Privacy Policy

bit365 ("we," "us," or "our") operates the online gaming platform accessible at https://bit365.club (the "Platform"). We are committed to protecting the privacy and personal data of every individual who accesses or uses the bit365 Platform, including registered account holders, visitors, and prospective users based in the Philippines.

This Privacy Policy describes in detail the categories of personal data we collect, the purposes for which we process that data, the legal bases on which we rely, the parties with whom we may share your data, and the rights available to you under Philippine data protection law. This Policy applies to all personal data collected through the Platform, our customer support channels, and any other interaction you have with bit365.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the bit365 Platform. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, bit365 is the personal information controller responsible for the personal data collected through the Platform.

bit365 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection laws and for handling data subject requests and complaints. You may contact our DPO at any time using the contact details provided in Section 14 of this Policy.

Where bit365 engages third-party service providers to process personal data on its behalf, those providers act as personal information processors and are contractually bound to process data only in accordance with bit365's instructions and applicable law.

bit365 collects the following categories of personal data, depending on how you interact with the Platform:

We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by law (for example, health-related information provided voluntarily in the context of a responsible gaming self-exclusion request).

bit365 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated technologies: Data collected automatically when you access the Platform, including cookies, web beacons, server logs, and similar tracking technologies that record your device information, IP address, and browsing behavior on the Platform.
• Third-party sources: Data received from identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention services, and regulatory databases, where permitted by law.
• Publicly available sources: In limited circumstances, data from publicly available sources such as government registries or court records, where relevant to our legal compliance obligations.

bit365 uses the personal data we collect for the following purposes:

• Account registration and management: To create and maintain your bit365 account, verify your identity, and manage your account settings and preferences.
• Service delivery: To provide access to the games, betting markets, and other features available on the bit365 Platform.
• Financial transactions: To process deposits, withdrawals, and bonus credits, and to maintain accurate financial records of all transactions.
• Legal and regulatory compliance: To fulfill our obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012. This includes conducting KYC checks, filing regulatory reports, and cooperating with law enforcement where required.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct.
• Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce self-exclusion requests, and apply account restrictions where appropriate.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement: To analyze usage patterns, conduct research, and develop new features and improvements to the bit365 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and news about bit365, where you have provided your consent to receive such communications. You may withdraw this consent at any time.

Under the Data Privacy Act of 2012, bit365 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, deliver gaming services, and process financial transactions.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and tax reporting requirements.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, where those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bit365 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and age in compliance with PAGCOR requirements.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers used to process your deposits and withdrawals. These providers process your financial data under their own privacy policies and applicable financial regulations.
• Fraud prevention and AML services: Third-party providers that assist bit365 in detecting and preventing fraudulent activity and money laundering.
• IT and platform service providers: Cloud hosting, data storage, analytics, and customer support technology providers engaged by bit365 to operate the Platform. All such providers are bound by data processing agreements that restrict their use of your data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by bit365, subject to professional confidentiality obligations.

In the event of a merger, acquisition, or sale of all or part of bit365's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

bit365 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance.
• Technical and usage data: Retained for up to twelve (12) months from collection, unless required for longer for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

bit365 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the Platform. We use the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your preferred language and display settings, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized data about how users interact with the Platform, helping us identify areas for improvement. These cookies do not identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect the performance and personalization of your Platform experience. Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform.

bit365 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the bit365 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• AES-256 encryption at rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized bit365 personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Two-factor authentication: bit365 supports two-factor authentication (2FA) for user accounts to provide an additional layer of security against unauthorized access.
• Regular security audits: bit365 conducts regular internal and third-party security assessments, penetration testing, and vulnerability scans to identify and remediate security risks.
• Incident response: bit365 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected users within the timeframes required by law.

While bit365 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by bit365. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

bit365 will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reasons for it. We will not charge a fee for handling data rights requests unless they are manifestly unfounded or excessive.

If you are not satisfied with how bit365 has handled your personal data or responded to a data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The bit365 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. bit365 does not knowingly collect personal data from individuals under the age of 21.

If bit365 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the bit365 Platform, please contact our support team immediately.

Age verification is conducted as part of the mandatory KYC process for all new registrations. bit365 reserves the right to request additional age verification documentation at any time where there is reasonable doubt about a user's age.

bit365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered users by email or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how bit365 protects your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.

If any amendment materially affects your rights or the way we process your personal data in a manner that requires your consent, we will seek your consent before the amended processing begins.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way bit365 processes your personal data, please contact our Data Protection Officer. We are committed to addressing all privacy-related inquiries promptly and transparently.

You may reach our Data Protection Officer by email at: [email protected]

For general support inquiries, you may contact our customer support team at: [email protected]

Our support team is available 24 hours a day, 7 days a week via live chat on the Platform. All formal privacy complaints submitted in writing will be acknowledged within two (2) business days and resolved within thirty (30) calendar days where possible.

If you are not satisfied with our response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.