36php Privacy Policy - Your Data Protection & Security

1. Information We Collect

36php collects various categories of personal information necessary to provide our online gaming services, ensure regulatory compliance, prevent fraud, and improve user experience. The information we collect falls into several distinct categories, each serving specific purposes related to account management, transaction processing, security, and service enhancement.

1.1 Personal Identification Information

During account registration and verification processes, we collect personal identification information including your full legal name as it appears on government-issued identification documents, date of birth to verify age compliance with Philippine gaming regulations (minimum 21 years), gender for demographic analysis and regulatory reporting, nationality and citizenship status, residential address including street address, barangay, city/municipality, and province, valid email address for account communications and password recovery, and mobile phone number for SMS verification and transaction alerts.

This foundational personal information enables us to create and maintain your 36php account, verify your identity to prevent fraud and underage gambling, comply with Philippine regulatory requirements for online gaming operators, and communicate with you regarding your account, transactions, and promotional offers.

1.2 Identity Verification Documents

To comply with Know Your Customer (KYC) regulations and anti-money laundering requirements under Philippine law, 36php collects copies of government-issued identification documents such as Philippine passport, driver's license issued by the Land Transportation Office, Unified Multi-Purpose ID (UMID), Philippine Identification System (PhilSys) ID, or other government-recognized identification cards. Additionally, we may request proof of address documentation including recent utility bills, bank statements, government correspondence, or barangay certificates dated within the last three months.

These verification documents allow us to confirm your identity matches the information provided during registration, satisfy regulatory obligations requiring verification of player identities, prevent identity theft and fraudulent account creation, and ensure withdrawals are processed to the legitimate account holder.

1.3 Financial and Transaction Information

We collect comprehensive financial information related to your 36php account activities, including deposit and withdrawal transaction records with dates, amounts, and payment methods used, payment account details such as GCash mobile numbers, Maya account information, bank account numbers and names for transfers, gaming transaction history including bets placed, games played, wins, losses, and account balances over time, and bonus participation records tracking which promotions you've claimed, wagering progress, and bonus terms compliance.

This financial data enables us to process deposits and withdrawals accurately and promptly, maintain accurate account balance records, comply with anti-money laundering reporting requirements, detect potentially fraudulent or suspicious transaction patterns, and provide customer support for transaction-related inquiries.

1.4 Technical and Usage Information

When you access the 36php platform, we automatically collect technical information about your devices and usage patterns. This includes IP addresses and geolocation data to verify you are accessing our services from within the Philippines as required by our license, device information such as device type, operating system, browser type and version, screen resolution, and device identifiers, website usage data tracking pages viewed, games played, session duration, navigation patterns, and feature utilization, and login information recording dates, times, and locations of account access for security monitoring.

Technical and usage data helps us ensure geographic compliance by verifying player locations, enhance platform security by detecting suspicious access patterns or potential account compromises, optimize website performance and user interface design based on actual usage patterns, personalize game recommendations based on your playing preferences, and troubleshoot technical issues reported by players.

1.5 Communication Records

We retain records of all communications between you and 36php customer support, including live chat transcripts, email correspondence, phone call recordings (with your consent where legally required), feedback and survey responses, and complaint submissions and resolutions. These communication records allow us to provide consistent, high-quality customer support, resolve disputes by maintaining accurate records of previous communications, improve services based on player feedback and common issues, and train customer support staff using real interaction examples.

2. How We Collect Information

36php employs multiple methods to collect personal information, each designed to balance data collection needs with user experience and privacy protection. Understanding how we collect information helps you make informed decisions about what data you provide and how you interact with our platform.

2.1 Information You Provide Directly

The majority of personal information we possess is information you voluntarily provide through account registration forms where you enter personal details, contact information, and create login credentials, identity verification uploads where you submit copies of identification documents and proof of address, deposit and withdrawal requests where you provide payment account details and transaction instructions, customer support interactions where you describe issues, ask questions, or provide feedback, and preference settings where you configure account options, communication preferences, and responsible gaming limits.

2.2 Information Collected Automatically

Certain information is collected automatically through technological means when you use 36php services. This includes cookies and similar tracking technologies that store information on your device to remember login status, preferences, and session data, server logs that automatically record technical information about your device and connection with each platform interaction, analytics tools that track user behavior patterns, popular games, navigation flows, and feature engagement, and geolocation services that verify your physical location when accessing our platform to ensure compliance with geographic restrictions.

