red365 Privacy
Policy

red365 is committed to protecting the privacy and security of every player who uses the Platform. Whether you're depositing via GCash from Manila, placing a live bet on a PBA game from Cebu, or spinning slots from Davao, your personal information deserves the same level of care and respect.

This Privacy Policy sets out the types of personal data we collect, why we collect it, how long we keep it, who we may share it with, and the rights you have over your own information. We have written this Policy in plain, readable English — not to obscure anything, but to make sure every Filipino player can understand exactly how their data is handled.

This Policy applies to all users of the red365 Platform, including registered account holders, unregistered visitors browsing the site, and any person who contacts red365 through customer support channels. It applies regardless of the device — desktop, mobile, or tablet — used to access the Platform.

We may update this Policy from time to time. The "Last Updated" date at the top of this page reflects the most recent version. If we make material changes, we will notify registered account holders by email or via in-account notification before the changes take effect.

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a natural person — including name, date of birth, mobile number, email address, government ID number, IP address, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, modification, disclosure, transfer, or deletion.
• "Data Subject" means the natural person to whom the personal data relates — i.e., you, the player or site visitor.
• "Personal Information Controller" (PIC) means the entity that determines the purpose and means of processing personal data. red365 is the PIC for all data collected through the Platform.
• "Data Protection Officer" (DPO) means the individual designated by red365 to oversee compliance with the Data Privacy Act and this Policy.
• "NPC" means the National Privacy Commission of the Philippines — the government body responsible for enforcing the Data Privacy Act.
• "Platform" means the red365 website, mobile browser interface, and any associated apps or services available at red365.co.
• "Sensitive Personal Information" has the meaning given to it under Section 3(l) of the Data Privacy Act, and includes government-issued identification numbers, financial account details, and health information.

red365 collects the following categories of personal data, depending on how you interact with the Platform:

red365 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, submit a deposit or withdrawal request, contact customer support, participate in a promotion, or update your account settings;
• Automatically: When you visit the Platform, our servers automatically log technical data including your IP address, device fingerprint, browser type, operating system, pages visited, and session duration;
• From payment processors: When you transact via GCash, PayMaya, BPI, BDO, or Metrobank, these processors share transaction confirmation data with red365 to enable deposit and withdrawal processing;
• From identity verification partners: During KYC, red365 may use third-party identity verification services to validate government-issued ID documents. These partners share verification results with red365 but do not receive your gaming activity data;
• From cookies and similar tracking technologies: As described in Section 9 of this Policy.

red365 processes your personal data only for specific, legitimate purposes. The primary purposes are:

1. Account Registration and Management: Creating and maintaining your red365 account, verifying your identity, and enabling secure login;
2. Payment Processing: Facilitating deposits and withdrawal requests via GCash, PayMaya, and bank transfers in Philippine Peso;
3. Identity Verification (KYC/AML): Verifying that you meet the 21+ age requirement and complying with Anti-Money Laundering Act (AMLA) obligations under Philippine law;
4. Platform Security: Detecting and preventing fraud, unauthorized account access, bonus abuse, and other prohibited activities described in the red365 Terms & Conditions;
5. Customer Support: Responding to your inquiries, complaints, and account-related requests via live chat, email, or Messenger;
6. Regulatory Compliance: Meeting obligations imposed by PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other applicable Philippine regulatory bodies;
7. Responsible Gaming: Monitoring gaming activity to identify patterns associated with problem gambling and facilitating access to responsible gaming tools where appropriate;
8. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications;
9. Platform Improvement: Analyzing aggregated, anonymized usage data to improve the red365 user experience, game library, and technical performance.

red365 does not use your personal data for purposes other than those listed above without first obtaining your explicit consent or establishing a separate lawful basis under the Data Privacy Act.

Under the Philippine Data Privacy Act, red365 relies on the following legal bases for processing your personal data:

• Performance of a Contract: Processing necessary to create and manage your account, process transactions, and deliver the gaming services you have registered to use;
• Compliance with a Legal Obligation: Processing required to meet obligations under the Data Privacy Act, AMLA, PAGCOR regulations, tax laws, and other applicable Philippine legislation;
• Legitimate Interests: Processing necessary for red365's legitimate interests in preventing fraud, ensuring platform security, and improving the user experience — where such interests are not overridden by your rights and freedoms;
• Consent: Where none of the above bases apply, red365 will request your explicit consent before processing your personal data — for example, for marketing communications or the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

red365 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share personal data only in the following circumstances:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposit and withdrawal transactions. These parties process data under their own privacy policies and applicable Philippine financial regulations;
• Identity Verification Partners: Third-party KYC service providers receive identity document images and personal details solely to perform verification and return a pass/fail result to red365;
• Game Providers: Third-party game providers may receive a tokenized player identifier and game session data for the purpose of delivering games and calculating results. They do not receive your full name, mobile number, or financial data;
• Regulatory and Law Enforcement Authorities: red365 is required to share personal data with PAGCOR, the NPC, the AMLC, the Bureau of Internal Revenue (BIR), and law enforcement agencies where required by Philippine law, court order, or regulatory directive;
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by red365 may access personal data to the extent necessary to provide their professional services, subject to confidentiality obligations;
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or part of red365's business, personal data may be transferred to the acquiring entity, subject to this Privacy Policy remaining in effect.

