3dlotto Privacy Policy

01 Introduction

3dlotto is an online lotto and casino platform primarily serving Filipino players across the Philippines, including those based in Manila, Cebu, Davao, Quezon City, Makati, and other regions. We are committed to protecting the privacy and personal data of every individual who interacts with our platform, whether as a registered account holder, a visitor, or a prospective player.

This Privacy Policy has been prepared in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, its implementing rules and regulations, and the issuances of the National Privacy Commission (NPC). We take our obligations as a personal information controller seriously and have implemented appropriate technical, organisational, and procedural safeguards to protect your data.

This Policy applies to all personal information collected through the 3dlotto website, account registration forms, deposit and withdrawal processes, customer support interactions, promotional activities, and any other channel through which you share information with us. Please read this Policy carefully before using the 3dlotto platform or submitting any personal information.

02 Information We Collect

2.1 Registration & Account Information

When you create a 3dlotto account, we collect the following information:

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you meet the 21+ age requirement)
• Email address and mobile phone number
• Residential address (city/province at minimum)
• Username and hashed/encrypted password
• Preferred language and currency (PHP by default)

2.2 Identity Verification (KYC) Documents

To comply with Philippine Anti-Money Laundering Act (AMLA) requirements and to process withdrawals above regulatory thresholds, we may request:

• A valid government-issued photo ID (e.g., PhilSys ID, passport, driver's licence, UMID, SSS/GSIS card, or voter's ID)
• A selfie photograph for identity matching
• Proof of registered payment method (e.g., GCash account screenshot, bank account screenshot showing your name)
• Source of funds documentation for large transactions where required by regulation

2.3 Financial & Transaction Data

We collect and retain records of all financial activity on your account, including:

• Deposit amounts, dates, and payment methods (GCash, PayMaya, BPI, BDO, Metrobank)
• Withdrawal requests, amounts, and processing status
• Bonus claims and wagering activity
• Win/loss records and account balance history

2.4 Technical & Usage Data

When you visit or use the 3dlotto platform, we automatically collect certain technical data:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session duration, pages visited, and game activity logs
• Click patterns and platform navigation behaviour (for fraud detection and UX improvement)
• Cookie identifiers and session tokens

2.5 Communications Data

When you contact our support team via live chat or email, we retain records of that communication — including your messages, our responses, and any attachments — for quality assurance and dispute resolution purposes.

03 How We Use Your Data

3dlotto processes your personal information for the following specific purposes:

3dlotto will not use your personal data for any purpose not listed above without first obtaining your explicit consent or establishing a separate legal basis for that additional processing.

04 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its implementing rules, 3dlotto processes your personal data on the following legal bases:

• Contractual necessity: Processing your name, date of birth, contact details, and payment information is necessary to fulfil our contractual obligations to you as a registered account holder — specifically to operate your account, process deposits, and pay out winnings.
• Legal obligation: Collection and retention of KYC documents and transaction records is mandated by the Anti-Money Laundering Act (Republic Act No. 9160, as amended), PAGCOR regulations, and other applicable Philippine laws. We are legally required to collect and retain this data regardless of your consent.
• Legitimate interests: We process technical and usage data for fraud prevention, platform security, responsible gaming monitoring, and service improvement. These are legitimate interests of 3dlotto that do not override your fundamental privacy rights.
• Consent: Where we send promotional emails or personalise content based on your gaming preferences, we rely on your consent. You may withdraw this consent at any time by contacting our support team or using the unsubscribe mechanism in any promotional email.

05 Data Sharing & Disclosure

5.1 We Do Not Sell Your Data

3dlotto does not sell, rent, lease, or trade your personal information to any third party for commercial or marketing purposes. This is an absolute commitment — not a qualified one.

5.2 Authorised Third-Party Service Providers

To operate the 3dlotto platform, we work with a limited number of carefully selected third-party service providers who process data strictly on our behalf and under data processing agreements that bind them to confidentiality and security obligations equivalent to our own. These providers include:

• Payment processors: GCash (Mynt/Globe Fintech), PayMaya (Maya Bank), BPI, BDO, and Metrobank — for processing deposits and withdrawals
• KYC/identity verification providers: Third-party verification services used to authenticate government-issued IDs
• Game software providers: Licensed game suppliers (e.g., JILI, Ezugi) receive only the minimum session and transaction data necessary to operate their game interfaces within our platform
• Cloud hosting and infrastructure providers: Server and database services used to host the 3dlotto platform and store data securely
• Fraud detection providers: Risk management systems that analyse transaction and behavioural patterns to prevent fraudulent activity

5.3 Regulatory & Legal Disclosures

3dlotto may be required by law to disclose your personal data to Philippine government agencies, law enforcement authorities, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or courts of competent jurisdiction. We will comply with all lawful orders and requests from these authorities. Where legally permitted, we will notify you of such a disclosure.

06 Cookies & Tracking Technologies

6.1 Types of Cookies We Use

3dlotto uses the following categories of cookies on our platform:

• Strictly necessary cookies: Required for the platform to function correctly. These include session authentication tokens, load balancing cookies, and security cookies. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Used to measure how players interact with the platform — which pages are visited most, how long sessions last, and where errors occur. All data collected by performance cookies is aggregated and anonymised.
• Functional cookies: Used to remember your preferences such as language settings, preferred game categories, and display options, so you do not have to reset them on each visit.
• Security cookies: Used for fraud detection, bot prevention, and account security monitoring. These cookies help us identify unusual login patterns or suspicious activity on your account.

