5mwb Privacy Policy — Your Data, Protected

5mwb ("the Company," "we," "us," or "our") is committed to safeguarding the privacy and personal data of all individuals who interact with the 5mwb Platform. This Privacy Policy is prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the applicable issuances of the National Privacy Commission ("NPC").

As a PAGCOR-regulated online gaming platform, 5mwb processes personal data for specific, legitimate purposes — including identity verification, account management, fraud prevention, Anti-Money Laundering (AML) compliance, and service delivery. This Policy explains all of those purposes clearly, so you always know what happens to your information when you use 5mwb.

This Privacy Policy should be read alongside the 5mwb Terms & Conditions and the Responsible Gaming Policy, both of which incorporate this Privacy Policy by reference.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, 5mwb is the Personal Information Controller (PIC) responsible for personal data collected through the 5mwb Platform at https://5mwb.vip.

5mwb operates under a valid PAGCOR license and is subject to the regulatory authority of the Philippine Amusement and Gaming Corporation with respect to gaming operations, and to the National Privacy Commission with respect to personal data processing.

Contact information for data privacy inquiries is provided in Section 15 of this Privacy Policy.

5mwb collects only the personal data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we collect are set out in the table below.

5mwb collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account profile settings;
• Automatically during platform use — through server logs, cookies, session tracking, and device fingerprinting technologies that record your Technical Data each time you access the 5mwb Platform;
• From payment processors — GCash, PayMaya/Maya, BPI, BDO, Metrobank, and other payment service providers may share transaction confirmation data with 5mwb to verify deposits and process withdrawals;
• From KYC service providers — third-party identity verification providers may return verified identity data and risk assessment flags as part of the automated KYC process;
• From fraud detection and AML compliance systems — automated systems may generate risk scores and flag data based on gameplay, transaction patterns, and device analysis.

5mwb uses your personal data only for the purposes described below. We do not use personal data for any purpose incompatible with the original purpose of collection without your express consent.

• Account Management: To create, maintain, and administer your 5mwb account, including processing your login credentials and profile settings;
• Identity Verification (KYC): To verify that you meet the 21+ age requirement and to confirm your identity before processing withdrawals, as required by PAGCOR and Philippine law;
• Payment Processing: To process deposits, withdrawals, and bonus credits through GCash, PayMaya, and bank channels in your name;
• Fraud Prevention and Security: To detect and prevent unauthorized account access, payment fraud, bonus abuse, collusion, and other forms of financial crime;
• AML Compliance: To fulfill obligations under the Anti-Money Laundering Act (RA 9160, as amended), including transaction monitoring, suspicious transaction reporting, and maintaining required records;
• Regulatory Compliance: To comply with PAGCOR licensing requirements, NPC regulations, and any other applicable Philippine law;
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling and to administer self-exclusion and deposit limit requests;
• Customer Support: To respond to your inquiries, resolve disputes, and manage complaints;
• Service Improvement: To analyze aggregated, anonymized usage data to improve Platform performance, game selection, and user experience;
• Marketing Communications: To send you promotional offers, bonus announcements, and Platform updates — but only where you have provided consent, which you may withdraw at any time.

Under the Data Privacy Act of 2012, 5mwb relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform our contractual obligations to you as a registered 5mwb player, including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act obligations, the Data Privacy Act, and other applicable Philippine law;
• Legitimate Interests: Processing for fraud prevention, platform security, and aggregated service analytics, where our legitimate interests do not override your rights and freedoms;
• Consent: Processing for marketing communications and any optional data collection activities, where consent is obtained separately and may be withdrawn at any time without affecting your account or service access.

5mwb shares personal data with third parties only where necessary to operate the Platform, fulfill legal obligations, or protect against fraud. We do not sell personal data. Categories of recipients with whom data may be shared:

7.1 Payment Processors

GCash (GXI Inc.), PayMaya/Maya (Maya Philippines Inc.), and partner banks (BPI, BDO, Metrobank) receive transaction-level data necessary to process deposits and withdrawals. These providers are independently regulated financial institutions subject to Bangko Sentral ng Pilipinas (BSP) oversight.

7.2 KYC and Identity Verification Providers

Third-party identity verification service providers process government ID images and selfie photographs solely for KYC verification purposes. These providers are contractually bound to process data only as instructed by 5mwb and are prohibited from using data for their own purposes.

