This Privacy Policy explains how 5bmw1 collects, processes, stores, and protects your personal information in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and applicable PAGCOR regulations.
Six principles that guide the way 5bmw1 handles personal data belonging to Filipino players on the Platform.
Purpose Limitation
5bmw1 collects only the personal data that is strictly necessary for the declared purpose — account registration, KYC compliance, payment processing, and platform security. Data is never collected speculatively or for purposes not stated in this Policy.
Data Security
Personal data held by 5bmw1 is protected using 256-bit SSL encryption in transit and AES-256 encryption at rest. Access to your data is restricted to authorised personnel on a strict need-to-know basis, with full audit logging of all data access events.
No Unnecessary Sharing
5bmw1 does not sell, rent, or trade personal data to third parties for commercial marketing purposes. Data is shared only where required by PAGCOR, Philippine law, payment processing necessity, or game provider licensing requirements — and only the minimum data needed.
Your Rights Are Real
Under the Data Privacy Act of 2012, Filipino data subjects have enforceable rights including access, correction, erasure, portability, and objection. 5bmw1 has a documented process for handling all data rights requests within the timelines required by the National Privacy Commission.
Defined Retention Periods
5bmw1 does not retain personal data indefinitely. Retention periods are defined by the purpose of collection and applicable regulatory requirements — KYC records are retained as mandated by PAGCOR and AML law; marketing preferences are retained only while your account is active unless you withdraw consent.
Breach Notification
In the event of a personal data breach that poses a real risk to affected Players, 5bmw1 will notify the National Privacy Commission within seventy-two (72) hours of discovery and will directly notify affected data subjects as soon as practicable, in compliance with Republic Act No. 10173.
Contents
Section 1
This Privacy Policy governs the collection and processing of personal data by 5bmw1 in its capacity as the operator of the online gaming platform accessible at https://5bmw1.one (the "Platform"). 5bmw1 acts as the Personal Information Controller as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines (the "DPA").
This Policy applies to all personal data collected from individuals who: (a) register an account on the 5bmw1 Platform; (b) visit the Platform without registering; (c) contact 5bmw1's customer support team; or (d) interact with 5bmw1 through any official communication channel.
5bmw1 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation ("PAGCOR"), which imposes additional data handling obligations — particularly in relation to KYC records, transaction data, and AML monitoring — that supplement and are consistent with the DPA's requirements.
Section 2
5bmw1 collects the following categories of personal data, depending on how you interact with the Platform:
2.1 Identity & Registration Data
2.2 Identity Verification (KYC) Documents
2.3 Financial Data
2.4 Technical & Device Data
2.5 Gaming Activity Data
2.6 Communication Data
Section 3
5bmw1 collects personal data through the following means:
Section 4
Under the Data Privacy Act of 2012, 5bmw1 processes personal data on the following legal bases:
| Processing Activity | Legal Basis | Applicable Law |
|---|---|---|
| Account registration and identity verification | Contract performance; Legal obligation | DPA s.12(b); PAGCOR licensing conditions |
| KYC and age verification | Legal obligation | PAGCOR regulations; Republic Act No. 9160 (AMLA) |
| Payment processing and transaction records | Contract performance; Legal obligation | DPA s.12(b); AMLA; PAGCOR |
| Responsible gaming monitoring and tool activation | Legal obligation; Legitimate interest | PAGCOR responsible gaming framework |
| AML monitoring and suspicious activity reporting | Legal obligation | Republic Act No. 9160, as amended |
| Customer support communications | Contract performance; Legitimate interest | DPA s.12(b)(f) |
| Marketing communications (opt-in only) | Consent | DPA s.12(a) |
| Platform security and fraud prevention | Legitimate interest | DPA s.12(f) |
Section 5
Your personal data is used by 5bmw1 for the following specific purposes:
5bmw1 does not use automated decision-making or profiling that produces legal or similarly significant effects on Players without human review.
Section 6
5bmw1 does not sell, rent, or commercially license personal data to third parties. Data is shared only in the following circumstances and only to the extent strictly necessary:
6.1 Regulatory Authorities
5bmw1 is legally required to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies upon lawful request. This includes transaction reports, KYC records, and suspicious activity reports as required by the AMLA and PAGCOR's licensing conditions.
