Your privacy matters to 37ji. This Privacy Policy explains what personal data we collect from Filipino players, why we collect it, how we use and protect it, who we may share it with, and the rights you hold under Philippine law. Please read it carefully alongside our Terms & Conditions.
This Privacy Policy ("Policy") describes how 37ji Casino ("37ji", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "the Player", "the Data Subject") who access, register on, or use the 37ji Casino online gaming platform located at 37ji.club (the "Platform").
This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) ("DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC). It is also informed by the data governance requirements imposed on 37ji by PAGCOR as conditions of the 37ji operating license.
This Policy applies to all personal data collected through: the 37ji website at 37ji.club; account registration and verification (KYC) processes; financial transactions, including GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, PESONet, and 7-Eleven deposits and withdrawals; customer support communications; and any other interaction you have with 37ji.
By registering a 37ji account or continuing to use the Platform after this Policy's effective date, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein, where consent is the applicable legal basis.
For the purposes of the Philippine Data Privacy Act, 37ji Casino is the Personal Information Controller (PIC) in respect of the personal data collected from players using the Platform. As PIC, 37ji determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully, fairly, and transparently.
37ji has designated a Data Protection Officer (DPO) in accordance with the requirements of the DPA and the NPC. Enquiries relating to the exercise of your data privacy rights or concerns about how your personal data is handled by 37ji should be directed to the DPO via the contact details set out in Section 16 of this Policy.
Data Protection Officer: 37ji's DPO can be reached at [email protected]. Please mark your correspondence clearly as "Data Privacy — DPO" to ensure it is routed to the correct team. We will acknowledge all data privacy inquiries within 5 business days and provide a substantive response within 15 business days where possible.
37ji collects personal data through several channels and for distinct purposes. The categories of data we collect include:
A. Registration and Identity Data
When you create a 37ji account, we collect your full legal name, date of birth, email address, Philippine mobile phone number, and residential address. This information is required to create and manage your account, to verify your identity (KYC), and to confirm you meet the 21+ age requirement mandated by PAGCOR.
B. Identity Verification (KYC) Documents
To comply with PAGCOR licensing conditions and Philippine anti-money laundering (AML) regulations, 37ji requires submission of a valid government-issued photo ID. Accepted documents include Philippine Passport, Driver's License, SSS ID, UMID, PhilSys National ID, and PRC ID. We may also request supporting documentation such as proof of address or source of funds in cases where regulatory requirements or transaction thresholds make this necessary.
C. Financial and Transaction Data
We collect data relating to all financial transactions on your 37ji account, including deposit amounts, withdrawal requests, payment method details (e.g., the registered name and partial number associated with a GCash or PayMaya account), transaction timestamps, and transaction reference numbers. Full payment instrument credentials (e.g., complete bank account numbers, GCash PINs) are not stored by 37ji — these are handled directly by the respective payment provider.
D. Gaming Activity Data
We collect detailed records of your gaming activity on the Platform, including game sessions, bet amounts, win/loss outcomes, game titles played, session durations, bonus usage history, and responsible gaming tool settings (e.g., deposit limits you have configured).
E. Technical and Device Data
We automatically collect technical information when you access the Platform, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, session timestamps, and crash or error logs. This data is used for security monitoring, fraud prevention, and platform performance optimization.
F. Communications Data
When you contact 37ji customer support — via live chat, email, or any other channel — we retain records of those communications, including the content of messages, timestamps, and the resolution of any issues raised. This data is used to manage your support request and to improve our support quality.
Sensitive Personal Information: Government-issued ID documents submitted for KYC purposes constitute sensitive personal information under the DPA. 37ji processes these documents under strict access controls and retains them only for as long as required by PAGCOR licensing and AML regulations, as described in Section 9 of this Policy.
