1pluss Privacy Policy

1pluss ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every Filipino player who uses our online casino and sports betting platform at https://1pluss.org. This Privacy Policy sets out in plain, straightforward language exactly what personal information we collect about you, how and why we collect it, who we share it with, how long we keep it, and what choices and rights you have.

We take our obligations under the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations (IRR) seriously. These laws give Filipino residents meaningful rights over their personal data, and 1pluss is fully committed to upholding those rights at every step of your journey with us — from the moment you first visit the 1pluss website through every subsequent 1pluss login, deposit, wager, and withdrawal.

This policy also reflects our commitments under Philippine Anti-Money Laundering laws (AMLA) and applicable PAGCOR gaming regulations, both of which impose data collection and retention obligations on licensed gaming operators serving the Philippine market. Where these regulatory obligations require us to retain or process data in ways that may differ from your general privacy preferences, we will explain those obligations clearly in the relevant sections below.

If you have any questions about this Privacy Policy at any point, you can reach the 1pluss Data Protection Officer directly at [email protected]. We aim to respond to all privacy-related queries within five (5) business days.

For the purposes of the Philippine Data Privacy Act of 2012, the Data Controller responsible for your personal data is:

• Platform Name: 1pluss
• Website: https://1pluss.org
• Data Protection Officer (DPO) Contact: [email protected]
• Operating Market: Republic of the Philippines
• Support Hours: 24/7, including Philippine public holidays

As Data Controller, 1pluss determines the purposes and means by which your personal data is processed. Where 1pluss engages third-party service providers (payment processors, KYC verification providers, cloud infrastructure) who process data on our behalf, those parties act as Data Processors and are contractually bound to process your data only on 1pluss's documented instructions, in accordance with the DPA, and with appropriate security safeguards in place.

The table below summarises the categories of personal data that 1pluss collects from players. We only collect data that is necessary, relevant, and proportionate to the purposes described in Section 5 of this policy.

We do not collect sensitive personal information (as defined under the DPA — e.g., racial origin, political affiliations, religious beliefs, health records) except where strictly required by Philippine AML regulations or where you voluntarily provide such information in the context of a responsible gaming self-assessment.

1pluss collects your personal data through the following channels:

• Account Registration: When you create a 1pluss account, you directly provide your name, date of birth, contact details, and preferred payment method.
• 1pluss Login Sessions: Each time you log in, we automatically collect your IP address, device information, and session timestamp for security and fraud prevention purposes.
• KYC Verification Process: When you submit identity documents to complete account verification before your first withdrawal, those documents are collected and reviewed by our compliance team.
• Payment Transactions: Deposit and withdrawal requests via GCash, Maya, BPI, BDO, and Metrobank generate transaction records that include partial payment account details and amounts.
• Gameplay: Our gaming systems automatically log every wager, game session, win, and loss associated with your account as part of normal platform operation.
• Customer Support Interactions: When you contact our support team via live chat or email, the content of those conversations is recorded for quality assurance and dispute resolution purposes.
• Cookies and Tracking Technologies: Our website uses cookies and similar technologies to collect technical and usage data when you browse the 1pluss platform. See Section 10 for full details.
• Third-Party Sources: In limited circumstances, we may receive data about you from our identity verification partners, fraud prevention databases, or payment processors for the purpose of verifying your identity or preventing financial crime.

1pluss processes your personal data only for specific, legitimate purposes. The table below maps each processing purpose to the data categories involved:

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first notifying you and, where required by law, obtaining your additional consent.

Under the Philippine Data Privacy Act of 2012, 1pluss processes your personal data on the following legal bases:

• Contractual Necessity: Processing your identity, contact, financial, and gaming activity data is necessary for 1pluss to perform the contract it has with you — i.e., to operate your account, process transactions, and provide access to games.
• Legal Obligation: KYC verification, AML transaction monitoring, and regulatory reporting are required by Philippine law (Republic Act No. 9160 — Anti-Money Laundering Act, as amended, and applicable PAGCOR regulations). We must process certain categories of your data to comply with these obligations regardless of your consent.
• Legitimate Interests: Platform security, fraud detection, abuse prevention, responsible gaming monitoring, and service improvement are based on 1pluss's legitimate interests in operating a safe, fair, and sustainable gaming platform. We apply a balancing test before relying on this basis and will not override your fundamental privacy rights.
• Consent: Sending you marketing communications via email, SMS, or push notifications is based entirely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without consequence to your account status.

1pluss does not sell your personal data. We share your data only in the specific circumstances described below, and only with parties who are contractually committed to handling it securely and in accordance with the Philippine Data Privacy Act:

• Payment Processors: GCash (Mynt/Globe Fintech), Maya (PayMaya Philippines), BPI, BDO, and Metrobank receive the minimum data necessary to process your deposit and withdrawal transactions. These providers are subject to their own BSP-regulated privacy obligations.
• KYC and Identity Verification Providers: We use certified third-party identity verification services to assist with document authentication and facial matching during the KYC process. These providers act strictly as data processors under our instructions.
• Cloud Infrastructure and Hosting Providers: 1pluss uses enterprise-grade cloud infrastructure to host the platform. Our infrastructure providers access your data only as part of providing secure, reliable hosting services and have no rights to use your data for their own purposes.
• Game Software Providers: The third-party game studios and live dealer providers whose games are available on 1pluss may receive session-level gaming data necessary to operate their games. They do not receive your name, contact details, or financial information.
• Regulatory Authorities: We may be required by law to disclose your personal data to Philippine government authorities including the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), PAGCOR, or law enforcement agencies where required by valid legal process or applicable regulation.
• Fraud Prevention Services: We share technical and identity data with fraud prevention databases to detect and prevent fraudulent activity, money laundering, and account takeover attempts.