6.2 Payment Processing Partners
For the purpose of processing deposits and withdrawals, 5bmw1 shares the minimum necessary personal data (account holder name, account number, transaction reference) with GCash, PayMaya, BDO, BPI, and Metrobank. These partners process data as independent Personal Information Controllers under their own privacy policies and Philippine banking regulations.
6.3 Game Content Providers
Game providers whose products are integrated into the 5bmw1 Platform — such as Pragmatic Play, JILI, and PG Soft — may receive anonymised session data for the purpose of game performance monitoring and regulatory certification. These providers do not receive directly identifying personal data such as your name, ID document, or payment details.
6.4 Identity Verification Services
Where 5bmw1 uses a third-party KYC verification service, your identity document images and liveness data are processed by that service as a data processor acting under 5bmw1's instructions and bound by a Data Processing Agreement consistent with the DPA.
6.5 Professional Advisers
Legal counsel, auditors, and compliance advisers engaged by 5bmw1 may have access to personal data where necessary for the provision of their professional services, subject to legal professional privilege and confidentiality obligations.
Section 7
Where personal data is transferred outside the Philippines — for example, to game content providers or technology infrastructure partners whose servers are located in other jurisdictions — 5bmw1 ensures that such transfers comply with the DPA's requirements for cross-border data transfers. Specifically, 5bmw1 requires that recipient organisations in other countries provide a level of data protection equivalent to that guaranteed under Philippine law, either through binding contractual safeguards (Standard Contractual Clauses) or by virtue of operating under a regulatory framework recognised as adequate by the NPC.
Players who wish to understand more about the specific safeguards applied to any international transfer of their data may submit a request to the 5bmw1 Data Protection Officer using the contact details in Section 14.
Section 8
5bmw1 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| KYC and identity documents | 5 years after account closure | PAGCOR licensing & AMLA requirements |
| Financial transaction records | 5 years after account closure | AMLA; BIR tax record requirements |
| Gaming activity logs | 3 years after account closure | PAGCOR audit requirements |
| Customer support records | 3 years from last interaction | Dispute resolution; legal proceedings |
| Marketing consent records | Duration of account activity | DPA consent documentation |
| Technical / server logs | 12 months from creation | Security monitoring; fraud detection |
| Responsible gaming records | 5 years after account closure | PAGCOR responsible gaming framework |
At the end of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Where data is anonymised, it may be retained for statistical purposes without restriction.
Section 9
5bmw1 uses cookies and similar technologies on the Platform to ensure the Platform functions correctly, to maintain your session while you are logged in, and to understand how the Platform is being used in aggregate. The following cookie types are used:
9.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function. They maintain your login session, store your game state, and enable payment processing flows. These cookies cannot be disabled without preventing core Platform functionality from working.
9.2 Performance & Analytics Cookies
These cookies collect anonymised data about how Players navigate the 5bmw1 Platform — which pages are visited most, where errors occur, and how long sessions last. This data is used solely to improve Platform performance and user experience. No personally identifying information is associated with analytics cookies.
9.3 Functional Cookies
These cookies remember your preferences — such as language settings, game lobby filter preferences, and notification settings — so that you do not need to re-configure them on each visit. Disabling these cookies will not prevent Platform access but may affect your experience.
9.4 Cookie Management
You can manage cookie preferences through your browser settings. Most mobile browsers on Android and iOS support cookie management. Clearing cookies will log you out of your 5bmw1 session. 5bmw1 does not use third-party advertising cookies or cross-site tracking pixels.
Section 10
Under Republic Act No. 10173 (the Data Privacy Act of 2012), all Filipino data subjects have the following rights with respect to their personal data held by 5bmw1. These rights are genuine and enforceable — 5bmw1 will process all valid requests within thirty (30) calendar days of receipt.
Right of Access (Section 16, DPA)
You have the right to request a copy of all personal data that 5bmw1 holds about you, information about how it is being processed, and the identities of any third parties to whom it has been disclosed. Requests will be fulfilled within 30 days and are free of charge for the first request per calendar year.
