Privacy Policy

1.Who We Are

36ph is the operator of the online gaming and sports betting platform accessible at https://36ph.one (the "Platform"). 36ph operates in accordance with applicable Philippine law and is the data controller responsible for personal information collected through the Platform.

If you have any questions about how 36ph handles your personal data, you may contact our support team at: [email protected] (plain text — not a clickable link).

2.Information We Collect

36ph collects personal information necessary to provide, secure, and improve the Platform. The categories of personal information we collect include:

We do not collect sensitive personal information such as biometric data, health data, or political opinions beyond what is strictly required for identity verification purposes.

3.How We Collect Your Data

36ph collects personal information through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, contacting support, or updating your profile.
• Automated technologies: Cookies, web beacons, session tracking, and server log files that collect technical and usage data as you interact with the Platform.
• Payment processors: Transaction data relayed from GCash, Maya, BPI, BDO, Metrobank, and other payment service providers in connection with deposits and withdrawals.
• Third-party identity verification services: Identity and document verification data returned by KYC service providers engaged by 36ph for compliance purposes.
• Publicly available sources: Where permitted by law, information from public registers or databases used to fulfil anti-money laundering (AML) or fraud prevention obligations.

4.Purposes of Processing

36ph processes your personal information for the following purposes:

• To create and manage your 36ph account, including verifying your identity and age eligibility (21+).
• To process deposits, withdrawals, and other financial transactions on the Platform.
• To provide, operate, and maintain all games, features, and services accessible through your 36ph account.
• To administer bonuses, promotions, loyalty programmes, and VIP tier benefits.
• To detect, investigate, and prevent fraud, money laundering, prohibited conduct, and Platform abuse.
• To fulfil Anti-Money Laundering (AML), Know Your Customer (KYC), and other applicable regulatory compliance obligations.
• To enforce the 36ph Terms & Conditions and other platform policies.
• To administer responsible gaming tools, including deposit limits, self-exclusion, and account restrictions requested by the account holder.
• To communicate with you regarding account matters, security alerts, transaction confirmations, and support responses.
• To send promotional communications and offers — where you have consented to receive such communications or where we have a legitimate interest in doing so.
• To analyse platform usage, improve game offerings, and conduct internal business intelligence activities.
• To comply with applicable Philippine law, judicial orders, or lawful requests from competent authorities.

5.Legal Bases for Processing

36ph processes your personal information on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the 36ph Terms & Conditions — including account creation, gameplay, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine law, including AML regulations, KYC obligations, and data retention requirements.
• Legitimate interests: Processing required to protect the Platform from fraud, improve our services, and maintain the security and integrity of 36ph's systems.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time by contacting support.

6.Disclosure of Personal Data

36ph does not sell your personal information to third parties. We may share your personal data with the following categories of recipients, only to the extent necessary for the stated purpose:

• Payment service providers: GCash, Maya, BPI, BDO, Metrobank, and other processors engaged to facilitate deposits and withdrawals on the Platform.
• Identity verification (KYC) providers: Third-party service providers contracted to verify identity documents and facial recognition data as required by compliance obligations.
• Game content providers: Licensed game developers and live casino operators whose content is made available through the 36ph Platform.
• IT infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Legal and regulatory authorities: Philippine law enforcement agencies, courts, regulatory bodies, or other competent authorities, where required by law or judicial order.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third parties engaged by 36ph to process personal data are required to implement adequate data protection measures consistent with applicable law.

7.Data Retention

36ph retains personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with applicable legal, regulatory, and contractual obligations. Specific retention periods include:

• Account registration and identity data: retained for the duration of the account and for a minimum of five (5) years following account closure, as required by AML regulations.
• Transaction and financial records: retained for a minimum of five (5) years from the date of the transaction.
• Support communications: retained for a minimum of two (2) years from the date of the last interaction.
• Technical and usage data: retained for up to twelve (12) months, subject to anonymisation after that period.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised.

8.Security Measures

36ph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 36ph servers.
• Hashed and salted password storage — 36ph never stores your password in plaintext.
• OTP (one-time password) verification for withdrawals and sensitive account changes.
• Login activity monitoring with automatic alerts for suspicious access patterns.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security assessments, penetration testing, and vulnerability management.

Despite these measures, no data transmission over the internet can be guaranteed to be 100% secure. If you suspect unauthorised access to your 36ph account, please contact support immediately.

9.Cookies and Tracking Technologies

36ph uses cookies and similar tracking technologies to provide, secure, and improve the Platform. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and language preference storage. These cannot be disabled.
• Performance cookies: Used to collect anonymised analytics data about Platform usage, page load times, and error rates, to help us improve the user experience.
• Functional cookies: Used to remember your preferences such as display settings and recently viewed games.
• Marketing cookies: Used (only where consent has been given) to deliver relevant promotional content and measure the effectiveness of marketing campaigns.

You may manage non-essential cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

10.Your Data Rights

As a data subject under applicable Philippine privacy law, you have the following rights with respect to your personal information held by 36ph:

• Right to be informed: The right to know what personal data 36ph holds about you and how it is used — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data 36ph holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to legal and regulatory retention obligations.
• Right to data portability: The right to receive a structured, machine-readable copy of your personal data.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, contact 36ph support at [email protected]. We will respond within thirty (30) calendar days.

11.Children's Privacy

The 36ph Platform is strictly for adults aged 21 years and older. 36ph does not knowingly collect, use, or store personal data from individuals under the age of 21. If we become aware that personal data has been collected from an underage individual, we will take immediate steps to delete the relevant data and close the associated account. If you believe an underage individual has registered on 36ph, please notify us at [email protected].

12.Cross-Border Data Transfers

Some of 36ph's service providers, including cloud hosting and KYC verification partners, may be located or operate infrastructure outside of the Philippines. Where personal data is transferred outside the Philippines, 36ph ensures that appropriate safeguards are in place — including contractual protections, adequacy assessments, and data processing agreements — consistent with applicable Philippine data privacy law.

13.Third-Party Links and Services

The 36ph Platform may contain references to third-party game content providers or payment processors. 36ph is not responsible for the privacy practices or content of any third-party services. We encourage you to review the privacy policies of any third-party services you interact with separately from this Policy.

14.Amendments to This Privacy Policy

36ph may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or the services we offer. Where material changes are made, we will make reasonable efforts to notify registered users via the Platform or by SMS to the registered mobile number. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the 36ph Platform following the publication of an updated Privacy Policy constitutes acceptance of the revised Policy.

15.Contact Us

For any privacy-related enquiries, data subject rights requests, or concerns about how 36ph handles your personal information, please contact us:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week via the support feature on the 36ph Platform

36ph will acknowledge privacy enquiries within 5 business days and provide a full response within 30 calendar days of receipt.