55bme Privacy Policy – How We Protect Your Data
At 55bme, your personal data belongs to you. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you hold under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
Our Commitments to Your Privacy
Before you read the full policy, here are the six core privacy commitments that govern how 55bme handles every piece of data it collects from Filipino players.
Data Minimisation
55bme collects only the personal data that is strictly necessary for account creation, regulatory compliance, and service delivery. We do not collect data speculatively or for undefined future purposes. If we don't need it to serve you, we don't ask for it.
No Data Sales — Ever
55bme does not sell, rent, or trade your personal information to third parties for commercial purposes. Your contact details, gaming history, and financial information are never monetised by being passed to advertisers, data brokers, or any other commercial third party outside the 55bme service ecosystem.
256-bit Encryption at Rest and In Transit
All personal data held by 55bme is encrypted at rest using AES-256 encryption. All data transmitted between your device and 55bme's servers is protected by TLS 1.3. This is the same cryptographic standard used by major Philippine commercial banks for online banking services.
Your Rights Under RA 10173
As a Filipino data subject, you hold specific rights under the Data Privacy Act of 2012 — including the right to access your data, correct inaccurate information, withdraw consent, and request deletion. 55bme provides clear channels to exercise all of these rights, detailed in Section 10 of this Policy.
Defined Data Retention Periods
55bme retains personal data only for as long as required to fulfil the purpose for which it was collected, or as required by Philippine law. After the applicable retention period, data is securely deleted or anonymised. Retention schedules are published in Section 9 of this Policy.
Breach Notification Within 72 Hours
In the unlikely event of a personal data breach that creates a risk to your rights and freedoms, 55bme will notify affected account holders and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.
Contents
- 1. Introduction
- 2. Data Controller Details
- 3. Data We Collect
- 4. How We Collect Data
- 5. Legal Basis for Processing
- 6. How We Use Your Data
- 7. Sharing Your Data
- 8. Cookies and Tracking
- 9. Data Retention
- 10. Your Privacy Rights
- 11. Data Security
- 12. Children's Privacy
- 13. Cross-Border Transfers
- 14. Changes to This Policy
- 15. Contact & DPO
1 Introduction
This Privacy Policy ("Policy") is issued by 55bme, the operator of the online gaming platform accessible at 55bme.cam ("Platform"). It governs the collection, processing, storage, and disclosure of personal data provided by or generated by users ("Players", "you") in connection with the use of any 55bme product or service.
55bme is committed to protecting the privacy of all individuals who interact with the Platform in compliance with the Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines. This Policy is designed to give you clear, honest information about how your data is handled so you can make informed decisions about your use of the 55bme Platform.
Scope: This Policy applies to all personal data collected through the 55bme website at 55bme.cam, any mobile-optimised interface, customer support communications, and all promotional interactions related to 55bme services. It applies to all registered account holders and visitors to the Platform regardless of location within the Philippines.
By registering an account, accessing the Platform, or using any 55bme service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, please do not proceed with registration or use of the Platform.
2 Data Controller Details
For the purposes of the Data Privacy Act of 2012, 55bme is the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with Platform operations. The Data Protection Officer (DPO) appointed by 55bme may be contacted via the support channel at [email protected] for all data privacy-related requests, complaints, and enquiries.
55bme has registered its data processing activities with the National Privacy Commission (NPC) of the Philippines as required under NPC Circular 17-01. A copy of our NPC registration details is available upon written request submitted through the support channel.
3 Personal Data We Collect
55bme collects personal data across several categories, depending on your level of interaction with the Platform. The categories below describe all data types that may be collected from registered account holders at any stage of the account lifecycle.
