36jl98 Casino – Privacy Policy

This Privacy Policy ("Policy") describes how 36jl98 Casino ("36jl98," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "Player") who access or use the 36jl98 website and gaming platform (the "Platform").

36jl98 is committed to protecting the privacy and personal data of all players in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC") of the Philippines. Where applicable, 36jl98 also observes internationally recognized data protection principles.

By registering an account on 36jl98, accessing the Platform, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the 36jl98 Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is 36jl98 Casino, operating the Platform accessible at https://36jl98.app.

As data controller, 36jl98 determines the purposes and means of processing your personal data. 36jl98 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the DPO are provided in Section 14 of this Policy.

36jl98 collects the following categories of personal data from players and prospective players:

3.1 Identity & Contact Data

• Full legal name as it appears on a government-issued identification document
• Date of birth
• Gender (where provided)
• Nationality and country of residence
• Residential address, including barangay, city or municipality, province, and postal code
• Mobile number
• Email address

3.2 Verification & KYC Data

• Copies of government-issued identification documents (e.g., PhilSys ID, passport, driver's license, SSS/GSIS card, voter's ID, PRC ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie or facial image for identity verification purposes
• Source of funds declarations where required by AML regulations

3.3 Financial & Transaction Data

• GCash or PayMaya account details (mobile number associated with the e-wallet)
• Bank account details for bank transfer transactions (account name, account number, bank name)
• Debit card details (card number, expiry date — stored in tokenized form only)
• Deposit and withdrawal history
• Transaction amounts, dates, and reference numbers

3.4 Gaming & Activity Data

• Game history, including games played, wager amounts, wins, and losses
• Session duration and login/logout timestamps
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type and version
• Unique device identifiers
• Platform access logs and error logs

3.6 Communications Data

• Records of communications between you and the 36jl98 support team, including live chat transcripts and email correspondence
• Survey responses and feedback submitted through the Platform

36jl98 collects personal data through the following means:

• Direct collection: Information you provide when registering your 36jl98 account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the 36jl98 Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment data from GCash, PayMaya, and banking partners in connection with your transactions.

36jl98 processes your personal data only for specified, legitimate purposes. The table below sets out the primary purposes for which we process your data and the corresponding legal basis under the Data Privacy Act of 2012:

Where 36jl98 relies on your consent as the legal basis for processing (e.g., for marketing communications), you have the right to withdraw that consent at any time by contacting the 36jl98 support team or updating your communication preferences in your account settings. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

36jl98 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors and e-wallet providers: GCash, PayMaya, and banking partners receive the minimum data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party service providers that assist 36jl98 in verifying player identities and screening against AML watchlists.
• Game software providers: Game providers may receive anonymized or pseudonymized session data necessary to deliver their games on the 36jl98 Platform.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers that support the operation of the 36jl98 Platform.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, and other competent Philippine authorities, where disclosure is required by law or court order.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by 36jl98 are required to process personal data only in accordance with 36jl98's instructions and applicable data protection laws. 36jl98 enters into data processing agreements with all relevant third parties to ensure appropriate safeguards are in place.

36jl98 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

Upon expiry of the applicable retention period, 36jl98 will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless further retention is required by a specific legal obligation or ongoing regulatory investigation.

36jl98 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 36jl98 Platform is encrypted using industry-standard SSL/TLS protocols.
• Data encryption at rest: Sensitive personal and financial data stored on 36jl98 servers is encrypted using AES-256 or equivalent encryption standards.
• Access controls: Access to personal data is restricted to authorized 36jl98 personnel and service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Regular security audits: 36jl98 conducts periodic vulnerability assessments and penetration testing to identify and remediate security weaknesses.
• Incident response: 36jl98 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, 36jl98 will notify the National Privacy Commission and affected players in accordance with the DPA and NPC regulations.
• Staff training: All 36jl98 personnel with access to personal data receive regular data privacy and security training.

The 36jl98 Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyze Platform usage. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in to your 36jl98 account and security cookies that help detect fraudulent activity. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to personalize your 36jl98 experience.
• Analytics cookies: Collect anonymized data about how players use the 36jl98 Platform — such as pages visited and time spent — to help us improve the Platform. This data does not identify you personally.
• Marketing cookies: Used only where you have given consent, to deliver relevant promotional content about 36jl98 offers and games.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 36jl98 Platform. For strictly necessary cookies, no opt-out is available as they are required for the Platform to operate.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 36jl98:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Policy.
• Right of access: You may request a copy of the personal data 36jl98 holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by 36jl98. You can update basic account information directly through your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 36jl98's legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 36jl98's overriding legitimate grounds.
• Right to data portability: You may request that 36jl98 provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the 36jl98 Data Protection Officer using the contact details in Section 14. 36jl98 will respond to all verified data subject requests within fifteen (15) business days, in accordance with NPC guidelines. We may require you to verify your identity before processing your request.

The 36jl98 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing casino-style gambling. 36jl98 does not knowingly collect personal data from individuals under the age of 21.

If 36jl98 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated data will be reviewed, and the data will be deleted to the extent permitted by law. Any winnings associated with an underage account will be forfeited.

If you are a parent or guardian and believe that your child under 21 has registered on the 36jl98 Platform, please contact us immediately at the details provided in Section 14 so that we can take appropriate action.

The 36jl98 Platform primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where 36jl98 uses cloud infrastructure or third-party service providers with operations in other countries.

Where such transfers occur, 36jl98 ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to process personal data to a standard equivalent to that required under the Data Privacy Act of 2012. 36jl98 will not transfer your personal data to a country that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate safeguards.

36jl98 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, 36jl98 will notify registered players via email or a prominent notice on the Platform. The "Last Updated" date at the top of this page will be revised to reflect the date of the most recent changes.

Your continued use of the 36jl98 Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how 36jl98 protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 36jl98, please contact our Data Protection Officer through the following channels: