bm33 Privacy Policy – Your Data, Protected
At bm33, your personal information is treated with the same care we bring to every game on our platform. This Privacy Policy explains exactly what data we collect, why we collect it, how it is used and stored, and the rights you have as a registered player under Philippine law.
Our Privacy Commitments
How bm33 Keeps Your Data Safe
From the moment you register your bm33 account to every GCash deposit you make, we apply strict data protection standards across the board. Here are the six core commitments that shape our privacy practices.
End-to-End Encryption
All data transmitted between your browser or device and the bm33 platform is protected with 256-bit SSL/TLS encryption — the same standard used by major Philippine banks like BPI and BDO. Your login credentials, payment details, and personal information are never transmitted in plain text.
Philippine Data Privacy Act Compliance
bm33 fully complies with Republic Act No. 10173, the Data Privacy Act of 2012, and the implementing rules and regulations set by the National Privacy Commission (NPC). Your rights as a data subject under Philippine law are fully recognized and enforceable on our platform.
No Selling of Personal Data
bm33 does not sell, rent, or trade your personal information to third-party advertisers or data brokers — full stop. Any sharing of data with third parties is limited strictly to what is necessary for platform operations, payment processing, KYC verification, and regulatory compliance.
Purpose Limitation
We only collect data that has a clear, legitimate purpose. Information collected during registration is used solely for account management, KYC verification, fraud prevention, and service improvement. We do not collect data speculatively or beyond what is reasonably necessary.
Your Rights, Always Respected
You have the right to access, correct, delete, and port your personal data held by bm33 at any time. Requests are handled within fifteen (15) business days in accordance with NPC guidelines. Simply contact our support team via Live Chat or email to exercise any of your data subject rights.
Transparent Data Practices
This Privacy Policy is written in plain, accessible English so that every Filipino player can understand exactly how their data is handled — not buried in legalese. We update this document whenever our practices change and notify all registered players by email prior to changes taking effect.
1 Scope & Application
This Privacy Policy applies to bm33 ("bm33", "we", "us", "our"), the operator of the online gaming and sports betting platform accessible at bm33.vu. It governs the collection, use, storage, sharing, and protection of personal data provided by or collected from users ("Player", "you", "your") in connection with any use of the bm33 platform.
This policy applies to:
- All registered account holders on bm33.vu;
- Visitors who browse the bm33 website without registering;
- Individuals who contact bm33 customer support via Live Chat or email;
- Any person whose personal data is collected through bm33's KYC verification processes.
This policy must be read alongside the bm33 Terms & Conditions and Responsible Gaming Policy, all of which together constitute the complete agreement governing your use of the platform.
2 Data We Collect
bm33 collects personal data that is necessary for the provision of its services, regulatory compliance, and the protection of all users. The categories of personal data we collect are set out below.
2.1 Registration & Identity Data
- Full legal name (as it appears on your government-issued ID);
- Date of birth (for age verification — must be 21 or older);
- Residential address (barangay, city/municipality, province);
- Email address;
- Mobile phone number (Philippine number preferred);
- Username and encrypted password.
2.2 KYC & Verification Data
- Copies of government-issued photo ID (Philippine national ID, passport, driver's licence, SSS/GSIS ID, PRC ID, voter's ID);
- Proof of residential address (utility bill, bank statement dated within 3 months);
- Selfie photographs or video verification images taken for identity matching;
- Payment method ownership documentation (e.g., GCash account screenshot).
2.3 Financial & Transaction Data
- Deposit amounts, dates, and payment methods (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, 7-Connect, USDT);
- Withdrawal requests, amounts, and processing status;
- Account balance history;
- Bonus claims and wagering activity records.
2.4 Gaming Activity Data
- Game session logs (game played, date/time, duration, stakes, outcome);
- Sports betting selections, odds accepted, and bet settlement records;
- Win/loss history and cumulative gaming statistics;
- Responsible gaming tool usage (deposit limits set, self-exclusion requests).
2.5 Technical & Device Data
- IP address and approximate geolocation (province/region level);
- Device type, operating system, and browser version;
- Session timestamps, page views, and navigation paths;
- Cookie identifiers and similar tracking technologies (see Section 9).
2.6 Communications Data
- Live Chat transcripts and email correspondence with bm33 support;
- Feedback, complaint, and dispute records;
- Marketing email preferences and opt-in/opt-out records.
Note: bm33 does not collect sensitive personal information as defined under the Data Privacy Act (e.g., health data, biometric data beyond ID photos, political or religious affiliation) unless specifically required by PAGCOR regulations or applicable law, and only with your explicit consent where required.