Some of red365's service providers — including cloud infrastructure, cybersecurity, and game delivery partners — may be located outside the Philippines. Where personal data is transferred to a country that does not offer an equivalent level of data protection to the Philippines, red365 implements appropriate safeguards, including contractual data protection clauses consistent with NPC requirements, to ensure your data remains protected.

red365 does not knowingly transfer personal data to countries designated as high-risk or insufficiently protective under NPC guidance without first implementing the required safeguards and, where applicable, notifying the NPC.

The red365 Platform uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage — to operate the Platform, remember your preferences, and analyze usage patterns. Cookies are small text files stored on your device when you visit a website.

red365 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. They enable login sessions, security tokens, and session management. These cannot be disabled without breaking core Platform functionality;
• Performance Cookies: Collect anonymized data on how users navigate the Platform — which pages are visited, how long sessions last, and where errors occur — to help red365 improve the user experience;
• Functional Cookies: Remember your preferences such as preferred language, regional settings, and game display options;
• Analytics Cookies: Used by analytics tools to generate aggregated, anonymized reports on Platform usage. red365 uses only privacy-respecting analytics tools that do not share individual-level data with third parties.

You may adjust your browser settings to refuse or delete cookies. However, disabling strictly necessary cookies will impair your ability to log in and use the Platform. Red365 does not use third-party advertising cookies or cross-site tracking technologies.

red365 retains your personal data for as long as necessary to fulfill the purposes set out in this Policy and to comply with applicable Philippine legal and regulatory requirements.

• Active account data is retained for the duration of your account's activity plus a minimum of five (5) years after account closure, in compliance with AMLA retention requirements;
• KYC and identity verification documents are retained for a minimum of five (5) years after the relevant transaction or account closure, as required by AMLC regulations;
• Financial transaction records are retained for a minimum of five (5) years for tax and regulatory audit purposes;
• Customer support communications are retained for two (2) years after the relevant interaction is resolved;
• Technical and log data (IP logs, session records) are retained for up to ninety (90) days unless required for longer retention in connection with a fraud investigation or legal proceeding;
• Marketing opt-in/opt-out records are retained indefinitely to evidence consent decisions.

When data is no longer required, red365 securely deletes or anonymizes it in accordance with its internal data disposal procedures.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by red365:

1. Right to be Informed: You have the right to know that red365 is collecting and processing your personal data, the purposes for which it is processed, and who it may be shared with. This Privacy Policy fulfills this obligation;
2. Right of Access: You may request a copy of the personal data red365 holds about you, the purposes for which it is being processed, and the identities of any third parties who have received your data;
3. Right to Rectification: You may request that inaccurate or incomplete personal data be corrected. You can update basic account information directly via your red365 account settings page;
4. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to red365's legal retention obligations;
5. Right to Object: You may object to the processing of your personal data where red365 relies on legitimate interests as the legal basis, or where data is used for direct marketing purposes. Objection to marketing processing will be actioned immediately;
6. Right to Data Portability: You may request that red365 provide your personal data in a structured, commonly used, machine-readable format, or transmit it directly to another controller where technically feasible;
7. Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe red365 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please submit a written request to [email protected] with the subject line "Data Subject Rights Request" and include your registered mobile number or email address for identity verification. red365 will respond within thirty (30) days of receipt.

Parents and guardians who believe that a minor may have registered a red365 account or accessed the Platform should contact our support team immediately at [email protected]. We take these reports seriously and will investigate and act on them as a priority matter.

red365 implements a range of technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, and destruction. These measures include:

• TLS 1.3 encryption for all data transmitted between your device and red365 servers;
• AES-256 encryption at rest for stored sensitive personal data, including KYC documents and financial account details;
• Role-based access controls ensuring that red365 staff can only access the personal data necessary for their specific job function;
• Multi-factor authentication for all red365 administrative systems and staff accounts;
• Regular security audits and penetration testing conducted by independent cybersecurity firms;
• Automated intrusion detection systems monitoring for unauthorized access attempts in real time;
• Segregated player funds — player balances are held in accounts separate from red365's operational funds.

In the event of a personal data breach that poses a real risk of serious harm, red365 will notify the NPC within 72 hours of discovery and will notify affected data subjects without undue delay, in accordance with NPC Circular 16-03.

The red365 Platform may contain references to or integrations with third-party services — including game providers, payment processors, and analytics tools. This Privacy Policy applies solely to personal data collected and processed by red365. Third-party services are governed by their own privacy policies, which red365 does not control.

red365 exercises due diligence in selecting third-party partners and requires, by contract, that they process personal data only for the specific purposes authorized by red365 and in compliance with applicable Philippine data protection law. However, red365 is not responsible for the privacy practices of third-party services beyond the scope of these contractual obligations.

red365 may update this Privacy Policy from time to time to reflect changes in our data processing practices, the services we offer, or applicable Philippine law. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page;
• Notify registered account holders by email to their registered address and/or by in-account notification;
• Post a summary of material changes prominently on the Platform for at least 30 days.

Your continued use of the red365 Platform after the effective date of any revised Policy constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you may close your account and request withdrawal of any Real Money Funds in accordance with the red365 Terms & Conditions.

We encourage you to review this Policy periodically. The current version is always accessible at red365.co/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by red365, please contact us using the details below. If your inquiry relates to a data subject rights request, please include "Data Subject Rights Request" in the subject line of your communication.

If you are not satisfied with red365's response to your data privacy inquiry, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) via the NPC's official complaint channel.

This Privacy Policy was last reviewed and updated on January 1, 2026. It supersedes all prior versions of the red365 Privacy Policy.