oh365 Casino Philippines
Privacy Policy

oh365 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every Filipino player who registers and uses the oh365 platform. This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as issued and administered by the National Privacy Commission (NPC).

This Policy governs the collection, use, storage, disclosure, and deletion of personal data in connection with your use of oh365. It applies to all interactions with the platform — whether via web browser on desktop or mobile, or through any future oh365 application — and covers all categories of data subjects including registered Account Holders, former Account Holders, and visitors who browse the platform without registering.

Where this Policy refers to "personal data," it means any information from which a living individual can be identified, directly or indirectly — including name, contact details, identification numbers, financial account information, device identifiers, and behavioral data generated through platform use.

For the purposes of the Philippine Data Privacy Act of 2012, oh365 acts as the Personal Information Controller (PIC) with respect to the personal data it collects and processes in connection with the operation of the platform. oh365 determines the purposes and means by which personal data is processed and bears primary responsibility for ensuring that such processing is conducted lawfully, fairly, and transparently.

oh365 has designated a Data Protection Officer (DPO) responsible for overseeing data protection compliance, handling data subject requests, and serving as the point of contact for the National Privacy Commission. Contact details for the oh365 DPO are provided in Section 13 of this Policy.

oh365 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and in limited cases from third-party service providers such as payment processors and identity verification agencies. The categories of personal data we collect include:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement mandated by PAGCOR)
• Residential address including city and province within the Philippines (e.g., Manila, Cebu, Davao, Quezon City, or any other region)
• Philippine mobile number and email address
• Government-issued identification document details (e.g., Philippine National ID, passport, driver's license, SSS/GSIS card)
• Selfie or photograph submitted for identity verification purposes

3.2 Financial & Transaction Data

• GCash account number or registered mobile number linked to GCash
• PayMaya account details
• Philippine bank account information (BPI, BDO, Metrobank, or other linked banks) where used for deposits or withdrawals
• Cryptocurrency wallet addresses associated with USDT or BTC transactions
• Deposit and withdrawal transaction history, including amounts, dates, and payment method used
• Account balance history and gaming transaction records

3.3 Account Activity & Gaming Data

• Game session records including games played, wager amounts, outcomes, and session duration
• Bonus and promotion history, including bonuses accepted and wagering progress
• Login history including timestamps, IP addresses, and device identifiers
• Communications with oh365 support, including live chat transcripts and email correspondence
• Responsible gaming preferences set by the Account Holder, including deposit limits and self-exclusion status

3.4 Technical & Device Data

• IP address and approximate geolocation derived from IP address
• Device type, operating system, and browser version
• Session cookies and analytics identifiers (see Section 7 for full details)

oh365 processes your personal data for the following purposes:

oh365 will not use your personal data for any purpose that is incompatible with those listed above without providing prior notice and, where required by law, obtaining your consent.

Under the Philippine Data Privacy Act of 2012, oh365 processes personal data on the following legal bases:

• Contract Performance: Processing is necessary for oh365 to provide the services described in the oh365 Terms & Conditions — including account operation, game access, deposit and withdrawal processing, and customer support.
• Legal Obligation: oh365 is required to process certain personal data to comply with applicable Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other relevant legislation.
• Legitimate Interest: oh365 processes certain data on the basis of its legitimate interest in operating a secure, fair, and commercially viable platform — including fraud prevention, security monitoring, and anonymized analytics. oh365 balances its legitimate interests against the rights and interests of data subjects and will not process data on this basis where those rights override our interests.
• Consent: Where oh365 processes data for marketing or other optional purposes, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time by contacting the oh365 Data Protection Officer or adjusting your communication preferences in your account settings.

oh365 does not sell your personal data to third parties. oh365 shares personal data only in the limited circumstances described below, and only with parties who are contractually bound to process it securely and solely for the permitted purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processing partners receive the minimum personal and financial data necessary to process your deposit or withdrawal transaction.
• KYC & Identity Verification Providers: Third-party identity verification services receive your identity documents and related data for the purpose of confirming your identity and age in compliance with PAGCOR requirements and the AMLA.
• Fraud Prevention & Security Services: oh365 uses third-party fraud detection and security monitoring tools that may process IP address, device, and behavioral data to identify suspicious activity.
• Regulatory Authorities: oh365 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities upon lawful request.
• Platform Service Providers: oh365 uses regulated technology providers for hosting, platform infrastructure, analytics, and customer support tooling. These providers operate as Personal Information Processors (PIPs) under contractual obligations consistent with this Policy and the Data Privacy Act of 2012.

