Privacy Policy

1.Introduction

bit365 ("we," "our," "us," "the Company") operates the online gaming platform accessible at bit365.biz and provides live casino, slots, sports betting, e-sabong, and bingo services to players in the Philippines. In the course of providing these services, bit365 processes personal data relating to registered users and visitors to the platform.

bit365 is committed to handling personal data responsibly, lawfully, and transparently. This Privacy Policy describes how bit365 collects, uses, stores, shares, and protects personal information, and sets out the rights available to data subjects under the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations.

As a platform serving Filipino players — from Metro Manila to Cebu, Davao, Iloilo, and beyond — bit365 recognizes that trust is fundamental to the player relationship. We do not treat privacy compliance as a formality; we treat it as an ongoing obligation to the individuals whose data we hold.

2.Personal Data We Collect

bit365 collects the following categories of personal data in connection with account registration, platform use, payment processing, and regulatory compliance:

bit365 does not intentionally collect sensitive personal information beyond what is strictly required for KYC verification and regulatory compliance. Where sensitive data is collected (such as government ID numbers), it is processed solely for the purposes stated in this Policy and is subject to heightened security controls.

3.How We Collect Your Data

3.1 Directly From You

The majority of personal data bit365 holds is provided directly by you during the registration process, KYC verification, account management activities, and communications with customer support. This includes all identity, contact, and verification data.

3.2 Automatically Through Platform Use

When you access and use the bit365 platform, technical data is collected automatically through standard web server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser information, and session data. See Section 10 for a full description of our cookie practices.

3.3 From Payment Processors

When you make a deposit or withdrawal using GCash, Maya, BPI, BDO, Metrobank, or other payment methods, financial transaction data is received from the relevant payment processor for the purpose of confirming and recording the transaction. bit365 does not store full payment credentials — only the transaction records necessary for account management and regulatory reporting.

3.4 From Third-Party Verification Services

For the purpose of identity verification and anti-money laundering compliance, bit365 may use third-party identity verification and sanctions screening services. These services may cross-reference the identity information you provide against government databases, sanctions lists, and politically exposed persons (PEP) registries.

4.Purposes of Data Processing

bit365 processes personal data for the following specific purposes:

• Account Registration and Management: Creating and maintaining your bit365 account, authenticating your identity at login, and managing account settings including responsible gaming preferences.
• KYC and Age Verification: Verifying that you meet the minimum age requirement of 21 years and confirming your identity as required under applicable regulatory obligations. This is a legal requirement for all active accounts.
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, and other Philippine payment methods; recording transaction history; preventing payment fraud.
• Gaming and Platform Services: Providing access to all bit365 gaming products; recording wagering activity; resolving disputes relating to game outcomes or transactions.
• Anti-Money Laundering (AML) Compliance: Monitoring transaction patterns for indicators of money laundering, structuring, or other financial crime; conducting sanctions screening; reporting suspicious activity to relevant authorities as legally required.
• Responsible Gaming: Monitoring player activity for indicators of problem gambling; administering deposit limits, loss limits, session alerts, and self-exclusion requests; fulfilling obligations under applicable responsible gaming requirements.
• Customer Support: Responding to inquiries, resolving account issues, and maintaining records of support interactions.
• Marketing Communications: Sending promotional offers, platform updates, and personalized bonus notifications — subject to your communication preferences and applicable marketing consent requirements.
• Platform Security: Detecting and preventing unauthorized access, fraud, account takeovers, and other security threats.
• Legal and Regulatory Compliance: Complying with applicable Philippine laws and regulations, including the Data Privacy Act, gaming regulations, and financial crime laws; responding to lawful requests from regulatory or law enforcement authorities.

5.Legal Basis for Processing

Under the Data Privacy Act of 2012, bit365 processes personal data on the following legal bases:

• Contract Performance: Processing necessary to perform the contract between bit365 and the account holder, including account management, payment processing, and gaming services.
• Legal Obligation: Processing required to comply with Philippine legal obligations, including KYC/AML requirements, age verification, and regulatory reporting.
• Legitimate Interests: Processing necessary for bit365's legitimate interests, including platform security, fraud prevention, and responsible gaming monitoring, where such interests are not overridden by the data subject's rights.
• Consent: Where bit365 relies on consent (e.g., for direct marketing communications), you have the right to withdraw consent at any time by updating your communication preferences in account settings or contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6.Data Sharing and Disclosure

6.1 Service Providers

bit365 shares personal data with trusted third-party service providers who assist in operating the platform, including payment processors (GCash/Maya integration partners), identity verification providers, live casino studio operators, cloud hosting providers, customer support platform providers, and cybersecurity services. All service providers are contractually bound to process personal data only in accordance with bit365's instructions and applicable data protection requirements.

