Privacy Policy

This Privacy Policy is issued by 3digits ("3digits", "we", "us", "our"), a Philippines-based online casino and sports betting platform accessible at https://3digits.bet. 3digits operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

For the purposes of RA 10173, 3digits acts as the Personal Information Controller (PIC) in respect of the personal data of its registered players and website visitors. As PIC, 3digits determines the purposes and means of processing your personal data and is responsible for ensuring that all processing is carried out lawfully, fairly, and transparently.

This Privacy Policy applies to all personal data collected through the 3digits platform — including the website at https://3digits.bet, any mobile-optimized interfaces, and all communications between 3digits and its players or prospective players.

3digits collects personal data only to the extent necessary for the purposes described in this Privacy Policy. The categories of personal data we collect are set out in the table below.

We do not intentionally collect sensitive personal information as defined under RA 10173 (such as health data, religious beliefs, or political affiliations) unless expressly required for a specific compliance purpose and with your explicit consent.

3digits collects personal data through the following means:

3.1 Direct Collection

You provide personal data directly to 3digits when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or interact with any feature of the platform that requires you to submit information.

3.2 Automated Collection

When you visit the 3digits website or use the platform, certain technical data is collected automatically through server logs, cookies, and similar tracking technologies. This includes your IP address, device identifiers, browser type, pages visited, time spent on pages, and general geographic location derived from your IP address. This data is used to operate and improve the platform and to detect fraudulent or unauthorized access attempts.

3.3 Third-Party Sources

In some circumstances, 3digits may receive personal data about you from third-party sources, including:

• Payment service providers (e.g., GCash, Maya, BPI, BDO, Metrobank) in the course of processing deposit and withdrawal transactions.
• Identity verification and KYC service providers engaged by 3digits to assist with document verification.
• PAGCOR or other regulatory authorities, where they are legally permitted to share information with us.
• Fraud prevention and AML screening services used to verify player identity and detect suspicious activity.

In all cases, 3digits takes reasonable steps to ensure that third parties providing personal data to us have obtained it lawfully and are authorized to share it.

3digits processes personal data for the following defined purposes. We do not use personal data for any purpose that is incompatible with those listed here without first obtaining your additional consent or as required by law.

• Account registration and management: To create and maintain your 3digits player account, including authentication and account security.
• Identity verification and KYC: To verify your identity as required by PAGCOR regulations and Philippine AML law before enabling withdrawal functionality on your account.
• Payment processing: To process deposits to and withdrawals from your 3digits account through your chosen payment method.
• Regulatory compliance: To fulfill obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act (RA 10173), and other applicable Philippine laws and regulations.
• Fraud prevention and security: To detect and prevent fraudulent activity, unauthorized account access, money laundering, bonus abuse, and other prohibited conduct described in our Terms and Conditions.
• Customer support: To respond to your inquiries, process complaints, and provide assistance through our 24/7 support channels.
• Responsible gaming: To administer responsible gaming tools including deposit limits, session reminders, cooling-off periods, and self-exclusion in accordance with our Responsible Gaming Policy.
• Platform improvement: To analyze aggregated, anonymized usage data for the purpose of improving platform performance, user experience, and game offerings.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.

Under the Data Privacy Act of 2012 and its Implementing Rules, every instance of personal data processing must be grounded in a recognized lawful basis. The legal bases upon which 3digits relies are as follows:

• Consent (Section 12(a), RA 10173): Where you have given your free, specific, informed, and evidenced consent to processing — for example, for receipt of marketing communications or certain optional data uses.
• Contractual necessity (Section 12(b), RA 10173): Processing necessary to perform the contract between you and 3digits — specifically, the Terms and Conditions governing your player account and use of the platform.
• Legal obligation (Section 12(c), RA 10173): Processing required to comply with a legal obligation imposed on 3digits, including AML reporting obligations under RA 9160, PAGCOR licensing conditions, and tax reporting requirements.
• Legitimate interests (Section 12(f), RA 10173): Processing necessary for the legitimate interests pursued by 3digits — including fraud prevention, platform security, and internal analytics — where such interests are not overridden by your rights and freedoms as a data subject.

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. To withdraw consent, please contact our Data Protection Officer at the details provided in Section 13.

3digits does not sell your personal data. We share personal data only in the circumstances described below, and only to the extent necessary for the stated purpose.

6.1 Regulated Disclosures

As a PAGCOR-regulated operator, 3digits is required by law to share certain data with regulatory and law enforcement authorities. This includes the filing of Covered Transaction Reports (CTRs) and Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) as mandated by RA 9160 and its amendments. Such filings are confidential and cannot be disclosed to you.

