red365 Privacy Policy

This Privacy Policy ("Policy") describes how red365 ("red365", "we", "us", "our") collects, uses, stores, shares, and protects personal information in connection with your use of the red365 online gaming platform accessible at red365.win ("Platform").

red365 is the Data Controller responsible for your personal information as defined under the Data Privacy Act of 2012 (RA 10173) of the Republic of the Philippines. As a PAGCOR-licensed online gaming operator, red365 is also subject to PAGCOR's data handling requirements and the Anti-Money Laundering Act (RA 9160, as amended), both of which impose specific obligations on how we process player information.

This Policy applies to all players who register an account, make a deposit, interact with customer support, receive promotional communications, or otherwise use any feature of the red365 Platform. By using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal information as described herein.

This Policy does not apply to third-party websites or services that may be linked from the Platform. red365 is not responsible for the privacy practices of any third party, and we encourage you to read the privacy policies of any external services you interact with.

red365 collects only the personal information that is necessary for the purposes described in this Policy. The categories of personal information we collect include:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued Philippine identification document;
• Date of birth (for age verification — 21+ requirement);
• Philippine mobile number used at registration;
• Username and encrypted account password;
• Copies of government-issued Philippine identification documents (PhilSys, Passport, SSS/UMID, LTO Driver's License);
• Selfie photograph for biometric identity matching as part of KYC compliance.

2.2 Financial & Transaction Data

• GCash account number or PayMaya account associated with deposits and withdrawals;
• Bank account details (BPI, BDO, Metrobank) where bank transfer is used;
• Deposit and withdrawal amounts, timestamps, and transaction reference numbers;
• Betting and gaming transaction records, including game type, stake amount, outcome, and timestamp;
• Account balance history and bonus transaction records.

2.3 Technical & Usage Data

• IP address and approximate geolocation data at the time of access;
• Device type, operating system, and browser version;
• Session start and end times, duration, and login history;
• Pages visited, games accessed, and features used within the Platform;
• Cookies and similar tracking technology data as described in Section 8.

2.4 Communications Data

• Contents of live chat support conversations;
• Email correspondence with red365 support or compliance teams;
• Responses to surveys, feedback forms, or promotional communications;
• Records of marketing communication preferences and opt-in/opt-out history.

red365 collects personal information through the following means:

red365 processes personal information only for specified, legitimate purposes. Each purpose is supported by a lawful basis under RA 10173 and applicable PAGCOR regulations:

4.1 Contract Performance

Processing necessary to create and manage your account, process deposits and withdrawals, provide access to games and services, and fulfil the obligations set out in the red365 Terms and Conditions. This is the primary legal basis for most routine processing activities.

4.2 Legal and Regulatory Compliance

Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws. This includes KYC verification, age verification, AML transaction monitoring, and regulatory reporting.

4.3 Legitimate Interests

Processing for purposes of fraud prevention, platform security, responsible gaming monitoring, dispute resolution, and internal analytics — where these interests do not override your rights as a data subject under RA 10173.

4.4 Consent

Where we rely on your consent for processing — such as for certain marketing communications or optional analytics cookies — we will obtain that consent separately and explicitly. You have the right to withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

red365 does not share your personal information with third parties except in the following specific circumstances, and only to the extent necessary for the stated purpose:

• PAGCOR and Government Authorities: red365 is required to submit player data and transaction records to PAGCOR as part of its licensing obligations. red365 will also disclose information to law enforcement, courts, or other government bodies when required by applicable Philippine law, court order, or legal process.
• KYC and Identity Verification Providers: Licensed third-party identity verification services are used to validate government-issued IDs against authoritative databases. These providers process personal data under strict contractual obligations and are bound by applicable privacy law.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive necessary transaction data to process deposits and withdrawals. These providers operate under their own privacy policies and regulatory frameworks.
• Game Providers and Platform Partners: Game providers integrated into the red365 Platform may receive anonymised or pseudonymised session data necessary for game delivery and audit purposes. No directly identifiable personal data is shared beyond what is technically necessary.
• Anti-Money Laundering Compliance: In accordance with RA 9160 (Anti-Money Laundering Act), suspicious transaction reports and covered transaction reports may be submitted to the Anti-Money Laundering Council (AMLC) where required.
• Professional Advisers: Legal, accounting, or compliance advisers engaged by red365 may access personal data under strict confidentiality obligations where necessary for their professional services.

All third-party service providers that receive personal data from red365 are required, by contract, to implement appropriate technical and organisational security measures and to process that data only for the specified purpose and in accordance with applicable law.

Some of red365's service providers and game technology partners may be located outside the Philippines. Where personal data is transferred to recipients in other countries, red365 ensures that such transfers comply with RA 10173's requirements for cross-border data flows.

Specifically, red365 relies on one or more of the following safeguards for international transfers:

• Contractual data processing agreements incorporating the standard data protection clauses recognised under Philippine law;
• Transfer to jurisdictions that have been assessed to provide an adequate level of data protection by the National Privacy Commission (NPC);
• Binding corporate rules where the transfer is within a group of affiliated entities.

