q36 Privacy Policy – How Your Personal Data Is Handled

When you register and use the q36 platform, we collect certain personal information that is necessary to operate your account, process transactions, and comply with Philippine regulations. The types of data we collect fall into three broad categories: information you provide directly, information generated by your use of the platform, and information received from third-party payment providers such as GCash and Maya.

Information You Provide Directly

• Full legal name and date of birth
• Email address and mobile number
• Government-issued ID details (for identity verification)
• Billing address and payment method details
• Any communications you send to our support team

Information Generated Automatically

When you access q36 through a browser or our mobile app, we automatically collect certain technical data. This includes your IP address, device type, operating system, browser version, and session activity logs. We also record betting history, game activity, deposit and withdrawal records, and login timestamps. This data helps us detect fraud, maintain platform security, and improve the overall experience for Filipino players.

• IP address and approximate location
• Device identifiers and browser fingerprint
• Session logs, page views, and click events
• Betting and gaming activity records
• Deposit, withdrawal, and transaction history

Information from Payment Providers

When you make a deposit or request a withdrawal through GCash, Maya, or a linked bank account, those providers may share transaction confirmation data with us. We do not store your full GCash or Maya credentials — only the transaction reference and status needed to credit or debit your q36 account balance. All payment data is transmitted over encrypted connections and handled in accordance with PCI-DSS guidelines.

q36 uses the personal data we collect strictly for the purposes described in this policy. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. Every use of your data is tied to a legitimate operational, legal, or security need related to running a licensed gaming platform for players in the Philippines.

• Account management: Creating and maintaining your player account, verifying your identity, and processing login requests.
• Transaction processing: Handling deposits, withdrawals, and bet settlements in Philippine pesos through supported payment channels.
• Regulatory compliance: Meeting Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations required under Philippine gaming regulations.
• Fraud prevention and security: Monitoring account activity for suspicious patterns, protecting against unauthorised access, and investigating potential breaches.
• Customer support: Responding to your enquiries, resolving disputes, and providing assistance through our support channels.
• Platform improvement: Analysing aggregated usage data to improve game performance, fix bugs, and enhance the mobile experience.
• Responsible gaming: Identifying patterns that may indicate problem gambling and applying protective measures where appropriate.

We may also use your contact details to send you important account notifications — such as deposit confirmations, withdrawal updates, and security alerts. These are service communications, not marketing messages, and cannot be opted out of while your account remains active.

We share your personal data only in the limited circumstances described below. In every case, we require that any third party receiving your data maintains appropriate security standards and uses the information only for the specific purpose for which it was shared.

• Payment processors: GCash, Maya, and partner banks receive only the transaction data needed to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC services may receive your ID documents and personal details to complete mandatory verification checks.
• Regulatory authorities: We may disclose account and transaction data to Philippine gaming regulators, law enforcement, or financial intelligence units when legally required to do so.
• Game content providers: Slot and live casino game providers may receive a pseudonymous player identifier and session data to deliver game content and settle results — they do not receive your full personal profile.
• Legal proceedings: If q36 is involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction, subject to the same privacy protections described here.

We never share your data with advertisers, data brokers, or unrelated third parties for commercial purposes. Any service provider we engage is bound by a data processing agreement that restricts how they may use your information.

As a player based in the Philippines, you have rights over your personal data under applicable data protection laws. q36 is committed to honouring these rights in a timely and transparent manner. If you wish to exercise any of the rights listed below, please contact our support team using the email address provided in the footer of this page.

• Right to access: You may request a copy of the personal data we hold about you at any time.
• Right to correction: If any of your personal details are inaccurate or out of date, you have the right to request that we correct them.
• Right to erasure: In certain circumstances, you may request that we delete your personal data — for example, if you close your account and there is no legal obligation requiring us to retain it.
• Right to data portability: You may request that we provide your data in a structured, commonly used format so you can transfer it to another service.
• Right to object: You may object to certain types of processing, such as the use of your data for profiling or automated decision-making.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Please note that some requests may be subject to identity verification before we can act on them. We will respond to all valid requests within 30 days. In cases where a request is complex or involves a large volume of data, we may extend this period by a further 30 days and will notify you accordingly.

We retain your personal data for as long as your account is active and for a period thereafter as required by Philippine law and our regulatory obligations. Transaction records and KYC documents are typically retained for a minimum of five years following account closure to satisfy anti-money laundering requirements. After the applicable retention period has expired, your data is securely deleted or anonymised.

q36 uses industry-standard technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These measures include TLS encryption for all data in transit, access controls that limit who within our organisation can view your data, regular security audits, and secure storage of all sensitive documents. Despite these precautions, no system is completely immune to risk — if you suspect your account has been compromised, please contact us immediately and change your password without delay.

• All data in transit protected by TLS encryption
• Access to personal data restricted to authorised personnel only
• KYC and transaction records retained for a minimum of five years
• Regular security reviews and vulnerability assessments conducted
• Inactive account data reviewed periodically for deletion eligibility

q36 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse how players interact with our site and app. Cookies are small text files stored on your device that help us deliver a consistent and personalised experience. We use three categories of cookies: strictly necessary cookies that are required for the platform to function, functional cookies that remember your settings and preferences, and analytics cookies that help us understand usage patterns in aggregate.

Strictly necessary cookies cannot be disabled as they are essential for account login, session management, and security. You may control functional and analytics cookies through your browser settings or by adjusting your preferences in the account dashboard. Disabling certain cookies may affect the performance or availability of some platform features. We do not use cookies to serve third-party advertising or to track your activity across unrelated websites.

• Strictly necessary cookies: always active, required for login and security
• Functional cookies: remember language, display, and session preferences
• Analytics cookies: aggregate usage data to improve platform performance
• No third-party advertising or cross-site tracking cookies used

q36 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through an in-platform notification. We encourage you to review this policy periodically so you remain informed about how your data is being handled. Continued use of the q36 platform after any update constitutes your acceptance of the revised policy. If you have questions about this policy or how your data is used, please refer to our FAQ page or contact our support team at the email address listed in the footer.