555mw Privacy Policy

The data controller for personal information processed through the 555mw Platform is the operator of 555mw.vip, a PAGCOR-licensed online gaming platform serving the Philippine market. References to "555mw", "we", "our", or "us" throughout this Privacy Policy refer to the 555mw platform operator in its capacity as data controller.

555mw is subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission. 555mw is also subject to data-related obligations arising from its PAGCOR licensing conditions, including anti-money laundering and know-your-customer requirements under the Anti-Money Laundering Act as amended.

555mw collects personal data in the following categories, depending on how you interact with the Platform:

555mw does not knowingly collect special categories of sensitive personal data (as defined under the Data Privacy Act of 2012) except where strictly required by law — for example, government-issued IDs submitted for KYC contain information that may fall within sensitive categories, and are processed solely for identity verification with appropriate safeguards applied.

555mw processes your personal data for the following defined purposes:

• Account operation: To create, maintain, and manage your 555mw member account, including processing your PHP wallet transactions, authenticating your identity at login, and maintaining your game history and transaction records.
• Payment processing: To process deposits via GCash, PayMaya, BPI, BDO, Metrobank, and 7-Eleven, and to process withdrawals back to your nominated payment channel. Payment data is shared with the relevant payment processor solely to complete each transaction.
• KYC and AML compliance: To verify your identity as required by PAGCOR licensing conditions and the Anti-Money Laundering Act. Identity documents submitted for KYC are reviewed by authorised 555mw staff and retained for the legally required period.
• Fraud and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, account takeover, and other prohibited conduct on the Platform. Technical data including IP addresses and device identifiers is used for this purpose.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling behavior, to enforce self-exclusion requests, to apply member-set deposit and loss limits, and to comply with PAGCOR's responsible gaming requirements.
• Customer support: To respond to your queries, complaints, and support requests submitted via live chat, email, or other support channels. Communications are retained to maintain a service history and for quality assurance purposes.
• Platform improvement: To analyse aggregated and anonymised usage data for the purpose of improving the 555mw Platform, identifying performance issues, and developing new features. No personally identifiable data is used for general analytics.
• Legal and regulatory compliance: To comply with legal obligations arising from PAGCOR licensing, Philippine tax law, anti-money laundering regulations, data protection law, and any other applicable regulatory requirement.
• Marketing (with consent): To send promotional communications about 555mw offers, new games, and bonuses, where you have provided express consent or where we have a legitimate interest as described in Section 11 of this Policy.

Under the Philippine Data Privacy Act of 2012, 555mw processes your personal data on the following lawful bases:

• Contractual necessity: Processing your identity data, financial data, and game data is necessary to fulfil our contract with you — the Terms and Conditions you accept when registering a 555mw account. Without this processing, we cannot operate your account or deliver our services.
• Legal obligation: Processing for KYC verification, AML monitoring, responsible gaming enforcement, and PAGCOR regulatory reporting is required by applicable Philippine law and cannot be declined. Refusing to provide KYC documents when requested may prevent withdrawal processing.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and aggregate platform analytics is based on 555mw's legitimate interest in operating a safe, fair, and compliant gaming platform. We have assessed that this interest does not override your fundamental privacy rights.
• Consent: Processing for marketing communications is based on your consent, which may be withdrawn at any time by updating your communication preferences in your 555mw account settings or by contacting support.

555mw does not sell your personal data. We share personal data only with the following categories of third parties, under strict contractual protections, and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and 7-Eleven payment systems receive transaction-level data required to process your deposits and withdrawals. Each processor operates under its own privacy policy and applicable Philippine financial regulations.
• KYC and identity verification providers: Third-party KYC service providers may process identity documents submitted for verification. These providers are contractually bound to 555mw's data protection standards and may not use your data for any independent purpose.
• Fraud prevention and AML services: Aggregated or specific transaction and identity data may be shared with fraud detection and anti-money laundering service providers for the purpose of detecting and preventing financial crime. All such providers operate under binding data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory bodies may receive personal data where required by law, court order, or regulatory mandate. 555mw will comply with all lawful requests.
• Game content providers: Third-party game studios whose titles are hosted on 555mw may receive anonymised session data for RNG audit and technical compliance purposes. No personally identifiable member data is shared with game studios.
• IT and infrastructure service providers: Cloud infrastructure, cybersecurity, and platform hosting providers may have limited access to personal data as part of providing technical services. All such providers operate under data processing agreements and are not permitted to use your data for any other purpose.

