ph36 Privacy Policy

This Policy applies to all natural persons who interact with ph36 in any of the following capacities: registered account holders, prospective applicants who initiate but do not complete the registration process, visitors to the ph36 website at ph36.win, and individuals who contact ph36's customer support team.

This Policy covers personal information collected through the ph36 website, the account registration and KYC process, deposit and withdrawal transactions, game activity, promotional communications, and customer support interactions. It applies regardless of whether you are accessing the Platform from Metro Manila, Cebu, Davao, or any other location in the Philippines.

This Policy does not apply to third-party websites, payment processors, or game providers that may be linked to or integrated with the ph36 Platform. Those entities operate under their own privacy policies, and ph36 is not responsible for their data practices.

ph36 collects the following categories of personal information in the ordinary course of operating the Platform:

ph36 uses the personal information described in Section 2 for the following specific purposes:

• Account Registration and Management: To create and maintain your ph36 account, verify your identity, process your login credentials, and manage your account settings and preferences.
• KYC and Age Verification: To verify that you are aged 21 or above and legally eligible to participate in online gambling in the Philippines, as required by PAGCOR regulations and ph36's Terms & Conditions.
• Payment Processing: To process deposits via GCash, Maya, GrabPay, InstaPay, PesoNet, and bank transfers, and to process withdrawal requests to your nominated payment account.
• Platform Service Delivery: To provide you with access to ph36's game library, live casino tables, sports betting, bingo, sabong, and all other Platform services.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, multi-accounting, bonus abuse, and other prohibited activities on the ph36 Platform.
• Regulatory Compliance: To meet ph36's obligations under PAGCOR regulations, Anti-Money Laundering Act (AMLA) requirements, and applicable Philippine laws including mandatory transaction reporting thresholds.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling behavior, enforce deposit limits and self-exclusion requests, and deliver responsible gaming communications where warranted.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and provide technical assistance through ph36's 24/7 live chat and support channels.
• Marketing and Promotions (with consent): To send you information about ph36 bonuses, promotions, and new game releases where you have provided consent to receive such communications. You may withdraw this consent at any time through your account settings.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the ph36 Platform's performance, navigation, game selection, and overall player experience.

ph36 will not use your personal information for any purpose not listed above without first notifying you and, where required by law, obtaining your consent.

Under the Philippine Data Privacy Act of 2012, ph36's processing of your personal information is grounded in the following lawful bases:

• Contractual Necessity: Processing required to perform ph36's obligations under the account agreement with you — including account creation, payment processing, and game service delivery.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA reporting requirements, National Privacy Commission requirements, and other applicable Philippine laws.
• Legitimate Interests: Processing conducted for ph36's legitimate operational interests — specifically fraud detection, platform security, responsible gaming monitoring, and service improvement — where such interests do not override your fundamental rights.
• Consent: Processing conducted for marketing communications and certain optional data uses, for which ph36 has obtained your explicit prior consent. Consent-based processing is revocable at any time.

ph36 shares personal information with third parties only in the limited circumstances described below. ph36 does not sell, rent, or trade your personal information for commercial purposes.

Payment Service Providers. ph36 shares transaction-related data with GCash (GXI), Maya (Voyager Innovations), and other licensed Philippine payment processors strictly as necessary to process your deposits and withdrawals. These providers are subject to Bangko Sentral ng Pilipinas (BSP) regulations and maintain their own data protection obligations.

Game Content Providers. ph36 shares a session token and anonymized player identifier with licensed game providers (such as JILI, PG Soft, Evolution Gaming, and Pragmatic Play) to enable game session authentication. We do not share your identity documents or financial data with game providers.

KYC and Identity Verification Providers. ph36 works with a licensed identity verification service to process KYC document uploads. Documents submitted for verification are handled in accordance with applicable data protection requirements and are not retained beyond the period necessary for verification.

Regulatory Authorities. ph36 is required by law to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) upon lawful request or as required by mandatory reporting obligations. ph36 will notify you of such disclosures where legally permissible to do so.

Fraud and Security Partners. ph36 may share data with fraud prevention services and cybersecurity partners strictly for the purpose of detecting and preventing unauthorized access, identity theft, and financial fraud affecting the ph36 Platform or its players.

ph36 retains personal information for as long as is necessary to fulfill the purposes described in this Policy, subject to the following specific retention periods:

• Active Account Data: Retained for the duration of your active ph36 account relationship plus a minimum of five (5) years following account closure, as required by PAGCOR regulations and AMLA retention obligations.
• KYC / Identity Documents: Retained for a minimum of five (5) years from the date of collection or from the date of account closure, whichever is later, in compliance with AMLA and PAGCOR KYC record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the AMLA and applicable BSP regulations on financial record-keeping.
• Game Activity Logs: Retained for three (3) years from the date of each gaming session, used for dispute resolution, regulatory audit, and responsible gaming monitoring purposes.
• Customer Support Records: Retained for two (2) years from the date of the last interaction, used for quality assurance, dispute resolution, and training purposes.
• Marketing Consent Records: Retained for the duration of your consent plus a reasonable period thereafter as evidence of consent, or until consent is withdrawn.