Right to Correction (Section 16, DPA)
If any personal data held by 5bmw1 is inaccurate, outdated, or incomplete, you have the right to request its correction. Many details can be updated directly in your account settings. For identity and KYC data corrections, contact 5bmw1 support with supporting documentation.
Right to Erasure or Blocking (Section 16, DPA)
You may request that 5bmw1 delete or block personal data that is no longer necessary for the stated purpose, where consent has been withdrawn, or where the data has been unlawfully processed. This right does not apply where retention is required by PAGCOR, AMLA, or other applicable Philippine law.
Right to Object (Section 16, DPA)
You have the right to object to the processing of your personal data for purposes based on legitimate interest, including profiling for marketing purposes. Objection to processing required by PAGCOR or Philippine law is not possible where such processing is mandatory for regulatory compliance.
Right to Data Portability (Section 16, DPA)
You have the right to receive a copy of the personal data you have provided to 5bmw1 in a structured, commonly used, machine-readable format, and to transmit that data to another personal information controller. This right applies to data processed on the basis of consent or contract performance.
Right to Lodge a Complaint (NPC)
If you believe that 5bmw1 has processed your personal data in violation of the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. 5bmw1 encourages you to first contact the 5bmw1 DPO to allow an opportunity for internal resolution before escalating to the NPC.
To exercise any of the above rights, submit a written request to the 5bmw1 Data Protection Officer using the contact details in Section 14. Include your full name, account username, the specific right you wish to exercise, and sufficient detail to allow 5bmw1 to identify and process your request. Identity verification may be required before sensitive requests are actioned.
Section 11
The 5bmw1 Platform is strictly restricted to individuals who are twenty-one (21) years of age or older in accordance with PAGCOR's regulatory requirements. The Platform is not directed at, and does not knowingly collect personal data from, individuals under the age of 21.
If 5bmw1 discovers or is notified that it has collected personal data from an individual under the age of 21, it will: (a) immediately suspend the associated account; (b) delete or permanently anonymise the minor's personal data to the extent not required to be retained for PAGCOR regulatory reporting; and (c) report the incident to PAGCOR in accordance with applicable regulatory requirements.
Parents and guardians who are aware that a minor has provided personal data to 5bmw1 should contact the 5bmw1 DPO immediately using the contact details in Section 14.
Section 12
5bmw1 implements the following technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:
While 5bmw1 takes data security seriously and applies industry-standard measures, no digital system can guarantee absolute security. Players can contribute to their own account security by using strong, unique passwords, enabling two-factor authentication, and promptly notifying 5bmw1 of any suspected unauthorised access to their account.
Section 13
5bmw1 may update this Privacy Policy from time to time to reflect changes in data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or Platform services. Material changes will be communicated to registered Players via their registered email address at least fourteen (14) days prior to taking effect, unless a shorter notice period is required by law.
The "Last Updated" date at the top of this Policy indicates when the most recent version took effect. Your continued use of the 5bmw1 Platform after the effective date of any revised Policy constitutes your acknowledgement of the changes. If you do not accept a revised Policy, you may close your account before the effective date by contacting 5bmw1 support.
Previous versions of this Privacy Policy are available upon request from the 5bmw1 Data Protection Officer.
Section 14
For all data privacy matters — including data rights requests, privacy complaints, and inquiries about this Policy — contact the 5bmw1 Data Protection Officer through the following channels:
All data rights requests will be acknowledged within five (5) business days and fully responded to within thirty (30) calendar days in accordance with the DPA's implementing rules. Complex requests may require additional time, in which case 5bmw1 will notify you of the extended processing period and the reason for the extension.
If you are not satisfied with 5bmw1's response to a data privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC's contact and complaint procedures are published on the NPC's official government website.
This Privacy Policy was last reviewed and updated on 1 January 2026. The current version supersedes all prior 5bmw1 privacy notices.
5bmw1 is built on transparency — in the games we offer, the way we handle your money, and the way we treat your personal data. Explore the full 5bmw1 platform knowing your data is protected under the Philippine Data Privacy Act and PAGCOR's regulatory framework. Players must be 21 or older.