At 36ph, your privacy is not an afterthought — it is built into everything we do. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you hold as a 36ph player in the Philippines.
Six core privacy principles that guide every decision we make about your personal information.
All data transmitted between your device and the 36ph Platform is protected using industry-standard TLS encryption. Your login credentials, payment details, and personal information are never sent in plain text.
36ph does not sell, rent, or trade your personal data to third-party marketers or data brokers — ever. Your information is used solely to operate and improve the 36ph Platform and to comply with our legal obligations.
36ph processes personal data in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and the regulations issued by the National Privacy Commission (NPC) of the Philippines.
As a 36ph player, you have the right to access, correct, and request deletion of your personal data at any time. Our Data Privacy Officer is available to assist with all data-related requests promptly.
36ph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Data that is no longer needed is securely deleted or anonymized.
In the unlikely event of a personal data breach that poses a risk to your rights, 36ph will notify affected players and the National Privacy Commission within the timeframes required under Philippine law.
This Privacy Policy ("Policy") describes how 36ph ("36ph," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "Player," or "User") who access or use the 36ph Platform, including the website at https://36ph.app and the 36ph mobile application (collectively, the "Platform").
36ph is committed to protecting the privacy and security of your personal data in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines.
By registering for a 36ph account or otherwise using the Platform, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy. If you do not agree to this Policy, please discontinue use of the Platform immediately.
For the purposes of the Data Privacy Act of 2012 and this Policy, 36ph acts as the Personal Information Controller in respect of the personal data you provide when using the Platform. This means 36ph determines the purposes and means of processing your personal information.
36ph has appointed a Data Privacy Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO directly for any privacy-related concerns using the contact details provided in Section 15 of this Policy.
36ph collects the following categories of personal data in connection with your use of the Platform:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number, nationality | Yes — for KYC |
| Contact Data | Philippine mobile number, email address, residential address | Yes — for account |
| Financial Data | GCash number, bank account details, transaction history, deposit and withdrawal records | Yes — for payments |
| Gaming Data | Game history, wager amounts, win/loss records, session duration, bonus usage | Yes — for operations |
| Technical Data | IP address, device type, operating system, browser type, app version, login timestamps | Automatic |
| Usage Data | Pages visited, features used, click patterns, session duration on Platform | Automatic |
| Communications Data | Live chat transcripts, support ticket content, email correspondence with 36ph | When applicable |
| Responsible Gaming Data | Self-exclusion status, deposit limits set, session reminders configured | When applicable |
36ph does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive information is collected (such as government ID details), it is handled with heightened security measures.
36ph collects your personal data through the following means:
36ph processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your 36ph player account | Performance of contract |
| Verifying your identity and age (21+ requirement) | Legal obligation; performance of contract |
| Processing deposits and withdrawals in PHP | Performance of contract |
| Preventing fraud, money laundering, and other financial crime | Legal obligation; legitimate interest |
| Complying with PAGCOR regulatory requirements | Legal obligation |
| Providing customer support and resolving disputes | Performance of contract; legitimate interest |
| Sending transactional notifications (deposits, withdrawals, security alerts) | Performance of contract |
| Sending promotional communications and bonus offers | Consent (you may withdraw at any time) |
| Improving Platform features and user experience | Legitimate interest |
| Administering responsible gaming tools and self-exclusion | Legal obligation; legitimate interest |
Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent for marketing communications, you may update your notification preferences in your account settings or contact our support team.
36ph does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
The 36ph Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyze Platform usage. The types of cookies we use are as follows:
You can manage your cookie preferences at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the 36ph Platform. For detailed information on the specific cookies we use, please refer to our Cookie Notice, which is accessible from the Platform footer.
36ph implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
36ph retains your personal data for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where anonymization is not technically feasible, data is archived with restricted access pending secure deletion.
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 36ph. You may exercise any of these rights by contacting our Data Privacy Officer using the details in Section 15:
Request a copy of the personal data 36ph holds about you and information about how it is being processed.
Request correction of any inaccurate or incomplete personal data we hold about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
Lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.
The 36ph Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing online gaming. 36ph does not knowingly collect personal data from persons under the age of 21.
If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any winnings accrued by an underage player will be forfeited in accordance with our Terms & Conditions.
If you are a parent or guardian and believe that a minor in your care has registered on the 36ph Platform, please contact us immediately using the details in Section 15 so that we can take prompt action.
In the course of operating the 36ph Platform, your personal data may be transferred to and processed in countries other than the Philippines — for example, where our cloud infrastructure providers or game content partners maintain their servers. Such transfers may include countries in Southeast Asia, East Asia, or other regions.
Where personal data is transferred outside the Philippines, 36ph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:
You may request further information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting our Data Privacy Officer.
36ph processes certain personal data specifically in connection with our responsible gaming program. This includes data relating to your self-exclusion status, deposit and loss limits, session time configurations, and any communications with our responsible gaming support team.
This data is processed for the following purposes:
Responsible gaming data is treated with the highest level of confidentiality and is not used for marketing purposes. If you have activated self-exclusion, your data will be retained for the duration of the exclusion period and for the minimum period required by law thereafter.
36ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
When material changes are made to this Policy, 36ph will notify registered players via the mobile number or email address on file, or by displaying a prominent notice on the Platform, at least seven (7) days before the changes take effect — except where immediate amendment is required by law or a directive from the National Privacy Commission or another competent authority.
Your continued use of the 36ph Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. We encourage you to review this Policy periodically to stay informed about how 36ph protects your personal data.
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 36ph, please contact our Data Privacy Officer through the following channels:
36ph aims to acknowledge all data privacy requests within five (5) business days and to resolve them within fifteen (15) business days. For complex requests, we will keep you informed of progress and any expected delays.
If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.
Now that you know how 36ph protects your privacy, join hundreds of thousands of Filipino players who trust us with their gaming experience. Fast GCash payouts, 200+ live tables, and a platform built with your security in mind. Must be 21 or older.
⚠️ Gambling is addictive. Know when to stop. | 21+ Only | Play Responsibly | PAGCOR Regulated