Privacy Policy of 33bmm

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 33bmm ("we," "us," "our," or the "Company") collects, uses, discloses, and protects personal information obtained from users ("you," "your," or "Player") of our online gaming platform accessible at https://33bmm.cam and any associated mobile applications (collectively, the "Platform").

33bmm is committed to protecting the privacy and security of all personal information entrusted to us. This Policy is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, as well as regulations issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and other applicable legal requirements governing online gaming operations in the Philippines.

By creating an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Policy. If you do not agree with any provision of this Policy, you should not use the Platform or our services.

2. Information We Collect

2.1 Personal Information You Provide

When you register for an account with 33bmm, we collect the following categories of personal information directly from you:

• Identity Information: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (passport number, driver's license number, or national ID number).
• Contact Information: Email address, mobile phone number, residential address including street, city, province, and postal code.
• Financial Information: Bank account details, payment card information (processed through secure payment gateways), e-wallet account identifiers (GCash, Maya), cryptocurrency wallet addresses, and transaction history.
• Account Credentials: Username, password (stored in encrypted format), security questions and answers, and two-factor authentication settings.
• Verification Documents: Scanned or photographed copies of government-issued photo identification, proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes.

2.2 Information Collected Automatically

When you access and use the 33bmm Platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar technologies:

• Device Information: Device type, operating system and version, browser type and version, screen resolution, IP address, device identifiers (IMEI, MAC address), and mobile network information.
• Usage Data: Pages visited, features used, games played, bet history, win/loss records, login and logout times, session duration, clickstream data, and referring URLs.
• Location Information: Geographic location data derived from IP address or GPS coordinates (when using mobile applications with location services enabled) to verify that you are accessing the Platform from within Philippine territory.
• Communication Records: Chat transcripts from customer support interactions, email correspondence, and records of phone conversations (when permitted by law and with your consent).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction details, payment status confirmations, and fraud prevention information from GCash, Maya, banks, and other financial service providers.
• Identity Verification Services: Verification results, risk scores, and watchlist checks from third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) service providers.
• Social Media Platforms: If you choose to link your account to social media profiles, we may receive basic profile information such as name, email address, and profile picture (only with your explicit consent).
• Regulatory Authorities: Information provided by PAGCOR or other government agencies in connection with licensing, compliance monitoring, or investigations.

3. How We Use Your Information

3.1 Account Management and Service Provision

We use your personal information to create and manage your player account, process your registration, authenticate your identity when you log in, provide access to gaming services, process deposits and withdrawals, maintain accurate account balances, and manage your gaming history and transaction records.

3.2 Legal and Regulatory Compliance

As a PAGCOR-licensed operator, 33bmm is required to use your personal information to comply with various legal and regulatory obligations, including:

• Verifying that you meet the minimum age requirement (21 years old) to participate in online gaming activities.
• Confirming your identity and residential address to prevent account fraud and multiple account creation.
• Conducting Know Your Customer (KYC) due diligence to comply with anti-money laundering regulations.
• Monitoring transactions for suspicious patterns and reporting unusual activities to relevant authorities as required by law.
• Maintaining records of gaming activities and transactions for audit and regulatory inspection purposes.
• Implementing responsible gaming measures, including self-exclusion programs and deposit limits.
• Responding to lawful requests for information from PAGCOR, law enforcement agencies, or courts of law.

3.3 Payment Processing and Financial Transactions

Your financial information is used to process deposits to your gaming account, execute withdrawal requests, verify ownership of payment methods, prevent fraudulent transactions, calculate and process any applicable taxes or fees, and maintain complete and accurate financial records in compliance with accounting standards and tax laws.

3.4 Customer Support and Communication

We use your contact information to respond to your inquiries and support requests via live chat, email, or phone, send account notifications such as deposit confirmations and withdrawal status updates, provide updates regarding changes to terms of service or policies, and communicate important security alerts or account security issues.

3.5 Marketing and Promotional Activities

With your consent (which you may withdraw at any time), we may use your information to send promotional offers, bonus notifications, and information about new games and features, personalize marketing messages based on your gaming preferences and history, and conduct surveys to gather feedback about our services and improve user experience.