6.2 What We Do Not Use

3dlotto does not deploy third-party advertising cookies, social media tracking pixels, cross-site behavioural tracking cookies, or any cookie technology designed to build advertising profiles about you. Our platform is completely free of third-party ad network trackers.

6.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to log in to and use the 3dlotto platform. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available in each browser's help documentation.

07 Data Retention

3dlotto retains your personal data for as long as your account remains active, and for such additional periods as are required by applicable Philippine law or regulation. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that makes re-identification impossible. Where anonymised data is retained for analytical purposes, it can no longer be linked back to any individual player.

08 Data Security

3dlotto implements a comprehensive, layered approach to data security. Our security measures include, but are not limited to, the following:

• TLS 1.3 encryption for all data transmitted between your device and the 3dlotto platform — indicated by the padlock icon in your browser's address bar
• AES-256 encryption for sensitive personal data and financial records stored in our databases
• Bcrypt password hashing — your password is never stored in plain text; we store only a salted cryptographic hash
• Role-based access controls — only authorised 3dlotto personnel with a legitimate operational need can access player data, and all access is logged and audited
• Two-factor authentication (2FA) available for player accounts to add an additional layer of login security
• Regular penetration testing and third-party security audits of our platform infrastructure
• DDoS protection and web application firewall (WAF) to protect against external attacks
• Automated fraud detection systems that flag unusual account activity in real time

While 3dlotto applies rigorous security measures, no internet-based platform can guarantee absolute security. You also play an important role in keeping your account secure — please use a strong, unique password and never share your login credentials with anyone. Our support team will never ask for your password.

09 Your Rights as a Data Subject

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by 3dlotto:

• Right to be informed: You have the right to know what personal data 3dlotto collects about you, the purposes for which it is processed, and how it is protected. This Privacy Policy fulfils that obligation.
• Right of access: You may request a copy of the personal data 3dlotto holds about you at any time. We will provide this within thirty (30) calendar days of receiving a verified request.
• Right to correction: If you believe that any personal data we hold about you is inaccurate, incomplete, or outdated, you may request that it be corrected. You can update basic account information directly through your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. Note that regulatory retention obligations may prevent complete erasure in some cases.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time, with immediate effect.
• Right to data portability: You may request that personal data you have provided to 3dlotto be provided to you in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: If you believe 3dlotto has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at www.privacy.gov.ph.

To exercise any of the above rights, please contact 3dlotto's Data Protection Officer through our 24/7 live support channel or by emailing us at [email protected]. Please include your full registered name and account details in your request so we can verify your identity before processing it.

10 Children & Minors

3dlotto's platform is strictly restricted to individuals who are twenty-one (21) years of age or older. This minimum age requirement is set by Philippine gaming regulations and is a condition of our operating licence. We do not knowingly collect personal information from persons under the age of 21.

As part of our registration process, all new accounts are required to confirm their date of birth and consent to age verification. Where 3dlotto has reason to believe that a registered account holder is below 21 years of age, the account will be immediately suspended and all associated data will be investigated and, where confirmed, deleted in accordance with applicable law.

11 International Data Transfers

3dlotto's primary data processing infrastructure is located within or proximate to the Philippines. However, some of our third-party service providers — particularly game software suppliers and cloud infrastructure providers — may process data in other countries as part of their global operations.

Where personal data is transferred outside the Philippines, 3dlotto ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and NPC guidelines. These safeguards include contractual data transfer agreements with recipient entities, verification that the recipient country provides an adequate level of data protection, and adherence to our data processing standards regardless of geography.

By using 3dlotto, you acknowledge and consent to the cross-border transfer of your personal data to the extent necessary for the operation of our platform and the provision of our gaming services, subject always to the safeguards described above.

12 Third-Party Links & Services

The 3dlotto platform contains links to third-party websites and services, including payment processors and game providers, whose privacy practices are governed by their own separate privacy policies. 3dlotto does not control and is not responsible for the privacy practices or content of any third-party website or service.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your 3dlotto account — in particular, GCash, PayMaya, BPI, BDO, and Metrobank when making deposits or withdrawals — as your interactions with those services are subject to their own terms and policies.

This Privacy Policy applies solely to personal data collected and processed by 3dlotto on the 3dlotto platform. It does not apply to any data you independently provide to third-party payment providers or game suppliers outside of the 3dlotto interface.

13 Updates to This Privacy Policy

3dlotto reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, our business operations, or our data processing practices. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page
• Post a prominent notice on the 3dlotto platform informing registered players of the change
• Where the changes are significant, send a direct notification to your registered email address at least fourteen (14) days before the changes take effect

Your continued use of the 3dlotto platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes and your agreement to be bound by the revised terms. If you do not agree with any material change to this Policy, you should stop using the platform and may request account closure by contacting our support team.

We recommend that you review this Privacy Policy periodically to stay informed about how 3dlotto protects your personal information. All previous versions of this Policy are available upon written request to our Data Protection Officer.

14 Contact & Data Protection Officer

3dlotto has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 17-01. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact us through the following channels:

• Email: [email protected] — plain text, not a clickable link
• Live Chat: Available 24/7 through the 3dlotto platform — click the chat icon on any page
• Subject Line: Please use "Privacy Request — [Your Account Username]" for faster routing to our DPO team

For complaints that have not been satisfactorily resolved by 3dlotto, you have the right to escalate your concern directly to the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila
• Website: privacy.gov.ph (for reference only — external link not provided here)