6.2 Service Providers

3digits engages carefully vetted third-party service providers — referred to as Personal Information Processors (PIPs) under RA 10173 — to assist with specific operational functions. These include payment processing partners (GCash, Maya, BPI, BDO, Metrobank, 7-Eleven, Coins.ph), KYC and identity verification providers, fraud and AML screening services, cloud hosting and data storage providers, and customer support platform providers. All PIPs are bound by contractual data processing agreements that restrict their use of your data to the specific purpose for which it was shared.

6.3 Game Providers

Certain technical data (such as session tokens and game round identifiers) is transmitted to certified game providers in order to deliver game content. No directly identifying personal data such as your full name or government ID number is shared with game providers.

6.4 Legal Proceedings

3digits may disclose personal data to courts, law enforcement agencies, or other governmental bodies where required by a valid court order, subpoena, or other legal process under Philippine law. Where permitted by law, 3digits will endeavor to notify you before complying with such a disclosure request.

The 3digits platform uses cookies and similar tracking technologies to operate effectively, maintain session integrity, and improve the user experience for Filipino players across Manila, Cebu, Davao, Quezon City, and the rest of the country.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These enable you to log in, maintain your session, and use core features. They cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations to personalize your experience.
• Analytics Cookies: Collect aggregated, anonymized data on how visitors interact with the 3digits platform. This helps us identify and fix technical issues and improve platform design and performance.
• Security Cookies: Detect and prevent fraudulent activity, unauthorized access attempts, and bot interactions with the platform.

7.2 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in and using core platform functions. Your cookie preferences for non-essential cookies can also be managed through the cookie consent interface displayed upon your first visit to the 3digits website.

3digits does not use third-party advertising cookies or cross-site tracking cookies for the purpose of serving targeted advertisements on external platforms.

3digits retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to the retention requirements imposed by applicable Philippine law and regulation. The general retention periods applied by 3digits are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be attributed to any individual. Where data is anonymized, the resulting anonymized dataset may be retained indefinitely for statistical and analytical purposes.

3digits implements a comprehensive set of technical, organizational, and physical security measures to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures are proportionate to the nature and sensitivity of the data held and are reviewed and updated regularly.

9.1 Technical Measures

• All data transmitted between your device and the 3digits platform is encrypted using TLS 1.2 or higher.
• Personal data stored in 3digits databases is encrypted at rest using AES-256 encryption.
• Account passwords are stored as salted cryptographic hashes — 3digits staff cannot view your password in plain text.
• Multi-factor authentication (MFA) is available for player accounts and is mandatory for administrative access to systems holding personal data.
• Platform infrastructure is protected by firewalls, intrusion detection systems, and continuous security monitoring.

9.2 Organizational Measures

• Access to personal data is restricted to authorized personnel whose job functions require such access, on a strict need-to-know basis.
• All staff with access to personal data undergo data privacy training as part of their onboarding and on an annual basis thereafter.
• Third-party service providers are subject to data processing agreements that impose data security obligations consistent with RA 10173 requirements.

9.3 Data Breach Response

In the event of a personal data breach that is likely to give rise to a real risk of serious harm to affected data subjects, 3digits will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03. Affected data subjects will be notified without undue delay where the breach poses a high risk to their rights and freedoms.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 3digits. These rights may be exercised by submitting a written request to our Data Protection Officer at the contact details provided in Section 13.

3digits will respond to data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or high in volume, we may extend this period by a further thirty (30) days, with notice to you of the extension and the reasons for it. Exercising your data subject rights is free of charge in most circumstances.

The 3digits platform is strictly intended for persons who are 21 years of age or older, in accordance with PAGCOR regulations governing online gambling in the Philippines. 3digits does not knowingly collect personal data from individuals under the age of 21.

As part of the mandatory KYC verification process, 3digits verifies the age of every registered player before withdrawal functionality is enabled. Accounts found to belong to persons under 21 years of age will be immediately and permanently closed in accordance with our Terms and Conditions, and any personal data collected in connection with such an account will be retained only for the minimum period required by law before being securely deleted.

3digits may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or operational requirements. When we make material changes — that is, changes that substantially affect your rights as a data subject or the way your personal data is processed — we will provide advance notice via the email address registered on your 3digits account or via a prominent notice on the platform, at least fourteen (14) days before the changes take effect.

Minor updates, such as typographical corrections or clarifications that do not alter the substance of this Privacy Policy, may be published without advance notice. The "Last Updated" date displayed at the top of this page reflects the date of the most recent revision.

Your continued use of the 3digits platform following publication of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any updated version of this Privacy Policy, you should cease using the platform and request account closure before the effective date of the changes.

The current version of this Privacy Policy is always accessible at https://3digits.bet/privacy-policy.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how 3digits handles your personal data, you may contact our Data Protection Officer (DPO) through the following channel:

If you are not satisfied with our response to a data subject rights request or a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at https://www.privacy.gov.ph. We encourage you to contact 3digits first so that we have the opportunity to address your concern directly.