36ji Casino Privacy Policy

1 Introduction

36ji Casino operates the online gaming platform accessible at 36ji.org, serving Filipino players across the Philippines — from Manila and Makati to Cebu, Davao, and Quezon City. As a platform that handles financial transactions, identity verification, and gaming activity, we take our data protection obligations seriously.

This Privacy Policy applies to all personal data collected through the 36ji website, mobile platform, customer support channels, and any other service operated by 36ji. It applies to registered players, prospective players, and all visitors to the 36ji platform.

36ji acts as the Personal Information Controller for the personal data you provide to us, as defined under the Philippine Data Privacy Act of 2012. This means we determine the purposes and means by which your personal data is processed.

2 Personal Data We Collect

36ji collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

We do not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data, political opinions, religious beliefs, or health information unless specifically required by law.

3 How We Collect Your Data

36ji collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the 36ji platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard; fraud prevention data from security partners.
• Publicly available sources: Information from government databases used to verify identity or comply with anti-money laundering obligations.

4 How We Use Your Personal Data

36ji uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your 36ji account, including identity and age verification (21+ requirement).
• Service delivery: Processing deposits and withdrawals in Philippine Pesos (PHP), crediting winnings, and providing access to all 36ji games including slots, Dragon Fishing, Pool Rummy, and Bingo.
• Legal and regulatory compliance: Fulfilling obligations under the Philippine Data Privacy Act, PAGCOR regulations, Anti-Money Laundering Act (AMLA), and other applicable laws.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, and other prohibited conduct.
• Responsible gaming: Monitoring gaming activity to identify problem gambling patterns and enforcing self-exclusion or deposit limit requests.
• Customer support: Responding to your inquiries, resolving disputes, and improving our support services.
• Marketing and promotions: Sending you information about 36ji bonuses, promotions, and new games — only where you have provided consent or where permitted by law. You may opt out at any time.
• Platform improvement: Analyzing usage patterns to improve the 36ji platform, fix bugs, and develop new features.

5 Legal Basis for Processing

36ji processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you — including account registration, game access, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, tax reporting requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our interests do not override your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

36ji does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data only in the following circumstances:

• Service providers: KYC verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, IT infrastructure providers, and customer support platforms — all bound by data processing agreements requiring them to protect your data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or court order.
• Law enforcement: Philippine law enforcement agencies where disclosure is required by law or necessary to prevent fraud, money laundering, or other criminal activity.
• Business transfers: In the event of a merger, acquisition, or sale of 36ji's business assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.
• With your consent: Any other sharing that you have explicitly authorized.

Where personal data is shared with third-party service providers, 36ji ensures that appropriate data processing agreements are in place and that such providers maintain adequate security standards consistent with the Philippine Data Privacy Act.

7 Cookies & Tracking Technologies

36ji uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit 36ji.org. We use the following types of cookies:

• Essential cookies: Required for the platform to function — including session management, login authentication, and security features. These cannot be disabled.
• Analytics cookies: Help us understand how players use the 36ji platform so we can improve performance and user experience. Data collected is aggregated and anonymized.
• Preference cookies: Remember your settings and preferences, such as language and display options, to personalize your experience.
• Marketing cookies: Used to deliver relevant promotions and measure the effectiveness of our campaigns. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of the 36ji platform. For more information on managing cookies, refer to your browser's help documentation.

8 Data Retention

36ji retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLA requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine anti-money laundering regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years after the end of the business relationship.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation.
• Technical and usage logs: Retained for up to twelve (12) months, unless required longer for security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 36ji's data disposal procedures.

9 Data Security

36ji implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the 36ji platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Multi-factor authentication options for player accounts.
• Regular security audits, vulnerability assessments, and penetration testing.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Staff training on data protection and information security practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While 36ji takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your 36ji login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 36ji:

• Right to be informed: The right to know what personal data 36ji collects about you and how it is used — as described in this Privacy Policy.
• Right of access: The right to request a copy of the personal data 36ji holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the 36ji Data Privacy Officer via the contact details in Section 14. We will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.

11 Children's Privacy

The 36ji platform is strictly intended for persons who are 21 years of age or older, in accordance with PAGCOR regulations governing online gambling in the Philippines. 36ji does not knowingly collect personal data from persons under the age of 21.

If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 36ji platform, please contact us immediately using the details in Section 14.

12 Third-Party Links

The 36ji platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies only to the 36ji platform and does not cover the data practices of any third-party websites. We encourage you to review the privacy policies of any third-party services you access through or in connection with 36ji.

36ji is not responsible for the privacy practices or content of third-party websites, and the inclusion of any link does not imply endorsement by 36ji.

13 Changes to This Privacy Policy

36ji reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or in-platform notification.

Your continued use of the 36ji platform after any such changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how 36ji protects your personal data.

14 Contact Our Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 36ji, please contact our Data Privacy Officer (DPO):

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.