555mw uses cookies and similar tracking technologies to operate the Platform, maintain session state, detect fraud, and analyse aggregated usage patterns. The following categories of cookies are used:

You can manage cookie preferences through your browser settings. Blocking strictly necessary cookies will prevent the Platform from operating correctly. Disabling analytics cookies will not affect your gaming experience.

555mw implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks involved. These include, without limitation:

• Encryption in transit: All data transmitted between your device and the 555mw Platform is encrypted using TLS 1.3 with 256-bit AES encryption. Plain-text transmission of personal data does not occur.
• Encryption at rest: Personal data stored in 555mw databases and file systems is encrypted at rest using AES-256. Encryption keys are stored separately from the data they protect and are subject to rotation policies.
• Password security: 555mw member passwords are stored as salted bcrypt hashes. The plain-text form of your password is never stored on 555mw systems and cannot be recovered by 555mw staff.
• Access controls: Access to personal data by 555mw staff is restricted to those who need it to perform their role. All staff access is logged, audited, and subject to role-based access controls. Access privileges are reviewed regularly.
• Two-factor authentication: 555mw offers SMS OTP two-factor authentication for member accounts. The platform's administrative systems require two-factor authentication for all staff accessing personal data.
• Penetration testing and vulnerability management: 555mw's infrastructure undergoes regular penetration testing by qualified security professionals. Identified vulnerabilities are remediated according to a defined severity-based schedule.

555mw retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with applicable legal and regulatory obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is permanently deleted from 555mw's active systems and any backup systems within the next scheduled purge cycle. Data that has been fully anonymised and cannot reasonably be re-identified may be retained beyond these periods for aggregate analytical purposes.

Under the Philippine Data Privacy Act of 2012, you hold the following rights as a data subject. 555mw will respond to verified data subject requests within 30 calendar days of receipt, or within such other period as required by applicable law.

To exercise any of the above rights, please contact 555mw's Data Protection Officer using the contact information provided in Section 13 of this Policy. 555mw may require identity verification before processing your request. We will not charge a fee for exercising your data subject rights in most circumstances.

The 555mw Platform is strictly restricted to persons aged 21 years and above, as required by PAGCOR licensing conditions. 555mw does not knowingly collect personal data from persons under the age of 21, and any account found to be operated by a person below this age will be immediately suspended.

If 555mw becomes aware that personal data has been collected from a person below 21 years of age without appropriate consent or in error, the relevant data will be deleted as soon as reasonably practicable after discovery. Parents or guardians who believe a minor has submitted personal data to 555mw should contact support immediately.

555mw may send you promotional messages about bonuses, new games, seasonal promotions, and platform updates via SMS or email. You will only receive marketing communications if you have provided consent during registration or if you are an existing member where we have a legitimate interest in informing you of relevant offers.

• Opting out: You may withdraw consent for marketing communications at any time by updating your preferences in the Notifications section of your 555mw account dashboard, or by contacting support and requesting removal from marketing lists.
• Withdrawal of consent: Withdrawing marketing consent does not affect your ability to continue using the 555mw Platform or the lawfulness of any processing that occurred prior to withdrawal.
• Service communications: Transactional and service communications — such as deposit confirmations, withdrawal notifications, OTP codes, and responsible gaming alerts — are not marketing communications and will continue to be sent regardless of marketing opt-out status. These are essential account communications.

555mw reserves the right to update this Privacy Policy periodically to reflect changes in the Platform's data processing activities, applicable law, or regulatory requirements. The "Last Reviewed" date at the top of this page will be updated with each revision.

Material changes to this Privacy Policy — particularly those that affect your rights or the purposes for which 555mw processes your data — will be communicated to you via notice on the Platform or by SMS/email to your registered contact details, where practicable, at least 7 days before the change takes effect. Your continued use of the 555mw Platform following any policy change constitutes acknowledgment of the updated terms.

555mw has appointed a Data Protection Officer (DPO) in compliance with the Philippine Data Privacy Act of 2012 and the National Privacy Commission's guidelines on DPO designation. The DPO is responsible for overseeing 555mw's data protection compliance and is the point of contact for data subject rights requests, privacy queries, and data breach notifications.

When contacting 555mw for a data subject rights request, please provide your registered mobile number, a description of your request, and a copy of a valid Philippine ID for identity verification purposes. 555mw will not process data subject requests without identity verification to protect against unauthorized access to member data.