Your personal data belongs to you. This policy explains exactly what information 369ph collects, why we collect it, how we use it, and the rights you have under the Philippine Data Privacy Act of 2012.
369ph only collects personal data that is necessary for account registration, identity verification, payment processing, regulatory compliance, and the delivery of a safe gaming experience. We do not collect data for its own sake, and we do not sell your personal information to third parties for commercial marketing purposes.
All data transmitted between your device and the 369ph Platform is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine banks. Personal data stored within 369ph systems is encrypted at rest. Access to personally identifiable information is restricted to authorised personnel on a strict need-to-know basis.
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to access, correct, and erase your personal data held by 369ph, as well as the right to object to certain processing activities. You may also withdraw consent for marketing communications at any time. 369ph provides a clear process for exercising all of these rights.
As a PAGCOR-licensed operator, 369ph is required to share certain player data with the Philippine Amusement and Gaming Corporation for regulatory oversight, AML monitoring, and responsible gaming enforcement. Such disclosures are a legal obligation and are not discretionary. We will always inform you of regulatory data sharing requirements to the extent permitted by applicable law.
369ph may send you promotional communications about bonuses, new games, and platform updates where you have consented to receive them during registration or in Account Settings. You can withdraw marketing consent at any time by adjusting your notification preferences in Account Settings or by contacting 369ph support directly. Withdrawal of marketing consent does not affect essential account communications.
369ph does not retain your personal data indefinitely. Retention periods are determined by the purpose for which data was collected, legal obligations under Philippine law, and PAGCOR requirements. Account data is generally retained for five years following account closure. Transaction records required for AML compliance are retained for a minimum of seven years in accordance with the Anti-Money Laundering Act.
This Privacy Policy ("Policy") describes how 369ph ("the Company", "we", "us", "our") collects, uses, stores, and discloses personal data about individuals ("you", "Player", "User") who access or use the 369ph online gaming platform at https://369ph.org. This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. Please read this Policy in full. By registering a 369ph account, you acknowledge that you have read and understood this Policy.
This Policy applies to all personal data collected by 369ph in connection with the operation of the online gaming platform, customer support services, marketing communications, and regulatory compliance activities. It applies regardless of whether you access 369ph via a desktop browser, a mobile browser, or any other device.
This Policy does not apply to third-party websites, applications, or services that may be linked from the 369ph Platform. 369ph is not responsible for the privacy practices of third-party providers, including game software providers, payment processors, and identity verification services. We encourage you to review the privacy policies of any third party you interact with in connection with your use of the Platform.
For players based in the Philippines, the primary regulatory framework governing data privacy is the Philippine Data Privacy Act of 2012 (RA 10173) and the National Privacy Commission (NPC) regulations issued thereunder. 369ph is registered with the National Privacy Commission as required by law.
369ph is the data controller responsible for the personal data collected through the Platform. As data controller, 369ph determines the purposes and means of processing your personal data. 369ph has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. Contact details for the DPO are provided in Section 14 of this Policy.
Where 369ph engages third-party service providers to process personal data on its behalf — such as KYC verification providers, payment gateway operators, and cloud infrastructure providers — those providers act as data processors and are bound by written data processing agreements that require them to process data only on 369ph's instructions and to maintain appropriate security measures.
369ph collects personal data in the following categories, depending on how you interact with the Platform:
When you create a 369ph account, we collect: full legal name; date of birth; Philippine mobile number (+63); email address; chosen username; and encrypted password. This data is required to create and maintain your account.
To comply with PAGCOR regulations and Philippine AML law, we collect government-issued photographic identification documents. Accepted documents include: Philippine passport; SSS Unified Multi-Purpose ID (UMID); PhilSys National ID; driver's licence (LTO-issued); and Voter's ID. We may also collect a selfie photograph for biometric comparison where required by our identity verification provider.
We collect information about your payment transactions, including: GCash account number (registered in your name); Maya account number; bank account details (BPI, BDO, Metrobank, UnionBank) where used for deposit or withdrawal; and transaction amounts, dates, and reference numbers. We do not store full payment card numbers. Card payment tokenisation is handled by our PCI DSS-compliant payment processor.
We collect records of all gaming activity on the Platform, including: game sessions participated in; bet amounts placed and outcomes; session start and end times; bonus credits claimed and wagering progress; and net win/loss figures over any given period. This data is required for regulatory reporting, responsible gaming monitoring, and dispute resolution.
We automatically collect technical data when you access the Platform, including: IP address; device type and operating system; browser type and version; session timestamps; pages viewed and features used; and geolocation data (country/region level, derived from IP address). This data is used for security monitoring, fraud detection, and platform performance optimisation.
We retain records of communications between you and 369ph support, including live chat transcripts, email correspondence, and any documents submitted to support queries. These records are used for quality assurance, dispute resolution, and staff training purposes.
369ph collects only the personal data that is strictly necessary for the stated purposes. Where you contact us about a matter that does not require identity verification, we will not ask for your government ID. We apply data minimisation as a core principle of our privacy programme.
| Purpose | Data Used | Basis |
|---|---|---|
| Account creation and management | Registration data, device data | Contract performance |
| Identity and age verification (KYC) | KYC documents, registration data | Legal obligation (PAGCOR / RA 9160) |
| Processing deposits and withdrawals | Financial data, KYC data | Contract performance |
| Fraud prevention and AML monitoring | Financial data, gaming data, device data | Legal obligation / legitimate interest |
| Responsible gaming monitoring | Gaming activity data, account data | Legal obligation (PAGCOR RG requirements) |
| Customer support and dispute resolution | Communications data, account data | Contract performance / legitimate interest |
| Regulatory reporting to PAGCOR | Gaming data, financial data, KYC data | Legal obligation |
| Platform security and fraud detection | Device data, technical data, IP address | Legitimate interest |
| Marketing and promotions | Registration data, gaming preferences | Consent |
| Platform analytics and improvement | Aggregated, anonymised usage data | Legitimate interest |
Under the Philippine Data Privacy Act, 369ph processes personal data on the following legal bases:
369ph does not process special categories of personal data (e.g., health data, biometric data for identification purposes) except where strictly required by PAGCOR's identity verification standards, in which case explicit consent is obtained at the point of collection.