3 How Data Is Collected
bm33 collects your personal data through the following means:
| Collection Method | Data Collected |
|---|---|
| Account Registration Form | Name, date of birth, email, mobile number, address, username, password |
| KYC Verification Portal | Government ID scans, selfie photos, address proof documents |
| Payment Processing | Transaction amounts, payment method details, timestamps |
| Platform Usage (Automatic) | IP address, device data, session logs, game activity records |
| Cookies & Tracking Technologies | Session cookies, preference cookies, analytics data |
| Customer Support Interactions | Live Chat transcripts, email content, complaint details |
| Third-Party KYC Providers | Identity verification results, fraud screening flags |
4 Purposes of Processing
bm33 processes your personal data for the following clearly defined purposes. We do not process your data for any purpose not listed here without first obtaining your explicit consent or as required by law.
- Account Management: Creating, maintaining, and securing your bm33 player account;
- Identity & Age Verification: Confirming that you are who you say you are, and that you are 21 years of age or older as required by PAGCOR regulations;
- Payment Processing: Facilitating deposits and withdrawals in Philippine Peso (PHP) via your chosen payment method;
- Regulatory Compliance: Meeting obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
- Fraud Prevention & Platform Security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and bonus abuse;
- Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and enabling players to use self-exclusion, deposit limit, and cooling-off tools;
- Customer Support: Responding to your queries, complaints, and dispute requests in a timely and effective manner;
- Marketing Communications: Sending you promotions, bonus offers, and platform updates — only where you have opted in to receive such communications;
- Platform Improvement: Analysing aggregated and anonymised usage data to improve platform performance, game selection, and user experience;
- Legal Proceedings: Preserving records and responding to lawful requests from courts, law enforcement, PAGCOR, or the Anti-Money Laundering Council (AMLC).
5 Legal Basis for Processing
Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, bm33 processes your personal data on the following legal grounds:
- Contractual Necessity: Processing required to fulfil our contractual obligations to you under the bm33 Terms & Conditions, including account management and payment processing;
- Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA requirements, NPC data protection obligations, and other applicable Philippine laws;
- Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your fundamental rights;
- Consent: Processing for marketing communications and optional platform features, where your explicit opt-in consent has been obtained and may be withdrawn at any time.
Withdrawing Consent: Where processing is based on your consent, you may withdraw that consent at any time by updating your communication preferences in your account settings or by contacting bm33 support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
6 Data Sharing & Third Parties
bm33 does not sell your personal data. We share personal data with third parties only where strictly necessary for the following purposes:
6.1 Payment Service Providers
To process deposits and withdrawals, bm33 shares necessary transaction data with payment processors including GCash (G-Xchange Inc.), PayMaya (PayMaya Philippines Inc.), BPI, BDO Unibank, Metrobank, Visa, Mastercard, and other accepted payment networks. These providers are contractually bound to process your data solely for payment facilitation purposes.
6.2 KYC & Identity Verification Providers
bm33 uses regulated third-party KYC providers to verify your identity and age as required by PAGCOR and AMLA. These providers may process your ID documents and biometric data in accordance with their own privacy policies and applicable Philippine law.
6.3 Game Content Providers
Game providers supplying content to the bm33 platform may receive game session data (such as bet amounts and game outcomes) for the purpose of game operation, fairness auditing, and dispute resolution. Personal identifying information is not shared with game providers beyond what is technically necessary.
6.4 Regulatory & Law Enforcement Authorities
bm33 is legally obligated to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other relevant Philippine government authorities upon lawful request or as mandated by applicable regulations.
6.5 Professional Advisors
bm33 may share data with legal advisors, auditors, or accountants on a confidential basis where required for the legitimate operation of the business. All such parties are bound by confidentiality obligations.
No International Transfers: bm33 does not transfer your personal data outside the Philippines to third countries without ensuring that an adequate level of data protection is in place, consistent with NPC requirements and the Data Privacy Act.
7 Data Retention
bm33 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, and to meet our legal and regulatory obligations. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Registration Data | Duration of account + 5 years after closure | PAGCOR licensing requirement |
| KYC & Verification Documents | Duration of account + 5 years after closure | AMLA compliance obligation |
| Financial Transaction Records | 5 years from date of transaction | AMLA and tax law obligations |
| Gaming Activity Logs | 3 years from date of activity | PAGCOR audit requirements |
| Customer Support Records | 2 years from date of interaction | Dispute resolution & service quality |
| Marketing Preferences | Until opt-out or account closure | Consent-based |
| Technical & Device Logs | 12 months from date of collection | Security & fraud prevention |
After the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification. Retention periods may be extended where required by ongoing legal proceedings or regulatory investigations.