In all cases of data sharing, 1pluss enters into data sharing agreements or data processing agreements with the receiving party to ensure adequate contractual protections are in place. We do not share your data with any party that has not been vetted and contractually bound to our privacy and security standards.

1pluss retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

When the applicable retention period expires, 1pluss will securely delete or anonymise your personal data so that it can no longer be linked back to you. Anonymised data (from which all identifying information has been permanently removed) may be retained for statistical and analytical purposes without time limit.

1pluss implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your browser and the 1pluss platform is encrypted using TLS 1.2 or higher. This applies to every page of the 1pluss website, including the 1pluss login page, account settings, and all payment flows.
• Encryption at Rest: Sensitive personal data stored in our databases — including identity documents and financial account references — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. 1pluss employees and contractors can only access the data necessary for their specific role. All access is logged and audited.
• Multi-Factor Authentication: Administrative access to systems containing personal data requires multi-factor authentication. We strongly encourage all 1pluss players to enable two-factor authentication on their own accounts.
• Regular Security Audits: Our platform undergoes regular penetration testing and security audits conducted by independent security professionals to identify and address vulnerabilities proactively.
• Incident Response Plan: 1pluss maintains a documented data breach response plan. In the unlikely event of a personal data breach affecting your rights and freedoms, we will notify you and the National Privacy Commission (NPC) within the timeframes required by Philippine law.

While we take all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we commit to responding swiftly and transparently to any security incident that may affect your personal data.

The 1pluss website uses cookies and similar technologies (web beacons, local storage, session storage) to make the platform work correctly and to improve your experience. Here is a plain-language summary of the cookies we use:

• Strictly Necessary Cookies: These cookies are essential for the 1pluss website to function. They enable your 1pluss login session to persist, keep your account secure, and allow the platform to remember your preferences during a session. You cannot opt out of strictly necessary cookies without disabling the platform entirely.
• Functional Cookies: These cookies remember your language preferences, display settings, and game preferences across sessions so you do not have to reconfigure them every time you log in.
• Analytics Cookies: We use anonymised analytics to understand how players navigate the 1pluss platform — which games are most popular, which pages have high exit rates, and where technical errors occur. This data helps us improve the platform. Analytics data is aggregated and cannot be used to identify individual players.
• Security Cookies: These cookies help us detect and prevent fraudulent login attempts, bot activity, and account takeover attacks by tracking unusual patterns in session behaviour.

We do not use third-party advertising cookies or allow advertising networks to place tracking cookies on the 1pluss platform. You will not be tracked across other websites for advertising purposes based on your 1pluss activity.

You can manage or delete cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 1pluss platform, including your ability to complete a 1pluss login or access certain game features.

The Philippine Data Privacy Act of 2012 grants you the following rights with respect to your personal data held by 1pluss. These rights are enforceable and 1pluss is committed to honouring them within the response timeframes required by law:

To exercise any of these rights, please submit a written request to our Data Protection Officer at [email protected] with the subject line "Data Privacy Request". We may need to verify your identity before processing your request to ensure we are disclosing or modifying data only to the rightful account holder.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act.

As part of our mandatory KYC process, every player is required to verify their age before making a deposit or placing a wager. We use government-issued identity documents to confirm that all registered players meet the minimum age requirement of 21 years, as mandated by applicable Philippine gaming regulations.

If 1pluss discovers that a minor has provided personal data and created an account on the platform, we will immediately suspend the account, delete the personal data associated with it (subject to any mandatory regulatory retention obligations), and reverse any transactions. Any winnings accumulated by an underage account will be forfeited.

If you believe a minor has registered on the 1pluss platform, please contact us immediately at [email protected] so we can take prompt action. Protecting minors from exposure to gambling is a core responsibility we take seriously.

In some cases, the third-party service providers used by 1pluss — including cloud infrastructure providers, KYC verification services, and game software providers — may process or store data in countries other than the Philippines. When such cross-border transfers occur, 1pluss ensures that adequate safeguards are in place as required by the Philippine Data Privacy Act, including:

• Entering into data transfer agreements that include standard contractual clauses approved by the National Privacy Commission;
• Transferring data only to countries or organisations that have been assessed to provide an adequate level of data protection;
• Applying technical safeguards (encryption, access controls) regardless of the jurisdiction in which data is processed.

If you would like more information about the specific safeguards we apply to cross-border data transfers involving your personal data, please contact our Data Protection Officer at [email protected].

1pluss may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. When we make material changes to this policy, we will notify you through one or more of the following channels:

• A prominent notice on the 1pluss homepage and platform dashboard;
• An email notification to the address associated with your registered 1pluss account;
• An in-platform notification visible after your next 1pluss login.

The "Last Reviewed" date at the top of this Privacy Policy reflects the date of the most recent revision. We encourage you to review this policy periodically to stay informed about how 1pluss protects your personal data. Your continued use of the 1pluss platform after a revised policy has been posted and notified to you constitutes your acceptance of the updated terms, to the extent permitted by applicable Philippine law.

For changes that require your fresh consent under the Data Privacy Act (such as new purposes of processing that are materially different from those set out in this policy), we will seek your explicit consent before proceeding with the new processing activity.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 1pluss handles your personal data, please do not hesitate to get in touch with our dedicated Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.