3.1 Identity and Contact Data
- Full legal name as stated on your government-issued Philippine ID
- Date of birth (for age verification — players must be 21 or older)
- Philippine mobile number (+63 format)
- Email address
- Residential address (collected during KYC verification)
- Nationality and country of residence
3.2 Identity Verification (KYC) Data
- Scanned or photographed copy of a government-issued Philippine ID (e.g., PhilSys National ID, UMID, passport, driver's licence, PRC ID, or voter's ID)
- Selfie photograph for biometric liveness verification where required
- Proof of address documentation (e.g., utility bill, bank statement, barangay certificate)
- Proof of payment method ownership (e.g., GCash screenshot, bank statement header)
3.3 Financial Transaction Data
- Deposit transaction records including amount, timestamp, payment method, and reference number
- Withdrawal request records including amount, destination, timestamp, and approval status
- Account balance history
- Bonus and promotion credit and debit records
- GCash, PayMaya, BDO, BPI, and Metrobank partial account identifiers used for transactions (not full account credentials)
3.4 Gaming Activity Data
- Game session logs including start/end times, games played, wager amounts, and outcomes
- Sportsbook bet history including event, market, odds, stake, and settlement
- Responsible gaming tool usage records (e.g., deposit limit activations, session timeouts, self-exclusion requests)
3.5 Technical and Device Data
- IP address at time of login and transaction
- Device type, operating system version, and browser type
- Mobile network carrier (for Philippine SIM-based verification)
- Session duration and navigation paths within the Platform
- Cookie identifiers and similar tracking technologies (see Section 8)
3.6 Communications Data
- Records of live chat support interactions
- Email correspondence with 55bme support or compliance teams
- Records of player complaints and their resolution
4 How We Collect Your Personal Data
55bme collects personal data through the following means:
- Direct collection: Data you provide when completing registration, the KYC verification process, depositing funds, requesting withdrawals, or contacting support
- Automated collection: Data generated automatically through your use of the Platform, including login events, game activity, and device/technical data captured by our Platform infrastructure
- Payment provider data: Transaction confirmation data received from GCash, PayMaya, BDO, BPI, and Metrobank when you initiate deposits or receive withdrawals — limited to transaction reference numbers, timestamps, and amounts
- Identity verification providers: Results of automated KYC verification checks conducted through our compliance technology partners who are bound by equivalent data protection obligations
- Cookies and tracking technologies: Data collected through first-party cookies and similar technologies on the 55bme Platform (see Section 8)
55bme does not purchase personal data lists from third-party data brokers and does not source personal data from social media platforms without your explicit consent.
5 Legal Basis for Processing
Under the Data Privacy Act of 2012, 55bme processes your personal data on the following legal bases:
| Processing Purpose | Legal Basis (RA 10173) |
|---|---|
| Account registration and management | Performance of contract / Consent |
| Identity verification (KYC) | Legal obligation (PAGCOR, AMLA) |
| Payment processing and fraud prevention | Performance of contract / Legal obligation |
| Customer support and dispute resolution | Performance of contract / Legitimate interest |
| Responsible gaming monitoring and interventions | Legal obligation (PAGCOR regulations) / Legitimate interest |
| Anti-money laundering reporting to AMLC | Legal obligation (RA 9160, as amended) |
| Platform security and fraud detection | Legitimate interest |
| Marketing communications (where opted in) | Consent |
| Analytics and platform improvement | Legitimate interest (anonymised/aggregated data) |
6 How 55bme Uses Your Personal Data
6.1 Core Service Delivery
The primary use of your personal data is to provide and maintain your 55bme account, process your deposits and withdrawals, deliver the gaming services you request, and communicate with you in connection with your account activity. Without this processing, 55bme cannot provide the Platform to you.
6.2 Regulatory Compliance
55bme is subject to regulatory requirements under PAGCOR's Online Gaming Operator framework and the Anti-Money Laundering Act (RA 9160, as amended by RA 10365). These obligations require us to verify your identity, maintain transaction records, monitor for suspicious activity, and report certain transactions to the Anti-Money Laundering Council (AMLC) of the Philippines. Processing for compliance purposes is not optional — it is a legal requirement of operating a licensed gaming platform.
6.3 Responsible Gaming Monitoring
55bme uses your gaming activity data to monitor for patterns consistent with problem gambling behaviour, as part of its responsible gaming obligations under PAGCOR guidelines. Where such patterns are identified, 55bme may proactively contact you to offer responsible gaming resources or, in serious cases, impose temporary restrictions on your account. This processing is in your best interest and is conducted as part of 55bme's duty of care toward its players.
6.4 Security and Fraud Prevention
Technical and device data, including IP addresses and login timestamps, are used to detect unauthorised access attempts, identify fraudulent account activity, and protect the financial integrity of the Platform. Unusual login patterns or geographic anomalies may trigger automated security challenges or temporary account holds pending investigation.
6.5 Marketing Communications
With your consent, 55bme may send you promotional communications about new games, bonus offers, and Platform updates via SMS to your registered Philippine mobile number or email. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting 55bme support. Withdrawal of marketing consent does not affect the lawfulness of any processing conducted prior to withdrawal.
