Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, processing, storage, and disclosure of personal information by 3636jl Casino ("3636jl," "we," "us," or "our"), a PAGCOR-licensed online gaming operator accessible through the website https://3636jl.cam. This Policy applies to all users ("you," "Player," or "User") who access our platform, create accounts, or utilize our gaming services.

By registering an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any provision herein, you must immediately cease using our services and refrain from providing any personal information.

This Policy is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all issuances of the National Privacy Commission (NPC) of the Philippines. We are committed to protecting your privacy rights and ensuring the confidentiality, integrity, and availability of your personal data.

2. Data Controller and Contact Information

3636jl Casino acts as the data controller for all personal information collected through our platform. For any inquiries, concerns, or requests related to data privacy, you may contact our Data Protection Officer (DPO) through the following channels:

• Email: [email protected]
• Customer Support: Available 24/7 via live chat on our website
• Written Correspondence: Addressed to Data Protection Officer, 3636jl Casino

We are committed to responding to all privacy-related inquiries within fifteen (15) business days from the date of receipt.

3. Categories of Personal Information We Collect

In order to provide our gaming services, process transactions, and comply with legal and regulatory obligations, 3636jl Casino collects the following categories of personal information:

3.1 Information You Provide Directly

• Identity Information: Full legal name, date of birth, gender, nationality, government-issued identification numbers (Philippine passport, driver's license, UMID, PhilID)
• Contact Information: Residential address, email address, mobile phone number
• Account Credentials: Username, password, security questions and answers
• Financial Information: Bank account details, e-wallet account information (GCash, Maya, GrabPay), payment card details, transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued IDs, proof of address (utility bills, bank statements), selfies or photographs for identity verification
• Communication Records: Customer support inquiries, chat transcripts, email correspondence, feedback and complaints

3.2 Information Collected Automatically

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers
• Usage Data: Pages visited, games played, betting patterns, session duration, click-through rates, navigation paths
• Location Data: Geographic location derived from IP address (used to verify Philippine residency and comply with geo-restriction requirements)
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, pixel tags, and similar tracking technologies

3.3 Information from Third Parties

• Payment Processors: Transaction verification data from GCash, Maya, banks, and other payment service providers
• Identity Verification Services: Information obtained from third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) verification providers
• Publicly Available Sources: Information obtained from public records, sanctions lists, politically exposed persons (PEP) databases, and adverse media screening services

4. Purposes of Data Processing

3636jl Casino collects and processes personal information for the following legitimate purposes:

Purpose	Legal Basis
Account registration and user authentication	Contractual necessity
Processing deposits, withdrawals, and financial transactions	Contractual necessity
Identity verification and KYC/AML compliance	Legal obligation
Age verification to ensure compliance with 21+ age restriction	Legal obligation
Compliance with PAGCOR licensing requirements and gaming regulations	Legal obligation
Fraud detection, prevention, and security monitoring	Legitimate interest
Customer support and dispute resolution	Contractual necessity
Marketing communications and promotional offers (with consent)	Consent
Platform improvement and user experience optimization	Legitimate interest
Responsible gaming monitoring and self-exclusion enforcement	Legal obligation

5. Legal Bases for Data Processing

We process personal information only when we have a valid legal basis under the Data Privacy Act of 2012. The legal bases we rely upon include:

• Consent: You have provided explicit consent for specific processing activities, such as receiving marketing communications
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you as a registered user of 3636jl Casino
• Legal Obligation: Processing is required to comply with Philippine laws, PAGCOR regulations, AML/CFT requirements, and court orders
• Legitimate Interest: Processing is necessary for our legitimate business interests (such as fraud prevention, platform security, and service improvement) and does not override your fundamental rights and freedoms

6. Data Sharing and Disclosure

3636jl Casino does not sell, rent, or trade your personal information to third parties for marketing purposes. However, we may share your data with the following categories of recipients for legitimate business and legal reasons:

6.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya, banks, InstaPay, PESONet, and other financial institutions for transaction processing
• Identity Verification Services: Third-party KYC/AML providers to verify your identity and prevent fraud
• Cloud Hosting Providers: Secure data storage and server hosting services
• Customer Support Platforms: Live chat software, ticketing systems, and CRM tools
• Marketing and Analytics Providers: Email service providers, analytics platforms (only with your consent)

All service providers are contractually bound to protect your personal information and use it only for the purposes we authorize.

6.2 Regulatory and Law Enforcement Authorities

We may disclose personal information to government agencies, regulatory bodies, and law enforcement authorities when required by law, including:

• Philippine Amusement and Gaming Corporation (PAGCOR)
• Anti-Money Laundering Council (AMLC)
• Bureau of Internal Revenue (BIR)
• National Privacy Commission (NPC)
• Courts and judicial authorities pursuant to valid court orders or subpoenas
• Law enforcement agencies in connection with criminal investigations

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of such transfer and ensure that the receiving party adheres to equivalent data protection standards.