As a PAGCOR-licensed operator, 369ph is required to disclose certain player data to PAGCOR and, where applicable, the Anti-Money Laundering Council (AMLC) of the Philippines. Such disclosures are mandatory legal obligations and are not subject to your consent. They include regulatory gaming data submissions, suspicious transaction reports (STRs), and covered transaction reports (CTRs) as required under the Anti-Money Laundering Act.
369ph shares personal data with the following categories of service providers acting as data processors under binding agreements:
369ph does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial marketing purposes. Any data sharing with service providers is strictly limited to the purposes described in this Policy.
369ph may disclose personal data to law enforcement agencies, courts, or other government authorities in the Philippines where required by a valid legal process — including court order, subpoena, or lawful request from PAGCOR or the AMLC. Where legally permitted, 369ph will notify affected players of such requests before disclosure.
369ph retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to applicable legal retention obligations. The following retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be linked to an individual. Data retained in anonymised, aggregated form for analytics and platform improvement is not subject to the above retention limits.
369ph implements technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
While 369ph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You play a role in protecting your account by maintaining the confidentiality of your 369ph login credentials and reporting suspected unauthorised access immediately.
The 369ph Platform uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and analyse usage patterns. The categories of cookies used are:
You can control non-essential cookies via your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect certain personalisation features. Blocking strictly necessary cookies will prevent the Platform from functioning correctly. 369ph does not use third-party advertising cookies or cross-site tracking cookies that share your data with external advertising networks.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 369ph. To exercise any of these rights, contact 369ph's Data Protection Officer using the details in Section 14.
Request a copy of the personal data 369ph holds about you and information about how it is being used. Responses provided within 30 days.
Request correction of inaccurate or incomplete personal data. For most fields, corrections can be made directly in Account Settings.
Request deletion of your personal data where there is no lawful basis for continued retention. Subject to legal retention obligations (AML, PAGCOR).
Object to processing based on legitimate interests, including direct marketing. Marketing objections are actioned immediately upon receipt.
Receive a structured, machine-readable copy of the personal data you provided to 369ph and which was processed by automated means.
Lodge a complaint with the National Privacy Commission (NPC) if you believe 369ph has processed your personal data unlawfully.
The 369ph Platform is strictly restricted to individuals aged twenty-one (21) and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. 369ph does not knowingly collect personal data from individuals under the age of 21. If you believe that a minor has registered a 369ph account or that their personal data has been collected by the Platform, please contact 369ph support immediately.
Upon identification of an account held by an individual under 21 years of age, 369ph will: immediately suspend the account; refund any deposits that can be traced and verified as originating from the minor; delete personal data associated with the account to the extent not required to be retained by law; and report the matter to PAGCOR as required.
If you are under 21 years of age, you must not register on 369ph or provide your personal data to the Platform. Registration by an under-age individual constitutes a material breach of 369ph's Terms & Conditions and may have legal consequences.
Certain third-party service providers engaged by 369ph — including cloud infrastructure providers and game software developers — may process personal data in jurisdictions outside the Philippines. Where such cross-border data transfers occur, 369ph takes appropriate safeguards to ensure that the receiving party maintains a level of data protection consistent with the Philippine Data Privacy Act.
Such safeguards may include: binding contractual clauses requiring the overseas recipient to comply with Philippine data privacy standards; transfer only to jurisdictions recognised by the National Privacy Commission as providing adequate data protection; and, where required, obtaining your explicit consent to the transfer where no other safeguard applies.
369ph does not transfer your KYC identity documents or financial data to any jurisdiction outside the Philippines or the Philippines' recognised equivalent jurisdictions without your knowledge and without the appropriate contractual or regulatory safeguards in place.
369ph may update this Privacy Policy from time to time to reflect changes in legal requirements, PAGCOR regulatory guidance, or our data processing activities. Material changes — particularly changes that affect your rights or the purposes for which we use your data — will be communicated to registered Players via email and/or an in-platform notification at least fourteen (14) days before the revised Policy takes effect.
The "Last reviewed" date at the top of this Policy indicates when it was most recently updated. Your continued use of the Platform after the effective date of any revision constitutes your acknowledgment of the updated Policy. If you do not agree to a material change, you may close your account and request deletion of your data (subject to applicable retention obligations) by contacting 369ph support before the effective date.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a data privacy concern, please contact 369ph's Data Protection Officer:
If you are not satisfied with 369ph's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC complaint process is available through the NPC's official channels.
The National Privacy Commission is the government body responsible for administering and implementing the Philippine Data Privacy Act. If you believe your data privacy rights have been violated and 369ph has not adequately resolved your concern, you may file a complaint with the NPC. Contact details for the NPC are publicly available on the Philippine government's official information channels.
369ph handles your data with the care it deserves — in line with Philippine law, under PAGCOR oversight. Register in under 2 minutes, deposit via GCash, and explore 700+ games built for Filipino players.
21+ only · PAGCOR Regulated · Data handled under RA 10173 · NPC registered