bmy881 Privacy Policy

This Privacy Policy ("Policy") describes how bmy881 ("bmy881," "we," "us," or "our") collects, uses, stores, and protects the personal information of players and visitors who access the bmy881 online gaming platform at bmy881.app and any associated mobile applications or services.

bmy881 is committed to protecting the privacy and personal data of all users, particularly Filipino players, in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering an account on bmy881, accessing the platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the bmy881 platform.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal information is bmy881, operating the platform at bmy881.app and serving players primarily within the Republic of the Philippines.

bmy881 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable Philippine data protection law. You may contact the DPO directly for any privacy-related inquiries, requests, or complaints:

• Role: Data Protection Officer, bmy881
• Email: [email protected]
• Response Time: Within 15 business days of receipt of your request

bmy881 is registered with the National Privacy Commission as required under RA 10173. Our data processing activities are conducted in accordance with the principles of transparency, legitimate purpose, and proportionality as mandated by Philippine law.

bmy881 collects personal data from you in the following categories, depending on how you interact with the platform:

A. Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (for 21+ age verification)
• Residential address (including barangay, city, province)
• Philippine mobile number
• Email address
• Username and encrypted password

B. Identity Verification (KYC) Data

• Copies of government-issued photo ID (e.g., Philippine passport, driver's license, PhilSys National ID, UMID, SSS ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or liveness check image for biometric verification where required
• Proof of payment method ownership (e.g., GCash account screenshot)

C. Financial & Transaction Data

• Deposit and withdrawal transaction records
• Payment method details (e-wallet account names, bank account names — not full card or account numbers)
• Account balance history
• Bonus and promotion redemption records

D. Gaming Activity Data

• Game session logs (games played, wager amounts, outcomes)
• Betting history across all bmy881 game categories
• Responsible gaming tool usage (deposit limits, session limits, self-exclusion requests)

E. Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and similar tracking technologies (see Section 6)

F. Communications Data

• Customer support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing preference settings

bmy881 uses your personal data for the following specific purposes:

bmy881 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required for fraud prevention or regulatory compliance.

Under the Data Privacy Act of 2012, bmy881 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the bmy881 Terms and Conditions, including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and optional analytics features, where you have provided explicit, informed consent. You may withdraw this consent at any time through your account settings.

bmy881 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The following types of cookies are used on bmy881.app:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the bmy881 platform, helping us improve the user experience. These are only set with your consent.
• Security Cookies: Used for fraud detection and prevention, including device fingerprinting to identify suspicious login attempts.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from accessing certain features of the bmy881 platform. bmy881 does not use third-party advertising cookies or share cookie data with advertising networks.

bmy881 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• KYC & Identity Verification Providers: Third-party identity verification services that assist bmy881 in fulfilling its KYC obligations. These providers are contractually bound to process your data solely for verification purposes.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your deposits and withdrawals.
• Game Providers: Licensed game studios and live dealer operators whose games are available on the bmy881 platform. Game session data is shared to facilitate gameplay and resolve disputes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or regulatory directive.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other lawful process.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on bmy881's behalf under strict data processing agreements.

Some of bmy881's service providers and game partners may be located outside the Philippines. Where your personal data is transferred to a country outside the Philippines, bmy881 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012.

These safeguards may include:

• Contractual clauses approved by the National Privacy Commission requiring the recipient to protect your data to Philippine standards
• Transfers to countries that the NPC has determined provide an adequate level of data protection
• Binding corporate rules where the recipient is part of the same corporate group as bmy881

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting our Data Protection Officer.

bmy881 retains your personal data for the periods set out below, after which data is securely deleted or anonymized:

Where retention is required by law (particularly under the Anti-Money Laundering Act), bmy881 cannot delete your data earlier than the legally mandated period, even upon your request.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bmy881:

• Right to Be Informed: The right to know what personal data bmy881 collects about you, how it is used, and with whom it is shared — as set out in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data bmy881 holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by bmy881. You may update basic account information directly through your account dashboard.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to bmy881's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on bmy881's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe bmy881 has violated your data privacy rights. The NPC can be reached at www.privacy.gov.ph.

To exercise any of these rights, please submit a written request to our Data Protection Officer at [email protected]. bmy881 will respond to all valid requests within 15 business days. We may request proof of identity before processing your request to protect against unauthorized access to your data.

The bmy881 platform is strictly intended for persons who are 21 years of age or older, in accordance with Philippine gambling regulations. bmy881 does not knowingly collect personal data from any person under the age of 21.

If bmy881 discovers or is notified that personal data has been collected from a person under 21 years of age, the following actions will be taken immediately:

• The associated account will be suspended and permanently closed
• All personal data collected from the underage individual will be securely deleted
• Any deposits made will be refunded to the payment method used, subject to verification
• The incident will be reported to the relevant regulatory authorities as required

If you are a parent or guardian and believe that your child under 21 has registered on bmy881, please contact our support team immediately at [email protected].

bmy881 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including KYC documents and financial records, is encrypted using AES-256.
• Access Controls: Access to personal data is restricted to bmy881 staff and contractors who have a legitimate need to access it for their job functions. All access is logged and audited.
• Two-Factor Authentication: bmy881 supports and encourages the use of two-factor authentication (2FA) for player accounts to prevent unauthorized access.
• Penetration Testing: bmy881's platform undergoes regular security assessments and penetration testing by independent cybersecurity professionals.
• Incident Response: bmy881 maintains a documented data breach response plan. In the event of a breach, affected players and the NPC will be notified within 72 hours as required by RA 10173.
• Staff Training: All bmy881 staff who handle personal data receive regular training on data protection obligations and security best practices.

While bmy881 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for maintaining the confidentiality of your bmy881 login credentials and for notifying us immediately if you suspect unauthorized access to your account.

bmy881 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, bmy881 will notify registered players via email or through a prominent notice on the platform at least seven (7) days before the changes take effect.

The effective date at the top of this Policy indicates when the current version came into force. The most current version of this Privacy Policy will always be available at bmy881.app/privacy-policy.

Your continued use of the bmy881 platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you must stop using the platform and may request account closure in accordance with our Terms and Conditions.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bmy881, please contact our Data Protection Officer:

• Data Protection Officer: bmy881 Privacy Team
• Email: [email protected]
• General Support: [email protected]
• Response Time: Within 15 business days of receipt

For complaints that have not been resolved to your satisfaction by bmy881, you may escalate to the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• Website: privacy.gov.ph
• Address: 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila, Philippines

bmy881 takes all privacy complaints seriously and will work diligently to resolve any concerns you raise regarding the handling of your personal data.