bmy888 Privacy Policy

1. About This Privacy Policy

This Privacy Policy describes how bmy888 ("we", "us", "our", "the Platform") collects, processes, stores, and discloses personal data relating to individuals ("you", "the Player", "the User") who access or use the bmy888 platform at bmy888.cam, including all casino games, sports betting products, bingo, account management, and payment services available thereon.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as the applicable regulations of the National Privacy Commission (NPC) of the Philippines. bmy888 also adheres to the data handling standards required by PAGCOR as a condition of regulatory oversight.

This Privacy Policy forms part of, and should be read in conjunction with, the bmy888 Terms and Conditions. By registering an account on bmy888 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, bmy888 is the personal information controller in respect of all personal data collected through the bmy888.cam platform. As personal information controller, bmy888 determines the purposes and means of the processing of personal data and is responsible for the obligations of a personal information controller under Philippine law.

Inquiries regarding the processing of your personal data by bmy888, or requests to exercise your data subject rights as described in Section 10 of this Policy, should be directed to the bmy888 Data Privacy Officer via the contact details set out in Section 15.

3. Personal Data We Collect

bmy888 collects personal data through several channels: data you actively provide during registration and account use; data automatically generated by your device and browser when you access the platform; and data received from third parties in limited, necessary circumstances.

3.1 Data You Provide Directly

3.2 Data Collected Automatically

When you access bmy888.cam, our servers and analytics systems automatically collect the following technical data:

• IP address and approximate geographic location derived therefrom
• Device type, operating system, browser type and version
• Session timestamps, login history, and session duration
• Pages visited, games launched, and in-game behaviour data
• Transaction logs (deposit amounts, withdrawal requests, bet history)
• Cookie identifiers and similar tracking technology data (see Section 7)

3.3 Data Received from Third Parties

In limited circumstances, bmy888 may receive personal data from third parties, including:

• Payment processors (e.g., GCash, PayMaya) confirming successful transaction completion
• Identity verification service providers used to validate KYC documents
• Anti-fraud and AML screening databases required for PAGCOR compliance
• Social login providers (e.g., Google, Facebook) if you choose to authenticate via those channels — limited to name, email, and profile photo

4. How We Use Your Personal Data

bmy888 uses your personal data only for the purposes set out below. We do not use personal data for any purpose incompatible with these stated purposes without first obtaining your consent or as otherwise permitted by law.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, bmy888 processes your personal data on the following legal bases:

• Consent: Where you have provided explicit consent, including consent to receive marketing communications and consent given at registration. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual Necessity: Processing necessary to perform the contract between you and bmy888 — including account creation, payment processing, and service delivery — cannot be refused without preventing us from providing the Services.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AML obligations under Republic Act No. 9160 as amended, age verification requirements, and other applicable Philippine laws.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are balanced against your privacy rights.

6. Sharing Your Personal Data

bmy888 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly limited to what is necessary for the stated purposes:

6.1 Service Providers and Data Processors

Third-party service providers engaged by bmy888 to perform functions on our behalf, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard), identity verification providers, cloud hosting providers, and customer support platform operators. These processors are contractually bound to process your data only on bmy888's instructions and to maintain appropriate security standards.

6.2 Regulatory and Law Enforcement Authorities

PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory or law enforcement bodies, where disclosure is required by law, court order, or regulatory directive. bmy888 will disclose the minimum data necessary to satisfy such requirements.

6.3 Game Providers

Third-party game providers whose games are accessible on the bmy888 platform may process limited session and gameplay data necessary to deliver game functionality. These providers are permitted to access only the data strictly necessary to provide their game service and are prohibited from using player data for any other purpose.

6.4 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of bmy888's business or assets, personal data held by bmy888 may be transferred to the acquiring entity as part of that transaction. Players will be notified of any such transfer in accordance with the Data Privacy Act.