You can opt out of marketing communications at any time by clicking the unsubscribe link in promotional emails, adjusting your communication preferences in your account settings, or contacting our customer support team. Please note that even if you opt out of marketing communications, we will still send you essential service-related messages such as account notifications and security alerts.

3.6 Platform Improvement and Analytics

We analyze usage data to improve the functionality and user experience of the Platform, develop new games and features, optimize website performance and load times, identify and fix technical issues and bugs, and conduct statistical analysis to understand player behavior and preferences.

3.7 Fraud Prevention and Security

Your information is used to detect and prevent fraudulent activities, cheating, and abuse of the Platform, identify and block users who violate our Terms and Conditions, protect against unauthorized access to accounts, implement security measures to safeguard sensitive data, and investigate suspected breaches of our policies or applicable laws.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, we process your personal information based on one or more of the following legal grounds:

• Consent: You have given explicit consent for us to process your personal information for specific purposes, such as marketing communications.
• Contractual Necessity: Processing is necessary to perform our contractual obligations to you, such as providing gaming services and processing transactions.
• Legal Obligation: We are required by law to process your information, such as for KYC/AML compliance and regulatory reporting to PAGCOR.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and improving our services, provided such interests are not overridden by your fundamental rights and freedoms.

5. Information Sharing and Disclosure

5.1 Service Providers and Business Partners

We may share your personal information with trusted third-party service providers who assist us in operating the Platform and delivering our services, including:

• Payment Processors: GCash, Maya, banks, and cryptocurrency payment gateways that process your deposits and withdrawals.
• Identity Verification Services: Third-party KYC/AML providers that verify your identity and screen against watchlists.
• Game Providers: Software developers who provide casino games, live dealer platforms, and sports betting infrastructure.
• Cloud Hosting and IT Services: Providers of server infrastructure, database management, and technical support services.
• Customer Support Tools: Live chat software providers and customer relationship management systems.
• Marketing and Analytics: Email service providers, SMS gateways, and analytics platforms (when you have consented to marketing communications).

All third-party service providers are contractually obligated to maintain the confidentiality and security of your personal information and are prohibited from using it for any purpose other than providing services to 33bmm.

5.2 Regulatory Authorities and Law Enforcement

We may disclose your personal information to PAGCOR, other government agencies, or law enforcement authorities when required by law, in response to valid legal process such as subpoenas or court orders, to investigate suspected illegal activities or violations of our Terms and Conditions, to protect the rights, property, or safety of 33bmm, our users, or the public, or to comply with anti-money laundering and counter-terrorism financing obligations.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving 33bmm, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your personal information with other third parties when you have given us explicit consent to do so. You may withdraw your consent at any time by contacting our Data Protection Officer.

6. Data Security Measures

6.1 Technical Safeguards

33bmm implements industry-standard technical security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption.
• Secure Storage: Personal information stored in our databases is encrypted at rest using advanced encryption algorithms.
• Password Protection: Passwords are stored using one-way cryptographic hashing with salt, making them unreadable even to our own employees.
• Firewalls and Intrusion Detection: Multi-layered firewall systems and real-time intrusion detection systems protect our infrastructure from external threats.
• Regular Security Audits: Independent security firms conduct periodic penetration testing and vulnerability assessments of our systems.

6.2 Organizational Safeguards

We maintain strict organizational policies and procedures to protect your data:

• Access Controls: Access to personal information is restricted to authorized employees who need it to perform their job functions, following the principle of least privilege.
• Employee Training: All personnel with access to personal information receive regular training on data protection and privacy best practices.
• Confidentiality Agreements: Employees and contractors are bound by confidentiality obligations and face disciplinary action for unauthorized disclosure of personal information.
• Data Breach Response Plan: We maintain a documented incident response plan to quickly detect, contain, and remediate security breaches.

6.3 Third-Party Security Standards

All third-party service providers who process personal information on our behalf are required to maintain security standards comparable to our own and must demonstrate compliance through certifications, audits, or contractual guarantees.