Data We Do Not Collect
37ji does not collect or store complete payment card numbers, CVV codes, online banking passwords, GCash or PayMaya PINs, or biometric data (such as fingerprints or facial recognition data). We do not collect data from minors — the Platform is strictly for individuals aged 21 and above.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, address | KYC / Age Verification Account Management |
| ID Documents | Passport, Driver's License, PhilSys ID | PAGCOR Compliance AML / Fraud Prevention |
| Contact Data | Email address, PH mobile number | Account Access 2FA Security Communications |
| Financial Data | Transaction amounts, payment method identifiers | Payment Processing AML Compliance |
| Gaming Activity | Bets, game sessions, win/loss history | Service Delivery Responsible Gaming Regulatory Reporting |
| Technical Data | IP address, browser, device type | Security Fraud Detection Platform Performance |
| Support Records | Chat logs, email correspondence | Issue Resolution Quality Improvement |
37ji uses your personal data for the following purposes:
Under the Philippine Data Privacy Act, 37ji processes your personal data on the following legal bases:
Your Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal. To withdraw consent for marketing communications, use the unsubscribe link in any marketing email or contact 37ji support directly.
The 37ji Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your login session, and to collect technical usage data as described in Section 3(E).
Types of Cookies Used
37ji does not use advertising tracking cookies or share cookie-derived data with advertising networks. The Platform does not display third-party advertisements.
You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using the Platform, including the 37ji login function.
37ji does not sell your personal data to third parties. We share personal data only in the specific circumstances described below, and only to the extent necessary for the stated purpose:
What We Will Never Do: 37ji will never sell your personal data to marketers, data brokers, or any commercial third party. We will never share your data with unauthorized parties, and no 37ji employee will request your personal data via informal channels such as social media, personal email, or messaging apps.
The primary data processing infrastructure for the 37ji Platform is located within a jurisdiction that provides an adequate level of data protection. Where technical service providers involved in Platform operations are based outside the Philippines — for example, certain cloud infrastructure or game delivery providers — 37ji implements contractual safeguards consistent with the requirements of the Philippine DPA and NPC regulations to protect your personal data during international transfers.
Specifically, 37ji ensures that any cross-border transfer of personal data is subject to one of the following safeguards: a binding data processing agreement with appropriate data protection clauses; verification that the recipient country's data protection laws provide a level of protection deemed adequate by the NPC; or specific derogations applicable under the DPA's implementing rules where adequate safeguards cannot otherwise be established.
37ji retains personal data for as long as is necessary to fulfill the purpose for which it was collected, to comply with legal and regulatory retention obligations, and to resolve disputes or enforce our agreements. The following retention periods apply:
On expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original data. Where anonymization is used, the resulting anonymized data set is no longer personal data under the DPA and may be retained for statistical or analytical purposes without time limitation.
37ji implements comprehensive organizational and technical security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or loss. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 37ji will notify the NPC within 72 hours of becoming aware of the breach in accordance with the DPA's mandatory breach notification requirements. Where the breach is likely to result in a high risk to affected individuals, 37ji will also notify affected players directly without undue delay.
As a Filipino data subject, the Data Privacy Act of 2012 grants you the following rights in respect of the personal data 37ji holds about you. These rights are enforceable and 37ji will not discriminate against you for exercising them.
Request a copy of the personal data 37ji holds about you and information about how it is being processed.
Request correction of inaccurate, incomplete, or outdated personal data held in your 37ji account.
Request deletion of personal data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
Object to processing based on legitimate interests or direct marketing, and withdraw consent where consent is the legal basis.
Request suspension of processing where data accuracy is contested or where processing is unlawful but you prefer blocking over erasure.
Request a copy of your personal data in a structured, machine-readable format for transfer to another data controller where technically feasible.
Lodge a complaint with the National Privacy Commission (NPC) if you believe 37ji has processed your data in violation of the Data Privacy Act.
Seek damages where a DPA violation has caused you harm, in accordance with the remedies available under Philippine law.
To exercise any of the above rights, please submit a written request to 37ji's Data Protection Officer at [email protected], clearly marked "Data Privacy Rights Request." We will acknowledge your request within 5 business days and provide a substantive response within 15 business days. In complex cases, we will notify you of any necessary extension and the reasons for it.
Identity verification may be required before 37ji can process a rights request, to ensure that data is not disclosed to, or rectified on the instructions of, unauthorized individuals.
The 37ji Platform is strictly not intended for individuals under 21 years of age. 37ji does not knowingly collect personal data from minors. Mandatory age verification (KYC) is performed for all new accounts to enforce the 21+ requirement imposed by PAGCOR and Philippine gaming law.
