Privacy Policy

1. Information We Collect

39gl collects various categories of personal information necessary to provide gaming services, comply with legal obligations, and improve user experience. The types of information we collect include:

1.1 Information You Provide Directly

When you register for an account, make deposits or withdrawals, contact customer support, or otherwise interact with the 39gl platform, you may provide the following information:

• Personal Identification Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (passport number, driver's license number, national ID number)
• Contact Information: Email address, mobile phone number, residential address, city, province, and postal code
• Account Credentials: Username, password, security questions and answers, and any other authentication information
• Financial Information: Bank account numbers, e-wallet account details (GCash number, Maya account), payment card information, transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued IDs, proof of address documents, selfie photos for identity verification, and any other documents requested during the Know Your Customer (KYC) process
• Communications: Records of communications with customer support, including live chat transcripts, emails, and any feedback or complaints submitted through our platform

1.2 Information Collected Automatically

When you access and use the 39gl platform, certain information is collected automatically through various technologies:

• Device Information: Device type, model, operating system, browser type and version, screen resolution, device identifiers, and hardware specifications
• Usage Data: Pages visited, games played, time spent on the platform, betting history, wagering patterns, win/loss records, login times and frequency, features used, and navigation paths
• Location Data: IP address, geolocation data to verify you are accessing the platform from within the Philippines, and timezone information
• Technical Data: Cookies, web beacons, pixel tags, session IDs, log files containing server requests, error reports, and performance metrics

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment processors and financial institutions processing your deposits and withdrawals
• Identity verification services used to confirm your identity and age during the KYC process
• Credit reference agencies and fraud prevention services (where permitted by law)
• Marketing partners and affiliates through whom you discovered the 39gl platform
• Public databases and government registries used to verify information you provide

2. How We Use Your Information

39gl uses the collected information for the following purposes, all of which are necessary for providing gaming services, ensuring platform security, complying with legal requirements, and improving user experience:

2.1 Account Management and Service Provision

• Creating, maintaining, and managing your player account
• Verifying your identity, age (21+), and location within the Philippines
• Processing deposits, withdrawals, and other financial transactions
• Providing access to games, features, and services on the 39gl platform
• Managing bonuses, promotions, and loyalty rewards
• Maintaining accurate records of your gaming activity and transaction history

2.2 Security and Fraud Prevention

• Detecting, preventing, and investigating fraudulent activity, money laundering, and other illegal conduct
• Monitoring for suspicious betting patterns, account takeovers, and unauthorized access attempts
• Verifying the legitimacy of withdrawals and protecting against payment fraud
• Identifying and closing duplicate accounts or accounts used for bonus abuse
• Implementing security measures to protect your account and personal information
• Complying with anti-money laundering (AML) and know-your-customer (KYC) regulations

2.3 Legal and Regulatory Compliance

• Complying with obligations under Philippine gaming regulations and PAGCOR guidelines
• Fulfilling requirements under the Data Privacy Act of 2012 and related regulations
• Responding to legal processes, court orders, subpoenas, and requests from government authorities
• Reporting suspicious transactions to relevant authorities as required by law
• Maintaining records for audit, tax, and regulatory purposes
• Enforcing our Terms & Conditions and other policies

2.4 Customer Support and Communication

• Responding to your inquiries, requests, and complaints through various support channels
• Providing technical assistance and troubleshooting account or gaming issues
• Sending transactional communications (deposit confirmations, withdrawal updates, account notifications)
• Communicating important changes to our policies, terms, or services
• Collecting feedback to improve customer service quality

2.5 Platform Improvement and Analytics

• Analyzing user behavior and preferences to improve platform design and functionality
• Conducting statistical analysis of gaming patterns and platform performance
• Testing new features, games, and services before wide release
• Optimizing platform performance, loading times, and mobile responsiveness
• Identifying popular games and features to inform content decisions
• Generating aggregated, anonymized reports for internal business purposes

2.6 Marketing and Promotions (With Consent)

• Sending promotional emails about bonuses, new games, and special offers (only if you opt-in)
• Delivering personalized gaming recommendations based on your preferences
• Notifying you about tournaments, competitions, and exclusive events
• Conducting market research and surveys to understand player needs

You may opt out of marketing communications at any time through your account settings or by following the unsubscribe link in promotional emails. Opting out will not affect transactional or service-related communications.

3. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and international data protection principles, 39gl processes your personal information based on the following legal grounds:

3.1 Performance of Contract

Processing is necessary to fulfill our contractual obligations under the Terms & Conditions you agreed to when creating your account. This includes account management, transaction processing, game provision, and customer support services.

3.2 Legal Obligation

Processing is required to comply with legal obligations under Philippine law, including gaming regulations, anti-money laundering laws, tax reporting requirements, and data protection legislation. We are legally obligated to verify user identities, maintain transaction records, report suspicious activities, and cooperate with law enforcement and regulatory authorities.

3.3 Legitimate Interests

Processing is necessary for legitimate business interests pursued by 39gl, including fraud prevention, platform security, business analytics, and operational improvements. We balance these interests against your privacy rights and only process data where our legitimate interests do not override your fundamental rights and freedoms.

3.4 Consent

For certain processing activities not covered by the above grounds (such as marketing communications), we obtain your explicit consent. You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

4. Data Sharing and Disclosure

39gl does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with trusted third parties under the following circumstances:

4.1 Service Providers and Business Partners

We engage third-party companies to perform services on our behalf, including:

• Payment Processors: GCash, Maya, banks (BPI, BDO, Metrobank, UnionBank), and other financial institutions processing deposits and withdrawals
• Identity Verification Services: Third-party providers conducting KYC checks and age verification
• Game Providers: Pragmatic Play, PG Soft, Evolution Gaming, Ezugi, and other software providers supplying games and live dealer services
• Cloud Service Providers: Companies hosting our servers, databases, and backup systems
• Customer Support Tools: Live chat platforms and ticketing systems used to provide customer assistance
• Analytics Providers: Services helping us analyze platform usage and performance
• Security Services: Fraud detection, anti-money laundering, and cybersecurity providers

All service providers are contractually obligated to protect your information, use it only for specified purposes, and comply with applicable data protection laws. We conduct due diligence to ensure third parties maintain appropriate security measures.

4.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, regulators, law enforcement agencies, and courts when:

• Required by law, regulation, legal process, or court order
• Necessary to comply with gaming license conditions and regulatory requirements
• Responding to subpoenas, warrants, or official requests for information
• Reporting suspicious transactions under anti-money laundering obligations
• Cooperating with investigations into illegal activity or Terms violations
• Protecting the rights, property, or safety of 39gl, users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving 39gl, your personal information may be transferred to the acquiring or successor entity. We will notify you of any such transfer and any choices you may have regarding your information.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such disclosure. For example, if you choose to participate in third-party promotions or surveys, we may share relevant information with those partners with your permission.

5. Data Security and Protection

39gl implements comprehensive technical, organizational, and administrative security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security framework includes:

5.1 Technical Security Measures

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL (Secure Socket Layer) encryption, the same standard used by banks and financial institutions
• Secure Data Storage: Personal information is stored on secure servers with encrypted databases, protected by firewalls and intrusion detection systems
• Password Protection: User passwords are hashed using industry-standard cryptographic algorithms and are never stored in plain text
• Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data on a need-to-know basis
• Network Security: Multi-layered network security including firewalls, DDoS protection, and continuous monitoring for suspicious activity
• Regular Security Audits: Periodic vulnerability assessments, penetration testing, and security audits by independent third parties

5.2 Organizational Security Measures

• Comprehensive employee training on data protection and privacy best practices
• Confidentiality agreements binding all employees and contractors who handle personal data
• Documented security policies and procedures regularly reviewed and updated
• Incident response plans for addressing data breaches or security incidents
• Regular backups of critical data with secure offsite storage
• Physical security measures protecting servers and data centers

5.3 Your Responsibilities

While we implement robust security measures, you also play a critical role in protecting your information:

• Choose a strong, unique password and never share it with anyone
• Enable two-factor authentication if available
• Log out of your account when using shared or public devices
• Keep your contact information updated to receive security notifications
• Report suspicious account activity immediately to customer support
• Avoid clicking suspicious links or downloading attachments from unknown sources

5.4 Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, 39gl will notify affected users and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by Philippine law. Notifications will include information about the nature of the breach, data affected, potential consequences, and measures taken to address the incident.

