Privacy Policy of 3dloto Gaming Platform

Last Updated: January 15, 2026

1. Introduction and Scope

This Privacy Policy applies to all users of the 3dloto online gaming platform, including registered players, visitors, and individuals who interact with our services through any channel. 3dloto operates in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, the General Data Protection Regulation (GDPR) where applicable, and other relevant data protection laws and regulations.

As the data controller, 3dloto determines the purposes and means of processing your personal data. This Privacy Policy should be read in conjunction with our Terms & Conditions and other policies governing the use of our platform. By creating an account or using the 3dloto platform, you acknowledge that you have read, understood, and agree to the data practices described herein.

2. Information We Collect

2.1 Personal Identification Information

When you register for a 3dloto account, we collect personal identification information necessary to verify your identity, ensure compliance with legal requirements, and provide our services. This information includes:

• Full legal name as it appears on government-issued identification
• Date of birth to verify you meet the minimum age requirement of twenty-one (21) years
• Gender
• Nationality and country of residence
• Government-issued identification numbers (e.g., Philippine passport number, driver's license number, SSS number, or other acceptable forms of identification)
• Residential address including street, city, province, and postal code
• Email address for account communications and notifications
• Mobile phone number for verification and customer support

2.2 Financial and Transaction Information

To process deposits, withdrawals, and other financial transactions, we collect and process the following financial information:

• Payment method details (GCash account number, bank account information, e-wallet identifiers)
• Transaction history including deposit amounts, withdrawal requests, dates, and times
• Banking information such as bank name, account holder name, and account number
• Payment card information (card number, expiration date, CVV) processed through secure third-party payment processors in compliance with PCI-DSS standards
• Cryptocurrency wallet addresses if applicable

We do not store complete payment card information on our servers. Payment processing is handled by certified third-party payment service providers who maintain their own security and privacy standards.

2.3 Gaming Activity and Behavioral Data

To improve our services, detect fraud, ensure responsible gaming, and comply with regulatory requirements, we collect information about your gaming activity and platform usage:

• Gaming history including games played, bets placed, stakes, winnings, and losses
• Login and logout times, session duration, and frequency of platform access
• Device information including IP address, device type, operating system, browser type and version, and unique device identifiers
• Geolocation data to verify you are physically located within authorized jurisdictions
• Browsing behavior on the platform including pages visited, links clicked, and features used
• Customer support interactions including chat transcripts, email correspondence, and phone call recordings
• Preferences and settings you configure within your account

2.4 Verification Documents

As part of our Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance procedures, we may request and collect copies of the following verification documents:

• Government-issued photo identification (passport, driver's license, national ID card)
• Proof of address documents (utility bills, bank statements, government correspondence dated within the last three months)
• Proof of payment method ownership (bank statement, screenshot of e-wallet account)
• Selfie photographs holding identification documents for facial verification
• Source of funds documentation if required by regulatory or risk management procedures

3. How We Use Your Information

3.1 Account Management and Service Delivery

We use your personal information to create, maintain, and manage your 3dloto account and deliver our gaming services:

• Verify your identity and age to ensure compliance with legal requirements
• Process account registration and authenticate your login credentials
• Enable you to place bets, play games, and participate in gaming activities
• Process deposits, withdrawals, and other financial transactions
• Maintain accurate transaction records and account balances
• Provide customer support and respond to your inquiries
• Send important account notifications, transaction confirmations, and service updates

3.2 Legal and Regulatory Compliance

As a PAGCOR-licensed gaming operator, 3dloto is required to comply with various legal and regulatory obligations. We use your information to:

• Comply with Philippine gaming laws and PAGCOR licensing requirements
• Fulfill Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations
• Prevent underage gambling and verify that all users are at least twenty-one (21) years of age
• Detect and prevent fraud, money laundering, terrorist financing, and other illegal activities
• Respond to lawful requests from law enforcement, regulatory authorities, and courts
• Maintain records required by applicable laws and regulations
• Report suspicious transactions to relevant authorities as legally required

3.3 Fraud Prevention and Security

Protecting the integrity of our platform and the security of user accounts is paramount. We use your information to:

• Monitor accounts and transactions for suspicious or fraudulent activity
• Detect and prevent creation of multiple accounts by the same individual
• Identify patterns of behavior that may indicate bonus abuse or gaming system exploitation
• Verify the authenticity of identification documents and payment methods
• Implement security measures to protect against unauthorized access to accounts
• Investigate disputes, chargebacks, and claims of unauthorized transactions

3.4 Responsible Gaming and Player Protection

3dloto is committed to promoting responsible gaming practices. We use your gaming activity data to:

• Monitor gaming patterns that may indicate problem gambling behavior
• Enforce deposit limits, time limits, and other responsible gaming controls you set
• Implement self-exclusion requests and prevent access during exclusion periods
• Provide personalized responsible gaming recommendations and interventions
• Offer access to problem gambling resources and support services

3.5 Marketing and Promotional Communications

With your consent, we may use your contact information to send you marketing communications about:

• Promotional offers, bonuses, and special deals
• New games, features, and platform updates
• Tournaments, competitions, and special events
• Personalized gaming recommendations based on your preferences

You may opt out of marketing communications at any time through your account settings or by clicking the unsubscribe link in promotional emails. Opting out of marketing communications will not affect transactional or service-related communications necessary for account management.