2.3 Information from Third Parties

We receive information from third-party service providers essential to our operations, including payment processors who provide transaction confirmation, account verification, and fraud detection data, identity verification services that confirm the authenticity of submitted identification documents, game providers who supply gaming results, RNG verification data, and game integrity information, and fraud prevention services that provide risk scoring, device fingerprinting, and suspicious activity alerts.

3. Purpose of Data Collection

36php collects and processes personal information exclusively for specific, explicit, and legitimate purposes related to providing online gaming services, ensuring regulatory compliance, protecting platform security, and enhancing user experience. We do not collect information beyond what is necessary to fulfill these purposes, and we do not use your data for purposes incompatible with those disclosed at the time of collection.

The primary purposes for which we collect personal information include account creation and management to establish your player profile, maintain accurate records, and provide personalized account access, identity verification and age confirmation to prevent underage gambling, verify you are the person you claim to be, and prevent identity theft and fraudulent account creation, transaction processing to facilitate deposits, process withdrawals, maintain accurate balance records, and reconcile payment accounts, regulatory compliance to satisfy licensing requirements, submit required reports to Philippine gaming authorities, and comply with anti-money laundering regulations, security and fraud prevention to detect suspicious activities, prevent unauthorized account access, and protect against financial fraud and gaming manipulation, customer support to respond to inquiries, resolve disputes, provide technical assistance, and improve service quality, marketing and communications to send promotional offers, announce new features and games, provide account notifications, and deliver targeted marketing based on preferences, and platform improvement to analyze usage patterns, optimize performance, develop new features, and enhance user experience based on data-driven insights.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and international data protection principles, 36php processes personal information only when we have a valid legal basis. Our data processing activities are founded on one or more of the following legal grounds:

4.1 Contractual Necessity

Processing is necessary to fulfill our contractual obligations to you as outlined in our Terms and Conditions. When you register an account and accept our Terms, you enter into a contract requiring us to process certain personal information to deliver the services you requested, including account management, transaction processing, game access, and customer support.

4.2 Legal Obligation

Processing is required to comply with legal obligations imposed by Philippine law, including regulatory requirements under gaming licenses, anti-money laundering reporting obligations, tax compliance, age verification mandates, and responses to lawful requests from government authorities or court orders.

4.3 Legitimate Interests

Processing is necessary for our legitimate business interests or those of third parties, provided these interests do not override your fundamental rights and freedoms. Legitimate interests include fraud prevention and security protection, platform performance optimization and troubleshooting, direct marketing to existing customers about similar services, data analytics for business improvement, and protection of our legal rights and property.

4.4 Consent

For processing activities not covered by the above legal bases, we obtain your explicit consent. This includes optional marketing communications beyond transactional emails, use of cookies for non-essential purposes such as analytics and advertising, and sharing information with third parties for purposes beyond service delivery. You may withdraw consent at any time through your account settings or by contacting customer support, though withdrawal does not affect the lawfulness of processing conducted before withdrawal.

5. How We Use Your Information

Personal information collected by 36php is used exclusively for the purposes disclosed at collection and for compatible purposes reasonably expected by users of online gaming services. Specific uses of your information include providing gaming services by granting access to our game library, processing bets and payouts, maintaining accurate account balances, and delivering live dealer experiences, processing financial transactions through secure deposit acceptance, withdrawal request fulfillment, transaction verification, and fraud screening, communicating with you via account creation confirmations, transaction notifications, security alerts, customer support responses, and promotional offers (which you may opt out of), ensuring security by monitoring for suspicious activity, preventing unauthorized account access, detecting collusion or bonus abuse, and protecting against fraud, complying with regulations through identity verification, age confirmation, regulatory reporting, audit cooperation, and law enforcement responses, personalizing your experience via game recommendations based on preferences, customized dashboard views, targeted promotions aligned with interests, and optimized user interface, improving our services by analyzing usage patterns, gathering feedback, testing new features, optimizing platform performance, and conducting market research, and protecting our rights through evidence preservation for disputes, enforcement of Terms and Conditions, defense against legal claims, and protection of 36php property and interests.