6. Data Retention

39gl retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on the type of information and applicable legal requirements:

Data Category	Retention Period	Reason
Account Information	Duration of active account + 7 years after closure	Legal compliance, tax requirements, dispute resolution
Transaction Records	7 years from transaction date	Financial regulations, anti-money laundering laws
KYC Documents	7 years after account closure	Regulatory compliance, identity verification
Gaming History	7 years from last activity	Regulatory requirements, dispute resolution
Customer Support Records	3 years from last communication	Service quality, dispute resolution
Marketing Consent Records	Duration of consent + 3 years	Proof of consent, regulatory compliance
Technical Logs	90 days (unless needed for investigations)	Security monitoring, technical troubleshooting

After retention periods expire, we securely delete or anonymize personal information to prevent identification. Anonymized data may be retained indefinitely for statistical analysis and business intelligence purposes. If you request account deletion, we will delete your information subject to our legal retention obligations.

7. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information. 39gl is committed to facilitating the exercise of these rights:

7.1 Right to Information

You have the right to be informed about the collection and processing of your personal data. This Privacy Policy provides transparency about our data practices, but you may request additional information at any time.

7.2 Right of Access

You have the right to obtain confirmation of whether we process your personal information and to access the data we hold about you. You can view much of this information directly through your account dashboard. For additional data access requests, contact our Data Protection Officer.

7.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal information. You can update most information through your account settings. For changes requiring verification (name, date of birth), contact customer support with appropriate documentation.

7.4 Right to Erasure

You have the right to request deletion of your personal information under certain circumstances. Note that we may be required to retain certain information for legal compliance, even after account closure. Deletion requests must be submitted through customer support and will be processed subject to our legal obligations.

7.5 Right to Object

You have the right to object to processing of your personal information for direct marketing purposes at any time. You can opt out of marketing communications through your account settings or by following unsubscribe links in emails. For objections to other types of processing, contact our Data Protection Officer.

7.6 Right to Data Portability

You have the right to receive personal information you provided to us in a structured, commonly used, machine-readable format and to transmit that data to another service provider where technically feasible. Contact customer support to request data portability.

7.7 Right to Lodge a Complaint

If you believe we have violated your privacy rights or applicable data protection laws, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact details: National Privacy Commission, 5th Floor, Philippine International Convention Center, Vicente Sotto Street, Pasay City 1308, Philippines.

7.8 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer or customer support. We will respond to your request within 30 days. Requests must include sufficient information to verify your identity. There is no fee for exercising your rights unless requests are manifestly unfounded or excessive.

8. Cookies and Tracking Technologies

The 39gl platform uses cookies, web beacons, and similar tracking technologies to enhance user experience, analyze platform usage, and deliver personalized content. By using our platform, you consent to the use of cookies as described in this section.

8.1 What Are Cookies

Cookies are small text files stored on your device by your web browser. They contain information about your browsing session and preferences. Cookies can be "session cookies" (deleted when you close your browser) or "persistent cookies" (remain on your device until expiration or deletion).

8.2 Types of Cookies We Use

• Essential Cookies: Necessary for platform functionality, including login authentication, session management, and security features. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous information about how users interact with the platform, helping us identify errors and improve performance.
• Functional Cookies: Remember your preferences (language, timezone, display settings) to provide enhanced, personalized features.
• Analytics Cookies: Help us understand user behavior, popular games, and navigation patterns through aggregated statistics.
• Advertising Cookies (if applicable): Track your activity across websites to deliver relevant advertisements (only with your consent).

8.3 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, and receive notifications when new cookies are set. Note that disabling essential cookies may affect platform functionality and prevent you from accessing certain features.

9. Third-Party Services

The 39gl platform integrates with third-party services for payment processing, game provision, and other functionalities. These third parties have their own privacy policies governing how they collect and use your information. We encourage you to review the privacy policies of:

• GCash and Maya (PayMaya) for e-wallet transactions
• Your bank (BPI, BDO, Metrobank, UnionBank, etc.) for banking transfers
• Game providers (Pragmatic Play, PG Soft, Evolution Gaming, Ezugi, etc.)

39gl is not responsible for the privacy practices of third-party services. Information you provide directly to third parties is governed by their respective privacy policies.

10. Changes to This Policy

39gl reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through email notification to your registered email address and prominent notice on the website. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the 39gl platform after changes take effect constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your information.