7 Sharing and Disclosure of Personal Data
55bme does not sell your personal data to any third party. 55bme may share your personal data only in the following limited circumstances:
7.1 Service Providers and Data Processors
55bme engages carefully selected third-party service providers who process personal data on 55bme's behalf, strictly under written data processing agreements that impose data protection obligations equivalent to or exceeding those required by RA 10173. These providers include:
- Identity verification (KYC) technology providers — for automated document and biometric checks
- Payment processing partners — GCash, PayMaya, BDO, BPI, and Metrobank receive only the transaction data necessary to process your deposit or withdrawal
- Platform hosting and cloud infrastructure providers — data centres and cloud services used to operate the Platform, subject to equivalent security standards
- Fraud detection and cybersecurity providers — for real-time threat monitoring and incident response
- Customer support platform providers — for the operation of the 24/7 live chat support function
7.2 Regulatory and Law Enforcement Disclosure
55bme is legally required to disclose certain personal and transaction data to Philippine regulatory and law enforcement authorities, including but not limited to:
- The Philippine Amusement and Gaming Corporation (PAGCOR)
- The Anti-Money Laundering Council (AMLC) — for covered transaction reports (CTRs) and suspicious transaction reports (STRs) as required under RA 9160
- The National Privacy Commission (NPC) — in the event of a notifiable personal data breach
- Philippine courts and law enforcement agencies — upon receipt of a valid and lawful order
Disclosures to regulatory and law enforcement bodies are made only to the extent required by applicable law and are not subject to player consent.
What 55bme will never do: 55bme will never sell, rent, or transfer your personal data to advertising networks, data brokers, or unaffiliated commercial third parties. We will never share your data with any party that has not committed to equivalent data protection standards in a written agreement.
8 Cookies and Tracking Technologies
The 55bme Platform uses first-party cookies and similar technologies to operate core platform functionality, maintain your login session, and improve the Platform experience. 55bme does not use third-party advertising cookies or cross-site tracking technologies.
8.1 Essential Cookies
These cookies are strictly necessary for the Platform to function. They include session cookies that maintain your authenticated login state, security tokens that protect against cross-site request forgery (CSRF), and preference cookies that remember your selected language and display settings. Essential cookies cannot be disabled without preventing core Platform functions from operating correctly.
8.2 Performance and Analytics Cookies
With your consent, 55bme uses first-party analytics cookies to understand how players navigate the Platform — which pages are most visited, where players encounter difficulties, and how game lobbies are used. This data is used in aggregated, anonymised form to improve the Platform. You may opt out of analytics cookies at any time through the cookie preference panel accessible from the Platform footer.
8.3 Cookie Retention
Session cookies expire when you close your browser. Preference and analytics cookies have a maximum retention period of twelve (12) months, after which they are automatically deleted and re-consent is requested where applicable.
9 Data Retention Periods
55bme retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised. Retention periods are determined by the purpose of processing and applicable legal requirements.
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR regulatory requirement |
| KYC identity documents | Duration of account + 5 years post-closure | AMLA (RA 9160) requirement |
| Financial transaction records | 5 years from transaction date | AMLA (RA 9160) requirement |
| Gaming activity logs | 3 years from date of activity | PAGCOR regulatory requirement |
| Support communications | 2 years from date of last interaction | Legitimate interest / dispute resolution |
| Self-exclusion records | Duration of exclusion + 5 years | PAGCOR responsible gaming obligation |
| Marketing consent records | Until consent is withdrawn + 1 year | NPC accountability requirement |
| Security and fraud logs | 12 months from log creation | Legitimate interest |
Where conflicting retention requirements exist between the above schedule and a specific legal obligation imposed by a Philippine regulatory authority, the longer retention period will apply. Following the applicable retention period, data subject to mandatory deletion will be purged from all active systems and included in routine secure destruction cycles for backup media.
10 Your Privacy Rights Under RA 10173
As a data subject under the Data Privacy Act of 2012, you hold the following rights with respect to your personal data processed by 55bme. These rights may be exercised by contacting the 55bme Data Protection Officer via the support channel at [email protected] or through the 24/7 live chat. 55bme will respond to verified requests within fifteen (15) calendar days.
Right to be Informed
You have the right to be informed of how 55bme processes your personal data before or at the time of collection. This Privacy Policy serves as the primary instrument for fulfilling this obligation.
Right of Access
You may request a copy of the personal data that 55bme holds about you, together with information about how it is processed, the categories of data held, and the recipients to whom it has been disclosed. Requests are fulfilled within 15 calendar days of identity verification.
Right to Rectification
If any personal data held by 55bme is inaccurate or incomplete, you have the right to request correction. Where data accuracy affects your account or transaction history, corrections will be applied within 5 business days following verification.
