to access the data. All personnel are required to maintain confidentiality and are subject to strict data handling procedures and non-disclosure agreements.

9.4 Regular Backups

22bmw maintains regular encrypted backups of player data to ensure business continuity and enable rapid recovery in case of data loss or system failure.

9.5 Security Testing

We conduct regular security assessments, vulnerability scans, and penetration testing to identify and remediate security weaknesses. External security audits are performed annually.

9.6 Data Breach Response

In the unlikely event of a confirmed data breach involving unauthorized access to personal data, 22bmw will:

• Notify affected users within 72 hours via email;
• Provide details of the breach, the data affected, and steps users should take to protect themselves;
• Notify the National Privacy Commission and other relevant authorities as required by law;
• Conduct a thorough investigation to determine the cause and implement measures to prevent recurrence.

10 International Data Transfers

22bmw operates primarily within the Philippines and stores player data on Philippine-based servers. However, certain service providers (such as cloud infrastructure providers, payment processors, or analytics platforms) may process data outside the Philippines. When data is transferred to jurisdictions outside the Philippines, we ensure that:

• The recipient country has been deemed to have an adequate level of data protection by the National Privacy Commission, or;
• The recipient has committed to binding contractual clauses (Standard Data Protection Clauses) that provide protections equivalent to those under Philippine law;
• The transfer is explicitly consented to by the data subject; or
• The transfer is necessary for contract performance or legal obligations.

11 Children's Privacy

22bmw is not intended for use by individuals under 21 years of age. We do not knowingly collect personal data from minors. If we become aware that a user is under 21, we will immediately close their account and delete their personal data to the extent permitted by law. If you believe that 22bmw has collected data from a minor, please contact our Privacy Officer immediately at [email protected].

12 Changes to This Privacy Policy

22bmw may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or by posting a prominent notice on the 22bmw homepage. Your continued use of the Platform following the publication of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how 22bmw protects your data.

13 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or 22bmw's privacy practices, please contact our Data Protection Officer and Privacy Officer:

You may also file a complaint with the National Privacy Commission (NPC):