betsoo Privacy Policy

1.1 betsoo ("we," "us," "our," or the "Platform") is committed to protecting the privacy and personal data of all individuals who interact with our services. This Privacy Policy ("Policy") describes our practices regarding the collection, use, disclosure, storage, and protection of personal data in connection with your use of betsoo.club and all related services offered by betsoo (collectively, the "Services").

1.2 This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Republic of the Philippines, and its Implementing Rules and Regulations (IRR) as enforced by the National Privacy Commission (NPC). Where applicable, this Policy also reflects the requirements of PAGCOR's data governance standards for licensed online gaming operators.

1.3 This Policy should be read together with betsoo's Terms & Conditions, Responsible Gaming Policy, and any supplemental notices provided at the point of data collection. In the event of any conflict between this Policy and a supplemental notice, the supplemental notice shall prevail in respect of the specific processing activity it addresses.

1.4 This Policy applies to all betsoo players, prospective players, visitors to betsoo.club, and any individual whose personal data betsoo processes in connection with the Services, regardless of the device or method of access used.

2.1 For the purposes of the Data Privacy Act of 2012 and this Policy, betsoo is the Personal Information Controller responsible for your personal data collected through betsoo.club and the Services.

2.2 betsoo has designated a Data Protection Officer (DPO) who oversees compliance with this Policy and applicable data protection laws. Contact details for the DPO are provided in Section 16 of this Policy.

2.3 Certain service providers engaged by betsoo — including game studios, payment processors, identity verification providers, and customer support platforms — may process personal data on betsoo's behalf as Personal Information Processors. Such processors are bound by data processing agreements that require them to handle personal data only in accordance with betsoo's instructions and this Policy.

3.1 betsoo collects the categories of personal data described below. We collect only what is necessary for the purposes stated in Section 5.

3.2 betsoo does not knowingly collect sensitive personal information as defined under the Data Privacy Act — such as information on race, religion, health condition, or sexual orientation — unless specifically required by law or provided voluntarily by the Player in a support context. Such data will not be used for any purpose beyond the immediate support interaction.

4.1 Directly from you — when you register an account, complete KYC verification, make deposits or withdrawal requests, contact customer support, respond to surveys, or otherwise interact with betsoo.club.

4.2 Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access or use betsoo.club, as described further in Section 10.

4.3 From third parties — including identity verification services, fraud prevention providers, payment processors (GCash, PayMaya, bank payment APIs), and analytics platforms. betsoo verifies that any third-party data source has appropriate legal basis for sharing data with us before processing that data.

4.4 From public sources — where permitted by law, betsoo may supplement your data with publicly available information for fraud prevention and regulatory compliance purposes.

5.1 betsoo processes your personal data for the following purposes, each with a corresponding legal basis under the Data Privacy Act of 2012:

Processing your registration, maintaining your account, processing deposits and withdrawals, and providing access to betsoo's games and services. Legal basis: Performance of contract.

Verifying your identity and age (21+ requirement), conducting KYC checks, and maintaining records of verification as required by PAGCOR and Philippine law. Legal basis: Legal obligation.

Monitoring transactions for suspicious activity, complying with AMLC reporting obligations, and preventing fraud, bonus abuse, and account takeover. Legal basis: Legal obligation and legitimate interest.

Monitoring gaming patterns to identify potential problem gambling behaviour, applying responsible gaming tools, and enforcing self-exclusion requests. Legal basis: Legal obligation and legitimate interest.

Responding to your inquiries, resolving complaints, and improving support service quality through interaction analysis. Legal basis: Performance of contract and legitimate interest.

Analysing usage patterns to improve betsoo's platform, personalise game recommendations, and optimise user experience. Legal basis: Legitimate interest (with opt-out available for personalisation).

Sending promotional offers, bonus notifications, and newsletter content by email or SMS, subject to your marketing preferences. Legal basis: Consent (withdrawable at any time).

Providing data to PAGCOR, the AMLC, and other competent Philippine government authorities as required by applicable law. Legal basis: Legal obligation.

6.1 betsoo does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing purposes. Data sharing is limited to the following categories of recipients and only to the extent necessary:

• Game Providers — providers such as JILI, PG Soft, and Pragmatic Play receive session and wagering data necessary to deliver their games, subject to their own privacy obligations and data processing agreements with betsoo;
• Payment Processors — GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processing partners receive payment data necessary to process deposits and withdrawals;
• Identity Verification Services — KYC providers receive identity documents and personal information to perform verification checks required for account activation and withdrawal processing;
• Fraud Prevention Services — technical data and transaction data may be shared with fraud detection providers to protect betsoo and its players;
• Regulatory Authorities — PAGCOR, the AMLC, the NPC, and other competent Philippine government bodies, as required by applicable law or court order;
• Legal Advisors — legal counsel may access personal data in connection with the investigation or defence of legal claims involving betsoo;
• Corporate Transactions — in the event of a merger, acquisition, or sale of betsoo's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

6.2 All third-party processors engaged by betsoo are bound by written data processing agreements that require them to: process personal data only on documented betsoo instructions; implement appropriate technical and organisational security measures; not engage sub-processors without betsoo's prior written consent; and delete or return all personal data upon termination of the processing relationship.

7.1 Some of betsoo's service providers are located outside the Philippines. Where personal data is transferred to a country that the NPC has not designated as providing adequate protection, betsoo will ensure that appropriate safeguards are in place, including contractual clauses binding the recipient to privacy standards equivalent to those required under the Data Privacy Act of 2012.