7.3 Game Content Providers

Third-party game software providers (e.g., live casino studio operators, slot providers) may receive a Player ID and session token to deliver game content. These providers do not receive your full identity or financial data.

7.4 Regulatory and Government Authorities

5mwb discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other authorized government bodies where required by law or upon lawful order. Such disclosures are made only to the extent required by the applicable legal obligation.

7.5 Professional Advisors

Lawyers, auditors, and compliance consultants engaged by 5mwb may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

The 5mwb Platform uses cookies and similar tracking technologies to operate the Platform, improve your experience, and analyze usage patterns. The types of cookies used are:

• Strictly Necessary Cookies: Required for the Platform to function — including session authentication, security tokens, and fraud prevention flags. These cannot be disabled as the Platform cannot operate without them.
• Functional Cookies: Store your preferences such as language settings, game favorites, and display preferences to personalize your experience across sessions.
• Analytics Cookies: Collect anonymized data about how players use the Platform — page visit frequency, feature usage, error rates — to help us improve the service. IP addresses are anonymized before analytics processing.
• Marketing Cookies: Used only where you have provided consent to receive targeted promotions. These track whether you have viewed or acted on a promotional message.

You may manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent access to the Platform, but may affect certain convenience features. Disabling strictly necessary cookies will prevent login and normal Platform operation.

5mwb retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized so that it can no longer be attributed to any identified or identifiable individual.

5mwb implements comprehensive technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and 5mwb servers is protected by 256-bit SSL/TLS encryption;
• Encryption at Rest: Personal data stored in 5mwb databases is encrypted using AES-256;
• Access Controls: Personal data is accessible only to authorized 5mwb personnel whose job function requires access, enforced through role-based access control and multi-factor authentication;
• Penetration Testing: 5mwb systems are subjected to regular third-party security penetration tests to identify and remediate vulnerabilities;
• Incident Response Plan: A documented data breach response procedure is maintained, including notification protocols to the NPC and affected individuals within legally required timeframes;
• Data Processor Agreements: All third parties that process personal data on behalf of 5mwb are bound by data processing agreements ensuring they apply equivalent security standards.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 5mwb. These rights may be exercised by contacting our Data Protection Officer as described in Section 15.

The 5mwb Platform is strictly prohibited for persons under 21 years of age, as required by PAGCOR regulations. 5mwb does not knowingly collect or process personal data of individuals under 21.

Age is verified as part of the mandatory KYC process. If 5mwb discovers that personal data has been collected from a person below 21 years of age, that Account will be immediately suspended, all data will be deleted to the extent permitted by law, and the matter will be referred to PAGCOR in accordance with applicable regulations.

The 5mwb Platform is operated primarily in and for the Philippines. However, certain service providers — including game content providers and cloud infrastructure partners — may be located in other countries, which may result in cross-border transfer of personal data.

All international transfers of personal data by 5mwb are conducted in accordance with Section 21 of the Data Privacy Act of 2012 and applicable NPC regulations. 5mwb ensures that:

• Recipient organizations in other jurisdictions provide a level of data protection consistent with the DPA 2012;
• Appropriate contractual safeguards (Data Processing Agreements, Standard Contractual Clauses) are in place before any transfer;
• Transfers are limited to the data strictly necessary for the specific service being provided by the foreign recipient.

5mwb reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory guidance. When material changes are made, 5mwb will:

• Update the "Effective Date" and "Version" indicators at the top of this page;
• Send a notification to your registered email address at least 7 days before the updated Policy takes effect;
• Display a prominent notice on the 5mwb Platform for a period of no less than 14 days after the change takes effect.

Your continued use of the 5mwb Platform following the effective date of any revision constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the revised Policy, you must cease using the Platform and request account closure.

5mwb has designated a Data Protection Officer (DPO) in accordance with Section 21(c) of the Data Privacy Act of 2012 and NPC Circular No. 16-01. The DPO is responsible for overseeing all data protection compliance activities and for handling data subject inquiries and complaints.

For all data privacy-related inquiries, data subject rights requests, or complaints, please contact the 5mwb DPO at:

5mwb is committed to resolving all privacy concerns fairly and promptly. We take every data subject inquiry seriously — because your trust is the foundation of everything we do at 5mwb.