22bmw Privacy Policy

22bmw ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of all individuals who interact with our online casino platform at 22bmw.app. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of the 22bmw website and all associated services.

This policy applies to all registered players, visitors, and any person whose personal data is processed by 22bmw in the course of providing its services. It covers data collected through the website, mobile-optimized interfaces, customer support channels, and any other touchpoint through which you interact with the 22bmw platform.

We process personal data only for legitimate, specified, and explicit purposes. We do not sell your personal data to third parties. We do not use your data for purposes incompatible with those disclosed in this policy. Your trust is the foundation of our relationship, and we take our data protection obligations seriously.

For the purposes of the Philippine Data Privacy Act of 2012, 22bmw acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the operation of the platform. As PIC, 22bmw determines the purposes and means of processing your personal data.

Where 22bmw engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or analytics platforms), those providers act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with 22bmw's instructions and applicable data protection law.

22bmw collects the following categories of personal data in the course of providing its services:

We collect only the minimum personal data necessary for the stated purposes. Where data is required by law or regulation (such as KYC documentation for AML compliance), failure to provide it may prevent us from opening or maintaining your account.

22bmw collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated Technologies: Data collected automatically when you access the platform, including cookies, web beacons, server logs, and similar tracking technologies (see Section 9);
• Third-Party Sources: Data received from identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and publicly available sources where permitted by law;
• Regulatory Sources: Data received from PAGCOR or other competent Philippine authorities in connection with regulatory compliance obligations.

22bmw processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table sets out the primary purposes for which we process personal data and the corresponding legal basis:

• Account Registration & Management: Processing is necessary for the performance of the contract between you and 22bmw. Without this data, we cannot create or maintain your account;
• Identity Verification (KYC): Processing is required to comply with our legal obligations under Philippine AML regulations and PAGCOR licensing requirements;
• Payment Processing: Processing is necessary for the performance of the contract, specifically to facilitate deposits and withdrawals in Philippine Peso (₱);
• Fraud Prevention & Security: Processing is necessary for the legitimate interests of 22bmw in protecting the platform and its users from fraud, money laundering, and other illegal activity;
• Responsible Gaming Monitoring: Processing is necessary to comply with our legal and regulatory obligations to identify and assist players who may be experiencing gambling-related harm;
• Customer Support: Processing is necessary for the performance of the contract and for our legitimate interest in resolving disputes and improving service quality;
• Marketing Communications: Processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time by updating your communication preferences in your account settings;
• Platform Analytics & Improvement: Processing is based on our legitimate interest in understanding how the platform is used and improving the user experience.

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

22bmw does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

All third-party processors engaged by 22bmw are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with our documented instructions.

22bmw retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data disposal procedures. Anonymized data that can no longer identify any individual may be retained indefinitely for statistical and analytical purposes.

22bmw implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 22bmw platform is encrypted in transit using industry-standard SSL/TLS protocols;
• Encryption at Rest: Sensitive personal data, including financial information and identity documents, is encrypted when stored on our servers;
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Intrusion Detection: Our infrastructure is monitored 24/7 by automated intrusion detection and prevention systems;
• Regular Security Audits: We conduct periodic penetration testing and security audits of our platform and infrastructure;
• Staff Training: All 22bmw personnel with access to personal data receive regular data protection and security awareness training;
• Incident Response: We maintain a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected individuals in accordance with the Data Privacy Act.

22bmw uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytical data. A cookie is a small text file placed on your device when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without affecting platform functionality;
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limits you have set;
• Analytical Cookies: Help us understand how players use the platform — which pages are visited most, where users encounter difficulties, and how navigation flows. This data is aggregated and anonymized;
• Security & Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, including the use of multiple accounts and automated bot activity.

22bmw does not use third-party advertising or behavioral tracking cookies. We do not share cookie data with advertising networks or social media platforms for targeting purposes.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the platform. For more information on managing cookies, refer to your browser's help documentation.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 22bmw:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected and processed — which is the primary purpose of this Privacy Policy;
• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being processed;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you. You can update most account information directly through your account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You may object to the processing of your personal data where processing is based on our legitimate interests or for direct marketing purposes;
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact our Data Privacy Officer at [email protected]. We will respond to all verified requests within 30 calendar days. We may need to verify your identity before processing your request.

The 22bmw platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. We do not knowingly collect personal data from individuals under the age of 21.

During the registration process, all applicants are required to confirm that they are at least 21 years of age and to provide a government-issued ID for age verification. Any account found to belong to a person under 21 will be immediately suspended, all balances forfeited, and the matter reported to the relevant authorities where required by law.

If you believe that a minor has registered an account on the 22bmw platform or that personal data of a minor has been collected without appropriate consent, please contact us immediately at [email protected] so that we can take prompt corrective action.

Some of the third-party service providers engaged by 22bmw — including cloud infrastructure providers and game software developers — may process personal data outside of the Philippines. Where such international transfers occur, 22bmw ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012.

Safeguards for international transfers may include contractual clauses that impose data protection obligations on the recipient, or transfers to jurisdictions that have been assessed as providing an adequate level of data protection. We do not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate contractual or technical safeguards.

The 22bmw platform may contain links to third-party websites or services, including game provider information pages and payment processor portals. This Privacy Policy applies solely to data processed by 22bmw and does not extend to any third-party websites or services.

We encourage you to review the privacy policies of any third-party services you access through or in connection with the 22bmw platform. 22bmw accepts no responsibility or liability for the privacy practices of third-party websites or services.

22bmw reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email and/or through a prominent notice on the platform prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the 22bmw platform following the posting of an updated Privacy Policy constitutes your acknowledgment of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 22bmw handles your personal data, please contact our Data Privacy Officer:

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and implementing the Data Privacy Act of 2012.

We are committed to working with you to resolve any privacy concerns fairly and transparently. We encourage you to contact us directly in the first instance before escalating to the NPC, as most concerns can be resolved promptly through our internal process.