4. How We Share Your Information

4.1 Service Providers and Business Partners

3dloto shares your personal information with trusted third-party service providers who assist in delivering our services. These parties are contractually bound to protect your information and may only use it for the specific purposes we authorize. Service providers include:

Service Provider Type	Purpose	Data Shared
Payment Processors	Process deposits and withdrawals	Payment method details, transaction amounts, account identifiers
Identity Verification Services	Verify identity and age	Name, date of birth, ID documents, address verification documents
Gaming Platform Providers	Deliver casino games and betting services	Username, gaming activity, bet history
Customer Support Tools	Provide customer service	Name, email, phone, support tickets, chat transcripts
Analytics and Marketing Platforms	Analyze usage and deliver marketing	Behavioral data, preferences, contact information (with consent)
Cloud Infrastructure	Host platform and store data	All account and transactional data (encrypted)

4.2 Regulatory and Legal Authorities

We may disclose your personal information to regulatory bodies, law enforcement agencies, and courts when:

• Required by law, regulation, legal process, or governmental request
• Necessary to comply with PAGCOR reporting and audit requirements
• Required to investigate suspected fraud, money laundering, or other illegal activities
• Necessary to protect the rights, property, or safety of 3dloto, our users, or the public
• Ordered by a court or administrative body with proper jurisdiction

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. You will be notified of any such change in ownership or control of your personal information through email or prominent notice on our platform.

5. Data Security Measures

3dloto implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and our servers is protected by industry-standard TLS/SSL encryption (256-bit). Sensitive data stored on our servers is encrypted at rest.
• Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis. Multi-factor authentication is required for administrative access.
• Secure Infrastructure: Our platform is hosted on secure, certified cloud infrastructure with redundant systems and regular security audits.
• Monitoring and Detection: We employ continuous monitoring, intrusion detection systems, and automated alerts to identify and respond to security threats.
• Regular Audits: Third-party security firms conduct regular penetration testing and vulnerability assessments of our systems.
• Employee Training: All employees with access to personal information receive regular training on data protection and security best practices.
• Incident Response: We maintain an incident response plan to address data breaches promptly and notify affected users as required by law.

While we implement robust security measures, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and notifying us immediately of any unauthorized access to your account.

6. Data Retention

3dloto retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained throughout the period your account remains active.
• Closed Accounts: After account closure, we retain personal information for a minimum of five (5) years to comply with PAGCOR record-keeping requirements and applicable financial regulations.
• Transaction Records: Financial transaction records are retained for at least ten (10) years in compliance with anti-money laundering laws.
• Marketing Data: If you opt out of marketing communications, your contact information is retained on our suppression list to honor your opt-out preference.
• Legal Holds: Information subject to legal holds, regulatory investigations, or ongoing disputes is retained until the matter is resolved.

Upon expiration of applicable retention periods, we securely delete or anonymize your personal information in accordance with data protection best practices.

7. Your Privacy Rights

Under the Data Privacy Act of 2012 and other applicable laws, you have the following rights regarding your personal information:

• Right to Access: You may request confirmation of whether we process your personal data and obtain a copy of such data.
• Right to Rectification: You may request correction of inaccurate or incomplete personal information.
• Right to Erasure: You may request deletion of your personal information, subject to legal retention requirements and legitimate business interests.
• Right to Restriction: You may request that we restrict processing of your personal information under certain circumstances.
• Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format.
• Right to Object: You may object to processing of your personal information for direct marketing purposes or based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission of the Philippines if you believe your privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 11. We will respond to your request within thirty (30) days or as required by applicable law.

8. Cookies and Tracking Technologies

3dloto uses cookies, web beacons, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality, including session management, authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings to enhance your experience.
• Analytics Cookies: Collect information about how you use the platform to help us improve our services.
• Marketing Cookies: Track your activity across websites to deliver personalized advertisements and promotions (only with your consent).

8.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies may affect platform functionality and your ability to use certain features. Marketing and analytics cookies can be disabled through your account settings without impacting core functionality.

9. Third-Party Links and Services

The 3dloto platform may contain links to third-party websites, applications, or services that are not operated or controlled by 3dloto. This Privacy Policy does not apply to such third-party services. We are not responsible for the privacy practices or content of third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

10. Children's Privacy

The 3dloto platform is strictly intended for individuals who are at least twenty-one (21) years of age. We do not knowingly collect, use, or disclose personal information from individuals under twenty-one (21) years old. If we discover that we have inadvertently collected information from a minor, we will immediately delete such information and close the associated account. If you believe a minor has provided information to 3dloto, please contact us immediately.

11. Changes to This Privacy Policy

3dloto reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes, we will notify you by:

• Posting the updated Privacy Policy on our platform with a revised "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the platform upon your next login

Your continued use of the 3dloto platform after such notification constitutes acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. International Data Transfers

3dloto primarily operates in the Philippines and stores data on servers located within the Philippines or in secure international data centers. Some of our service providers may process data in jurisdictions outside the Philippines. When we transfer personal information internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Compliance with international data transfer regulations under the Data Privacy Act of 2012

13. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Data Protection Officer: [email protected]
• General Inquiries: [email protected]
• Live Chat: Available 24/7 on the platform
• Mailing Address: 3dloto Data Protection Officer, [Address to be inserted], Philippines

For complaints about our data practices, you may also contact the National Privacy Commission of the Philippines:

• National Privacy Commission: https://privacy.gov.ph
• Email: [email protected]
• Hotline: (02) 8234-2228