Right to Erasure ("Right to be Forgotten")
Subject to 55bme's legal retention obligations under PAGCOR and AMLA requirements, you may request the deletion of your personal data. Where deletion is legally prohibited by a mandatory retention requirement, 55bme will inform you of the specific legal basis preventing deletion and of the earliest date on which erasure can be carried out.
Right to Object
You may object at any time to the processing of your personal data for marketing purposes. You may also object to processing based on legitimate interests, though 55bme may continue processing where it can demonstrate compelling legitimate grounds that override your interests.
Right to Data Portability
Where technically feasible, you may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Right to Lodge a Complaint
If you are dissatisfied with 55bme's handling of your personal data or with the response to any rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC can be contacted at its official government portal. 55bme encourages direct resolution through our DPO contact before escalation to the NPC.
11 Data Security Measures
55bme implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:
- Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data in transit between your device and 55bme servers
- Access Controls: Role-based access controls (RBAC) ensuring that only authorised 55bme personnel with a documented business need can access personal data, on a least-privilege basis
- Authentication: Multi-factor authentication required for all 55bme staff systems that contain or can access personal data
- Penetration Testing: Regular third-party penetration testing of the Platform infrastructure, with remediation of identified vulnerabilities within defined SLA windows
- Audit Logging: Comprehensive audit logs of all access events to personal data systems, retained for security review and incident investigation
- Vendor Assessment: All third-party processors are subject to security due diligence assessment before engagement and periodic re-assessment during the relationship
Despite these measures, no internet-based platform can guarantee absolute security. If you become aware of any actual or suspected security incident affecting your 55bme account, contact support immediately via the 24/7 live chat channel.
12 Children's Privacy and Age Restriction
The 55bme Platform is strictly not intended for use by individuals under the age of 21 years, as required by PAGCOR regulations governing online gambling in the Philippines. 55bme does not knowingly collect personal data from individuals under 21. All accounts are subject to age verification during the registration and KYC process.
If 55bme discovers that personal data has been collected from an individual under 21, the account will be immediately suspended, the data will be securely deleted (subject only to any legally mandated retention for compliance purposes), and any funds associated with the account will be processed in accordance with 55bme's underage account policy.
Age Restriction Notice: If you are under 21 years of age, you must not register on or use the 55bme Platform. If you are the parent or guardian of a minor who may have accessed the Platform, please contact 55bme support immediately at [email protected] (plain text — not a clickable link).
13 Cross-Border Data Transfers
Some of 55bme's service providers — including cloud infrastructure and cybersecurity partners — may process data in server facilities located outside the Philippines. Where such transfers occur, 55bme ensures that appropriate safeguards are in place to maintain a level of data protection equivalent to that required by RA 10173.
Safeguards used for cross-border transfers include standard contractual clauses approved for use under Philippine data protection law, binding corporate rules where applicable, and security assessments of the recipient country's data protection legal framework. 55bme will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without implementing compensating contractual safeguards.
14 Changes to This Privacy Policy
55bme reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or Platform features. Material changes — meaning changes that affect how your data is used or your rights as a data subject — will be communicated to registered account holders via email to your registered address no less than fourteen (14) days before the change takes effect.
Minor changes, such as clarifications of existing practices or corrections of typographical errors, may be made without prior notice, though the "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how 55bme protects your data.
Continued use of the 55bme Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms, to the extent permitted by applicable law.
15 Contact and Data Protection Officer
For all privacy-related enquiries, data subject rights requests, or complaints regarding the processing of your personal data by 55bme, please contact our Data Protection Officer through the following channel:
- Live Chat (recommended for urgent matters): Available 24/7 on the 55bme Platform — average response under 2 minutes
- Email (for formal written requests): [email protected] (plain text — not a clickable link) — please mark your subject line with "Privacy Request" or "DPO Contact"
55bme will acknowledge receipt of all formal privacy requests within three (3) business days and will provide a substantive response within fifteen (15) calendar days. For complex requests that require extended processing time, 55bme will notify you of the delay and the anticipated completion date.
Document Version: This Privacy Policy was last revised on 1 January 2026. The current version supersedes all prior versions. Please check this page periodically for updates. Your continued use of 55bme constitutes acceptance of the current Privacy Policy.
Play at 55bme – Where Your Privacy is Protected
You've seen exactly how 55bme handles your data. No hidden practices, no data sales, no compromises. Join over 50,000 Filipino players who chose a platform that earns trust through transparency. 21+ only.
21+ only · PAGCOR regulated · RA 10173 compliant · Play responsibly