Privacy Policy

55mwb ("55mwb," "we," "us," "our") is the operator of the online gaming platform available at 55mwb.org. We are committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy is designed to give you a clear, honest account of our data processing activities and to uphold your rights as a data subject under Philippine law.

We recognize that Filipino players entrust us with sensitive information — personal identifiers, financial details, gaming activity records. That trust is not taken lightly. Every data processing activity described in this Policy exists for a specific, documented purpose and is governed by appropriate legal authority.

This Privacy Policy should be read alongside our Terms & Conditions, which together form the complete legal framework governing your relationship with 55mwb.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and applicable data protection legislation, 55mwb is the personal information controller responsible for your personal data processed in connection with the 55mwb platform.

Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with applicable data protection laws and can be contacted at:

55mwb collects the following categories of personal data, depending on how you interact with the platform:

We do not collect sensitive personal information as defined under Philippine law — including race, religion, political beliefs, health status outside of responsible gaming context, or biometric data — unless you voluntarily provide such information and explicitly consent to its processing.

55mwb collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and behavioral data collected automatically as you use the platform, via cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data from licensed KYC verification providers; transaction confirmation data from payment processors (GCash, Maya, BPI, BDO, Metrobank, Visa, Mastercard); fraud detection data from licensed fraud prevention services.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with licensing compliance, anti-money laundering monitoring, or player protection programs.

55mwb processes personal data only for specified, explicit, and legitimate purposes. The table below outlines our primary processing activities and the legal basis under which each is conducted:

• Account registration and management — Necessary for the performance of the player agreement (contract).
• Identity verification (KYC) — Legal obligation under PAGCOR licensing requirements and anti-money laundering regulations.
• Processing deposits and withdrawals — Necessary for the performance of the player agreement (contract).
• Providing gaming services and game history — Necessary for the performance of the player agreement (contract).
• Fraud detection and prevention — Legitimate interests of 55mwb and its players in preventing financial crime.
• Anti-money laundering monitoring — Legal obligation under Philippine AML laws and PAGCOR directives.
• Responsible gaming enforcement — Legal obligation and legitimate interest in protecting vulnerable players.
• Customer support — Necessary for the performance of the player agreement and legitimate interests.
• Platform improvement and analytics — Legitimate interests, with anonymized or aggregated data where possible.
• Promotional and marketing communications — Consent (opt-in), with easy opt-out available at any time via account settings.
• Legal and regulatory compliance — Legal obligation to comply with applicable Philippine laws and PAGCOR requirements.

55mwb does not sell your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the specific purpose:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, Visa, and Mastercard receive the transaction data necessary to process your deposits and withdrawals. These processors are contractually bound to use your data only for payment processing.
• Identity verification providers: Licensed KYC and age verification service providers receive the identity documents you submit solely for verification purposes and are prohibited from using them for any other purpose.
• Fraud and security providers: Fraud detection and cybersecurity vendors may receive technical data (IP addresses, device fingerprints) to protect the integrity of the platform and player accounts.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies may receive data where required by law, court order, or regulatory direction.
• Legal proceedings: Personal data may be disclosed to law enforcement or courts where required by valid legal process under Philippine law.
• Platform technology providers: Hosting, cloud infrastructure, and platform software vendors who process data on behalf of 55mwb under strict data processing agreements that prohibit independent use of player data.

All third parties with whom 55mwb shares personal data are subject to contractual obligations requiring them to implement appropriate data protection measures and process personal data only in accordance with 55mwb's documented instructions.

Some of the third-party service providers used by 55mwb are located outside the Philippines. Where personal data is transferred to countries outside the Philippines, 55mwb ensures that appropriate safeguards are in place to protect your data in accordance with the Philippine Data Privacy Act, including:

• Binding contractual clauses in data processing agreements that impose data protection standards equivalent to those required under Philippine law.
• Transfer only to service providers operating in jurisdictions with data protection frameworks recognized as providing adequate protection.
• Explicit documentation of the legal basis for each international transfer.

