bw29 Privacy Policy

1. Data Controller

1.1 The data controller responsible for your personal information collected through bw29 is the bw29 operating entity ("bw29," "we," "us," or "our"), which operates the online casino platform accessible at bw29.win.

1.2 bw29 is accountable for all personal data processed through the Platform and has designated a data protection function responsible for ensuring compliance with the Data Privacy Act of 2012 and all applicable National Privacy Commission (NPC) issuances.

1.3 For all data privacy inquiries, requests, and complaints, please contact us using the details provided in Section 12 of this Policy.

2. Personal Data We Collect

2.1 bw29 collects personal data at various points of your interaction with our Platform. The categories of data we collect include:

Registration Data:

• Full legal name as it appears on your Philippine government-issued ID;
• Date of birth (to verify the 21+ age requirement);
• Philippine mobile number (used as primary account identifier and OTP recipient);
• Email address;
• Residential address.

Identity Verification (KYC) Data:

• Copies of government-issued photo identification (e.g., PhilSys National ID, passport, driver's license, UMID, voter's ID);
• Selfie or live photo for identity matching purposes;
• Proof of address documents where required by regulatory standards;
• Source of funds documentation as required by Anti-Money Laundering Act (AMLA) compliance obligations.

Financial Data:

• GCash account reference number (tokenized, not the full number);
• PayMaya account reference;
• Bank account details (bank name, account number) where bank transfer is used;
• Transaction records: deposit amounts, withdrawal amounts, dates, and payment method used.

Gaming Activity Data:

• Game session logs including games played, bets placed, wins, losses, and session duration;
• Bonus participation history and wagering records;
• Responsible gaming settings and limit adjustments you make on your account.

Technical Data:

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Login timestamps and session identifiers;
• Cookie data and usage analytics (see Section 8).

Communications Data:

• Records of your communications with bw29 customer support;
• Feedback, complaints, and dispute records.

2.2 bw29 collects personal data directly from you (via registration forms and account settings), automatically (via cookies and technical logs), and from third-party sources such as identity verification service providers and payment processors.

3. How We Use Your Personal Data

3.1 bw29 processes your personal data for the following purposes:

• Account Management: Creating, maintaining, verifying, and administering your bw29 player account;
• Identity & Age Verification: Confirming you are at least 21 years of age and verifying your identity in accordance with PAGCOR guidelines and AMLA obligations;
• Payment Processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment channels;
• Regulatory Compliance: Meeting obligations under the Data Privacy Act, AMLA, and PAGCOR's online gaming regulatory framework, including transaction monitoring and suspicious activity reporting;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorized access, money laundering, and other prohibited conduct;
• Customer Support: Responding to inquiries, resolving disputes, and providing technical assistance to Filipino players;
• Responsible Gaming: Administering deposit limits, session controls, self-exclusion requests, and other responsible gaming tools you activate on your account;
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — subject to your consent and opt-out preferences;
• Platform Improvement: Analysing aggregated usage data to improve bw29's game library, user interface, and overall player experience.

3.2 bw29 will not use your personal data for purposes incompatible with those described in this Policy without providing prior notice and, where required by law, obtaining your consent.

4. Legal Basis for Processing

4.1 bw29 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules:

• Contractual Necessity: Processing required to perform our obligations under your bw29 account agreement, including account operation, game provision, and payment processing;
• Legal Obligation: Processing required to comply with applicable Philippine law, including AMLA obligations, PAGCOR regulatory requirements, and NPC data privacy compliance;
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and optional analytics, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Third Parties

5.1 bw29 does not sell your personal information. We share data with the following categories of recipients only to the extent necessary for the purposes described in Section 3:

• Payment Processors: GCash (GXI), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers — for processing deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and age verification service providers who assist with document verification;
• Game Providers: Licensed game suppliers (e.g., JILI, Pragmatic Play, PG Soft) may receive minimal technical session data necessary to deliver gameplay;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies — where required by law or regulatory directive;
• Technical Infrastructure Providers: Cloud hosting, cybersecurity, and analytics service providers operating under data processing agreements that require GDPR- and DPA-equivalent data protection standards;
• Professional Advisors: Legal counsel, auditors, and compliance consultants, under professional confidentiality obligations.

5.2 Where bw29 transfers personal data outside the Philippines to third-party service providers, we ensure that appropriate safeguards are in place, including contractual data processing agreements and compliance with NPC cross-border transfer rules.

6. Data Retention

6.1 bw29 retains your personal data for as long as your account is active and for a minimum period following account closure, as required by applicable law:

• Account and KYC data: retained for a minimum of five (5) years following account closure, consistent with AMLA record-keeping obligations;
• Transaction records: retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications: retained for three (3) years following resolution of the relevant matter;
• Marketing consent records: retained until withdrawal of consent plus one (1) year for audit purposes.

6.2 After the applicable retention period, bw29 will securely delete or anonymize your personal data in accordance with our data retention and destruction policy.

7. Security Measures

7.1 bw29 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bw29 servers;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Access controls ensuring bw29 staff access personal data only on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability management;
• OTP-based two-factor authentication for account access;
• Real-time fraud detection and anomalous login monitoring.

7.2 While bw29 takes data security seriously, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, bw29 will notify the National Privacy Commission and affected players in accordance with NPC Circular 16-03 breach notification requirements.

8. Cookies & Tracking Technologies

8.1 bw29 uses cookies and similar technologies to operate the Platform, personalize your experience, and analyse usage patterns. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled as they are essential for account login, session management, and security.
• Functional Cookies: Remember your preferences such as language settings and game display preferences.
• Analytics Cookies: Collect aggregated, anonymized data about how Filipino players use bw29, helping us improve the platform. These are subject to your consent.

8.2 You may manage non-essential cookies through your browser settings or our cookie preference centre. Disabling certain cookies may affect the functionality of specific bw29 features.

9. Your Data Privacy Rights

9.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bw29:

• Right to be Informed: The right to know whether bw29 processes your personal data, and if so, the nature, purpose, and extent of such processing — as set out in this Policy;
• Right to Access: The right to request a copy of your personal data held by bw29, subject to identity verification;
• Right to Rectification: The right to correct inaccurate or incomplete personal data. You may update most account data directly in your bw29 account settings;
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary or lawful, subject to bw29's statutory retention obligations;
• Right to Object: The right to object to processing of your personal data for direct marketing purposes or on the basis of legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data.

9.2 To exercise any of the above rights, please contact bw29 using the details in Section 12. We will respond to verified requests within fifteen (15) working days. Identity verification may be required before we can action your request.

9.3 If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10. Minors

10.1 bw29 implements age verification checks at registration and prior to processing the first withdrawal. If bw29 discovers that personal data has been collected from an individual under 21 years of age, we will promptly delete such data and close the relevant account in accordance with our Terms & Conditions.

10.2 If you believe a person under 21 has created a bw29 account, please contact us immediately at the details provided in Section 12.

11. Changes to This Privacy Policy

11.1 bw29 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance.

11.2 Material changes will be communicated to registered players via email or prominent notice on the bw29 Platform at least seven (7) days before the changes take effect. The "Last updated" date at the top of this Policy will reflect the most recent revision.

11.3 Your continued use of bw29 after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree to the changes, you should close your account prior to the effective date.

12. Contact & Data Privacy Complaints

12.1 For all data privacy inquiries, rights requests, or complaints, please contact the bw29 Data Protection function. All inquiries are handled in English and acknowledged within five (5) working days.

12.2 You also have the right to submit a complaint to the National Privacy Commission (NPC) of the Philippines if you believe bw29 has violated your data privacy rights under Republic Act No. 10173.