th365 Privacy Policy

th365 ("the Company," "we," "us," or "our") operates the online casino and sports betting platform accessible at th365.pro and its associated mobile applications and services. th365 is the data controller responsible for the personal data of registered users and visitors to the platform.

th365 serves the Philippines market, providing Filipino players with access to JILI slots, live dealer casino games, sports betting on PBA, NBA, UFC and boxing, bingo, and specialty games. Our platform is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as overseen by the National Privacy Commission (NPC) of the Philippines.

Any questions, requests, or concerns relating to this Privacy Policy or the handling of your personal data should be directed to the th365 Data Privacy Officer via the contact details provided in Section 13 of this policy.

th365 collects personal data in a number of ways — directly from you when you register or use the platform, automatically as you interact with our services, and from third parties as part of our verification and fraud-prevention processes. The categories of personal data we collect include:

Identity & Contact Data

• Full legal name as it appears on a government-issued ID
• Date of birth (for mandatory 21+ age verification)
• Philippine residential address
• Mobile number (used for OTP authentication and account notifications)
• Email address

Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., PhilSys National ID, SSS ID, UMID, Philippine passport, driver's licence, PRC ID)
• Proof of address documents (e.g., utility bills, bank statements, barangay clearance)
• Selfie photographs taken for liveness or ID-matching verification

Financial & Transaction Data

• GCash-registered mobile number or Maya account reference
• Bank account details (BPI, BDO, UnionBank) where used for deposits or withdrawals
• Transaction history including deposit amounts, withdrawal requests, and bonus redemptions
• Wallet balance and betting history

Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps, login frequency, and session duration
• Game play logs, betting patterns, and feature interaction data
• Cookie identifiers and analytics identifiers (see Section 5)

Communications Data

• Customer support chat transcripts, Messenger conversations, and Viber messages
• Email correspondence with th365 support or compliance teams
• Responses to promotions, surveys, or feedback requests where you have voluntarily participated

th365 uses your personal data for specific, clearly defined purposes. We do not use your data for any purpose incompatible with those stated at the time of collection. The primary purposes for which th365 processes your personal data are set out below:

th365 will never use your personal data to make fully automated decisions that have a significant legal or similarly serious effect on you without human review. Responsible gaming alerts and bonus eligibility assessments may involve automated profiling, but final decisions on account restrictions are reviewed by a member of the th365 compliance team.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, th365 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to register your account, provide gaming services, and process financial transactions under the th365 Terms and Conditions.
• Legal obligation: Processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), KYC obligations, and any directive from PAGCOR or the NPC.
• Legitimate interest: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your privacy rights.
• Consent: Where th365 relies on your consent (e.g., for marketing communications or the use of non-essential cookies), you may withdraw that consent at any time by contacting support or adjusting your account preferences. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

th365 uses cookies and similar tracking technologies on th365.pro to ensure the platform functions correctly, to personalise your experience, and to analyse how the site is used. A cookie is a small text file stored on your device when you visit a website.

th365 uses the following categories of cookies:

• Strictly necessary cookies: Essential for the th365 platform to operate. These include session authentication tokens, security cookies, and load-balancing identifiers. These cookies cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings, preferred game categories, and responsible gaming limit configurations.
• Analytics cookies: Collect anonymised or pseudonymised data about how visitors interact with th365.pro — for example, which pages are visited most frequently and where users encounter errors. This data helps th365 improve the platform.
• Security & fraud-prevention cookies: Assist in identifying suspicious or unusual account activity, detecting bot access, and preventing unauthorised logins.

You can manage non-essential cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the th365 platform. th365 does not use cookies to serve advertising from third-party ad networks on th365.pro.

th365 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Your data may be shared with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• KYC & identity verification providers: Licensed third-party services used to verify government-issued ID documents and perform liveness checks as part of mandatory Philippine KYC requirements.
• Payment processors: GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20 payment infrastructure providers — for the processing of deposits and withdrawals.
• AML screening providers: Services used to screen transactions and users against sanctions lists, politically exposed persons (PEP) databases, and adverse media sources, as required under the AMLA.
• Cloud infrastructure & hosting providers: Secure data centres and cloud services used to host and operate the th365 platform.
• Customer support tools: Platforms used to operate th365's Live Chat, Messenger, and Viber support channels.
• Regulatory authorities & law enforcement: The Anti-Money Laundering Council (AMLC), National Privacy Commission (NPC), PAGCOR, and Philippine law enforcement agencies, where disclosure is required by law or court order.