Upon expiry of the applicable retention period, ph36 will securely delete or irreversibly anonymize your personal information unless continued retention is required by a court order, regulatory direction, or ongoing legal proceedings.

ph36 implements a layered security framework designed to protect your personal and financial information against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security (TLS): All data transmitted between your browser or device and the ph36 Platform is encrypted using TLS 1.2 or higher.
• Encrypted Data at Rest: Sensitive personal data stored in ph36 databases is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Internal access to player personal information is restricted to authorized ph36 personnel with a documented business need. Access is granted on a least-privilege basis and reviewed regularly.
• Security Monitoring: ph36 operates continuous security monitoring systems to detect anomalous access patterns, unauthorized login attempts, and other security events affecting the Platform.
• Two-Factor Authentication: Sensitive account actions — including large withdrawals and password resets — require OTP verification to your registered Philippine mobile number before proceeding.
• Regular Security Assessments: ph36 conducts periodic security assessments and vulnerability testing of the Platform infrastructure to identify and remediate security weaknesses.

While ph36 implements industry-standard security practices, no system is completely immune to all security threats. Players are encouraged to use strong, unique passwords for their ph36 accounts, avoid logging in from public Wi-Fi networks, and contact ph36 support immediately if they suspect unauthorized access to their account.

ph36 uses cookies and similar tracking technologies on the ph36 website to enable Platform functionality, maintain session state, prevent fraud, and analyze usage patterns. The categories of cookies used by ph36 are as follows:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies, security tokens, and cookies that remember your login state and responsible gaming preferences. These cannot be disabled without rendering the Platform non-functional.
• Analytics Cookies: Used to collect aggregated, anonymized data about how visitors use the ph36 website — page views, session durations, navigation paths, and device types. This data helps ph36 improve the Platform experience for Filipino players. These cookies do not identify you personally.
• Fraud Prevention Cookies: Used to identify suspicious behavior patterns, detect bot activity, and prevent unauthorized access to ph36 accounts. These cookies are essential to the security of the Platform and cannot be disabled.

ph36 does not use cookies to serve third-party advertising or to track your activity on external websites. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect the functionality of the ph36 Platform and may prevent you from logging in or conducting transactions.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by ph36:

To exercise any of the above rights, you may submit a request through the ph36 account dashboard or by contacting the ph36 Data Protection Officer at the details provided in Section 13. ph36 will respond to all verified data subject requests within thirty (30) days of receipt. ph36 may require you to verify your identity before processing your request.

If you believe your data subject rights have been violated and ph36 has not resolved your concern to your satisfaction, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

ph36 is an online gaming platform strictly restricted to individuals aged 21 years and above, in compliance with PAGCOR's minimum age requirements for online gambling in the Philippines. ph36 does not knowingly collect, process, or retain personal information from any individual under the age of 21.

Age verification is enforced at the account registration stage through an age declaration, and further enforced through the KYC identity verification process that requires a valid government-issued photo ID establishing the player's date of birth. Common acceptable documents include the Philippine National ID (PhilSys), driver's license, UMID card, and passport.

If ph36 discovers or has reason to believe that personal information has been collected from an individual under 21 years of age, ph36 will immediately suspend the associated account, delete the collected data to the extent legally permissible, and report the matter to PAGCOR where required. Any balance held in an underage account will be handled in accordance with applicable regulatory guidelines.

Parents and guardians who believe their child may have accessed or registered on the ph36 Platform should contact ph36 support immediately through the live chat facility. ph36 takes underage access seriously and will act swiftly to investigate and resolve any such reports.

ph36 is a Philippines-focused platform and processes the majority of player data within the Philippines. However, certain third-party service providers used by ph36 — including game content providers such as Evolution Gaming, PG Soft, and Pragmatic Play — may operate data processing infrastructure outside the Philippines.

Where personal data is transferred outside the Philippines, ph36 takes reasonable steps to ensure that such transfers are made in accordance with the requirements of the Philippine Data Privacy Act, including ensuring that the receiving entity provides an adequate level of protection for personal information. This may include contractual data protection clauses, standard contractual agreements, or equivalent safeguards recognized under Philippine privacy law.

ph36 does not transfer your full identity documents or government ID scans to game providers in the course of normal operations. International data sharing with game providers is limited to the session tokens and anonymized player identifiers necessary for game service delivery.

ph36 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made to this Policy, ph36 will notify registered account holders via the email address or mobile number associated with their ph36 account and will update the "Last Updated" date at the top of this document.

Your continued use of the ph36 Platform following notification of any change to this Policy constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the ph36 Platform and contact support to discuss account closure options.

We encourage all ph36 account holders to review this Privacy Policy periodically to stay informed about how ph36 protects your personal information.

ph36 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and handling data subject rights requests and privacy complaints. You may contact the ph36 DPO through the following channels:

All formal data subject requests must be submitted in writing with sufficient information to verify the identity of the requestor. ph36 will not process data subject rights requests where identity cannot be adequately verified, in order to protect against unauthorized disclosure of personal information.