3dloto Privacy Policy

This Privacy Policy ("Policy") describes how 3dloto ("3dloto", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of players, visitors, and users ("you", "your") who access the 3dloto online casino and lotto platform at https://3dloto.net and all associated services (collectively, the "Platform").

3dloto is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the relevant issuances of the National Privacy Commission (NPC).

By accessing or using the 3dloto Platform, creating a player account, making a deposit, or interacting with any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. If you do not agree with any aspect of this Policy, please discontinue use of the Platform and contact our support team to close your account.

3dloto is an online casino and lotto platform operating under PAGCOR regulatory oversight, serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and throughout the Philippines. The Platform offers slots, live dealer games, sports betting, sabong, bingo, and lottery services in a single secure environment accessible 24/7 from any internet-connected device.

For the purposes of the Data Privacy Act of 2012 and this Policy, 3dloto acts as the personal information controller with respect to the personal data collected from players and users of the Platform. Our designated Data Protection Officer (DPO) can be reached through the contact details provided in Section 12 of this Policy.

3dloto collects personal information from you through several channels, including your registration form, account activity, KYC verification process, payment transactions, customer support interactions, and your general use of the Platform. The categories of personal data we collect are as follows:

3.1 Identity & Contact Information

• Full legal name as appearing on a government-issued identification document
• Date of birth and age verification data
• Residential address (street, city, province, zip code)
• Mobile phone number
• Email address
• Nationality and citizenship information

3.2 Identity Verification (KYC) Documents

• Copies of government-issued photo identification (e.g., Philippine passport, PhilSys National ID, UMID, driver's licence, SSS/GSIS ID, voter's ID)
• Proof of residential address (e.g., utility bill, bank statement issued within the past three months)
• Source of funds documentation where required by PAGCOR compliance guidelines or anti-money laundering regulations
• Selfie or liveness check image submitted during identity verification

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment method details
• GCash account reference numbers, Maya wallet references, or bank account identifiers (partial, masked as appropriate)
• USDT TRC20 wallet addresses where applicable
• Account balance history and bonus credit records

3.4 Gaming Activity Data

• Bet history, game session logs, win and loss records
• Game preferences and favourite game categories
• Session duration, login timestamps, and activity patterns
• Responsible gaming tool usage (deposit limits, self-exclusion requests, cooling-off periods)

3.5 Technical & Device Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser version
• Unique device identifiers
• Platform access logs and error reports

3.6 Communications Data

• Records of live chat, email, or support ticket interactions with 3dloto customer support
• Survey responses and feedback submissions
• Marketing communication preferences

3dloto processes your personal information only for specific, legitimate purposes grounded in our contractual obligations to you, our legal and regulatory compliance requirements, and our legitimate business interests. The following table summarises our primary data processing purposes and their legal bases:

3dloto does not sell, rent, or disclose your personal information to third parties for their own marketing purposes. We share your data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

5.1 Payment Service Providers

To process your deposits and withdrawals, 3dloto shares necessary transaction data with licensed payment processors and e-wallet providers, including GCash (GXI), Maya (Voyager Innovations), BPI, BDO, UnionBank, and Coins.ph. These providers are bound by their own privacy policies and applicable Philippine financial data protection regulations.

5.2 Identity Verification Partners

For KYC compliance, 3dloto may engage accredited third-party identity verification service providers to assist with document authentication and liveness detection. These providers process your identity documents solely for verification purposes under strict confidentiality agreements.

5.3 Regulatory Authorities

3dloto is required by law to disclose certain player data to regulatory and law enforcement bodies upon valid legal request, including:

• Philippine Amusement and Gaming Corporation (PAGCOR)
• Anti-Money Laundering Council (AMLC)
• National Privacy Commission (NPC)
• Philippine National Police (PNP) or National Bureau of Investigation (NBI) pursuant to a valid court order or lawful directive

5.4 Technology and Infrastructure Providers

3dloto uses reputable cloud hosting, cybersecurity, and platform infrastructure providers to operate the Platform. These providers may process technical data (server logs, performance metrics) as data processors acting on 3dloto's instructions and subject to appropriate data processing agreements.

5.5 Game Content Providers

Certain games on the 3dloto Platform are powered by licensed third-party game studios. In live dealer and RNG game environments, limited session-level technical data may be transmitted to these providers for game integrity and audit purposes. No personally identifiable information is shared with game studios beyond what is technically required for game delivery.

3dloto retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine laws and regulations. The following general retention periods apply:

• Active account data: Retained for the duration of your registered account relationship with 3dloto, plus a minimum of five (5) years following account closure, in compliance with AMLC record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission, as required under the Anti-Money Laundering Act (AMLA) of the Philippines and its amendments.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of consent management.
• Technical and device logs: Retained for twelve (12) months for security and fraud monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, 3dloto will securely delete or anonymise your personal data in accordance with industry-standard data disposal practices, unless a longer retention period is required by a valid legal hold, ongoing investigation, or court order.

The 3dloto Platform uses cookies and similar technologies (including local storage and session identifiers) to enable core Platform functionality, maintain session security, and analyse Platform performance. The following types of cookies are used:

You may manage your cookie preferences through your browser settings. Please note that disabling essential or security cookies may impair the functionality and security of your 3dloto account. 3dloto does not use third-party advertising cookies or cross-site tracking technologies.

3dloto implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Our security framework includes, but is not limited to:

• TLS 1.2 / 1.3 encryption for all data in transit between your device and 3dloto servers
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records
• Multi-factor authentication (MFA) options for all player accounts
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular third-party penetration testing and vulnerability assessments of the Platform infrastructure
• Automated anomaly detection and real-time intrusion prevention systems
• Staff data protection training and confidentiality obligations for all personnel handling personal data
• Secure data disposal procedures for expired records, including cryptographic erasure and certified physical destruction where applicable

Under the Philippines Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 3dloto. These rights may be exercised by submitting a verified written request to our Data Protection Officer using the contact details in Section 12:

• Right to be Informed: You have the right to know that 3dloto is collecting your personal data, and to receive clear information about how it is being used — which is what this Privacy Policy provides.
• Right to Access: You have the right to request a copy of the personal data that 3dloto holds about you, including the purposes for which it is being processed and the recipients with whom it has been shared.
• Right to Rectification: You have the right to request correction of inaccurate, incomplete, or outdated personal data in your 3dloto account. Many details can be updated directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 3dloto's legal retention obligations under AMLA and PAGCOR regulatory requirements.
• Right to Object: You have the right to object to the processing of your personal data where 3dloto relies on legitimate interest as the legal basis, and for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to 3dloto in a structured, commonly used, and machine-readable format.
• Right to Complain: If you believe 3dloto has not handled your personal data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

3dloto will respond to all verified data privacy rights requests within thirty (30) days of receipt. We may request additional information to verify your identity before processing your request. Certain rights may be subject to limitations where compliance would conflict with 3dloto's legal obligations or regulatory requirements.

The 3dloto Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming laws. 3dloto does not knowingly collect, process, or retain personal information from any person under the age of 21.

All player registrations are subject to age verification as part of the KYC process. If 3dloto discovers or is notified that personal data belonging to a person under 21 has been collected, we will immediately suspend the associated account, delete the collected data, and void any bets or transactions associated with the underage account.

3dloto reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, regulatory requirements, or Platform features. When we make material changes to this Policy, we will notify you through one or more of the following methods:

• A prominent notice displayed on the 3dloto Platform upon your next login
• An email notification sent to the address registered on your 3dloto account
• An in-platform notification through your account dashboard

The updated Policy will indicate the effective date of the revision at the top of this page. Minor clarifications or non-material updates may be made without prior notice. We encourage you to review this Privacy Policy periodically to stay informed about how 3dloto protects your personal data.

Your continued use of the 3dloto Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the updated Policy, you must discontinue use of the Platform and contact support to request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 3dloto, you may contact our designated Data Protection Officer (DPO) through the following channels:

• Email: support@3dloto.net — please include "Privacy / DPO Request" in your subject line
• Live Chat: Available 24/7 on all pages of the 3dloto Platform
• Service Area: Serving players across Metro Manila, Cebu, Davao, Quezon City, Makati, and nationwide

We aim to acknowledge all privacy-related inquiries within two (2) business days and to resolve substantive requests within thirty (30) days. For complex requests that require additional time, we will notify you of the extended timeline and the reason for the delay.

If you are not satisfied with 3dloto's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the government body responsible for administering and enforcing RA 10173.