36ji Casino
Privacy Policy

36ji Casino ("36ji," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our Platform. This Privacy Policy ("Policy") describes in detail how we collect, process, use, store, share, and protect your personal information in connection with your use of the 36ji website at 36ji.club and all associated services (collectively, the "Platform").

This Policy applies to all registered and unregistered users of the 36ji Platform, including visitors to our website who have not created an account, players with active accounts, and former account holders whose data is retained in accordance with applicable legal obligations.

We have drafted this Policy to comply with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission ("NPC"). We take our obligations under Philippine data protection law seriously, and this Policy reflects those commitments in plain terms that are accessible to every Filipino player.

For the purposes of applicable data protection legislation, 36ji Casino is the data controller responsible for your personal data collected and processed through the Platform. As data controller, 36ji determines the purposes and means of processing your personal information.

36ji has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Privacy Policy and with applicable data protection laws. You may contact our DPO for any privacy-related inquiries, complaints, or requests to exercise your data subject rights using the contact details provided in Section 16 of this Policy.

Where 36ji engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, and gaming platform operators — those third parties act as data processors under 36ji's instruction and are bound by data processing agreements that require them to maintain standards equivalent to those described in this Policy.

36ji collects personal information in several categories, depending on how you interact with the Platform. The table below summarizes the categories of data we collect and examples of specific data points within each category:

We do not collect special categories of sensitive personal information (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for responsible gaming assessments or where you voluntarily provide such information to our support team in a relevant context.

36ji collects personal data through the following means:

• Directly from You: Information you provide when creating an account, completing KYC verification, making deposits or withdrawal requests, contacting our support team, or updating your account settings.
• Automatically: Technical and usage data collected automatically when you visit and interact with the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 8 for details).
• From Third-Party Verification Providers: Identity verification data received from KYC and anti-money laundering (AML) service providers in connection with the mandatory verification process.
• From Payment Processors: Transaction confirmation and status data received from GCash, Maya, and banking partners in connection with deposit and withdrawal processing.
• From Game Providers: Game session data, bet records, and outcome histories received from third-party game studios whose titles are available on the 36ji Platform.

36ji uses your personal data for the following purposes:

• Account Management: To create and manage your 36ji account, verify your identity, authenticate logins, and maintain your account preferences and history.
• Service Delivery: To provide access to games, process bets, calculate and credit winnings, and operate all features of the 36ji Platform.
• Payment Processing: To process deposits, execute withdrawal requests, and maintain transaction records as required by Philippine financial regulations.
• KYC and AML Compliance: To verify your identity, confirm your age (21 years minimum), conduct source-of-funds checks, and fulfill anti-money laundering obligations under Philippine law.
• Responsible Gaming: To monitor gaming behavior for indicators of problem gambling, enforce player-set deposit and session limits, and process self-exclusion requests.
• Customer Support: To respond to inquiries, resolve disputes, process complaints, and improve the quality of our support services.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other security threats.
• Legal Compliance: To comply with applicable Philippine laws, regulatory requirements, court orders, and requests from government authorities.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, design, and content of the 36ji Platform.
• Marketing Communications: To send you relevant promotional offers and updates about 36ji services, subject to your communication preferences (see Section 11 for opt-out options).

Under the Philippine Data Privacy Act of 2012, every instance of personal data processing must have a valid legal basis. The legal bases upon which 36ji relies to process your personal data are as follows:

• Performance of Contract: Processing necessary to perform the agreement between you and 36ji (the Terms & Conditions), including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, tax reporting requirements, and responsible gaming regulations.
• Legitimate Interests: Processing conducted for 36ji's legitimate business interests — including fraud prevention, platform security, and service improvement — where those interests are not overridden by your data protection rights.
• Consent: Where required by law, processing based on your freely given, specific, and informed consent — for example, sending optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

36ji does not sell your personal data to third parties. We may share your personal information with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, and other payment service providers, to facilitate deposits and withdrawals. These providers receive only the minimum data necessary to process the specific transaction.
• KYC and Identity Verification Providers: Third-party services engaged to conduct identity verification, age verification, and AML screening as required by Philippine regulatory requirements.
• Game Content Providers: Third-party game studios and platform providers whose software operates games available on the 36ji Platform. These providers receive session data necessary to operate and audit game outcomes.
• IT and Cloud Service Providers: Providers of hosting, data storage, analytics, and security infrastructure who process data on 36ji's behalf under contractual data processing obligations.
• Regulatory and Law Enforcement Authorities: Philippine government agencies, courts, and regulators, where required by law, court order, or regulatory investigation. 36ji complies with all lawful requests for information from competent Philippine authorities.
• Professional Advisors: Legal, financial, and audit advisors who are bound by professional confidentiality obligations, in connection with the normal operation of 36ji's business.

The 36ji Platform uses cookies and similar tracking technologies to provide and improve our services. A cookie is a small text file placed on your device when you visit a website.

36ji uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session management cookies that keep you logged in during your 36ji session, security cookies for fraud prevention, and cookies that enforce your responsible gaming settings. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings, login details (if "Remember Me" is enabled), and game display preferences. These improve your experience but are not required for core functionality.
• Analytical Cookies: Collect anonymized or aggregated data about how users interact with the Platform — pages visited, time spent, features used — to help 36ji understand usage patterns and improve the service.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content. These track your activity to help 36ji show offers that are likely to be relevant to your gaming preferences.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair core Platform functionality, including the ability to maintain your logged-in session. Marketing cookies can be disabled in your account's communication preferences settings.

