37ji Casino Privacy Policy

1. Who We Are – Data Controller

37ji Casino is the data controller responsible for the personal data you provide when using the 37ji platform. Our Data Protection Officer ("DPO") oversees compliance with the Data Privacy Act and can be contacted via the details set out in Section 13 of this Policy. All data processing activities described in this Policy are conducted by 37ji or its authorized data processors operating under data processing agreements that impose equivalent data protection obligations.

2. Personal Data We Collect

37ji collects personal data in the following categories:

2.1 Registration and Identity Data

• Full legal name, date of birth, and nationality.
• Valid government-issued identification number and document type (for KYC verification).
• Email address and Philippine mobile number.
• Residential address including city and province.

2.2 Financial Data

• GCash or PayMaya account identifiers linked to your 37ji account.
• Bank account details for BPI, BDO, or Metrobank withdrawals (account name and number only — 37ji does not store full card numbers or CVV codes).
• Transaction history including deposit amounts, withdrawal amounts, dates, and payment method used.

2.3 Gaming and Activity Data

• Game session logs, bet history, win/loss records, and wagering patterns.
• Sports betting selections and outcome data.
• Bonus and promotion usage history.
• Responsible gaming tool settings including deposit limits and self-exclusion status.

2.4 Technical and Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Session timestamps, login history, and authentication logs.
• Cookie identifiers and similar tracking technologies (see Section 6).

2.5 Communications Data

• Records of live chat conversations with 37ji support agents.
• Email correspondence sent to or received from 37ji.
• Feedback and survey responses submitted voluntarily.

3. How We Use Your Personal Data

37ji processes your personal data for the following purposes:

4. Legal Basis for Processing

37ji processes personal data on the following legal bases under the Data Privacy Act of 2012:

1. Contractual Necessity: Processing required to perform our obligations under the 37ji Terms & Conditions, including account management, payment processing, and game delivery.
2. Legal Obligation: Processing required to comply with Philippine law, including AMLA, PAGCOR regulations, tax obligations, and NPC requirements.
3. Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving 37ji services, where such interests are not overridden by your rights.
4. Consent: Processing for direct marketing communications. You may withdraw consent at any time by contacting 37ji support or using the unsubscribe mechanism in marketing emails.

5. Disclosure and Data Sharing

37ji does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and their operating partners, to facilitate deposits and withdrawals.
• Game content providers: Third-party casino game suppliers and live dealer studio operators who deliver games on the 37ji platform, limited to session and outcome data.
• Identity verification providers: KYC and document verification service providers operating under data processing agreements.
• Regulatory authorities: PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where disclosure is required by law or regulatory directive.
• Law enforcement: Philippine National Police, National Bureau of Investigation, or other competent authorities, where required by court order or applicable law.
• IT service providers: Cloud hosting, data storage, security, and analytics providers operating under data processing agreements with 37ji.

All third-party recipients who process personal data on behalf of 37ji are contractually required to maintain confidentiality and implement security measures equivalent to those maintained by 37ji.

6. Cookies and Tracking Technologies

37ji uses cookies and similar technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit 37ji.vip. 37ji uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled.
• Performance Cookies: Collect anonymized data about how players use the platform — which pages are visited, error messages encountered, and how users navigate the site. This data helps 37ji improve platform performance.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics Cookies: Used to understand aggregate player behavior for product improvement. Data collected through analytics cookies does not identify individual users.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair platform functionality. Disabling other cookie categories will not prevent you from accessing 37ji.

7. Data Retention

37ji retains personal data for as long as necessary to fulfill the purposes described in this Policy, including compliance with legal and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of the active account plus a minimum of 5 years following account closure, as required by AMLA and PAGCOR regulations.
• Financial transaction records: Minimum 5 years from the date of the transaction, in compliance with AMLA.
• Gaming session and bet history: Minimum 3 years from date of activity.
• Customer support communications: 2 years from the date of the most recent communication in a thread.
• Marketing consent records: Retained until consent is withdrawn plus 1 year.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with 37ji's data retention schedule and NPC guidelines.

8. Data Security

37ji implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 37ji's servers.
• Encryption of sensitive data at rest, including financial identifiers and authentication credentials.
• Role-based access controls limiting employee access to personal data to those with a verified need.
• Multi-factor authentication requirements for 37ji staff accessing player data systems.
• Regular security audits, penetration testing, and vulnerability assessments.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that poses a real risk of serious harm to affected individuals, 37ji will notify the NPC and affected players within the timeframes prescribed by the Data Privacy Act and its implementing rules.

9. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by 37ji:

1. Right to be Informed: The right to be notified of how your personal data is being processed, as set out in this Policy.
2. Right of Access: The right to obtain a copy of the personal data 37ji holds about you, along with information about how it is processed.
3. Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update certain information directly through your 37ji account settings.
4. Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is unlawful, the data is no longer necessary for its original purpose, or you have withdrawn consent — subject to overriding legal retention obligations.
5. Right to Object: The right to object to processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time.
6. Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible.
7. Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact 37ji's Data Protection Officer using the contact details in Section 13. 37ji will respond to verified requests within 15 calendar days, or such shorter period as may be required by applicable NPC guidelines.

10. Minors and Age Restrictions

The 37ji platform is strictly intended for persons aged 21 years and above. 37ji does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the 37ji registration process. If 37ji discovers that a minor has provided personal data or created an account, that account will be immediately suspended, any funds held in the account will be returned to the source payment method, and the personal data of the minor will be deleted without undue delay in accordance with applicable law.

If you are a parent or guardian and believe that a minor in your care has created a 37ji account, please contact 37ji support immediately at [email protected].

11. International Data Transfers

37ji's primary data processing activities are conducted within the Philippines. Where personal data is transferred to service providers located outside the Philippines (for example, cloud infrastructure providers), 37ji ensures that such transfers are conducted in accordance with the Data Privacy Act and NPC guidelines, including through the use of standard contractual clauses or equivalent data protection mechanisms approved by the NPC. 37ji will not transfer your personal data to any third country or jurisdiction without ensuring that adequate data protection safeguards are in place.

12. Changes to This Privacy Policy

37ji reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page. When material changes are made, 37ji will notify registered players by email to the address on file and/or via a prominent notice on the 37ji platform. Continued use of the platform following notification of changes constitutes your acceptance of the revised Policy.

13. Contact and Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the exercise of your data subject rights, please contact 37ji's Data Protection Officer:

Data Protection Officer – 37ji Casino
Email: [email protected]
Available: 24 hours a day, 7 days a week via on-site live chat or email.

You also have the right to file a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. Information about the NPC's complaint process is available through official Philippine government channels.