6.2 Regulatory and Law Enforcement Authorities

bit365 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other competent authorities where required or permitted by law, or where necessary to protect the rights, property, or safety of bit365, its players, or third parties.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of bit365's business or assets, personal data held by bit365 may be transferred to the acquiring entity, subject to the acquiring entity's assumption of the obligations set forth in this Privacy Policy.

6.4 No Sale of Personal Data

bit365 does not sell, rent, or trade personal data to unaffiliated third parties for their independent marketing or commercial purposes. Personal data is shared only as described in this Privacy Policy.

7.International Data Transfers

Some of bit365's third-party service providers — including live casino studio operators and cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred internationally, bit365 implements appropriate safeguards to ensure that the transferred data receives a standard of protection consistent with the Data Privacy Act of 2012 and its implementing rules. These safeguards may include standard contractual clauses, data processing agreements, or transfers to jurisdictions with adequate data protection frameworks.

8.Data Retention

bit365 retains personal data for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. The following general retention principles apply:

• Active Account Data: Retained for the duration of the account relationship plus a minimum of five (5) years following account closure, consistent with AML and gaming regulatory record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later, as required under applicable AML regulations.
• Transaction Records: Retained for a minimum of five (5) years in accordance with applicable financial records retention requirements.
• Customer Support Communications: Retained for a period of three (3) years following the resolution of the relevant inquiry or dispute.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which marketing-specific data is promptly deleted or anonymized.
• Technical and Log Data: Typically retained for up to twelve (12) months for security monitoring and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with bit365's data disposal procedures.

9.Your Data Subject Rights

Under the Data Privacy Act of 2012, Philippine data subjects have the following rights with respect to their personal data processed by bit365:

• Right to be Informed: The right to be informed that your personal data is being collected and processed, and of the purposes of such processing.
• Right to Access: The right to request access to the personal data bit365 holds about you, including information on how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure / Right to be Forgotten: The right to request deletion of personal data where there is no longer a legitimate or legal basis for its retention, subject to bit365's legal record-keeping obligations.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: The right to object to the processing of your personal data where processing is based on legitimate interests, including direct marketing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) where you believe bit365 has not handled your personal data in accordance with the Data Privacy Act.

To exercise any of the above rights, please contact bit365's Data Privacy Officer via the contact details in Section 14. bit365 will respond to verified data subject requests within thirty (30) calendar days.

10.Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the bit365 platform. They allow the platform to recognize your device, maintain your login session, remember your preferences, and collect analytics data about platform usage.

10.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your bit365 account. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming alerts you have configured.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the platform to help bit365 improve the user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized account access, and bot traffic.

10.3 Managing Cookies

You can control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the bit365 platform, including the ability to maintain an authenticated session. Strictly necessary cookies cannot be disabled as they are essential to platform operation.

11.Children's Privacy and Age Restriction

The bit365 platform is strictly for individuals aged 21 years and above. bit365 does not knowingly collect, process, or retain personal data relating to individuals under 21 years of age. Age verification is conducted during the KYC process for all registered accounts.

If bit365 becomes aware that personal data has been collected from an individual under 21 years of age without verified parental consent, bit365 will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the bit365 platform, please contact customer support immediately.

12.Security Measures

bit365 implements a range of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bit365 platform;
• Encryption of stored sensitive personal data and KYC documents at rest;
• Role-based access controls ensuring that only authorized personnel with a legitimate operational need can access personal data;
• Multi-factor authentication for internal system access;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures for detecting, assessing, and notifying affected parties of personal data breaches in accordance with the Data Privacy Act's breach notification requirements.

While bit365 employs industry-standard security measures, no online system can guarantee absolute security. You are responsible for maintaining the security of your account credentials and notifying bit365 immediately of any suspected unauthorized access to your account.

13.Changes to This Privacy Policy

bit365 reserves the right to update or modify this Privacy Policy at any time. Changes will be effective upon publication on the bit365 platform, with the "Last Updated" date revised accordingly. Where amendments are material — for example, changes to the categories of data collected or the purposes of processing — bit365 will provide prior notice via email or in-platform notification with a reasonable period before the amended policy takes effect.

Your continued use of the bit365 platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your personal information.

14.Contact — Data Privacy Officer

For all matters relating to this Privacy Policy, the exercise of data subject rights, or any privacy concerns regarding your bit365 account, please contact the bit365 Data Privacy Officer through the following channels:

• Live Chat: Available 24/7 via the bit365 platform (quickest response for urgent matters)
• Email: [email protected] — please include "Data Privacy Request" in your subject line

bit365 will acknowledge receipt of all data subject requests within five (5) business days and will endeavor to resolve requests within thirty (30) calendar days. Complex requests may require additional time, in which case bit365 will provide an interim update explaining the reason for the delay.

If you are not satisfied with bit365's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph (please visit directly — not a link per platform policy).