oh365 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device by your browser. oh365 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting core platform functionality.
• Performance & Analytics Cookies: Used to understand how players interact with the platform — including which pages are visited most, how long sessions last, and where navigation difficulties occur. This data is aggregated and used to improve the oh365 player experience. These cookies do not identify you personally.
• Functional Cookies: Store your preferences — such as language settings, display preferences, and last-visited game category — to provide a more personalized experience on subsequent visits.
• Security Cookies: Used by oh365's fraud prevention and security monitoring tools to identify unusual access patterns, support two-factor authentication flows, and protect your account from unauthorized access.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in to and use the oh365 platform. oh365 does not use third-party advertising cookies or behavioral profiling cookies for external advertising purposes.

oh365 retains personal data for as long as is necessary for the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of the Account's active life, plus a minimum of five (5) years following Account closure, as required under the Anti-Money Laundering Act and related AMLC regulations.
• Transaction Records: Financial and gaming transaction records are retained for a minimum of five (5) years in compliance with AMLA requirements and PAGCOR record-keeping obligations.
• KYC / Identity Documents: Retained for five (5) years following the conclusion of the business relationship, or longer if required by a specific regulatory request or legal proceeding.
• Support Communications: Live chat transcripts and email correspondence are retained for up to two (2) years from the date of the interaction, unless a longer retention period is required by an ongoing dispute or legal matter.
• Technical & Analytics Data: Aggregated analytics data is retained indefinitely in anonymized form. IP address and session log data are retained for a maximum of twelve (12) months unless required for fraud investigation or legal proceedings.
• Marketing Preferences: Records of marketing consent or objection are retained for three (3) years from the last contact, to demonstrate compliance with consent obligations.

Upon expiry of the applicable retention period, oh365 will securely delete or anonymize personal data, unless retention is required for the establishment, exercise, or defense of a legal claim.

Under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to personal data processed by oh365. To exercise any of these rights, contact the oh365 Data Protection Officer at the details provided in Section 13:

• Right to Be Informed: The right to be notified of how your personal data is being processed, which this Privacy Policy fulfills.
• Right of Access: The right to obtain a copy of the personal data that oh365 holds about you, along with information about how it is processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected without undue delay. For basic account details, you may update these directly in your Account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, provided that no overriding legal obligation requires its retention.
• Right to Restrict Processing: The right to request that oh365 restrict the processing of your personal data in certain circumstances — for example, while a dispute regarding the accuracy of the data is being resolved.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, to the extent technically feasible.
• Right to Object: The right to object to the processing of your personal data on the basis of legitimate interest, including profiling for direct marketing purposes.
• Right to Lodge a Complaint: If you believe oh365 has not complied with its data protection obligations, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

oh365 will respond to all valid data subject requests within thirty (30) days of receipt. Where a request is particularly complex or numerous, this period may be extended by an additional thirty (30) days, with notice provided to you. oh365 will not charge a fee for processing data subject requests unless they are manifestly unfounded or excessive.

oh365 implements technical and organizational security measures proportionate to the risk associated with processing your personal data. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and oh365 servers
• Encryption of sensitive personal data at rest on oh365 storage infrastructure
• Access controls limiting internal access to personal data on a strict need-to-know basis, enforced through role-based authentication
• Multi-factor authentication requirements for administrative access to systems holding personal data
• Regular security assessments and vulnerability testing of platform infrastructure
• Staff training on data protection obligations and secure data handling practices
• Incident response procedures for detecting, containing, and reporting personal data breaches in accordance with the Data Privacy Act of 2012

While oh365 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password for your oh365 Account and to enable two-factor authentication to reduce the risk of unauthorized access.

oh365 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material, oh365 will notify Account Holders via the registered email address or through a prominent notice on the platform before the changes take effect.

The date of the most recent update is displayed at the top of this page. Your continued use of oh365 following notice of updates to this Policy constitutes your acknowledgment of the revised terms. If you do not accept any update, you may request Account closure by contacting the oh365 support team.

For historical versions of this Privacy Policy, please contact the oh365 Data Protection Officer using the details in Section 13.

For any questions, requests, or concerns relating to this Privacy Policy or oh365's data protection practices, please contact the oh365 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on oh365.cam — our fastest response channel for urgent data concerns. Average response time is under two minutes.
• Email (Data Protection): [email protected] — subject line: "Data Privacy Request"

oh365 will acknowledge all data subject requests within three (3) business days and will provide a substantive response within thirty (30) days, as required under the Data Privacy Act of 2012.

If you are not satisfied with oh365's response to your data protection concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.