j3j3 Casino Privacy Policy

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal data is j3j3, operating the Platform at j3j3.club. As data controller, j3j3 determines the purposes and means by which your personal data is processed in connection with the Platform and its associated services.

j3j3 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with applicable Philippine data protection law and this Policy. You may contact the DPO using the details set out in Section 15 of this Policy.

j3j3 collects the following categories of personal data from players and Platform users:

j3j3 does not collect or process sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or biometric data, except where a government-issued ID submitted for KYC purposes incidentally contains such information, in which case it is processed solely for identity verification and not for any other purpose.

j3j3 collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or update your account details.
• Automatically: through server logs, cookies, and tracking technologies that record technical and usage data during your sessions on the j3j3 Platform.
• From payment providers: GCash, PayMaya, BDO, BPI, Metrobank, and cryptocurrency payment processors may share transaction confirmation data with j3j3 to facilitate payment processing and fraud prevention.
• From identity verification providers: third-party KYC service providers may process and return the results of identity checks to j3j3 for account verification purposes.
• From fraud prevention services: risk and fraud screening tools may provide data enrichment signals used by j3j3 to detect and prevent prohibited conduct on the Platform.

Under the Data Privacy Act of 2012 (RA 10173), j3j3 must have a lawful basis for each category of personal data processing. j3j3 relies on the following legal bases:

• Contractual necessity: processing required to deliver the services described in j3j3's Terms & Conditions — including account creation, deposits, game access, withdrawals, and customer support.
• Legal obligation: processing required to comply with PAGCOR licensing conditions, AMLA (Anti-Money Laundering Act) obligations, KYC requirements, and NPC registration requirements.
• Legitimate interests: processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement, where j3j3's legitimate interests do not override your privacy rights.
• Consent: processing for optional purposes such as marketing communications and non-essential cookies, where you have provided clear and specific consent. You may withdraw this consent at any time.

j3j3 uses personal data collected from players for the following purposes only:

• To create, verify, maintain, and close your j3j3 Account.
• To process deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, USDT, and Bitcoin.
• To verify your identity and age through KYC procedures as required by PAGCOR and applicable law.
• To provide access to j3j3 games, live casino tables, sports betting markets, and all Platform features.
• To administer bonuses, promotions, and loyalty programs applicable to your Account.
• To deliver customer support via live chat and email in Tagalog, English, and Bisaya.
• To monitor gaming activity for responsible gaming purposes and enforce deposit limits, cool-off periods, and self-exclusion requests.
• To detect, investigate, and prevent fraud, money laundering, underage gambling, and other prohibited conduct.
• To comply with PAGCOR regulatory requirements, AMLA reporting obligations, and any lawful request from Philippine government authorities.
• To improve Platform performance, security, and user experience through analysis of technical and usage data.
• To send service notifications, security alerts, and promotional communications where you have consented to receive them.

j3j3 does not sell, rent, or trade your personal data to any third party for commercial purposes. j3j3 may share personal data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Game providers: game software providers whose titles are available on the j3j3 Platform may receive limited technical data (session tokens, game round identifiers) for the purpose of delivering and reconciling game outcomes.
• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and cryptocurrency payment processors receive your payment details solely for the purpose of processing your deposits and withdrawals.
• KYC and identity verification providers: accredited third-party identity verification services receive your identity documents for the purpose of performing KYC checks required by PAGCOR.
• Fraud prevention and risk management services: third-party tools that assist j3j3 in detecting fraudulent activity, money laundering, and prohibited conduct may receive limited data for risk scoring purposes.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other competent Philippine government authority may receive personal data where j3j3 is legally required to disclose it.
• IT and hosting providers: third-party cloud infrastructure and server hosting providers that process personal data on j3j3's behalf under appropriate data processing agreements.

All third parties with whom j3j3 shares personal data are contractually required to process that data only for the specified purpose, in compliance with RA 10173, and with appropriate technical and organisational security measures in place.

The j3j3 Platform uses cookies and similar tracking technologies to deliver Platform functionality, maintain session integrity, and analyse user behaviour. Cookies are small text files stored on your device that allow the Platform to recognise your browser and remember session state.

