Privacy Policy — odds.ph

This Privacy Policy ("Policy") describes how odds.ph ("we", "us", "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you", "your", "data subject") who access or use the odds.ph website and platform located at oddsph.org (the "Platform").

odds.ph is committed to protecting the privacy and security of your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. We are also guided by applicable PAGCOR regulations concerning the handling of player data.

By accessing or using the odds.ph Platform, you acknowledge that you have read, understood, and agree to the collection and use of your personal data as described in this Policy. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

This Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, all of which form part of the overall agreement between you and odds.ph.

For the purposes of the Data Privacy Act of 2012, odds.ph is the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. As PIC, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out lawfully and securely.

Our designated Data Protection Officer (DPO) oversees compliance with this Policy and with applicable data protection laws. You may contact the DPO directly using the contact details provided in Section 14 of this Policy.

Where we engage third-party service providers to process personal data on our behalf (for example, payment processors, KYC verification providers, and cloud hosting services), those providers act as Personal Information Processors (PIPs) and are contractually bound to process your data only on our instructions and in accordance with applicable law.

odds.ph collects the following categories of personal data, depending on how you interact with the Platform:

odds.ph collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, submit feedback, or use any interactive feature of the Platform.
• Automatically: When you access or use the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. See Section 8 for more detail on cookies.
• From third parties: We may receive data about you from identity verification providers (for KYC purposes), payment processors (for transaction verification), fraud prevention services, and PAGCOR or other regulatory authorities where required by law.
• From publicly available sources: In limited circumstances related to AML compliance, we may cross-reference your data against publicly available sanctions lists, politically exposed persons (PEP) databases, and adverse media sources.

We will always tell you at the point of collection what data we are collecting and why, unless the collection is automatic and disclosed in this Policy.

odds.ph uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your odds.ph account, including verifying your identity and age (21+) at registration.
• Service delivery: To provide you with access to the Platform's games, betting markets, and features, including live casino, slots, fishing games, bingo, and sports betting.
• Payment processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card, and to verify that payment methods are registered in your name.
• KYC and AML compliance: To verify your identity, assess the source of funds, and comply with the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended) and PAGCOR requirements.
• Responsible gaming: To monitor gaming behaviour, enforce deposit limits and self-exclusion requests, and identify signs of problem gambling in accordance with our Responsible Gaming Policy.
• Customer support: To respond to your queries, complaints, and feedback, and to maintain records of our communications with you.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security incidents.
• Legal compliance: To comply with applicable Philippine laws, PAGCOR regulations, NPC requirements, court orders, and other legal obligations.
• Platform improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate legal basis for the new processing.

Under the Data Privacy Act of 2012, odds.ph relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing is necessary to perform the contract between you and odds.ph — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including the Data Privacy Act, the Anti-Money Laundering Act, PAGCOR regulations, and tax laws.
• Legitimate interests: Processing is necessary for our legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your rights and interests. This includes fraud prevention, security monitoring, and platform analytics.
• Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Vital interests: In exceptional circumstances, we may process data to protect your vital interests or those of another person — for example, in a responsible gaming emergency.

odds.ph does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

• Service providers (PIPs): We share data with carefully selected third-party service providers who process data on our behalf, including KYC and identity verification providers, payment processors (GCash, Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), cloud infrastructure providers, fraud detection services, and customer support platforms. All PIPs are bound by data processing agreements that restrict their use of your data to the specific services they provide to us.
• Regulatory authorities: We are required to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies where required by law or regulatory instruction.
• Law enforcement: We may disclose data to law enforcement agencies, courts, or other public authorities where required by a valid legal order, warrant, or subpoena.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of the odds.ph business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
• With your consent: We may share your data with third parties for purposes not listed above where you have given your explicit prior consent.

Where data is shared with third parties outside the Philippines, odds.ph ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act and NPC regulations on cross-border data transfers.

odds.ph uses cookies and similar tracking technologies to operate the Platform, improve your experience, and analyse usage patterns. The following types of cookies are used:

• Strictly necessary cookies: These cookies are essential for the Platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: These cookies remember your preferences (such as language settings and display options) to provide a more personalised experience. They are set based on your actions on the Platform.
• Analytics cookies: These cookies collect anonymised information about how users interact with the Platform — such as pages visited, time spent, and features used — to help us improve performance and user experience. We use this data in aggregate form only.
• Marketing cookies: These cookies track your activity across the Platform to enable us to deliver relevant promotional content. They are only set with your prior consent.

You can manage your cookie preferences through your browser settings or through the cookie consent tool available on the Platform. Please note that disabling certain cookies may affect the functionality of the Platform.

odds.ph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines. Where data is anonymised, it may be retained indefinitely for statistical and research purposes as it can no longer be linked to an identifiable individual.

odds.ph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data in transit is protected by TLS 1.2 or higher. Sensitive data at rest is encrypted using AES-256.
• Access controls: Access to personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo regular data privacy training.
• Two-factor authentication (2FA): 2FA is available for all user accounts and is required for administrative access to our systems.
• Penetration testing: Our systems undergo regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: We maintain a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay.
• Vendor security: All third-party service providers who process personal data on our behalf are assessed for security compliance before engagement and are contractually required to maintain appropriate security standards.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by odds.ph. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 14.

We will respond to all data subject rights requests within 30 calendar days of receipt. Where a request is complex or we have received a high volume of requests, we may extend this period by a further 30 days, in which case we will notify you of the extension and the reasons for it.

We may ask you to verify your identity before processing a rights request to ensure that we do not disclose or modify personal data in response to a fraudulent request.

If you are not satisfied with our response to a rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The odds.ph Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. We do not knowingly collect, use, or store personal data from individuals under the age of 21.

During the registration process, all users are required to confirm that they are at least 21 years old and to submit valid government-issued identification as part of the KYC verification process. Any account found to belong to a person under 21 will be immediately suspended, all funds will be returned, and all associated personal data will be securely deleted.

If you are a parent or guardian and believe that your child has registered on the odds.ph Platform or provided us with personal data, please contact our Data Protection Officer immediately using the contact details in Section 14. We will take prompt action to investigate and, where confirmed, to delete the data and close the account.

odds.ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Post a prominent notice on the Platform informing users of the change; and
• Where required by law or where the changes materially affect your rights, notify you directly by email to the address registered on your account.

Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request account closure by contacting our support team.

We encourage you to review this Policy periodically to stay informed about how odds.ph protects your personal data. Archived versions of previous policies are available upon request from our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the processing of your personal data by odds.ph, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that your data protection rights have been violated. The NPC can be reached through its official government channels.

For general customer support enquiries unrelated to data privacy, please contact our support team at [email protected].