8 Security Measures
bm33 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:
- 256-bit SSL/TLS Encryption: All data transmitted between your device and bm33 servers is encrypted in transit;
- Encrypted Data Storage: Sensitive personal data including passwords (hashed and salted), ID documents, and financial records are encrypted at rest using AES-256 encryption;
- Access Controls: Personal data is accessible only to bm33 personnel who require it to perform their specific job functions, on a strict need-to-know basis;
- Two-Factor Authentication (2FA): All internal bm33 staff systems require 2FA. Player accounts can also enable 2FA for added protection;
- Regular Security Audits: bm33 conducts periodic security audits and penetration testing by qualified cybersecurity professionals;
- Breach Response Protocol: In the event of a personal data breach affecting player rights, bm33 will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, as required by the Data Privacy Act.
Your Responsibilities: The security of your account also depends on you. Please use a strong, unique password, enable 2FA on your bm33 account, and never share your login credentials with anyone. bm33 support staff will never ask for your password.
9 Cookies & Tracking Technologies
bm33 uses cookies and similar technologies on the bm33.vu website to improve platform performance, maintain your session, and understand how players interact with our content. The following types of cookies are used:
9.1 Strictly Necessary Cookies
These cookies are essential for the bm33 platform to function. They maintain your login session, enable secure transactions, and prevent cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without affecting platform functionality.
9.2 Performance & Analytics Cookies
These cookies collect aggregated, anonymised data about how players use the bm33 platform — such as which game categories are most visited and how players navigate between sections. This data helps us continuously improve the platform experience for Filipino players.
9.3 Preference Cookies
These cookies remember your settings and preferences, such as your preferred language, notification settings, and display preferences, so you do not have to reconfigure them on each visit.
9.4 Managing Cookies
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the bm33 platform. bm33 does not use third-party advertising cookies or share cookie data with external advertising networks.
10 Your Data Subject Rights
As a player and data subject under the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by bm33. All rights can be exercised by contacting bm33 support via Live Chat or at [email protected].
Right to AccessRequest a copy of all personal data bm33 holds about you, including how it is used and with whom it is shared.
Right to CorrectionRequest correction of any inaccurate, incomplete, or outdated personal data in your bm33 account.
Right to ErasureRequest deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to ObjectObject to the processing of your personal data for marketing purposes at any time. We will stop immediately upon receipt of your request.
Right to Data PortabilityRequest a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service.
Right to Restrict ProcessingRequest that bm33 temporarily restrict processing of your data while a correction or objection request is being reviewed.
Right to Withdraw ConsentWhere processing is based on consent (e.g., marketing emails), withdraw your consent at any time via account settings or support request.
Right to ComplainLodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
bm33 aims to respond to all data subject rights requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days with prior written notice to you.
11 Minors & Age Verification
The bm33 platform is strictly for individuals who are 21 years of age or older, in accordance with PAGCOR regulations and Philippine gaming law. bm33 does not knowingly collect personal data from any person under the age of 21.
All registrations are subject to age verification as part of the KYC process. Where bm33 discovers that personal data has been collected from an individual under 21 years of age, we will:
- Immediately suspend the account;
- Void any bonuses or winnings associated with the account;
- Delete all personal data collected in connection with the account without undue delay;
- Report the incident to PAGCOR as required by our licensing conditions.
If you believe a minor has registered on bm33, please report this immediately via Live Chat or at [email protected]. We take underage gambling extremely seriously and will act on all credible reports without delay.
12 Changes to This Privacy Policy
bm33 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, new regulatory requirements, or improvements to our platform. When material changes are made, bm33 will:
- Update the "Last Updated" date at the top of this page;
- Notify all registered players via email at least seven (7) days before the changes take effect;
- Display a prominent notice on the bm33.vu homepage during the notification period.
Your continued use of the bm33 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you may close your account by contacting bm33 support prior to the effective date.
We encourage all players to review this Privacy Policy periodically to stay informed about how bm33 protects your personal data. The most current version of this policy is always available at bm33.vu/privacy-policy.
13 Contact & Data Protection Officer
bm33 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and the regulations of the National Privacy Commission. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us through the following channels:
- Live Chat: Available 24/7 directly on the bm33.vu platform — the fastest way to reach our support team;
- Email: [email protected] — for formal data subject rights requests and privacy-related inquiries;
- Data Protection Officer: [email protected] — for escalated privacy concerns and NPC-related matters.
For complaints that remain unresolved after engaging with bm33's support and DPO, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines.
Governing Law: This Privacy Policy is governed by the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and any applicable issuances of the National Privacy Commission and PAGCOR.
Your Privacy Is Protected.
Your Gaming Experience Awaits.
Now that you know exactly how bm33 safeguards your personal data, you can play with confidence. Join thousands of Filipino players who trust bm33 for a safe, fair, and exciting online gaming experience — backed by PAGCOR regulation and bank-grade security.