7.2 By using betsoo, you acknowledge that your personal data may be processed in countries other than the Philippines. In all such cases, betsoo remains responsible for ensuring your data is handled in accordance with this Policy and applicable Philippine law.

8.1 betsoo retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, and reporting obligations. The following retention periods apply as a general guide:

• Account and KYC Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Transaction and Gaming Records: Retained for a minimum of five (5) years in accordance with gaming regulatory requirements;
• Customer Support Records: Retained for three (3) years from the date of the relevant interaction;
• Marketing Data: Retained until you withdraw consent or for two (2) years from the date of last contact, whichever is earlier;
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and platform improvement purposes.

8.2 At the end of the applicable retention period, personal data will be securely deleted or anonymised such that it can no longer be associated with a specific individual. Data that must be retained for regulatory compliance purposes will be stored in restricted-access archives and accessed only where required.

9.1 betsoo implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All communications between your device and betsoo.club are encrypted using TLS/SSL with a minimum of 256-bit encryption;
• Encryption at rest: Sensitive personal data stored in betsoo's databases is encrypted at rest;
• Access controls: Access to personal data is restricted to betsoo staff and processors who require it for legitimate operational purposes, governed by role-based access control (RBAC) policies;
• Authentication: betsoo supports two-factor authentication (2FA) for Player accounts and enforces multi-factor authentication for administrative access to systems containing personal data;
• Monitoring: betsoo operates continuous security monitoring for anomalous access patterns, intrusion attempts, and data exfiltration indicators;
• Penetration testing: betsoo's systems undergo regular third-party security assessments to identify and remediate vulnerabilities;
• Staff training: betsoo staff who handle personal data are trained on data protection obligations and security practices.

10.1 betsoo uses cookies and similar tracking technologies on betsoo.club. Cookies are small text files stored on your device that enable betsoo to recognise returning visitors, maintain session state, and analyse platform usage.

• Strictly Necessary Cookies: Required for the operation of betsoo.club — including maintaining your login session, loading game content, and processing transactions. These cannot be disabled without significantly impairing service functionality;
• Functional Cookies: Remember your preferences — such as language and display settings — to personalise your experience across sessions;
• Analytics Cookies: Collect aggregated and anonymised data about how visitors use betsoo.club, used to improve the platform. betsoo uses analytics tools configured to anonymise IP addresses;
• Marketing Cookies: Track your interaction with betsoo promotional content to measure the effectiveness of campaigns. Used only with your consent.

10.2 You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of betsoo.club. For mobile users, device-level advertising ID settings can be used to limit tracking-based personalisation.

11.1 betsoo strictly prohibits the use of its services by individuals under the age of 21. This requirement reflects PAGCOR regulations applicable to online casino and gaming services in the Philippines. betsoo does not knowingly collect personal data from individuals below the age of 21.

11.2 Parents and guardians are encouraged to use parental control software to restrict access to online gambling platforms. If you believe a minor has created a betsoo account or provided personal data to betsoo, please contact the Data Protection Officer immediately so that appropriate action can be taken.

12.1 Under the Data Privacy Act of 2012 and this Policy, betsoo Players have the following rights in relation to their personal data:

13.1 With your consent, betsoo may send you marketing communications about promotions, bonuses, new games, and platform updates by email and/or SMS to your registered contact details. You may provide or withdraw consent for marketing communications at any time through your betsoo account settings or by contacting customer support.

13.2 Withdrawal of marketing consent does not affect operational communications necessary for account management — such as withdrawal confirmations, security alerts, KYC requests, and responsible gaming notifications. These communications will continue regardless of your marketing preferences.

13.3 betsoo does not conduct unsolicited cold calls or use your personal data to target you with advertising on third-party platforms without your consent.

14.1 In the event of a personal data breach that is likely to result in a real risk of serious harm to data subjects, betsoo will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with Section 20(f) of the Data Privacy Act and the NPC's Breach Notification Guidelines.

14.2 Where a breach is likely to result in a high risk to the rights and freedoms of affected Players, betsoo will notify affected individuals directly, without undue delay, via their registered email address. The notification will describe the nature of the breach, the categories and approximate number of data records affected, the likely consequences, and the measures betsoo is taking to address the breach.

14.3 betsoo maintains an incident response plan that includes defined escalation procedures, forensic investigation protocols, containment measures, and post-incident review processes. This plan is reviewed and updated at least annually.

15.1 betsoo reserves the right to update this Privacy Policy at any time to reflect changes in its data practices, applicable law, or regulatory guidance. The revised Policy will be published on betsoo.club with an updated effective date. Where changes are material, betsoo will provide advance notice via email to your registered address or through a prominent on-site notification.

15.2 Your continued use of betsoo following the effective date of a revised Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, you should cease using betsoo and close your account.

15.3 Previous versions of this Privacy Policy are available on request from betsoo's Data Protection Officer.

16.1 For any questions, concerns, or requests relating to this Privacy Policy or betsoo's data practices, please contact betsoo's Data Protection Officer. You may do so via:

• Live Chat: Available 24/7 on betsoo.club — select "Privacy / Data Request" as the inquiry category;
• Email: [email protected] — include "Privacy Policy Inquiry" or "Data Subject Request" in the subject line;
• Written Request: Submitted through the betsoo account portal under Account Settings → Privacy & Data.

16.2 betsoo acknowledges all data subject requests within twenty-four (24) hours and responds substantively within fifteen (15) business days. Complex requests or those involving large volumes of data may require up to thirty (30) days — in such cases, betsoo will notify you of the extension and reason promptly.