All third-party service providers engaged by th365 are required to process your personal data only for the purpose specified by th365 and in accordance with applicable Philippine data privacy law. th365 does not authorise third parties to use your data for their own marketing purposes.

th365 retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Account data & KYC records: Retained for a minimum of five (5) years from the date of account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with AMLA obligations and Bureau of Internal Revenue (BIR) requirements.
• Customer support communications: Retained for three (3) years from the date of the interaction for dispute resolution purposes.
• Marketing consent records: Retained for as long as you remain a marketing subscriber, plus three (3) years after opt-out, to demonstrate compliance with consent requirements.
• Technical and usage logs: Retained for up to twelve (12) months on a rolling basis, unless extended for fraud investigation or regulatory purposes.

Once the applicable retention period has expired and there is no further legal basis for retaining your data, th365 will securely delete or anonymise it in accordance with the NPC's guidelines on data disposal.

th365 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• Encryption in transit: All data transmitted between your device and th365.pro is protected using Transport Layer Security (TLS 1.2 / 1.3).
• Encryption at rest: Personal data stored on th365 servers is encrypted using AES-256 encryption.
• Access controls: Access to personal data within th365 is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication for internal systems.
• Pseudonymisation: Where possible, personal data used for analytics and platform improvement is pseudonymised or anonymised to reduce privacy risk.
• Security monitoring: th365 operates continuous security monitoring and intrusion detection systems across its infrastructure.
• Regular audits: th365 conducts periodic internal and third-party security audits to assess and address vulnerabilities.

While th365 applies industry-leading security practices, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your th365 login credentials. th365 will never ask for your password via Messenger, Viber, SMS, or email. Report any suspected unauthorised access to your account to th365 support immediately.

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by th365. These rights may be exercised free of charge by contacting the th365 Data Privacy Officer (see Section 13):

th365 will respond to all data rights requests within fifteen (15) business days of receipt. In complex cases, this may be extended by a further thirty (30) days, and you will be informed of the extension. Where a request cannot be fulfilled — for example, due to a conflicting legal obligation — th365 will explain the reason in writing.

If you are not satisfied with th365's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact details for the NPC are available on the NPC's official website.

th365 is strictly an adult platform. In accordance with Philippine law governing casino-style gambling, users must be at least 21 years of age to register and use th365. th365 does not knowingly collect personal data from any individual under the age of 21.

Age verification is performed as part of the mandatory KYC process, which requires submission of a government-issued identification document confirming date of birth before any withdrawal can be processed. th365 also applies additional verification checks where usage patterns suggest possible underage access.

If th365 discovers that personal data has been collected from a user who is under 21 years of age, we will immediately suspend the account, void any associated winnings, return deposited funds in accordance with applicable regulations, and permanently delete the personal data collected. If you believe a minor may have accessed th365 using your details or their own, please contact th365 support immediately.

th365 primarily processes and stores personal data within secure data centre facilities. In limited circumstances, personal data may be transferred to or accessed from service providers located outside the Republic of the Philippines — for example, cloud infrastructure partners or specialised KYC verification services.

Where such cross-border transfers occur, th365 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers. These safeguards may include:

• Standard contractual clauses approved by the NPC or an equivalent data protection authority
• Adequacy determinations where the recipient country provides an equivalent level of data protection
• Binding corporate rules where the recipient is part of a corporate group with approved intra-group transfer mechanisms

th365 will not transfer your personal data to jurisdictions where it cannot ensure an adequate level of protection. A list of the countries to which data may be transferred is available upon request by contacting the th365 Data Privacy Officer.

th365 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in Philippine data privacy law, new NPC guidelines, changes in the way th365 processes personal data, or improvements to how we communicate our practices to users.

When material changes are made — meaning changes that significantly affect your privacy rights or how your data is processed — th365 will provide notice via a prominent banner on th365.pro, an in-platform notification, or an email to your registered address at least seven (7) days before the changes take effect.

The effective date at the top of this policy reflects the date of the most recent revision. Your continued use of th365 after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this policy periodically to stay informed about how th365 protects your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by th365, please contact the th365 Data Privacy Officer through any of the following channels:

• Live Chat: Available 24/7 directly on the th365 platform — fastest response time
• Messenger: Via the official th365 Facebook page
• Viber: Via the official th365 Viber community
• Email: [email protected] — please use the subject line "Data Privacy Request" for all DPA-related correspondence

th365 will acknowledge all data privacy requests within three (3) business days and will provide a substantive response within fifteen (15) business days of receipt, or within forty-five (45) business days for complex requests where prior written notice of the extension is provided.

If you believe th365 has not handled your personal data in accordance with RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing data privacy law in the Philippines.