nba365 Privacy Policy

1. Scope & Data Controller

This Privacy Policy applies to all personal information collected, processed, or stored by nba365 ("we", "us", "the Platform") in connection with the operation of the nba365 online gaming platform accessible at nba365.lat. It governs data collected from registered players, prospective users who browse the site, and individuals who contact nba365 customer support.

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), nba365 acts as the Personal Information Controller in respect of all personal data processed under this policy. nba365 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection obligations. Contact details for the DPO are provided in Section 12 of this policy.

This policy does not apply to third-party websites, applications, or services that may be linked to or from the nba365 Platform. nba365 is not responsible for the privacy practices of external parties, and players are encouraged to review the privacy policies of any third-party services they use.

2. Personal Data We Collect

nba365 collects the following categories of personal data in connection with platform registration, verification, and ongoing use:

2.1 Registration Data

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (used to verify you meet the 21+ age requirement);
• Philippine mobile number and email address;
• Preferred username and encrypted account password;
• Residential address within the Philippines.

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., UMID, PhilSys National ID, passport, driver's licence, SSS ID, Voter's ID);
• Selfie or live photo captured during identity verification;
• Proof of address documents where requested;
• Source of funds documentation where required by AMLC compliance procedures.

2.3 Financial Data

• GCash or Maya mobile number registered for deposits and withdrawals;
• Bank account details for BPI, BDO, Metrobank, or other registered Philippine bank transfer methods;
• Transaction history including deposit amounts, dates, and withdrawal records;
• Wagering history for regulatory reporting and responsible gaming monitoring purposes.

2.4 Technical & Usage Data

• IP address, device type, operating system, and browser version;
• Session timestamps, pages visited, and game activity logs;
• Geolocation data (country/region level) used to verify access eligibility;
• Device identifiers used for account security and fraud detection.

2.5 Communications Data

• Records of customer support interactions via live chat, Messenger, Viber, or email;
• Feedback, complaints, and dispute submissions made to nba365;
• Responses to optional player surveys or promotions where you voluntarily participate.

3. How We Collect Your Data

nba365 collects personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit, request a withdrawal, or contact customer support;
• Automatically — through cookies, session trackers, and server logs when you access the nba365 Platform;
• From third-party verification services — licensed KYC and identity verification providers used to authenticate the documents you submit;
• From payment processors — GCash, Maya, and bank transfer providers share transaction confirmation data necessary to credit your account;
• From fraud detection systems — automated tools that analyse device fingerprints, IP reputation, and behavioural patterns to detect suspicious activity.

4. Purpose & Legal Basis for Processing

nba365 processes your personal data only for specified, legitimate purposes. The table below sets out the primary purposes for data processing and the corresponding legal basis under the Philippine Data Privacy Act:

5. Data Sharing & Disclosure

5.1 Service Providers

nba365 engages trusted third-party service providers to support the operation of the Platform. These providers process personal data on nba365's behalf and are contractually bound to process data only for the purposes specified by nba365 and in accordance with applicable Philippine data protection law. Categories of service providers include identity verification and KYC processors, payment gateway operators, cloud infrastructure providers, fraud detection systems, and customer support software vendors.

5.2 Regulatory Authorities

nba365 is legally required to disclose player information to PAGCOR and the Anti-Money Laundering Council (AMLC) in accordance with its licensing obligations and Philippine anti-money laundering law. nba365 may also disclose personal data to the National Privacy Commission (NPC), the National Bureau of Investigation (NBI), or other competent Philippine authorities where required by a lawful order, warrant, or regulatory directive.

5.3 Game Providers

Third-party game studios whose content is hosted on the nba365 Platform — including Pragmatic Play, PG Soft, Evolution Gaming, and Habanero — receive limited technical data (such as session tokens and bet amounts) necessary to deliver their games. These providers do not receive your full personal profile, government ID documents, or financial account details.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of nba365's assets, player personal data may be transferred to the acquiring entity as part of the business transition. Affected players will be notified in advance by email, and the acquiring entity will be required to honour the commitments made in this Privacy Policy.

6. Cookies & Tracking Technologies

nba365 uses cookies and similar technologies to operate the Platform, maintain your session, prevent fraud, and analyse aggregate usage patterns. The following types of cookies are used:

• Strictly necessary cookies — required for the Platform to function, including session authentication, account security tokens, and load balancing. These cannot be disabled without impairing platform functionality.
• Functional cookies — remember your language preferences, game lobby settings, and notification preferences to improve your experience across sessions.
• Analytics cookies — collect aggregated, anonymised data on how players navigate the Platform, which pages are most visited, and where errors occur. This data is used solely to improve nba365's services and is not linked to your personal profile.
• Security cookies — used by fraud detection systems to identify unusual session behaviour, multiple account creation attempts, and other indicators of abusive activity.

nba365 does not use third-party advertising cookies or cross-site tracking technologies. You can manage cookie preferences through your browser settings, though disabling strictly necessary cookies will prevent you from logging into your account.

