one365 Privacy Policy

1. Introduction

one365 ("one365," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use the one365 platform at one365.vip (the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, disclose, and protect your personal information in connection with your use of the Platform and all associated services.

This Policy applies to all registered players, visitors, and any other individuals whose personal data is processed by one365 in connection with the Platform. It should be read in conjunction with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

one365 operates in the Philippines and processes personal data in accordance with applicable Philippine data protection legislation and any other applicable laws and regulations governing the processing of personal data in the jurisdictions in which we operate.

2. Personal Data We Collect

one365 collects personal data that is necessary for the operation of the Platform, the provision of our services, and compliance with our legal and regulatory obligations. The categories of personal data we collect include, but are not limited to, the following:

We collect personal data directly from you when you register an account, make a deposit or withdrawal, contact our support team, or otherwise interact with the Platform. We may also collect certain technical data automatically through cookies and similar tracking technologies as described in Section 8 of this Policy.

3. How We Use Your Personal Data

one365 uses your personal data only for legitimate purposes directly connected to the operation of the Platform and the provision of our services. Specifically, we use your data to:

• Create and manage your one365 account, including verifying your identity and age in compliance with the 21+ requirement under Philippine gaming regulations.
• Process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other supported payment methods.
• Detect, investigate, and prevent fraudulent transactions, money laundering, and other prohibited activities.
• Comply with applicable legal and regulatory obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• Provide customer support and respond to your enquiries, complaints, and feedback.
• Monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour.
• Send you transactional communications, including account notifications, deposit confirmations, and security alerts.
• Send you promotional and marketing communications where you have provided your consent to receive such communications.
• Improve the Platform, personalise your experience, and conduct internal analytics and research.

one365 will not use your personal data for any purpose that is incompatible with the purposes described in this Policy without first obtaining your consent or establishing another lawful basis for such processing.

4. Legal Basis for Processing

one365 processes your personal data on the following legal bases, depending on the specific processing activity involved:

• Contractual Necessity: Processing that is necessary for the performance of the contract between you and one365, including account management, transaction processing, and the provision of gaming services.
• Legal Obligation: Processing that is required for one365 to comply with applicable laws and regulations, including AML/KYC obligations, age verification requirements, and regulatory reporting duties.
• Legitimate Interests: Processing that is necessary for the purposes of one365's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing that is based on your freely given, specific, informed, and unambiguous consent, including the sending of marketing communications and the use of non-essential cookies.

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

one365 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment processors, for the purpose of processing your financial transactions.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to assist with regulatory compliance.
• Fraud Prevention & Security Providers: Specialist providers of fraud detection, cybersecurity, and risk management services.
• IT & Platform Service Providers: Cloud hosting, data storage, and software service providers who process data on our behalf under strict contractual data processing agreements.
• Regulatory & Law Enforcement Authorities: Philippine gaming regulators, law enforcement agencies, and other competent authorities, where disclosure is required by applicable law, court order, or regulatory direction.
• Professional Advisers: Lawyers, auditors, and other professional advisers engaged by one365 in connection with the operation of the Platform.

All third parties with whom one365 shares personal data are required to process such data in accordance with applicable data protection laws and our contractual requirements. one365 remains responsible for ensuring that any such sharing is conducted lawfully and securely.

6. Data Retention

one365 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC Documentation: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Support Communications: Retained for a period of three (3) years from the date of the communication, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with one365's data disposal procedures.

7. Security Measures

one365 takes the security of your personal data seriously and implements a range of technical and organisational measures designed to protect your information against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the one365 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting access to personal data to authorised personnel only, on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Comprehensive staff training on data protection obligations and information security best practices.

While one365 employs robust security measures, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, one365 will notify you and the relevant regulatory authorities in accordance with applicable legal requirements.

8. Cookies & Tracking Technologies

one365 uses cookies and similar tracking technologies on the Platform to enhance your user experience, analyse Platform performance, and support our security and fraud prevention measures. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, authentication, and security functions. These cookies cannot be disabled.
• Performance & Analytics Cookies: Used to collect anonymised information about how visitors use the Platform, helping us identify areas for improvement.
• Functional Cookies: Used to remember your preferences and settings, such as language selection and display preferences, to provide a more personalised experience.
• Marketing Cookies: Used to deliver relevant promotional content based on your interests and gaming activity, where you have consented to receive marketing communications.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.

9. Your Data Protection Rights

Subject to applicable law, you have the following rights in relation to your personal data held by one365:

• Right of Access: You have the right to request a copy of the personal data one365 holds about you, along with information about how it is being used.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances, subject to our legal and regulatory retention obligations.
• Right to Restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while a dispute is being resolved.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format in certain circumstances.
• Right to Object: You have the right to object to the processing of your personal data where such processing is based on our legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our support team via live chat on the Platform. We will respond to all valid requests within thirty (30) days. We may need to verify your identity before processing your request.

10. Children's Privacy

The one365 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations applicable to casino-style gambling activities. one365 does not knowingly collect personal data from individuals under the age of 21.

If one365 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the Platform, please contact our support team immediately via live chat so that we can investigate and take appropriate action.

one365 employs age verification procedures at the point of registration and during ongoing account monitoring to enforce this requirement. Parents and guardians are encouraged to make use of parental control tools to prevent minors from accessing online gambling platforms.

11. Third-Party Links

The one365 Platform may contain links to third-party websites or services for informational purposes. one365 has no control over the content, privacy practices, or data processing activities of any third-party websites and accepts no responsibility or liability for them.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link to a third-party website on the one365 Platform does not constitute an endorsement of that website or its privacy practices by one365.

12. Amendments to This Policy

one365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will endeavour to provide reasonable notice to registered players via email or a prominent notice on the Platform.

The date of the most recent revision is indicated at the top of this page. Your continued use of the Platform following the publication of any amendments constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how one365 protects your personal data.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way one365 processes your personal data, please contact our Data Protection team through the following channel:

Please include your registered account username and a clear description of your request or concern to help us respond as efficiently as possible. All contact details are provided for informational purposes only and must not be used for unsolicited commercial communications.