36ji retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status and for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine financial regulations applicable to gaming operators.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the customer due diligence process, whichever is later.
• Support Communications: Retained for three (3) years from the date of the last communication, unless related to an ongoing dispute or legal matter in which case they are retained until the matter is fully resolved.
• Marketing Data: Retained until you withdraw consent to marketing communications or request erasure, subject to applicable minimum retention obligations.

Upon the expiry of applicable retention periods, 36ji will securely delete or anonymize personal data in accordance with established data destruction procedures.

36ji implements a comprehensive set of technical, organizational, and administrative security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the 36ji Platform is protected using 256-bit SSL/TLS encryption. The padlock icon in your browser's address bar when visiting 36ji.club confirms this protection is active.
• Encryption at Rest: Sensitive personal data, including financial information and identity documents stored by 36ji, is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to personal data is restricted to 36ji personnel and authorized processors who have a legitimate need to access that data in the performance of their duties. Access rights are reviewed periodically and revoked when no longer required.
• Two-Factor Authentication: 36ji offers and encourages the use of two-factor authentication on all player accounts to reduce the risk of unauthorized account access.
• Intrusion Detection and Monitoring: The 36ji Platform is monitored continuously for suspicious activity. Automated systems and security personnel respond to potential threats in real time.
• Penetration Testing: Regular security testing by qualified professionals is conducted on the 36ji Platform to identify and remediate vulnerabilities before they can be exploited.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by 36ji:

To exercise any of these rights, please contact the 36ji Data Protection Officer using the contact details in Section 16. We will respond to verified data subject requests within thirty (30) days of receipt, or such shorter period as required by applicable law. We may require you to verify your identity before fulfilling any request to prevent unauthorized access to or modification of another person's data.

If you are not satisfied with 36ji's response to a data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

The 36ji Platform is strictly intended for individuals who are at least twenty-one (21) years of age. 36ji does not knowingly collect, process, or retain personal data from individuals under the age of 21.

All persons who access or attempt to register an account on the 36ji Platform represent that they are at least 21 years of age. 36ji verifies age as part of its mandatory KYC process prior to permitting withdrawals. Where an account is found to belong to a person under the age of 21, the account will be immediately closed, all associated balances will be forfeited, and any personal data will be deleted in accordance with applicable data protection law.

If you believe that 36ji has inadvertently collected personal data from a person under the age of 21, please contact our Data Protection Officer immediately at the contact details provided in Section 16 so that appropriate remedial action can be taken without delay.

The operation of the 36ji Platform may involve the transfer of personal data to service providers located outside the Philippines — for example, cloud hosting providers or game software vendors operating from other jurisdictions.

Where such transfers occur, 36ji takes all reasonable steps to ensure that your personal data is afforded protection equivalent to that provided under the Philippine Data Privacy Act. These steps may include:

• Entering into contractual arrangements with overseas recipients that impose data protection obligations equivalent to those applicable in the Philippines;
• Transferring data only to countries or organizations that have been assessed as providing an adequate level of protection for personal data;
• Implementing technical safeguards such as encryption and pseudonymization to protect data in transit and at rest in offshore locations.

By using the 36ji Platform, you acknowledge and consent to such transfers to the extent they are necessary to provide the services you have signed up for.

The 36ji Platform may contain references or context mentions regarding third-party services such as payment providers or game studios. To the extent that any third-party services have independent privacy practices, those are governed by their own privacy policies and not by this document.

36ji is not responsible for the privacy practices or content of any third-party service or platform. We encourage you to review the privacy policy of any third-party service you interact with in connection with your use of the 36ji Platform, particularly payment providers such as GCash and Maya through which you conduct financial transactions.

36ji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made to this Policy, we will notify registered users through one or more of the following channels:

• Email notification sent to the registered email address on your 36ji account;
• SMS notification sent to your registered mobile number;
• A prominent notice displayed on the 36ji Platform upon your next login session.

The updated Privacy Policy will be published on this page with a revised "Last Updated" date at the top of the document. Your continued use of the 36ji Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.

If you do not agree with any changes to this Privacy Policy, you should discontinue use of the Platform and may request account closure by contacting our support team. We recommend bookmarking this page and checking it periodically, as even minor updates may affect how your data is processed.

For any privacy-related questions, concerns, requests to exercise your data subject rights, or to report a suspected privacy incident, please contact the 36ji Data Protection Officer using the following channels:

• Email: [email protected] — Please include "Privacy Request" or "Data Subject Rights" in the subject line for prioritized handling.
• Live Chat: Available within your 36ji account dashboard, 24 hours a day, 7 days a week. Our support agents can route privacy-related inquiries to the Data Protection Officer directly.

We commit to acknowledging receipt of your privacy-related communication within two (2) business days and providing a substantive response within thirty (30) calendar days, or such shorter period as required by the Philippine Data Privacy Act.

If you are not satisfied with 36ji's response to your privacy concern or data subject request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official website.