1. Who We Are
bonus365 ("bonus365," "we," "us," "our") operates the online casino and sports betting platform accessible at https://bonus365.asia. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, bonus365 acts as the Personal Information Controller (PIC) in respect of the personal data of registered players and website visitors located in the Philippines.
This Privacy Policy applies to all personal data collected through the bonus365 website, mobile platform, live chat, email, and any other digital touchpoint associated with the bonus365 brand.
2. Personal Data We Collect
bonus365 collects personal data that is necessary, adequate, and not excessive for the lawful purposes described in this Policy. The categories of personal data we collect include:
- Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (PhilSys, Passport, Driver's License, SSS, GSIS, UMID, or PRC ID number and image).
- Contact Data: Philippine mobile number (Globe or Smart), email address, and residential address.
- Financial Data: GCash account name and number, PayMaya details, bank account information (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records, and wallet balances denominated in Philippine Peso (PHP).
- Account Data: Username, encrypted password, account preferences, responsible gaming limit settings, session history, and self-exclusion status.
- Gaming Activity Data: Game logs, bet history, wager amounts, win/loss records, sports betting selections, and bonus redemption records.
- Technical Data: IP address, device type, operating system, browser type, geographic location (province/region), session timestamps, and unique device identifiers.
- Communications Data: Records of live chat transcripts, email correspondence, and support ticket exchanges with the bonus365 support team.
- KYC Verification Data: Selfie photos, ID document images, and proof-of-payment-method screenshots submitted during Know Your Customer verification.
3. How We Collect Your Data
bonus365 collects personal data through the following channels:
- Direct Submission: Information you provide when registering an account, completing KYC, making deposits or withdrawal requests, contacting support, or completing any form on the bonus365 platform.
- Automated Technical Collection: Data collected automatically when you visit or use the bonus365 website, including IP addresses, device identifiers, browser data, and usage behavior through cookies and similar tracking technologies.
- Payment Processors: Transaction confirmation data received from GCash, PayMaya, and partner banks when you deposit or withdraw funds.
- Identity Verification Partners: Data received from third-party KYC and identity verification service providers used to authenticate your identity documents against Philippine government registries.
- Regulatory Authorities: In limited circumstances, data received from PAGCOR or other Philippine regulatory bodies in connection with licensing compliance or investigations.
4. Purposes of Processing
bonus365 processes your personal data for the following specific, legitimate purposes:
- Creating and managing your bonus365 player account.
- Verifying your identity and age (21+ requirement) in compliance with PAGCOR regulations.
- Processing deposits, withdrawals, and financial transactions in Philippine Peso.
- Providing access to games, sports betting markets, live casino tables, e-sabong, and bingo services on the bonus365 platform.
- Administering bonuses, promotions, loyalty programs, and cashback offers.
- Detecting and preventing fraud, money laundering, match-fixing, and other prohibited conduct.
- Complying with anti-money laundering (AML) obligations under the Anti-Money Laundering Act (AMLA) and PAGCOR reporting requirements.
- Providing customer support via live chat, email, and other communication channels.
- Sending transactional communications (account alerts, deposit confirmations, withdrawal notifications, security alerts).
- Sending promotional communications where you have given consent, including bonus offers and platform updates.
- Improving the bonus365 platform through analysis of aggregated, anonymized usage data.
- Enforcing the bonus365 Terms & Conditions and Responsible Gaming Policy.
5. Legal Bases for Processing
bonus365 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:
- Contractual Necessity: Processing required to fulfill our obligations under the bonus365 Terms & Conditions, including account management, payment processing, and game provision.
- Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), AMLC reporting obligations, and other applicable Philippine laws.
- Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and service improvement, where such interests are not overridden by your rights.
- Consent: Processing for optional purposes such as promotional communications, where you have given explicit, informed, and freely-given consent. You may withdraw consent at any time without affecting prior processing.
6. Sharing Your Personal Data
bonus365 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We share your data only in the following circumstances and only to the extent necessary:
- Payment Processors: GCash (Mynt – Globe Fintech Innovations Inc.), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank — to process your financial transactions.