7. International Data Transfers

While 3636jl Casino primarily operates within the Philippines, certain service providers (such as cloud hosting and security services) may be located outside the Philippines. In such cases, we ensure that appropriate safeguards are in place, including:

• Contractual data protection clauses based on NPC-approved standard contractual clauses
• Verification that the receiving country provides adequate data protection standards comparable to the Philippine Data Privacy Act
• Binding corporate rules and compliance certifications of service providers

We will obtain your consent before transferring sensitive personal information (such as biometric data) to countries without adequate data protection laws.

8. Data Security Measures

3636jl Casino implements robust technical, organizational, and administrative safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data in transit is encrypted using SSL/TLS protocols (minimum 256-bit encryption). Sensitive data at rest is encrypted using AES-256 encryption
• Access Controls: Role-based access controls (RBAC) ensure that only authorized personnel can access personal information on a need-to-know basis
• Two-Factor Authentication: Multi-factor authentication (MFA) is mandatory for employee access to sensitive systems
• Firewalls and Intrusion Detection: Advanced firewall protection, intrusion detection systems (IDS), and intrusion prevention systems (IPS) monitor and block malicious activity
• Regular Security Audits: Quarterly vulnerability assessments, penetration testing, and security audits by independent third parties
• Employee Training: Mandatory data privacy and security training for all employees handling personal information
• Incident Response Plan: Documented data breach response procedures to ensure prompt detection, containment, and notification

While we employ industry-leading security measures, no system is completely immune to cyberattacks. We continuously monitor and update our security protocols to address emerging threats.

9. Data Retention and Deletion

3636jl Casino retains personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Our retention periods are as follows:

• Active Accounts: Personal information is retained for the duration of your active account plus five (5) years after account closure to comply with PAGCOR record-keeping requirements
• Transaction Records: Financial transaction data is retained for seven (7) years in compliance with Philippine AML regulations and BIR tax requirements
• KYC Documentation: Identity verification documents are retained for five (5) years after account closure
• Communication Records: Customer support records and correspondence are retained for three (3) years
• Marketing Consent Records: Consent records are retained until you withdraw consent, plus an additional two (2) years for audit purposes

After the applicable retention period expires, personal information is securely deleted or anonymized in accordance with data protection best practices. You may request early deletion of your personal data, subject to our legal and regulatory obligations.

10. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

10.1 Right to Be Informed

You have the right to be informed about the collection, use, and disclosure of your personal data. This Privacy Policy fulfills that obligation.

10.2 Right to Access

You have the right to request a copy of all personal information we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within fifteen (15) business days of your request.

10.3 Right to Correction

You have the right to request correction of inaccurate, incomplete, or outdated personal information. You may update most information directly through your account settings, or contact our support team for assistance.

10.4 Right to Erasure (Right to Be Forgotten)

You have the right to request deletion of your personal information when: (i) it is no longer necessary for the purposes for which it was collected; (ii) you withdraw consent and there is no other legal basis for processing; (iii) the data has been unlawfully processed; or (iv) erasure is required by law.

Please note that certain information must be retained for legal and regulatory compliance, and immediate deletion may not always be possible.

10.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes. You may unsubscribe from marketing communications at any time by clicking the "unsubscribe" link in promotional emails or adjusting your communication preferences in your account settings.

10.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another data controller without hindrance.

10.7 Right to Lodge a Complaint

You have the right to lodge a complaint with the National Privacy Commission if you believe your data privacy rights have been violated. Contact details for the NPC:

• Website: www.privacy.gov.ph
• Email: [email protected]
• Address: 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto St., Pasay City, Metro Manila

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We may require identity verification before processing your request to ensure the security of your personal information.

11. Cookies and Tracking Technologies

3636jl Casino uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that allows us to recognize your browser or device.

11.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, authentication, and security. These cookies cannot be disabled without affecting core features
• Performance Cookies: Collect anonymous information about how users interact with our platform to improve performance and user experience
• Functionality Cookies: Remember your preferences (such as language settings) to provide a more personalized experience
• Marketing Cookies: Track your activity across websites to deliver targeted advertisements (only with your consent)

11.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling certain cookies may limit your ability to use some features of our platform. For more information about cookie management, visit www.allaboutcookies.org.

12. Children's Privacy

3636jl Casino services are strictly intended for individuals aged 21 years and above. We do not knowingly collect personal information from minors under the age of 21. If we become aware that a minor has provided personal information, we will immediately delete such information and terminate the associated account.

If you are a parent or guardian and believe your child has provided personal information to 3636jl Casino, please contact us immediately at [email protected] so we can take appropriate action.

13. Updates to This Privacy Policy

3636jl Casino reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to registered users
• Prominent website banner or pop-up notification
• In-app notifications for mobile users

We encourage you to review this Privacy Policy periodically. The "Effective Date" at the top of this document indicates the most recent revision. Your continued use of 3636jl Casino after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Information and Questions

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• 24/7 Live Chat: Available through our website
• Customer Support Hotline: Available during business hours

We are committed to addressing all privacy-related inquiries promptly and transparently. Your trust and confidence are paramount to us.