Privacy Policy

1. Who We Are (Data Controller)

2026ph3, operating through the website 2026ph3.org (hereinafter "2026ph3", "we", "us", "our"), is the data controller responsible for the personal information processed under this Privacy Policy. 2026ph3 operates as an online casino and sports betting platform directed at players in the Republic of the Philippines.

For all privacy-related matters, you may contact our Data Protection Officer (DPO) at [email protected]. Correspondence directed to the DPO will be treated with priority and confidentiality.

2. Information We Collect

2026ph3 collects personal information through two primary means: information you provide directly, and information collected automatically through your use of the platform.

Information You Provide:

• Registration data: Full legal name, date of birth, Philippine mobile number, email address, and chosen password.
• KYC / identity verification documents: Government-issued Philippine ID (e.g., PhilSys card, passport, LTO driver's license, UMID, PRC ID, Voter's ID), photograph or selfie where required for liveness verification.
• Payment information: GCash account number, Maya account details, bank account numbers (BPI, BDO, Metrobank, etc.) used for deposits and withdrawals. 2026ph3 does not store full payment card numbers.
• Communication records: Content of live chat sessions, emails sent to [email protected], and feedback submissions.
• Responsible gaming declarations: Self-exclusion requests, deposit limit settings, and cooling-off period elections.

Information Collected Automatically:

• IP address and approximate geolocation (province/city level);
• Device type, operating system, and browser information;
• Session timestamps, pages visited, and navigation path on 2026ph3.org;
• Game activity logs: games played, wager amounts, outcomes, and session duration;
• Cookie identifiers and similar tracking technologies (see Section 6).

3. How We Use Your Personal Information

2026ph3 uses the personal information it collects for the following purposes:

• Account creation and management: Registering your 2026ph3 account, verifying your identity (KYC), and maintaining your player profile;
• Service delivery: Processing deposits and withdrawals, recording game outcomes, managing bonus entitlements, and delivering the full 2026ph3 platform experience;
• Regulatory compliance: Fulfilling age verification obligations (21+ requirement), anti-money laundering (AML) reporting, and any other obligations under applicable Philippine gaming and financial regulations;
• Fraud prevention and security: Detecting unauthorized account access, identifying suspicious financial activity, and protecting the integrity of the 2026ph3 platform;
• Customer support: Responding to your inquiries, resolving disputes, and processing your responsible gaming requests (e.g., self-exclusion activations);
• Marketing communications: Sending promotional emails, SMS alerts, and in-platform notifications about bonuses, new games, and events — only where you have consented or where we have a legitimate interest, and always with a clear opt-out mechanism;
• Platform improvement: Analysing aggregate usage data to improve game selection, navigation, payment flows, and overall platform performance.

4. Legal Basis for Processing

In accordance with the Philippine Data Privacy Act of 2012 (RA 10173), 2026ph3 processes your personal information on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations to you under the 2026ph3 Terms & Conditions — including account registration, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws — including AML obligations under the AMLA, age verification requirements, and regulatory reporting to relevant gaming authorities.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics — where our legitimate interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and optional data uses where we have obtained your explicit consent. You may withdraw consent at any time by contacting [email protected].

5. Data Sharing & Third Parties

2026ph3 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We share personal data only in the following limited circumstances:

• Payment processors: GCash (GXI), Maya (Voyager Innovations), InstaPay-connected banks, and other payment partners receive the minimum data necessary to process your transactions. These parties are bound by their own privacy obligations under Philippine law.
• KYC and identity verification providers: Third-party document verification services process your government ID data on our behalf to complete age and identity checks. These providers are contractually bound to process data solely for KYC purposes.
• Game software providers: Game engines and live dealer studio providers receive session data and game outcome logs necessary to operate the games. No directly identifying personal data (e.g., name, ID number) is shared with game providers beyond what is technically necessary.
• Regulatory and law enforcement authorities: Where required by Philippine law — including mandatory AML reporting to the AMLC and responses to valid legal process — 2026ph3 will disclose information to the appropriate authorities.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by 2026ph3, subject to professional confidentiality obligations.

