jl7jjj Privacy Policy

SEC. 01 Introduction & Scope

jl7jjj ("we," "us," "our," or "the Operator") is a PAGCOR-regulated online gaming platform operated for Filipino players at jl7jjj.cam. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, the regulations of the National Privacy Commission (NPC) of the Philippines, and all applicable PAGCOR licensing requirements pertaining to data handling and player privacy.

This Privacy Policy applies to:

• All registered Players holding a real-money account on jl7jjj;
• Visitors who browse jl7jjj.cam without registering an account;
• Individuals who contact jl7jjj via live chat, email, or other support channels;
• Any person whose personal data is processed by jl7jjj in connection with our platform's operations.

This Privacy Policy does not apply to third-party websites, services, or platforms that may be linked to or otherwise referenced on jl7jjj. We encourage you to review the privacy policies of any third-party services you use independently.

As the personal information controller under the Data Privacy Act of 2012, jl7jjj determines the purposes and means of processing personal data collected through our platform and is responsible for ensuring that such processing complies with applicable Philippine law.

SEC. 02 Personal Data We Collect

2.1 Registration and Identity Data

When you register a jl7jjj account, we collect the personal data necessary to establish and verify your identity, confirm your age eligibility (21+ as mandated by PAGCOR), and operate your account:

• Full legal name (first name, middle name, last name);
• Date of birth;
• Philippine mobile number (primary account identifier);
• Residential address (barangay, city/municipality, province, postal code);
• Email address (where provided);
• Account password (stored in hashed, non-reversible format — never in plain text).

2.2 Identity Verification (KYC) Data

To comply with PAGCOR's Know Your Customer requirements and the Anti-Money Laundering Act (RA 9160), we may collect and process:

• Copies of government-issued photo identification (SSS ID, UMID, PhilSys national ID, passport, driver's license, PRC ID, voter's ID);
• Proof of residential address (utility bills, bank statements, or similar documents not older than 3 months);
• Selfie or liveness verification photographs for identity matching;
• Proof of payment method ownership (screenshots of GCash or bank account details matching the registered account name).

2.3 Financial Transaction Data

• Deposit amounts, timestamps, and payment method identifiers (e.g., masked GCash number, masked bank account number);
• Withdrawal requests, amounts, and processing status;
• Bonus credit and wagering history;
• Account wallet balance history.

2.4 Gaming Activity Data

• Game sessions played, game titles accessed, wagers placed, and outcomes;
• Sports betting selections, odds accepted, and settlement results;
• Bingo card purchases and room participation records;
• Session duration, session start and end times.

2.5 Technical and Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser/application version;
• Device identifiers (where technically necessary for fraud prevention);
• Session tokens and login history (timestamp, device, IP per session).

2.6 Communications Data

• Records of communications with jl7jjj customer support via live chat, email, or other channels, including the content of those communications and any attachments provided;
• Feedback, survey responses, and complaint records.

SEC. 03 How We Collect Personal Data

jl7jjj collects personal data through the following channels:

• Directly from you: Information you provide when registering your jl7jjj account, completing the KYC verification process, making deposits or withdrawal requests, contacting our support team, or responding to surveys and promotions;
• Automatically through platform use: Technical data collected automatically when you access jl7jjj.cam, including IP address, device identifiers, browser data, and session logs, via server logs, cookies, and similar tracking technologies described in Section 7;
• From payment service providers: Transaction confirmation data from GCash, Maya, BPI, BDO, Metrobank, and other payment providers used to process your deposits and withdrawals — limited to confirmation of transaction status and the payment identifier necessary to match transactions to your account;
• From identity verification partners: Where jl7jjj uses a third-party KYC or identity verification service, verification results (confirmed/not confirmed, risk score) are shared with jl7jjj, though the underlying document images may be retained by the verification partner under its own privacy practices;
• From fraud detection and AML monitoring systems: Risk scores and alerts generated by our internal and third-party fraud prevention and anti-money laundering monitoring tools.