You can manage cookie preferences through your browser settings. Please note that disabling non-essential cookies will not prevent you from accessing the j3j3 Platform, but may affect some non-critical functionality. j3j3 does not use third-party advertising cookies or retargeting pixels for the purpose of serving advertisements outside of the Platform.

j3j3 retains personal data only for as long as is necessary for the purposes set out in this Policy, subject to applicable Philippine legal and regulatory retention obligations. The following retention periods apply as a general guide:

• Account and identity data: retained for the duration of the account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA obligations.
• Financial and transaction data: retained for a minimum of five (5) years following the date of the transaction, in compliance with AMLA record-keeping requirements.
• KYC documents: retained for a minimum of five (5) years following account closure or the date of last transaction, whichever is later.
• Technical and usage data: retained for up to two (2) years from collection for security and fraud analysis purposes, then anonymised or deleted.
• Customer support communications: retained for up to three (3) years from the date of the last interaction for quality assurance and dispute resolution purposes.
• Responsible gaming records: self-exclusion and related responsible gaming data may be retained for up to seven (7) years to prevent re-registration during an active exclusion period.

Where j3j3 is required by law or regulatory direction to retain data for a longer period, the legally mandated retention period shall prevail. Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with j3j3's data disposal procedures.

j3j3 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and j3j3 servers.
• Encryption of sensitive data at rest, including payment method details and KYC documents.
• Role-based access controls limiting staff access to personal data on a need-to-know basis.
• Multi-factor authentication required for all j3j3 staff accessing systems containing personal data.
• Regular security audits, vulnerability assessments, and penetration testing.
• Incident response procedures aligned with NPC data breach notification requirements.
• Staff data privacy training and confidentiality obligations.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, j3j3 will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected data subjects as required under RA 10173 and NPC Circular No. 16-03.

Some of the third-party providers that j3j3 works with — including certain game providers, cloud infrastructure providers, and KYC verification services — may process personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, j3j3 ensures that appropriate safeguards are in place in accordance with the requirements of RA 10173 and NPC guidance on cross-border data transfers.

Safeguards used by j3j3 for international data transfers include contractual data processing agreements incorporating the NPC's standard contractual clauses, transfers to countries recognised as providing adequate data protection under NPC guidance, and binding corporate rules where applicable. j3j3 does not transfer personal data to jurisdictions that do not provide an adequate level of protection without implementing appropriate contractual safeguards.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by j3j3. You may exercise any of these rights by contacting j3j3's Data Protection Officer using the details in Section 15:

j3j3 will respond to all data subject rights requests within thirty (30) days of receipt, or within such extended period as permitted by RA 10173 where the request is complex or numerous. Requests must be submitted with sufficient information to verify your identity. j3j3 will not charge a fee for exercising your rights unless the request is manifestly unfounded or excessive.

The j3j3 Platform is strictly prohibited to persons under 21 years of age, in accordance with PAGCOR regulations. j3j3 does not knowingly collect personal data from anyone under 21 years of age. Age verification is enforced at registration through KYC procedures, and j3j3 applies technical measures to detect and prevent access by underage persons.

If j3j3 becomes aware that it has inadvertently collected personal data from a person under 21 years of age, that data will be deleted promptly and the Account will be immediately suspended. If you are a parent or guardian and believe a minor has created a j3j3 Account, please contact j3j3 support immediately at the details provided in Section 15. Parents and guardians are responsible for implementing appropriate parental controls on devices that may be accessed by minors.

j3j3 may send promotional communications — including information about new games, bonuses, and platform features — to players who have consented to receive such communications during registration or subsequently through their Account settings. Marketing communications are sent via SMS to registered Philippine mobile numbers and/or by email to registered email addresses.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your j3j3 Account settings.
• Clicking the unsubscribe link included in any marketing email.
• Contacting j3j3 support and requesting removal from marketing communications.

Withdrawal of marketing consent does not affect j3j3's right to send service and transactional communications that are necessary for the operation of your Account — including deposit confirmations, withdrawal notifications, security alerts, and material updates to Platform terms and policies.

j3j3 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, Platform features, or data processing practices. Where amendments are material, j3j3 will notify registered players via email or via a prominent notice on the Platform prior to the changes taking effect.

The current version of this Policy, including its effective date, is always available on the j3j3 Platform at j3j3.club/privacy-policy. Your continued use of the Platform after an amendment takes effect constitutes your acceptance of the revised Policy. If you do not agree to the revised Policy, you should stop using the Platform and contact j3j3 to close your Account.

For all data privacy queries, data subject rights requests, or complaints relating to this Policy, please contact j3j3's Data Protection Officer using the following details. Please include "Privacy Request" or "DPO" in the subject line of email correspondence to ensure prompt routing to the correct team.

If you are not satisfied with j3j3's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) — the regulatory authority responsible for enforcing the Data Privacy Act of 2012.