7. Security Measures

nba365 implements layered technical and organisational security measures to protect player personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and nba365 servers;
• 256-bit AES encryption for sensitive data stored in nba365 databases;
• Two-factor authentication (2FA) available on all player accounts;
• Role-based access controls ensuring that staff can only access data necessary for their specific function;
• Regular independent penetration testing and security audits of Platform infrastructure;
• 24/7 automated monitoring for anomalous access patterns and potential data breaches;
• Staff training on data protection obligations under Philippine law and nba365's internal policies.

In the event of a personal data breach that poses a significant risk to your rights, nba365 will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC regulations.

8. Data Retention

nba365 retains personal data for as long as your account is active and for such additional periods as are required by law or legitimate operational needs. Specific retention periods are as follows:

• Account and registration data — retained for the duration of your account and for 5 years following permanent account closure, consistent with PAGCOR record-keeping requirements;
• KYC and identity documents — retained for a minimum of 5 years following account closure, as required by AMLC regulations under RA 9160 as amended;
• Transaction and wagering records — retained for 5 years following each transaction, consistent with applicable Philippine financial record-keeping requirements;
• Customer support communications — retained for 2 years following the close of each support interaction for quality assurance and dispute resolution purposes;
• Marketing consent records — retained for the duration of your account to demonstrate lawful processing of marketing communications.

Upon expiry of applicable retention periods, personal data is securely deleted using methods that prevent recovery, or anonymised so that it can no longer be linked to any individual. Anonymised aggregate data may be retained indefinitely for statistical and analytics purposes.

9. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nba365:

• Right to be informed — you have the right to be notified when your personal data is being collected and the purposes for which it will be used. This Privacy Policy fulfils that obligation.
• Right of access — you have the right to request a copy of the personal data nba365 holds about you. Requests can be submitted via [email protected].
• Right to rectification — you have the right to request correction of inaccurate or incomplete personal data. Many details can be updated directly through your account settings.
• Right to erasure — you have the right to request deletion of your personal data, subject to nba365's legal obligations to retain certain records under PAGCOR and AMLC requirements.
• Right to object — you have the right to object to the processing of your personal data for direct marketing purposes. You can exercise this right through account settings or by contacting support.
• Right to data portability — you have the right to request your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint — if you believe nba365 has processed your personal data in violation of applicable law, you have the right to file a complaint with the National Privacy Commission of the Philippines.

nba365 will respond to all valid data rights requests within 15 business days. Identity verification may be required before fulfilling certain requests to protect against unauthorised data access.

10. Minors & Age Policy

The nba365 Platform is strictly intended for individuals aged 21 years and above, consistent with PAGCOR's minimum age requirements for online gaming in the Philippines. nba365 does not knowingly collect personal information from individuals under the age of 21. If we become aware that we have collected data from a minor, we will immediately close the relevant account, forfeit all balances in accordance with our Terms & Conditions, and delete the personal data collected.

Parents and guardians who believe a minor may have registered on nba365 should contact [email protected] immediately with supporting information. nba365 will investigate and act on all such reports as a priority.

11. Changes to This Privacy Policy

nba365 may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes — meaning changes that affect your rights or how your data is used in a significant way — will be communicated to registered players by email or in-platform notification at least 7 days before the updated policy takes effect.

The "Last Updated" date at the top of this page will always reflect when the current version entered into force. Continued use of the nba365 Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised policy, you should close your account before the effective date.

12. Contact & Data Protection Officer

For questions, concerns, or formal requests relating to this Privacy Policy or the handling of your personal data, please contact the nba365 Data Protection Officer through any of the following channels:

• Email (DPO): [email protected] — please include "Privacy / DPO Request" in the subject line
• Live Chat: Available 24/7 through the nba365 Platform — ask to be connected to the compliance team for data privacy matters
• Response Time: Standard privacy queries within 3 business days; formal data subject access requests within 15 business days

If you are not satisfied with nba365's response to your data privacy concern, you have the right to escalate your complaint directly to the National Privacy Commission of the Philippines through their official complaint resolution process.

This Privacy Policy was last updated on January 1, 2026. The current version is always available at nba365.lat/privacy-policy and supersedes all previous versions of this document.