SEC. 04 Purposes of Processing

jl7jjj processes your personal data for the following specific purposes:

• Account creation and management: Establishing your jl7jjj account, authenticating your identity at login, and maintaining accurate account records;
• Age and identity verification: Confirming that you meet the PAGCOR-mandated minimum age of 21 years and that you are who you represent yourself to be;
• Payment processing: Processing your deposits and withdrawal requests, verifying payment method ownership, and maintaining accurate financial records;
• Game and platform delivery: Providing access to casino games, live dealer tables, bingo rooms, and sports betting markets, and recording game outcomes for dispute resolution and audit purposes;
• Bonus and promotion administration: Crediting, tracking, and settling promotional bonuses, free spins, and loyalty rewards;
• Regulatory compliance: Fulfilling jl7jjj's obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (RA 9160), and the Data Privacy Act of 2012;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviors and enforcing responsible gaming tools including deposit limits, loss limits, and self-exclusion;
• Fraud prevention and security: Detecting and preventing unauthorized account access, bonus abuse, collusion, money laundering, and other prohibited conduct;
• Customer support: Responding to your inquiries, resolving complaints, and improving our support service quality;
• Platform improvement: Analysing aggregated, anonymized usage data to improve jl7jjj's games selection, interface design, and platform performance;
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates via SMS or push notification to your registered mobile number, subject to your communication preferences.

SEC. 05 Legal Bases for Processing

Under the Data Privacy Act of 2012, jl7jjj processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create and operate your jl7jjj account and deliver the gaming services you have contracted for — including KYC, payment processing, and game delivery;
• Legal obligation: Processing required to comply with PAGCOR's licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act's own requirements (including data breach notification), and any other applicable Philippine law;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics, where such interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications and any non-essential data collection for which we have obtained your explicit prior consent. You may withdraw consent for marketing communications at any time by contacting jl7jjj support.

SEC. 06 Data Sharing & Disclosure

6.1 Third-Party Service Providers

jl7jjj engages third-party service providers who process personal data on our behalf as personal information processors, under written agreements that require them to process data only on jl7jjj's instructions and to maintain security measures equivalent to those required under Philippine law. Categories of processors include: payment processing partners (GCash, Maya, BPI, BDO, and others), KYC and identity verification providers, fraud detection and AML monitoring services, cloud infrastructure and hosting providers, and customer support platform operators.

6.2 Regulatory and Law Enforcement Disclosure

jl7jjj will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the National Bureau of Investigation (NBI), or other Philippine government authorities where required by law, pursuant to a lawful order, or where disclosure is necessary to prevent or report a crime, protect national security, or fulfill jl7jjj's regulatory obligations.

6.3 Game Studio Providers

Game providers such as JILI Games, PG Soft, Pragmatic Play, and Ezugi may receive limited technical identifiers (non-identifying player session tokens) necessary to operate their games on jl7jjj's platform. These providers do not receive your name, mobile number, or financial data under normal operating conditions.

6.4 No Sale of Personal Data

jl7jjj does not sell, rent, or otherwise commercially transfer your personal data to unrelated third parties for their own marketing or commercial purposes. This prohibition is absolute and is not subject to any exception.

6.5 Cross-Border Transfers

Where any personal data is transferred to a recipient located outside the Philippines — for example, where a game provider or cloud infrastructure partner operates servers outside the country — jl7jjj ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012 and the NPC's implementing rules on cross-border data transfers, including the use of contractual safeguards where required.

SEC. 07 Cookies & Tracking Technologies

7.1 What We Use

jl7jjj uses cookies and similar tracking technologies — including local storage, session tokens, and browser fingerprinting signals — on jl7jjj.cam. These technologies serve the following functions:

• Essential cookies: Required for core platform functionality including login session management, security tokens, and load balancing. These cannot be disabled without preventing access to jl7jjj;
• Functional cookies: Store your preferences such as language settings, last-played game category, and responsible gaming tool configurations;
• Analytics cookies: Collect aggregated data on platform usage patterns — pages visited, features used, and session durations — to help us improve jl7jjj's design and performance;
• Security cookies: Assist in detecting bot activity, brute-force login attempts, and other unauthorized automated access to jl7jjj.

7.2 Managing Cookies

You may configure your browser or mobile device to reject non-essential cookies. Please note that disabling certain cookies — particularly essential session cookies — will prevent jl7jjj from functioning correctly. jl7jjj does not use third-party advertising or behavioral targeting cookies.