6. Cookies & Tracking Technologies

2026ph3.org uses cookies and similar technologies to operate the platform, remember your preferences, and understand how players use the site. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. These cannot be opted out of while using the platform.
• Functional Cookies: Remember your preferences such as language, last-played game, and responsible gaming settings between sessions.
• Analytics Cookies: Aggregate, anonymised data about how players navigate 2026ph3.org, which pages are most visited, and where technical errors occur. This data helps us improve the platform.
• Marketing Cookies: Used to track whether promotional communications have led you to the platform, and to personalise bonus offers where you have consented to personalised marketing.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 2026ph3 platform.

7. Data Retention

2026ph3 retains personal information for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account data and KYC documents: Retained for a minimum of 5 years from account closure, in compliance with AML record-keeping requirements under Philippine law.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction.
• Game activity logs: Retained for 2 years from the date of the activity.
• Customer support communications: Retained for 2 years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus 1 year for compliance evidence purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an individual.

8. Data Security

2026ph3 implements appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 2026ph3.org;
• Encryption at rest for sensitive data categories including KYC documents and payment credentials;
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their function;
• Regular security audits and penetration testing of the 2026ph3 platform infrastructure;
• Multi-factor authentication requirements for all 2026ph3 internal systems that process personal data.

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, 2026ph3 will notify you and the National Privacy Commission (NPC) within the timeframes prescribed by RA 10173 and its IRR.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal information held by 2026ph3:

• Right to be Informed: You have the right to know what personal data 2026ph3 collects about you, how it is used, and with whom it is shared — as set out in this Privacy Policy.
• Right of Access: You may request a copy of the personal data 2026ph3 holds about you at any time. We will provide this within 15 business days of a verified request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. Most account details can be updated directly from your 2026ph3 account settings; KYC data corrections require re-submission of updated documents.
• Right to Erasure or Blocking: You may request deletion or blocking of personal data that is incomplete, outdated, false, unlawfully obtained, or no longer necessary for the purpose for which it was collected — subject to 2026ph3's legal retention obligations.
• Right to Data Portability: You may request your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Lodge a Complaint: If you believe 2026ph3 has processed your personal data in violation of RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our DPO at [email protected]. We will respond to all rights requests within 15 business days and may require identity verification before processing requests.

10. Children & Minors

The 2026ph3 platform is strictly for persons aged 21 years and older. 2026ph3 does not knowingly collect personal information from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.

If 2026ph3 becomes aware that personal information has been collected from a person under 21 years of age, such information will be deleted immediately and the associated account terminated. If you are a parent or guardian and believe that a minor has registered a 2026ph3 account, please notify us immediately at [email protected].

11. Cross-Border Data Transfers

2026ph3 is a platform directed at Filipino players, and our primary data processing infrastructure is located in or managed for the Philippine market. However, certain third-party service providers — including game software providers and cloud infrastructure vendors — may process data in jurisdictions outside the Philippines.

Where personal data is transferred internationally, 2026ph3 ensures that adequate safeguards are in place consistent with the requirements of RA 10173, including contractual clauses and data processing agreements that require the recipient to apply data protection standards equivalent to those applicable in the Philippines.

12. Amendments to This Privacy Policy

2026ph3 reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email or a prominent notice on the platform at least 7 days before the changes take effect.

Your continued use of the 2026ph3 platform after the effective date of any amended Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this page periodically. The "Last Updated" date at the top of this page reflects the most recent revision.

13. Contact & Data Protection Officer

For all privacy-related inquiries, data rights requests, or concerns about 2026ph3's handling of your personal information, please contact our Data Protection Officer:

• Email (DPO): [email protected] — mark your subject line "DPO / Privacy Request"
• Live Chat: Available 24/7 on the 2026ph3 website — ask to be connected to the privacy team
• Response Time: All privacy requests acknowledged within 2 business days; substantive response within 15 business days

You also have the right to file a complaint with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights under RA 10173 have been violated.