7. Cookies & Tracking Technologies

bmy888 uses cookies and similar tracking technologies (including local storage, session storage, and pixel tags) on bmy888.cam to ensure the platform functions correctly and to improve your experience.

You may configure your browser to refuse cookies or to alert you when cookies are being sent. Note that disabling strictly necessary cookies will prevent you from logging in or using core bmy888 features.

8. Data Retention

bmy888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Philippine Anti-Money Laundering Act and PAGCOR regulations.
• KYC documents: Retained for the duration of your account and for five (5) years thereafter.
• Support interaction records: Retained for three (3) years from the date of the interaction.
• Technical and log data: Retained for up to twelve (12) months, after which it is automatically deleted or anonymised.
• Marketing preference records: Retained for the duration of your account. Opt-out records are retained indefinitely to prevent re-subscription.

Upon expiry of the applicable retention period, personal data is securely destroyed or permanently anonymised in a manner that prevents re-identification.

9. Data Security

bmy888 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and bmy888 servers
• Encryption of personal data and financial data at rest on bmy888 servers
• Role-based access controls limiting internal staff access to personal data strictly to those with a legitimate operational need
• Multi-factor authentication for all internal administrative access to systems containing player data
• Regular security assessments, penetration testing, and vulnerability scanning
• Comprehensive audit logging of all access to personal data
• Employee training on data privacy obligations and security practices

Despite these measures, no internet transmission or electronic storage system is 100% secure. bmy888 cannot guarantee absolute security and encourages you to take steps to protect your own account credentials.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by bmy888. To exercise any of these rights, contact the bmy888 Data Privacy Officer using the details in Section 15.

bmy888 will respond to data subject rights requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days and will notify you of the extension and the reason for it.

11. Children & Minors

The bmy888 platform is strictly prohibited to individuals under 21 years of age in accordance with Philippine law and PAGCOR regulations. bmy888 does not knowingly collect personal data from anyone under 21 years of age.

If bmy888 becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the account, delete all associated personal data, and notify the relevant regulatory authorities where required. If you have reason to believe that a minor has registered on bmy888, please contact our support team immediately.

12. International Data Transfers

bmy888's primary server infrastructure is located within the Asia-Pacific region. In certain circumstances, personal data may be processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international payment networks.

When personal data is transferred outside the Philippines, bmy888 ensures that appropriate safeguards are in place as required by the Data Privacy Act, including contractual obligations requiring the recipient to maintain data protection standards at least equivalent to those required by Philippine law.

By using the bmy888 platform, you acknowledge that your personal data may be transferred to and processed in countries other than the Philippines where data protection laws may differ. We take all reasonable steps to ensure that such transfers are made securely and in accordance with this Policy.

13. Third-Party Links

The bmy888 platform may contain references to third-party game providers and payment services. These third parties operate their own privacy policies, which are independent of this Policy and which bmy888 does not control. bmy888 is not responsible for the privacy practices of third-party services and encourages you to review the privacy policies of any third-party services you interact with in connection with your use of bmy888.

14. Updates to This Privacy Policy

bmy888 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via the email address or mobile number on record at least fourteen (14) days prior to the changes taking effect.

The current version of this Privacy Policy is always accessible at bmy888.cam/privacy-policy. The "Effective Date" at the top of this document reflects the date of the most recent revision. Continued use of the bmy888 platform following the effective date of any revision constitutes your acceptance of the revised Policy.

15. Contact & Complaints

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how bmy888 has handled your personal data, please contact us through the following channels:

• Data Privacy Officer: Accessible via the Live Chat widget on bmy888.cam — available 24/7.
• Email: [email protected] — use subject line "Data Privacy Request".

bmy888 will acknowledge your request within three (3) business days and provide a substantive response within thirty (30) days. For complex requests, we may extend this period and will inform you accordingly.

If you are unsatisfied with bmy888's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC is the government authority responsible for enforcing the Data Privacy Act of 2012.