A plain-language summary of our key data practices. Full legal details follow below.
36php collects only the personal information necessary to operate your account, verify your identity, process transactions, and comply with PAGCOR and Philippine anti-money laundering regulations.
Your data is stored on encrypted, access-controlled servers. 36php employs 256-bit SSL encryption for all data in transit and strict internal access controls limiting who can view your personal information.
36php does not sell, rent, or trade your personal information to third-party marketers. Data is shared only with service providers essential to platform operations and as required by Philippine law.
Under RA 10173, you have the right to access, correct, and request deletion of your personal data held by 36php. You may also object to certain types of data processing and file complaints with the NPC.
36php uses first-party cookies for session management and anonymous analytics to improve platform performance. We do not use third-party advertising cookies or behavioral tracking networks.
All 36php data practices are designed to comply with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission.
This Privacy Policy applies to all personal data collected and processed by 36php in connection with the operation of the 36php Casino platform accessible at 36php.vip ("the Platform"). It applies to all registered members, prospective members, visitors, and any individual whose personal data is processed by 36php in connection with the Platform, regardless of whether they are located in Metro Manila, Cebu, Davao, or any other part of the Philippines.
This Policy is to be read alongside and forms part of 36php's Terms & Conditions. Defined terms used herein and not otherwise defined carry the meaning given to them in the 36php Terms & Conditions.
By registering an account with 36php or using the Platform in any capacity, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.
36php collects the following categories of personal data from its members and platform users:
2.1 Identity Data: Full legal name, date of birth, nationality, and government-issued identification document details (e.g., Philippine National ID, Passport, Driver's License, UMID, SSS, PhilHealth, or Voter's ID number) submitted during KYC verification.
2.2 Contact Data: Philippine mobile number, email address, and residential address.
2.3 Financial Data: GCash mobile number, Maya/PayMaya account reference, bank account details (where applicable for BPI, BDO, Metrobank, or other bank transfers), deposit and withdrawal history, and transaction records.
2.4 Account Data: 36php username, hashed account password, account registration date, login history, device identifiers, IP addresses used to access the Platform, and session activity logs.
2.5 Gaming Activity Data: Wagering history, game session records, bonus redemption history, and responsible gaming settings configured on your account.
2.6 Communications Data: Records of support chat sessions, email correspondence with 36php, and any other communications you submit to 36php through any channel.
2.7 Technical Data: Browser type, operating system, device type, screen resolution, and referral URL, collected automatically when you access the 36php Platform.
36php collects personal data through the following means:
36php processes your personal data on the following lawful bases under RA 10173:
36php does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. 36php may share your personal data with the following categories of third parties solely to the extent necessary for the purposes described in Section 4:
All third-party service providers engaged by 36php are required by contract to implement appropriate technical and organizational security measures to protect your personal data and to process it only on 36php's documented instructions.
36php retains your personal data for as long as your account remains active and for such additional periods as are required to fulfill the purposes described in this Policy or to comply with legal and regulatory obligations. Specifically:
Where data is no longer required for any lawful purpose, 36php will securely delete or anonymize it.
36php implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:
Notwithstanding the above, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your 36php account has been compromised, please contact our support team immediately.
8.1 Session Cookies. 36php uses strictly necessary session cookies to maintain your logged-in state during an active Platform session. These cookies are deleted automatically when you close your browser or when your session expires. You cannot opt out of session cookies without disabling your ability to use the 36php platform.
8.2 Analytics Cookies. 36php uses first-party analytics tools to collect anonymized, aggregated data about how the Platform is used — including pages visited, time spent per session, and device/browser types. This data helps 36php identify performance issues and improve the user experience. No personally identifiable information is transmitted via analytics cookies.
8.3 No Third-Party Advertising Cookies. 36php does not deploy third-party advertising networks, behavioral retargeting pixels, or social media tracking cookies on the Platform.
8.4 Managing Cookies. You may disable non-essential cookies through your browser's settings at any time. Note that disabling certain cookies may affect the functionality of the 36php Platform.
As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 36php:
To exercise any of the above rights, please contact 36php's Data Protection Officer as described in Section 13 of this Policy.
The 36php platform is strictly for individuals aged 21 years and above, as required by Philippine gaming law. 36php does not knowingly collect personal data from individuals under the age of 21. If 36php discovers that a registered account belongs to a person below the legal age, the account will be immediately suspended and all associated personal data will be processed in accordance with 36php's underage account procedures, including deletion of personal data not required to be retained for legal compliance purposes.
If you believe a person under the age of 21 has registered an account on 36php, please notify our support team immediately.
36php's primary data processing infrastructure is located within the Asia-Pacific region. In some circumstances, personal data may be transferred to and processed in countries outside the Philippines — for example, where 36php uses cloud hosting services or game content providers with servers located in other jurisdictions.
Where such transfers occur, 36php ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under RA 10173, including contractual data processing agreements with all third-party recipients, and where applicable, the implementation of NPC-recognized transfer mechanisms.
36php reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or PAGCOR regulatory requirements. Material amendments will be communicated to registered 36php members via email notification and/or a prominent notice on the Platform prior to the effective date of the change. The "Last updated" date at the top of this page will be revised accordingly. Your continued use of the 36php platform following the effective date of any amendment constitutes your acceptance of the updated Privacy Policy.
36php has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. If you have questions, concerns, or requests regarding your personal data, please contact the 36php DPO through the following channels:
36php will acknowledge your request within three (3) business days and will endeavor to respond fully within fifteen (15) business days, as required under RA 10173 and NPC regulations.