Privacy Policy
for nbaodd Online Casino

01 Introduction

nbaodd is committed to protecting the privacy and personal data of every player on our platform. We understand that Filipino players entrust us with sensitive information when they register, deposit funds, and engage with our games and sports betting services. That trust is something we take seriously.

This Policy applies to all personal data collected through the nbaodd website, mobile platform, customer support channels, and any other touchpoint through which you interact with us. It covers data collected from registered players, prospective players who browse the site without registering, and individuals who contact our support team.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement between you and nbaodd.

02 Data Controller

nbaodd acts as the personal information controller ("PIC") in respect of the personal data it collects from users of the platform, as defined under the Philippine Data Privacy Act of 2012. As PIC, nbaodd determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws.

Where nbaodd engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as personal information processors ("PIPs") and are contractually bound to process data only in accordance with nbaodd's instructions and applicable law.

03 Personal Data We Collect

nbaodd collects the following categories of personal data, depending on how you interact with the platform:

We do not collect sensitive personal information (as defined under the DPA, such as health data, political opinions, or religious beliefs) unless strictly required by law or with your explicit consent.

04 How We Collect Your Data

nbaodd collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you visit the nbaodd website or use the platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity and fraud-check data received from licensed identity verification providers, payment processors, and, where applicable, regulatory databases. All third-party data sources used by nbaodd are compliant with applicable Philippine data protection law.

05 Purpose & Legal Basis for Processing

Under the Philippine Data Privacy Act, nbaodd processes your personal data only where a lawful basis exists. The table below sets out the primary purposes for which we process your data and the corresponding legal basis:

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate lawful basis.

06 Sharing Your Personal Data

nbaodd does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, to facilitate deposits and withdrawals;
• Identity verification providers: Licensed KYC and age-verification service providers used to confirm your identity and comply with regulatory requirements;
• Regulatory and law enforcement authorities: The Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law;
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics vendors who process data on our behalf under strict contractual data processing agreements;
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal or compliance purposes.

All third parties with whom nbaodd shares personal data are required to implement appropriate technical and organisational security measures and to process data only in accordance with our instructions and applicable Philippine law.

07 Data Retention

nbaodd retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AMLA record-keeping requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Customer support communications: Retained for two (2) years from the date of the interaction, unless a longer period is required for dispute resolution;
• Technical and usage logs: Retained for up to twelve (12) months, after which they are anonymised or deleted;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation purposes.

When personal data is no longer required, nbaodd will securely delete or anonymise it in accordance with our internal data disposal procedures.

08 Security Measures

nbaodd implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the nbaodd platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls ensuring that only authorised personnel can access personal data, on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists;
• Multi-factor authentication options for player accounts;
• Continuous monitoring of platform systems for suspicious activity and potential data breaches;
• Staff training on data protection obligations and secure data handling practices.

09 Cookies & Tracking Technologies

The nbaodd platform uses cookies and similar tracking technologies to enhance your browsing experience, maintain session security, and gather analytics data. The following types of cookies may be used:

• Strictly necessary cookies: Essential for the platform to function correctly, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences (such as language settings and display options) to personalise your experience on nbaodd.
• Analytics cookies: Collect anonymised data about how players use the platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content. You may withdraw consent at any time via your account settings.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the nbaodd platform. For more information on managing cookies, refer to your browser's help documentation.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by nbaodd:

• Right to be informed: The right to know that your personal data is being collected and processed, and to receive clear information about how it is used – which this Policy provides.
• Right of access: The right to request a copy of the personal data nbaodd holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal and regulatory retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days, as required by the DPA. We may need to verify your identity before processing your request.

11 Protection of Minors

nbaodd employs mandatory age verification procedures at the point of registration and during KYC checks to prevent underage access to the platform. Parents and guardians who believe their child may have accessed or registered on nbaodd are encouraged to contact our support team immediately at [email protected] so that we can take prompt action.

12 Cross-Border Data Transfers

In certain circumstances, nbaodd may transfer your personal data to service providers or partners located outside the Philippines (for example, cloud infrastructure providers or international payment networks). Any such cross-border transfer will only take place where:

• The recipient country provides an adequate level of data protection as recognised by the National Privacy Commission; or
• Appropriate safeguards are in place, such as contractual clauses approved by the NPC or binding corporate rules; or
• The transfer is necessary for the performance of a contract between you and nbaodd (for example, processing an international payment).

We will never transfer your personal data to a third country without ensuring that appropriate protections are in place and that the transfer complies with the DPA and its implementing rules.

13 Changes to This Privacy Policy

nbaodd reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. Your continued use of the nbaodd platform after the effective date of any amendment constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

14 Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way nbaodd handles your personal data, please contact our Data Protection Officer:

We are committed to resolving all data privacy concerns promptly and transparently. Our DPO will acknowledge your enquiry within three (3) business days and provide a substantive response within fifteen (15) business days.