168jl Privacy Policy

1.1 This Privacy Policy ("Policy") describes how 168jl Casino ("168jl", "we", "us", or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "your", or "data subject") who access or use the 168jl online gaming platform at 168jl.org and any associated mobile applications or services (collectively, the "Platform").

1.2 This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). 168jl is committed to upholding the data privacy rights of all Filipino players and users of the Platform.

1.3 By registering an account with 168jl or by continuing to use the Platform, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform.

168jl collects personal data in the following categories:

• Full legal name
• Date of birth (for age verification — players must be 21 years old or above)
• Email address
• Mobile phone number
• Residential address (city, province, country)
• Username and encrypted password

• Government-issued identification documents (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, PRC ID, Voter's ID)
• Proof of address documents
• Selfie or facial image for identity matching (where required)
• Proof of payment method ownership

• Deposit and withdrawal transaction records
• Payment method details (GCash account number, Maya account, bank account details — stored in tokenized form)
• Account balance history
• Bonus and promotion redemption records

• Game session logs (games played, duration, wager amounts, outcomes)
• Login and logout timestamps
• Device information (device type, operating system, browser type)
• IP address and approximate geolocation
• Responsible gaming tool usage (deposit limits set, self-exclusion requests)

• Customer support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing communication preferences

168jl processes your personal data for the following purposes, each supported by a lawful basis under the DPA:

To create and manage your 168jl player account, authenticate your identity at login, process deposits and withdrawals, deliver gameplay services, and provide customer support. This processing is necessary for the performance of our contract with you.

To verify your age (21+ requirement) and identity in compliance with PAGCOR regulations and anti-money laundering laws, to detect and prevent fraudulent activity, and to protect the integrity of the Platform. This processing is necessary for compliance with legal obligations and for our legitimate interests in maintaining a secure platform.

To comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act. 168jl may be required to retain certain records and disclose data to regulatory authorities as mandated by law.

To monitor gameplay patterns for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to proactively reach out to players who may be experiencing gambling-related harm. This processing is in your vital interest and in the public interest of promoting responsible gaming.

To send you promotional offers, bonus notifications, and platform updates via email or SMS, where you have provided your consent. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your account settings or by contacting our support team.

To analyze aggregated usage data, improve the Platform's features and user experience, and conduct internal research and analytics. Where possible, this analysis is performed on anonymized or pseudonymized data.

4.1 168jl does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya/Maya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers engaged to assist with age and identity verification.
• Game Content Providers: Licensed game studios and software providers whose games are available on the 168jl Platform, to the extent necessary for game delivery and technical support.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or regulatory directive.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required pursuant to a valid court order, subpoena, or legal process.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and technical infrastructure providers engaged to support Platform operations, subject to strict data processing agreements.

4.2 All third-party service providers engaged by 168jl are required to process personal data only in accordance with 168jl's instructions and in compliance with the DPA. 168jl does not authorize any third party to use your personal data for their own independent purposes.

5.1 168jl retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation.

5.2 The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus five (5) years following account closure, in compliance with PAGCOR and AMLA record- keeping requirements.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, as required under the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA and PAGCOR regulations.
• Customer Support Records: Retained for three (3) years from the date of the interaction.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, whichever is earlier.

5.3 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with 168jl's data disposal procedures.

6.1 168jl implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and 168jl servers
• AES-256 encryption for sensitive data stored at rest, including payment details and identity documents
• Multi-factor authentication options for player account access
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Intrusion detection and prevention systems monitoring Platform infrastructure
• Staff training on data privacy and security obligations under the DPA

6.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 168jl will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with NPC Circular No. 16-03.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 168jl:

You have the right to be informed of how your personal data is being collected and processed. This Privacy Policy serves as 168jl's primary disclosure to you in fulfillment of this right.

You have the right to request a copy of the personal data that 168jl holds about you, including information about the purposes for which it is being processed and the recipients to whom it has been disclosed.

You have the right to request correction of any inaccurate or incomplete personal data that 168jl holds about you. You may update certain account details directly through your account settings, or by contacting our support team.

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. Note that this right is subject to 168jl's legal obligations to retain certain data under PAGCOR and AMLA regulations.

You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.

You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to 168jl's overriding legal obligations.

If you believe that 168jl has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

8.1 168jl uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and collect analytics data. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly, including session management, authentication, and security features. These cannot be disabled.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.

8.2 You may control cookie settings through your browser preferences. Please note that disabling certain cookies may affect the functionality of the Platform. 168jl does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

9.1 The 168jl Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. 168jl does not knowingly collect personal data from individuals under the age of 21.

9.2 Age verification is conducted as part of the registration and KYC process. If 168jl discovers that personal data has been collected from an individual under the age of 21, the associated account will be immediately closed, all data will be deleted in accordance with our data disposal procedures, and any funds in the account will be handled in accordance with our Terms & Conditions and applicable law.

10.1 168jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision will always be indicated at the top of this page.

10.2 Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — 168jl will notify registered players via the email address associated with their account prior to the changes taking effect.

10.3 Your continued use of the 168jl Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how we protect your data.

11.1 168jl has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, you may contact our DPO using the details below.

11.2 If you are not satisfied with 168jl's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.