7. Data Retention and Deletion

7.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with legal and regulatory requirements:

• Active Accounts: Personal information associated with active accounts is retained for the duration of your relationship with 33bmm.
• Closed Accounts: After voluntary account closure, we retain personal information for a minimum of five (5) years to comply with PAGCOR record-keeping requirements and Philippine tax laws.
• Transaction Records: Financial transaction records and gaming history are retained for a minimum of seven (7) years as required by anti-money laundering regulations and tax authorities.
• Marketing Data: If you have consented to marketing communications, we will retain your contact information until you withdraw consent or request deletion.
• Legal Holds: Information subject to legal proceedings, investigations, or regulatory inquiries will be retained until the matter is resolved and any applicable appeal periods have expired.

7.2 Data Deletion Requests

You have the right to request deletion of your personal information, subject to certain limitations. To request deletion, contact our Data Protection Officer using the contact information provided in this Policy. Please note that we may not be able to delete information that we are legally required to retain for compliance, taxation, or dispute resolution purposes. In such cases, we will restrict processing of your information to only what is legally necessary.

8. Your Privacy Rights

8.1 Right to Access

You have the right to request access to the personal information we hold about you. We will provide you with a copy of your personal data in a commonly used electronic format within thirty (30) days of receiving your request.

8.2 Right to Rectification

If you believe that any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update most information directly through your account settings, or you may contact customer support for assistance.

8.3 Right to Erasure

You may request deletion of your personal information when it is no longer necessary for the purposes for which it was collected, you withdraw consent on which processing is based, you object to processing and there are no overriding legitimate grounds for continued processing, or the information has been unlawfully processed. This right is subject to our legal obligations to retain certain information as described in Section 7.

8.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data, processing is unlawful but you do not want the data erased, we no longer need the data but you need it for legal claims, or you have objected to processing pending verification of whether our legitimate grounds override your interests.

8.5 Right to Data Portability

Where technically feasible, you have the right to receive personal information you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that information to another service provider without hindrance from us.

8.6 Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes. If you object to marketing, we will cease such processing immediately. For other objections, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

8.7 Right to Withdraw Consent

Where we rely on your consent as the legal basis for processing, you have the right to withdraw consent at any time. Withdrawal of consent will not affect the lawfulness of processing conducted prior to withdrawal.

8.8 Right to Lodge a Complaint

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact details: National Privacy Commission, 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto St., Pasay City 1307 Philippines. Email: [email protected]. Website: www.privacy.gov.ph.

9. Cookies and Tracking Technologies

9.1 Types of Cookies We Use

33bmm uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you and remember your preferences:

• Essential Cookies: Necessary for the Platform to function properly, including session management, authentication, and security features.
• Performance Cookies: Collect anonymous information about how visitors use the Platform, helping us identify errors and improve performance.
• Functional Cookies: Remember your choices and preferences, such as language settings, username, and display options.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising (only used with your consent).

9.2 Managing Cookie Preferences

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, and set preferences for certain websites. Please note that disabling essential cookies may affect the functionality of the Platform and prevent you from using certain features.

10. International Data Transfers

While 33bmm primarily operates within the Philippines and stores data on servers located within Philippine territory, certain third-party service providers may process your information on servers located outside the Philippines. When we transfer personal information internationally, we ensure that appropriate safeguards are in place, including standard contractual clauses approved by the National Privacy Commission, ensuring that the receiving jurisdiction provides adequate data protection levels, and implementing additional technical and organizational security measures.

11. Children's Privacy

The 33bmm Platform is not intended for individuals under the age of twenty-one (21). We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected information from someone under 21, we will delete that information immediately. If you believe we may have collected information from a minor, please contact our Data Protection Officer immediately.

12. Changes to This Privacy Policy

33bmm reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify registered users via email and post a prominent notice on the Platform at least thirty (30) days before the changes take effect. The "Last Updated" date at the top of this Policy will be revised to reflect the effective date of the most recent version.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and may request deletion of your account and personal information, subject to our legal retention obligations.

13. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact our Data Protection Officer:

• Data Protection Officer
• Email: [email protected]
• Live Chat: Available 24/7 through the Platform (mention "Privacy Inquiry")
• Response Time: We aim to respond to all privacy inquiries within five (5) business days.

For general customer support inquiries unrelated to privacy matters, please use our standard support channels: [email protected] or 24/7 live chat.