Privacy Policy

1Personal Data We Collect

366ph collects the following categories of personal data from players and prospective players:

1.1 Identity and Contact Information

• Full legal name as it appears on your Philippine government-issued ID
• Date of birth (for age verification — you must be 21 or older)
• Registered Philippine mobile number
• Email address (if provided during registration)
• Residential address in the Philippines

1.2 Identity Verification Documents

• Copies of government-issued IDs (e.g., PhilSys National ID, passport, driver's license, UMID, SSS ID, voter's ID)
• Proof of address documents where required
• Source-of-funds documentation for large transactions as required under AMLA compliance

1.3 Financial and Transaction Data

• Deposit and withdrawal transaction records in Philippine Peso (PHP)
• Payment method identifiers (e.g., GCash mobile number, PayMaya account reference, bank account details for BPI, BDO, or Metrobank)
• Betting history, game activity records, and account balance information

1.4 Technical and Usage Data

• IP address and approximate geolocation (to verify Philippine residency and detect fraud)
• Device type, operating system, and browser information
• Session logs, login timestamps, and platform navigation data
• Cookie identifiers and similar tracking technologies (see Section 8)

1.5 Communications Data

• Records of your communications with 366ph customer support (chat logs, SMS, email)
• Feedback, complaints, and dispute records
• Marketing communication preferences and opt-in/opt-out records

2How We Collect Your Data

366ph collects personal data through the following means:

• Direct registration: Information you provide when creating your 366ph account, including your name, mobile number, and date of birth.
• Identity verification: Documents you submit in response to KYC (Know Your Customer) verification requests.
• Platform activity: Data generated automatically as you use the 366ph platform, including game play, deposits, withdrawals, and account settings changes.
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers.
• Technical systems: Automatically collected data including IP addresses, device identifiers, and session information via cookies and server logs.
• Customer support interactions: Information you provide when contacting 366ph support via chat, SMS, or email.
• Third-party verification services: Identity and fraud-check data from regulated third-party verification providers where required for compliance purposes.

3Purposes of Processing

366ph processes your personal data for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your 366ph player account; processing login and authentication.
Age & Identity Verification	Verifying that you are at least 21 years old and confirming your identity as required by Philippine law and PAGCOR regulations.
Payment Processing	Processing deposits and withdrawals in Philippine Peso via GCash, PayMaya, BPI, BDO, and Metrobank.
Regulatory Compliance	Complying with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
Fraud Prevention	Detecting and preventing fraudulent activity, account abuse, money laundering, and other prohibited conduct.
Customer Support	Responding to your inquiries, resolving disputes, and providing technical assistance.
Responsible Gaming	Monitoring gaming activity to identify problem gambling indicators and administering self-exclusion and limit-setting tools.
Marketing Communications	Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications.
Platform Improvement	Analysing usage patterns to improve the 366ph platform, game offerings, and user experience for Filipino players.

4Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 366ph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 366ph — including account creation, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5Sharing Your Personal Data

366ph does not sell your personal data. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other regulated Philippine payment processors, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Regulated third-party KYC and identity verification services used to confirm your identity and age in compliance with Philippine law.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulatory order.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform technology providers who process data on behalf of 366ph under strict data processing agreements.
• Professional advisers: Legal, accounting, and compliance advisers bound by professional confidentiality obligations.
• Law enforcement: Philippine law enforcement agencies where disclosure is required by a valid legal order or where necessary to prevent or investigate criminal activity.

All third parties with whom 366ph shares personal data are required to handle that data in accordance with applicable Philippine data protection law and 366ph's data processing standards.

6Data Retention

366ph retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA record-keeping requirements.
• Customer support records: Retained for three (3) years from the date of the last interaction, or longer if required for ongoing dispute resolution.
• Marketing consent records: Retained for the duration of your account and for three (3) years after account closure, to demonstrate compliance with consent requirements.
• Technical logs: Retained for up to twelve (12) months for security and fraud prevention purposes, unless longer retention is required for an ongoing investigation.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with 366ph's data disposal procedures.

7Data Security

366ph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption of personal data in transit (TLS/SSL) and at rest
• Access controls limiting personal data access to authorised 366ph personnel on a need-to-know basis
• Regular security assessments and vulnerability testing of the 366ph platform
• Multi-factor authentication for administrative access to systems containing personal data
• Staff training on data privacy and security obligations under the DPA 2012
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 366ph will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

While 366ph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your 366ph login credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

8Cookies and Tracking Technologies

366ph uses cookies and similar tracking technologies on the 366ph platform. Cookies are small text files stored on your device that help us provide a better experience and analyse platform usage.

8.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the 366ph platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalised experience on 366ph.
• Analytics cookies: Help us understand how Filipino players use the 366ph platform, which pages are visited most, and where technical issues occur. This data is aggregated and anonymised.
• Marketing cookies: Used to deliver relevant promotional content and track the effectiveness of 366ph marketing campaigns. These are only set with your consent.

8.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may affect the functionality of the 366ph platform and prevent you from accessing certain features, including your account. Disabling analytics or marketing cookies will not affect your ability to play on 366ph.

For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation. 366ph does not respond to browser "Do Not Track" signals at this time, but we respect your cookie preferences as set through our platform.

9Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 366ph:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed by 366ph, as set out in this Policy.
• Right to access: You may request a copy of the personal data 366ph holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data held by 366ph. For basic account details, you can update these directly in your account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 366ph's legal obligations to retain certain data under PAGCOR regulations and the AMLA.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 366ph's overriding legal obligations.
• Right to data portability: You may request that 366ph provide your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: If you believe that 366ph has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact 366ph's Data Protection Officer using the details provided in Section 11. 366ph will respond to all verified privacy rights requests within fifteen (15) business days, in accordance with NPC guidelines. We may need to verify your identity before processing your request to protect against unauthorised access to your personal data.

10Minors and Age Restriction

The 366ph platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing casino-style gambling. 366ph does not knowingly collect personal data from persons under the age of 21.

During registration, all players are required to confirm that they are at least 21 years of age and to provide a date of birth. 366ph may request documentary proof of age at any time. Where 366ph discovers or has reasonable grounds to believe that a player is under 21 years of age, the account will be immediately suspended, all pending bets will be voided, and any deposited funds will be returned to the payment source after identity verification.

If you are a parent or guardian and believe that a minor has registered an account on 366ph or provided personal data to 366ph without your consent, please contact our customer support team immediately at [email protected] so that we can take appropriate action.

11Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 366ph, please contact our Data Protection Officer:

• Data Protection Officer: 366ph Data Privacy Team
• Email: [email protected]
• Support Hours: 24 hours a day, 7 days a week, Philippine Standard Time

366ph aims to resolve all privacy-related inquiries and complaints within fifteen (15) business days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.

This Privacy Policy was last reviewed and updated in January 2026. 366ph reserves the right to update this Policy from time to time to reflect changes in our data processing practices or applicable Philippine law. Material changes will be communicated to registered players via SMS to the registered Philippine mobile number at least seven (7) days before taking effect. The current version of this Policy is always available at 366ph.net/privacy-policy.