If 37ji becomes aware that personal data has been submitted by or collected in respect of a person under 21 years of age, that data will be immediately deleted, the account will be suspended, and the matter will be reported to PAGCOR in accordance with 37ji's regulatory obligations. Any deposits made from an underage account will be processed for return to the originating payment method.
21+ Only: If you are aware of a minor who has accessed or attempted to access the 37ji Platform, please notify us immediately at [email protected]. 37ji takes underage access attempts extremely seriously and will take all necessary steps in response.
With your consent, 37ji may send you promotional communications about new games, bonus offers, platform updates, and special events relevant to your 37ji account. Marketing communications are sent to your registered email address and, where opted in, to your registered Philippine mobile number via SMS.
Opting Out
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent will be processed within 5 business days. Please note that withdrawal of marketing consent does not affect the receipt of transactional communications — such as deposit confirmations, withdrawal notifications, password reset emails, and security alerts — which are sent on the basis of contractual necessity and cannot be disabled while your account is active.
The 37ji Platform integrates with third-party service providers to deliver certain features — including payment processing, KYC verification, game content delivery, and customer support tools. Where these third parties process personal data on 37ji's behalf as Personal Information Processors (PIPs) under the DPA, they do so under binding data processing agreements that require them to:
The 37ji website does not contain links to third-party websites. We are not responsible for the privacy practices of any entity whose content appears within integrated game content, and we recommend reviewing the privacy policies of any third-party service you use independently.
37ji reserves the right to update or amend this Privacy Policy at any time to reflect changes in Philippine law, NPC guidelines, PAGCOR regulatory requirements, our data processing practices, or the features of the Platform. All amendments are effective from the date posted on the Platform.
Where changes are material — meaning they significantly affect your rights or how your personal data is processed — 37ji will notify you via the email address registered to your account at least 14 days before the changes take effect, and will display a prominent notice on the Platform.
Your continued use of the 37ji Platform following the effective date of any amendment to this Policy constitutes your acknowledgment of the changes. If you do not agree to the amended Policy, you should cease use of the Platform and may close your account in accordance with the Terms & Conditions. See our Terms & Conditions for the account closure process.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 37ji, please contact our Data Protection Officer:
Complaints to the National Privacy Commission
If you are not satisfied with 37ji's response to a data privacy concern, or if you believe your rights under the Philippine Data Privacy Act have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC), the Philippine government authority responsible for administering and enforcing the DPA. Information on filing a complaint is available through the NPC's official government website.
NPC Complaint Process: The NPC accepts complaints from Filipino data subjects against both public and private entities. Before filing with the NPC, you are encouraged to first raise your concern directly with 37ji's DPO and allow us the opportunity to resolve it. The NPC generally requires evidence that you have exhausted the internal complaints process before accepting a formal complaint.
Policy Effective Date: This Privacy Policy is effective as of 1 January 2026. Players who registered prior to this date are subject to this Policy from its effective date. The version history of this Privacy Policy is maintained by the 37ji DPO and is available upon written request.
These are not policy statements — they are the operational commitments 37ji makes to every Filipino player whose personal data we hold.
All personal and financial data transmitted between your device and 37ji is encrypted using 256-bit SSL — the same standard used by Philippine banks including BPI and BDO. Your data is never transmitted in plain text.
37ji has appointed a DPO in compliance with the Philippine DPA. Your data privacy rights requests go directly to this officer — not a general support queue — and responses are committed within 15 business days.
37ji does not sell your personal data to marketers, advertisers, data brokers, or any commercial third party — ever. Your data is used solely to operate your account, comply with PAGCOR regulation, and keep the Platform secure.
All 37ji data processing activities are designed around the requirements of RA 10173 and NPC regulations. Filipino players have enforceable data rights — access, rectification, erasure, objection, portability — and 37ji is legally bound to honor them.
Marketing communications from 37ji are strictly opt-in and unsubscribable at any time via a single click. Transactional emails — withdrawal confirmations, security alerts — are separate and cannot be confused with marketing.
In the event of a data breach affecting your personal information, 37ji commits to notifying the NPC within 72 hours and notifying affected players directly where there is a high risk to your rights — as required by the DPA.
A platform that respects your privacy is one you can trust with your game. Join Filipino players across Manila, Cebu, Davao, and beyond who play at 37ji — PAGCOR-regulated, DPA-compliant, and genuinely built for you. 21+ only.