onabet Privacy Policy

1 Introduction and Scope

This Privacy Policy ("Policy") describes how onabet ("we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you" or "the Player") who access or use the onabet platform, including the website at onabet.bid, mobile applications, and all related services (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your registration, use of betting and gaming services, financial transactions, customer support interactions, and any other activity on the onabet Platform. By registering an account or using the Platform, you acknowledge that you have read and understood this Policy.

2 Data Controller Information

onabet acts as the data controller in respect of the personal data it collects and processes through the Platform. As data controller, onabet determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection laws, including Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.

For all data privacy inquiries, requests, and complaints, you may contact our designated Data Protection Officer (DPO) at: [email protected]

3 Personal Data We Collect

onabet collects the following categories of personal data from players:

Category	Examples
Identity Data	Full legal name, date of birth, gender, nationality, government-issued ID number (e.g., PhilSys ID, passport, driver's license)
Contact Data	Philippine mobile number, email address, residential address (city, province)
Account Data	Username, encrypted password, account preferences, communication preferences
Financial Data	GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), deposit and withdrawal history, transaction records
Gaming Data	Betting history, game activity, wagering patterns, bonus usage, session duration
Technical Data	IP address, device type, browser type and version, operating system, time zone, cookies, session identifiers
Communications Data	Customer support chat logs, email correspondence, feedback submissions

onabet does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for identity verification or regulatory compliance purposes, in which case your explicit consent will be obtained.

4 How We Collect Your Data

onabet collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-party sources: Information received from payment processors, identity verification service providers, fraud prevention agencies, and regulatory bodies where permitted by law.
• Public sources: Publicly available information used for identity verification or fraud prevention purposes, such as public records or social media profiles where you have made information publicly available.

5 How We Use Your Data

onabet uses your personal data for the following purposes:

• Account registration and management: To create and maintain your onabet account, verify your identity and age (21+), and manage your account preferences.
• Service delivery: To provide sports betting, live casino, slots, bingo, and all other gaming services available on the Platform.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, Cebuana, and other accepted payment methods.
• Regulatory compliance: To comply with applicable Philippine gaming regulations, anti-money laundering (AML) obligations, and know-your-customer (KYC) requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct on the Platform.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools.
• Marketing and promotions: To send you information about onabet promotions, bonuses, and new features, subject to your communication preferences and applicable consent requirements.
• Platform improvement: To analyze usage patterns, conduct research, and improve the functionality and user experience of the onabet Platform.

6 Legal Basis for Processing

onabet processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform our contract with you, including account management, service delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML, KYC, and gaming regulatory requirements.
• Legitimate interests: Processing necessary for onabet's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly for direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing and Disclosure

onabet does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Game providers: Third-party game software providers whose games are available on the onabet Platform, to the extent necessary to deliver gaming services.
• Regulatory authorities: Philippine government agencies and regulatory bodies, including PAGCOR, the AMLC, and the National Privacy Commission, where required by law or regulation.
• Law enforcement: Philippine law enforcement agencies, where required by a valid legal order, warrant, or subpoena.
• Professional advisors: Legal counsel, auditors, and other professional advisors engaged by onabet, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of onabet's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties with whom onabet shares personal data are required to implement appropriate technical and organizational security measures and to process your data only for the specified purposes.

8 International Data Transfers

onabet primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to recipients located outside the Philippines — for example, to international game providers or technology service providers — onabet will ensure that such transfers are made in compliance with the Data Privacy Act of 2012 and that appropriate safeguards are in place to protect your personal data, including contractual data protection clauses or equivalent mechanisms recognized under Philippine law.

9 Data Retention

onabet retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guide, onabet applies the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine AML and gaming regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable Philippine law.
• Gaming activity data: Retained for a minimum of three (3) years from the date of the activity.
• Customer support communications: Retained for a minimum of two (2) years from the date of the interaction.
• Technical and log data: Retained for up to twelve (12) months, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, onabet will securely delete or anonymize your personal data in accordance with its data disposal procedures.

10 Cookies and Tracking Technologies

onabet uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the Platform. Cookies are small text files placed on your device that help us recognize you, remember your preferences, and understand how you use the Platform.

onabet uses the following types of cookies:

• Strictly necessary cookies: Essential for the operation of the Platform, including maintaining your login session and enabling secure transactions. These cannot be disabled.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized information about how players use the Platform, helping us identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of onabet's marketing campaigns, subject to your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform.

11 Your Rights Under Philippine Law

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by onabet:

• Right to be informed: The right to be informed of how your personal data is being collected and processed.
• Right of access: The right to request a copy of the personal data onabet holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to onabet's legal and regulatory retention obligations.
• Right to object: The right to object to the processing of your personal data on grounds relating to your particular situation, including processing for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. onabet will respond to your request within thirty (30) days of receipt, in accordance with applicable law. We may need to verify your identity before processing your request.

12 Children's Privacy

The onabet Platform is strictly intended for individuals who are twenty-one (21) years of age or older. onabet does not knowingly collect personal data from persons under the age of 21. If onabet becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete such data and close the associated account.

13 Security Measures

onabet implements a range of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the onabet Platform
• Encryption of sensitive data at rest, including financial and identity information
• Access controls and role-based permissions limiting staff access to personal data on a need-to-know basis
• Regular security assessments, vulnerability scanning, and penetration testing
• Multi-factor authentication for administrative access to systems containing personal data
• Staff training on data protection obligations and information security best practices
• Incident response procedures for detecting, reporting, and managing personal data breaches

While onabet takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your onabet login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

14 Changes to This Policy

onabet reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email or an in-platform notification prior to the changes taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly.

Your continued use of the onabet Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. We encourage you to review this Policy periodically to stay informed about how onabet protects your personal data.

15 Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or onabet's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the onabet Platform

If you are not satisfied with onabet's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available on the NPC's official website.

This Privacy Policy was last reviewed and updated on January 1, 2026. onabet is committed to maintaining the highest standards of data privacy and protection for all players in the Philippines.