- Game Providers: Licensed third-party game studios (e.g., PG Soft, Jili, Pragmatic Play) receive necessary technical identifiers to deliver gameplay. These providers do not receive your full identity or financial data.
- KYC & Identity Verification Partners: Third-party service providers that verify identity documents against Philippine government databases.
- Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where required by law or court order.
- IT & Infrastructure Providers: Cloud hosting, cybersecurity, and platform maintenance providers operating under strict data processing agreements that prohibit independent use of your data.
All third parties who receive personal data from bonus365 are required to maintain appropriate technical and organizational security measures and to process your data only in accordance with our instructions and applicable Philippine law.
7. Data Retention
bonus365 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law:
- Active Account Data: Retained throughout the lifetime of your active bonus365 account.
- Transaction & Financial Records: Retained for a minimum of five (5) years following the transaction date, in compliance with AMLA record-keeping requirements.
- KYC Documents: Retained for five (5) years following account closure, per PAGCOR and AMLC requirements.
- Support Communications: Retained for two (2) years from the date of the last interaction.
- Closed Account Data: Core identity and transaction records retained for five (5) years following closure to satisfy regulatory obligations, after which data is securely deleted or anonymized.
8. Cookies & Tracking Technologies
The bonus365 website uses cookies and similar technologies to ensure platform functionality, improve user experience, and analyze site performance. The types of cookies used include:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your bonus365 account. These cannot be disabled without breaking core functionality.
- Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limit configurations.
- Analytics Cookies: Collect anonymized, aggregated data on how players navigate the bonus365 platform to help us improve performance and usability. No personally identifiable information is shared with analytics providers.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your bonus365 account.
9. Data Security
bonus365 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and bonus365 servers.
- AES-256 encryption for sensitive data at rest, including financial account details and identity documents.
- SMS OTP two-factor authentication available on all player accounts.
- Real-time fraud detection and account activity monitoring systems.
- Regular penetration testing and security audits conducted by independent cybersecurity firms.
- Strict role-based access controls limiting internal staff access to personal data on a need-to-know basis.
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, bonus365 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.
10. Your Rights Under the Data Privacy Act
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by bonus365:
- Right to be Informed: The right to know that your personal data is being collected and processed, and the purposes for which it is used.
- Right of Access: The right to request a copy of the personal data bonus365 holds about you.
- Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
- Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes collected, subject to legal retention obligations.
- Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
- Right to Object: The right to object to processing based on legitimate interests, including direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your rights under RA 10173 have been violated.
To exercise any of these rights, contact the bonus365 Data Protection Officer via email at [email protected]. We will respond to all verifiable requests within thirty (30) days.
11. Children's Privacy
The bonus365 platform is strictly prohibited to individuals under the age of 21 years, in accordance with PAGCOR age restrictions applicable to all online gambling platforms serving the Philippine market. bonus365 does not knowingly collect, process, or retain personal data from any person under the age of 21.
If bonus365 becomes aware that personal data has been collected from an individual under the age of 21, such account will be immediately suspended, all balances forfeited, all associated personal data deleted, and the incident reported to relevant Philippine authorities where required. Parents or guardians who become aware that their minor child has registered on bonus365 should contact our support team immediately at [email protected].
12. Changes to This Privacy Policy
bonus365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via the email address or mobile number on file, with a minimum of seven (7) days' advance notice. The updated Policy will be posted on this page with a revised effective date. Continued use of the bonus365 platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy.
13. Contact & Data Protection Officer
bonus365 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. To exercise your data subject rights, submit a privacy complaint, or ask any questions about how bonus365 processes your personal data, contact us through:
- Email: [email protected] (subject line: "Privacy / DPO Request")
- Live Chat: Available 24/7 on the bonus365 website — Filipino and English support.
All data subject requests will be acknowledged within seventy-two (72) hours and resolved within thirty (30) calendar days. If you are unsatisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.