6. Information Sharing and Disclosure

36php does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we share information with carefully selected third parties when necessary to provide our services, comply with legal obligations, or protect our legitimate interests. All third parties receiving your information are contractually obligated to maintain confidentiality and process data only for specified purposes.

6.1 Service Providers

We share information with third-party service providers who perform functions on our behalf, including payment processors (GCash, Maya, banks, and payment gateways) who handle financial transactions, identity verification services that confirm document authenticity and prevent fraud, game providers who supply casino games and sports betting platforms, hosting and infrastructure providers who maintain our servers and technical infrastructure, customer support platforms that facilitate communication channels, and marketing service providers who assist with email campaigns and promotional activities.

6.2 Regulatory and Legal Disclosures

We disclose information when required by Philippine law or to protect legal rights, including to gaming regulatory authorities as required by our licensing conditions, to law enforcement agencies in response to valid legal requests, court orders, or subpoenas, to tax authorities for tax reporting and compliance purposes, to auditors conducting regulatory compliance reviews, and to legal counsel when necessary to establish, exercise, or defend legal claims.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email or prominent notice on our website before such transfer occurs and if your information becomes subject to a different privacy policy.

6.4 Aggregated and Anonymized Data

We may share aggregated or anonymized information that cannot reasonably be used to identify you. This includes statistical data about our user base, popular games, betting trends, and platform usage shared with business partners, game providers, or used in marketing materials. Such data sharing does not involve disclosure of personal information.

7. Data Security Measures

Protecting your personal information is a top priority at 36php. We implement comprehensive technical, administrative, and physical security measures designed to safeguard data against unauthorized access, alteration, disclosure, or destruction. While no security system is completely impenetrable, we employ industry-standard protections and continuously update our security practices to address emerging threats.

7.1 Technical Security

Technical security measures include 256-bit SSL/TLS encryption for all data transmitted between your device and our servers, encrypted data storage using industry-standard encryption algorithms for sensitive information at rest, secure authentication systems with password hashing using bcrypt or similar strong algorithms, two-factor authentication options for enhanced account security, automated security monitoring detecting suspicious activities and potential breaches in real-time, regular security audits and penetration testing by independent third-party security firms, firewall protection preventing unauthorized access to our systems, and intrusion detection systems alerting our security team to potential threats.

7.2 Administrative Security

Administrative safeguards include access controls limiting employee access to personal information on a need-to-know basis, employee training on data protection principles, security best practices, and privacy regulations, background checks for employees with access to sensitive data, confidentiality agreements binding all employees and contractors to maintain data confidentiality, incident response procedures outlining steps to address security breaches promptly, and regular policy reviews ensuring our practices remain current with evolving threats and regulations.

7.3 Physical Security

Physical security measures protecting our data centers and offices include restricted facility access with badge-controlled entry and security personnel, surveillance systems monitoring physical premises continuously, secure server locations in professionally managed data centers with redundant power and cooling, and visitor logging and escort requirements for non-employees entering secure areas.

8. Data Retention Period

36php retains personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of information and the purpose for which it is processed.

Account information including registration details, contact information, and identity verification documents is retained for the duration of your active account plus seven (7) years after account closure to comply with regulatory record-keeping requirements. Transaction records including deposits, withdrawals, bets placed, and gaming outcomes are retained for seven (7) years following the transaction date as required by anti-money laundering regulations and tax laws. Communication records such as customer support interactions, complaints, and correspondence are retained for three (3) years to address potential disputes and improve service quality. Marketing data including email preferences and communication history is retained until you withdraw consent or request deletion. Technical logs including IP addresses, device information, and session data are typically retained for twelve (12) months unless longer retention is required for security investigations.

Upon expiration of applicable retention periods, personal information is securely deleted or anonymized. However, we may retain information for longer periods when required by law, to comply with regulatory investigations, to resolve ongoing disputes, or to protect our legal rights.

9. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have specific rights regarding your personal information. 36php respects these rights and provides mechanisms for you to exercise them. To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 15.

9.1 Right to Information

You have the right to be informed about the collection and processing of your personal information. This Privacy Policy fulfills that obligation by explaining what information we collect, how we use it, who we share it with, and how long we retain it.

9.2 Right to Access

You have the right to request access to your personal information held by 36php. Upon receiving a verified request, we will provide you with a copy of your personal data in a commonly used electronic format within thirty (30) days.