You may request information about the specific safeguards applied to international transfers affecting your personal data by contacting our Data Protection Officer at the details provided in Section 15.

red365 retains personal information only for as long as is necessary for the purpose for which it was collected, or as required by applicable law and regulation. The following retention schedule applies:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Where anonymisation is used, the anonymised data may be retained for analytical purposes indefinitely.

red365 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you across sessions and understand how the Platform is used.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your red365 account and cookies that maintain security state. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game view, and lobby filters to personalise your experience across sessions.
• Analytical Cookies: Used to understand how players navigate the Platform — which pages are visited most, how long sessions last, and where technical issues occur. Data is aggregated and pseudonymised. Subject to your consent where required.
• Responsible Gaming Cookies: Store your active responsible gaming settings (deposit limits, session timers) to ensure they are consistently applied across all sessions on the Platform.

8.2 Managing Cookies

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent access to your red365 account. For browsers on Android and iOS, cookie management is available through the respective browser privacy settings.

red365 implements industry-standard technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit TLS/SSL encryption for all data transmitted between your device and the red365 Platform;
• Encryption at rest for sensitive personal data, including identity documents and financial information;
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data;
• Regular internal security audits and third-party penetration testing;
• Multi-factor authentication for internal systems and privileged access;
• Incident response procedures compliant with NPC breach notification requirements under RA 10173;
• Staff training on data protection obligations and secure data handling procedures.

In the event of a personal data breach that is likely to result in harm to data subjects, red365 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players as required under RA 10173 and NPC regulations.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal information held by red365. You may exercise these rights by contacting our Data Protection Officer as described in Section 15:

red365 will respond to all data subject requests within thirty (30) calendar days of receipt. If the request is complex or numerous, the response period may be extended to a maximum of sixty (60) days, and you will be notified within the initial thirty-day window. If your request is declined, we will provide the reason in writing. You have the right to escalate any unresolved complaint to the National Privacy Commission (NPC) of the Philippines.

red365 may send you promotional communications about new games, bonuses, events, and platform features by SMS to your registered Philippine mobile number or by email. We will only send marketing communications where you have provided your explicit consent at registration or at any subsequent point through your account preferences.

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your red365 account settings;
• Replying "STOP" to any marketing SMS received from red365;
• Clicking the unsubscribe link included in any marketing email;
• Contacting support via live chat or email at [email protected] and requesting removal from marketing communications.

Withdrawal of marketing consent will not affect transactional communications necessary for your account, such as deposit confirmations, withdrawal notifications, account security alerts, and responsible gaming notifications.

red365 will never send marketing communications to players who have self-excluded or are subject to an active responsible gaming restriction. This commitment is maintained regardless of any prior marketing consent.

The mandatory KYC process — which requires submission and verification of a government-issued Philippine identification document — is designed to enforce the 21+ age restriction at the point of account activation. No account may be funded or used for real-money gaming until age has been positively verified.

If red365 becomes aware that personal information has been collected from an individual who is under 21 years of age, all such data will be permanently deleted and the associated account will be immediately closed. Any deposits made will be returned to the payment source after deducting any applicable bank or payment processing fees.

Parents or guardians who believe that a minor may have registered or accessed the red365 Platform should contact our support team immediately at [email protected] so that appropriate action can be taken without delay.

The red365 Platform may contain references to third-party services such as payment processors (GCash, PayMaya, BPI, BDO, Metrobank) and game provider platforms. When you interact with any third-party service, you leave the red365 Platform and your interaction is subject to that third party's own privacy policy and terms of service.

red365 is not responsible for the privacy practices, data handling, or security measures of any third-party service. We encourage all players to review the privacy policies of any external services before providing personal information, particularly when connecting payment accounts for deposits or withdrawals.

red365 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The effective date of the current version is displayed at the top of this page and in the page header.

Where changes are material — meaning they significantly affect your rights as a data subject or the way your personal information is processed — red365 will provide prior notice via registered email address or in-platform notification, at least fourteen (14) days before the changes take effect where practicable.

Continued use of the red365 Platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not accept any update to this Policy, you should cease using the Platform and contact support to request account closure and data handling information.

red365 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and National Privacy Commission (NPC) regulations. The DPO is responsible for overseeing red365's compliance with RA 10173 and serves as the primary contact for data subject rights requests and privacy-related concerns.

To exercise your rights under this Policy, submit a data subject access request, report a suspected data breach, or raise any privacy concern, please contact us through the following channels:

• Email (Privacy Matters): [email protected] — mark your email "PRIVACY REQUEST" or "DPO CONTACT" in the subject line for routing to the appropriate team.
• Live Chat: 24/7 live chat available through your red365 account. Advise the agent that your inquiry relates to a data privacy matter for escalation to the DPO team.
• FAQ: Common questions about account data are answered at red365.win/faq.

If you are not satisfied with red365's response to your privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint mechanism.