You may request information about the specific safeguards applicable to international transfers of your personal data by contacting the 55mwb Data Protection Officer.

55mwb retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of the account relationship and for five (5) years following permanent account closure, as required by PAGCOR regulations and AML obligations.
• Financial transaction records: Retained for five (5) years from the date of each transaction in compliance with Philippine AML reporting requirements.
• Gaming activity records: Retained for three (3) years from the date of each gaming session for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the interaction or resolution of the relevant dispute, whichever is later.
• Marketing consent records: Retained for the duration of the account relationship plus two (2) years, as evidence of lawful processing.
• Technical and log data: Retained for ninety (90) days for security monitoring and fraud prevention, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be attributed to an identifiable individual.

55mwb implements a comprehensive set of technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These include:

• Encryption: All data in transit is protected by 256-bit TLS/SSL encryption. Sensitive stored data — including financial account details and identity document records — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized 55mwb personnel and service providers who require it for their specific role. Role-based access control (RBAC) is enforced across all internal systems.
• Two-factor authentication: Internal access to systems containing personal data requires multi-factor authentication. Players are encouraged to enable 2FA on their 55mwb accounts.
• Intrusion detection and monitoring: 55mwb's systems are continuously monitored for unauthorized access attempts, anomalous activity, and potential security threats.
• Regular security audits: Third-party security assessments and penetration testing are conducted on a regular schedule to identify and remediate vulnerabilities.
• Data breach response: 55mwb maintains a documented data breach response procedure. In the event of a breach affecting your personal data, you will be notified in accordance with the requirements of the Philippine Data Privacy Act.

Under the Philippine Data Privacy Act of 2012 and its implementing regulations, you have the following rights with respect to your personal data held by 55mwb:

To exercise any of these rights, submit a written request to the 55mwb Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." We will respond within fifteen (15) business days of receipt. We may request proof of identity before processing your request.

55mwb uses cookies and similar tracking technologies on the 55mwb.org platform. Cookies are small text files stored on your device that help us deliver a better, more personalized experience. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function — including session management, security tokens, and authentication state. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences and settings, such as language preference and responsible gaming tool configurations, to improve your experience across sessions.
• Analytics cookies: Collect anonymized data about how players use the platform to help us identify areas for improvement. This data does not identify you personally and is processed in aggregate form only.
• Security cookies: Assist with fraud detection and account security monitoring by identifying unusual patterns of platform access.

55mwb does not use third-party advertising or social media tracking cookies. You can control cookie settings through your browser preferences; however, disabling strictly necessary cookies will impair your ability to use the platform.

The 55mwb platform is strictly for individuals aged 21 years and above. 55mwb does not knowingly collect personal data from individuals under the age of 21. The platform employs age verification mechanisms during registration and KYC verification to enforce this restriction.

55mwb operates in compliance with the Philippine Anti-Money Laundering Act (Republic Act No. 9160, as amended) and all implementing circulars issued by the Anti-Money Laundering Council (AMLC). In fulfilling our AML compliance obligations, we are required to:

• Collect and verify the identity of all registered players through KYC procedures.
• Monitor transactions for patterns indicative of money laundering, terrorist financing, or other financial crimes.
• Maintain records of all covered and suspicious transactions for the periods specified by law.
• Report covered transactions (₱500,000 or more, or equivalent) and suspicious transactions to the AMLC as required by law.

Processing of personal data for AML compliance purposes is a legal obligation and cannot be opted out of. This processing overrides any contrary data subject request where compliance with law requires it.

55mwb reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform operations. Material changes to this Policy will be communicated to registered players via email notification to the address registered on their 55mwb account, or via a prominent notice on the platform, at least fourteen (14) days prior to the amended Policy taking effect.

The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the 55mwb platform following the effective date of an amended Privacy Policy constitutes your acknowledgment of the changes.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 55mwb processes your personal data, please contact our Data Protection Officer in the first instance:

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the regulatory authority responsible for the enforcement of the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through the official NPC website and government information channels.