SEC. 08 Data Retention

jl7jjj retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following minimum retention obligations:

• Account and identity data: Retained for the duration of your active jl7jjj account plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing conditions and the Anti-Money Laundering Act's record-keeping requirements;
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later, as required under AMLA regulations;
• Financial transaction records: Retained for a minimum of five (5) years as required by the AMLC and PAGCOR audit requirements;
• Customer support communications: Retained for a minimum of two (2) years from the date of the most recent communication in each support thread;
• Session logs and security data: Retained for ninety (90) days for routine security monitoring, with longer retention periods applied where an incident or investigation is active;
• Marketing preference records: Retained for the duration of your active account plus ninety (90) days to honour opt-out requests.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized using industry-standard data destruction methods.

SEC. 09 Data Security

9.1 Technical Safeguards

jl7jjj implements the following technical measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Transport Layer Security (TLS/SSL) encryption on all data transmitted between your device and jl7jjj's servers;
• Encryption of sensitive data at rest in jl7jjj's databases, including hashed storage of account passwords using industry-standard one-way hashing algorithms;
• Multi-factor authentication options for Player accounts and mandatory multi-factor authentication for all jl7jjj administrative personnel;
• Firewall protection, intrusion detection and prevention systems, and continuous security monitoring of jl7jjj's infrastructure;
• Regular penetration testing and vulnerability assessments of jl7jjj's platform and systems.

9.2 Organizational Safeguards

• Access to personal data is restricted on a need-to-know basis to jl7jjj staff and authorized contractors whose roles require such access;
• All jl7jjj personnel with access to personal data are subject to confidentiality obligations and receive regular data privacy training;
• jl7jjj maintains a documented data breach response procedure in compliance with the NPC's breach notification requirements under the Data Privacy Act.

9.3 Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, jl7jjj will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with Section 20(f) of the Data Privacy Act of 2012 and the NPC's Circular 16-03.

SEC. 10 Your Rights Under Philippine Law

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl7jjj:

• Right to be Informed: You have the right to be informed of the fact of data collection, the purposes of processing, the scope and method of processing, and the rights available to you — as described in this Privacy Policy;
• Right of Access: You may request a copy of the personal data jl7jjj holds about you, together with information on how it is being processed;
• Right to Rectification: You may request correction of inaccurate, incomplete, or outdated personal data held by jl7jjj. Basic account details (name, address) can be corrected by contacting our support team;
• Right to Erasure / Right to be Forgotten: You may request deletion of your personal data where: it is no longer necessary for the purposes for which it was collected; you withdraw consent (where consent is the legal basis); or the data has been unlawfully processed. This right is subject to jl7jjj's legal retention obligations under PAGCOR and AMLA regulations, which override erasure requests where applicable;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances warrant it;
• Right to Data Portability: You may request your personal data in a structured, commonly used, and machine-readable format where processing is carried out by automated means;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe jl7jjj has violated your rights under the Data Privacy Act of 2012.

To exercise any of the above rights, contact jl7jjj's Data Protection Officer by emailing [email protected] with the subject line "Data Subject Rights Request." We will respond within fifteen (15) calendar days of receipt of a verified request, in accordance with NPC guidelines.

SEC. 11 Children's Privacy

jl7jjj does not knowingly collect personal data from individuals under the age of twenty-one (21) years. The PAGCOR-mandated minimum age for real-money gaming on jl7jjj is 21 years. Age verification is a mandatory step in the jl7jjj registration and KYC process.

If jl7jjj becomes aware that personal data has been collected from an individual who is under 21 years of age, the relevant account will be immediately suspended, all balances will be frozen pending investigation, the data will be securely deleted to the extent permitted by applicable law, and the matter will be reported to PAGCOR as required by regulation.

Parents and guardians who believe that a minor may have registered a jl7jjj account are encouraged to contact our support team immediately at [email protected]. jl7jjj will investigate and act promptly on all such reports.

SEC. 12 Policy Amendments

jl7jjj reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR regulatory requirements, or jl7jjj's data processing practices. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Material changes to this Privacy Policy will be communicated to registered Players via SMS to your registered mobile number or via a prominent notice on jl7jjj.cam, no less than seven (7) calendar days before the changes take effect, except where immediate changes are required to comply with a new legal obligation or to address a security incident.

Your continued use of jl7jjj following the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any amendment, you may close your account and request deletion of your personal data subject to jl7jjj's legal retention obligations.

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (RA 10173) and its implementing rules and regulations issued by the National Privacy Commission.