9.3 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal information. You can update most information directly through your account settings, or you may contact customer support for assistance with corrections you cannot make yourself.

9.4 Right to Erasure

You have the right to request deletion of your personal information under certain circumstances, including when information is no longer necessary for the purposes for which it was collected, when you withdraw consent upon which processing is based, when you object to processing and no overriding legitimate grounds exist, or when information has been unlawfully processed. Note that we may be required to retain certain information to comply with legal obligations or resolve disputes.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to request transmission of that data to another controller where technically feasible.

9.6 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests by providing reasons related to your particular situation. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.

9.7 Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) or pursue other available remedies under Philippine law.

10. Cookies and Tracking Technologies

36php uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform performance, and deliver personalized content. Cookies are small text files stored on your device that allow websites to remember your preferences and track your activities.

10.1 Types of Cookies We Use

Essential cookies are necessary for the platform to function properly, enabling account login, maintaining session state, and processing transactions. These cookies cannot be disabled without severely impacting platform functionality. Performance cookies collect information about how you use our platform, including pages visited, games played, and errors encountered, helping us identify and fix technical issues. Functional cookies remember your preferences such as language selection, preferred games, and customized settings, enhancing convenience and personalization. Marketing cookies track your activity across websites to deliver targeted advertising and measure campaign effectiveness, and can be disabled through your browser settings without affecting core platform functionality.

10.2 Managing Cookie Preferences

You can control cookie settings through your browser configuration. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies will prevent you from accessing certain platform features. You may configure cookie preferences for non-essential cookies through our cookie management tool accessible in your account settings.

11. Third-Party Services

The 36php platform integrates various third-party services to deliver comprehensive gaming experiences, process payments, and provide support functions. These third parties have their own privacy policies governing their collection and use of information. We recommend reviewing the privacy policies of these third-party services to understand their data practices.

Third-party game providers such as Evolution Gaming, Pragmatic Play, and NetEnt may collect information about your gameplay to ensure game integrity and generate gaming outcomes. Payment processors including GCash, Maya, and banks collect financial information necessary to process deposits and withdrawals. Analytics services like Google Analytics help us understand user behavior and improve platform performance. These third parties are contractually obligated to protect your information and use it only for specified purposes, but 36php is not responsible for their privacy practices beyond our contractual agreements.

12. International Data Transfers

While 36php primarily serves Filipino players and stores data within the Philippines, certain third-party service providers may process information in other countries. When personal information is transferred internationally, we ensure adequate safeguards are in place to protect your data in accordance with Philippine data protection standards, including using Standard Contractual Clauses approved by data protection authorities, ensuring recipient countries provide adequate data protection under Philippine law, or obtaining your explicit consent for specific international transfers.

Game providers, payment processors, and technical infrastructure providers may operate servers or facilities outside the Philippines. We carefully vet all international service providers to ensure they maintain security standards equivalent to or exceeding Philippine requirements.

13. Children's Privacy

36php services are strictly intended for adults aged 21 years and older. We do not knowingly collect personal information from individuals under 21 years of age. Our registration process includes age verification mechanisms, and we conduct identity verification to confirm compliance with minimum age requirements.

If we discover that we have inadvertently collected information from an individual under 21, we will immediately delete that information and close the associated account. Parents or guardians who believe their child has provided information to 36php should contact us immediately so we can remove the information and prevent further access.

14. Changes to Privacy Policy

36php reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through prominent notice on our website, email notification to registered players, or notification through your account dashboard at least thirty (30) days before the changes take effect.

Your continued use of 36php services following notification of Privacy Policy changes constitutes acceptance of the revised policy. If you do not agree with modifications, you may request account closure and deletion of your personal information subject to legal retention requirements. The most current version of this Privacy Policy will always be accessible on our website with the "Last Updated" date clearly displayed.

15. Contact Information

If you have questions, concerns, or complaints regarding this Privacy Policy or our data protection practices, or if you wish to exercise your privacy rights, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (with "Privacy Inquiry" in subject line)
• Live Chat: Available 24/7 through our website
• Response Time: We aim to respond to all privacy inquiries within seven (7) business days

For formal complaints or legal notices regarding data protection, please send written correspondence to the email address above. We are committed to resolving privacy concerns promptly and transparently. If you are unsatisfied with our response, you may escalate your complaint to the Philippine National Privacy Commission.