boom365 Privacy Policy

This Privacy Policy ("Policy") describes how boom365 ("boom365," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "data subject") who access or use the boom365 website, mobile platform, and all related services (collectively, the "Platform").

boom365 is the personal information controller responsible for your personal data. We are committed to processing your personal data lawfully, fairly, and transparently in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines.

By registering an account on boom365 or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact us to close your account.

boom365 collects the following categories of personal data from players and platform users:

boom365 does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required for regulatory compliance purposes and with your explicit consent.

boom365 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies (see Section 9).
• Third-party sources: Identity verification data from PAGCOR-approved KYC service providers; fraud detection signals from payment processors; publicly available information used for compliance screening.
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies in connection with compliance obligations.

boom365 processes your personal data for the following specific, legitimate purposes:

• Account management: Creating, maintaining, and administering your boom365 player account, including authentication and access control.
• Identity verification (KYC): Verifying your identity and age (21+) in compliance with PAGCOR regulations and the Anti-Money Laundering Act (AMLA) of the Philippines.
• Transaction processing: Processing deposits, withdrawals, and bonus credits through approved Philippine payment channels (GCash, Pay Maya / Maya, bank transfer).
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance through live chat, email, and other support channels.
• Regulatory compliance: Meeting our obligations under the DPA, AMLA, PAGCOR licensing conditions, and other applicable Philippine laws and regulations.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, cheating, and other prohibited conduct on the Platform.
• Responsible gaming: Monitoring gameplay patterns to identify signs of problem gambling and administering responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the performance, features, and user experience of the boom365 Platform.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent and subject to your right to opt out at any time.
• Legal proceedings: Establishing, exercising, or defending legal claims in connection with your use of the Platform.

boom365 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its IRR:

• Consent: Where you have given clear, informed, and freely given consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or submitting KYC documents.
• Contractual necessity: Where processing is necessary for the performance of the contract between you and boom365 — specifically, the Terms & Conditions governing your use of the Platform.
• Legal obligation: Where processing is required to comply with a legal obligation applicable to boom365, including PAGCOR licensing requirements, AMLA obligations, and NPC directives.
• Legitimate interests: Where processing is necessary for the legitimate interests of boom365 or a third party, provided those interests are not overridden by your rights and freedoms. This includes fraud prevention, platform security, and responsible gaming monitoring.

boom365 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory directive.
• Payment processors: GCash, PayMaya / Maya, and Philippine banking partners, solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: PAGCOR-accredited third-party service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Fraud detection and security providers: Third-party service providers that assist boom365 in detecting and preventing fraudulent activity, subject to strict data processing agreements.
• IT and platform service providers: Cloud hosting, data storage, and platform infrastructure providers engaged to operate and maintain the boom365 Platform, bound by confidentiality and data processing obligations.
• Legal and professional advisers: Lawyers, auditors, and other professional advisers engaged by boom365 in connection with legal proceedings or regulatory matters, subject to professional confidentiality obligations.
• Law enforcement: Philippine law enforcement authorities, where boom365 is legally required or permitted to disclose personal data in connection with a criminal investigation or court order.

boom365 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

Upon expiry of the applicable retention period, boom365 will securely delete or anonymise your personal data in accordance with NPC-approved data disposal procedures. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes as it can no longer be used to identify you.

boom365 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• Encryption: All data transmitted between your device and the boom365 Platform is encrypted using 256-bit SSL/TLS technology. Sensitive data at rest, including passwords and financial details, is encrypted using industry-standard algorithms.
• Access controls: Access to personal data is restricted to boom365 personnel and authorised third parties who have a legitimate need to access it. All access is logged and audited.
• Two-factor authentication (2FA): boom365 supports and encourages the use of 2FA for all player accounts to provide an additional layer of security against unauthorised access.
• Penetration testing: The boom365 Platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities.
• Incident response: boom365 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, boom365 will notify the NPC within 72 hours and affected data subjects without undue delay, as required by the DPA.
• Staff training: All boom365 personnel who handle personal data receive regular data privacy and security training.

boom365 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and collect analytical data. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations, to personalise your experience.
• Analytical cookies: Collect anonymised data about how players use the Platform — such as pages visited, time spent, and features used — to help boom365 improve the Platform. This data is aggregated and cannot be used to identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the boom365 Platform, including logging in and maintaining your session.

boom365 does not use third-party advertising cookies or allow third-party advertisers to place cookies on the Platform.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by boom365. You may exercise any of these rights by contacting our Data Protection Officer (see Section 14):

boom365 will respond to all data subject rights requests within fifteen (15) business days of receipt, as required by the DPA. In complex cases, this period may be extended by a further fifteen (15) business days, with prior notification to you. Requests may be subject to identity verification to protect against unauthorised access to your data.

boom365 is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from persons under the age of 21. The minimum age for casino-style gambling in the Philippines is 21 years, as prescribed by PAGCOR regulations.

boom365 employs age verification procedures at the point of registration and during KYC checks to prevent underage access to the Platform. If boom365 discovers that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete the personal data, and report the matter to PAGCOR as required.

If you are a parent or guardian and believe that a minor has registered on boom365 using your details or their own, please contact our Data Protection Officer immediately using the contact details in Section 14.

boom365 primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where cloud infrastructure or specialised security services are hosted internationally.

Any cross-border transfer of personal data by boom365 is conducted in compliance with Section 21 of the Data Privacy Act of 2012 and the NPC's rules on cross-border data transfers. Specifically, boom365 ensures that:

• The recipient country provides an adequate level of data protection, or
• Appropriate contractual safeguards are in place, such as NPC-approved standard contractual clauses, or
• The transfer is necessary for the performance of your contract with boom365 or for the implementation of pre-contractual measures taken at your request.

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Protection Officer.

boom365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. The date of the most recent revision is always displayed at the top of this page.

When material changes are made to this Policy, boom365 will notify registered players via the mobile number or email address on file, or by displaying a prominent notice on the Platform. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how boom365 protects your personal data. If you have any concerns about changes to this Policy, please contact our Data Protection Officer before continuing to use the Platform.

boom365 has appointed a Data Protection Officer (DPO) who is registered with the National Privacy Commission of the Philippines. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channel:

For general customer support enquiries unrelated to data privacy, please contact our support team at [email protected] or via live chat on the Platform, available 24 hours a day, 7 days a week.

If you are not satisfied with boom365's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.