899jl Casino — Privacy Policy

899jl Casino is committed to protecting the privacy and personal data of every Filipino player who uses our platform. This Privacy Policy has been drafted in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations issued by the National Privacy Commission ("NPC"). It has also been drafted to reflect 899jl's obligations as a PAGCOR-licensed online gaming operator with respect to player data handling, anti-money laundering ("AML") compliance, and responsible gaming record-keeping.

This Policy governs the collection and processing of personal data across all 899jl touchpoints, including but not limited to: account registration and verification, deposit and withdrawal transactions, gameplay and betting activity, promotional participation, customer support interactions, and all communications between you and 899jl. This Policy applies to personal data collected both online through the Platform and, where applicable, offline through support channels.

This Policy does not apply to third-party websites, applications, or services that may be linked from or to the 899jl platform. 899jl is not responsible for the privacy practices of any third-party game provider, payment processor, or other external entity whose services are accessed through or in connection with the 899jl platform.

For the purposes of the Data Privacy Act of 2012 and its implementing rules and regulations, the data controller responsible for the personal data collected through the 899jl platform is:

As the data controller, 899jl determines the purposes for which and the means by which personal data submitted through the Platform is processed. 899jl has designated a Data Protection Officer ("DPO") responsible for overseeing data protection strategy and ensuring compliance with applicable data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy.

899jl collects personal data through various channels and for various purposes. The categories of personal data we collect include the following:

899jl processes your personal data only where there is a lawful basis for doing so under the Data Privacy Act of 2012. The following table outlines the purposes for which 899jl processes your personal data and the corresponding legal basis under the DPA:

Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of any processing carried out prior to your withdrawal. Withdrawal of consent for processing that is required for account operation or PAGCOR compliance may necessitate account closure.

899jl retains personal data for no longer than is necessary for the purposes set out in this Policy, subject to applicable legal and regulatory obligations that may require or permit longer retention periods.

• Active Account Data: Personal data associated with an active 899jl account is retained for the duration of the account's active status and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements;
• KYC and Identity Verification Records: Retained for a minimum of five (5) years following account closure as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Transaction Records: Financial transaction records, including deposits, withdrawals, and bet history, are retained for a minimum of five (5) years in accordance with PAGCOR and AMLC requirements;
• Support Communications: Customer support records are retained for three (3) years following the resolution of the relevant inquiry or dispute;
• Marketing Consent Records: Records of your marketing communication consent or withdrawal thereof are retained indefinitely to demonstrate compliance history;
• Cookie and Analytics Data: Session-specific cookie data is deleted upon session expiry. Analytics data is retained in anonymized, aggregated form for up to twenty-four (24) months.

Upon expiry of the applicable retention period, personal data will be securely deleted, destroyed, or anonymized such that re-identification is no longer possible, in accordance with 899jl's data disposal procedures.

899jl does not sell your personal data to any third party under any circumstances. 899jl may share your personal data with the following categories of recipients strictly on a need-to-know basis and subject to appropriate data sharing or processing agreements:

899jl engages third-party service providers who process personal data on our behalf as data processors, including: KYC identity verification service providers, payment processors and e-wallet providers (including GCash and Maya platform operators), game software providers, cloud infrastructure and hosting providers, customer support platform providers, and fraud detection and security monitoring services. All such third-party processors are contractually bound to process personal data only in accordance with 899jl's instructions and applicable Philippine data privacy law.

899jl may disclose your personal data to competent Philippine government authorities and regulatory bodies where required by law or regulatory obligation, including:

• Philippine Amusement and Gaming Corporation (PAGCOR) — in connection with licensing, audits, and regulatory reporting;
• Anti-Money Laundering Council (AMLC) — in connection with suspicious transaction reporting obligations under the Anti-Money Laundering Act (RA 9160 as amended);
• National Privacy Commission (NPC) — in connection with data breach notifications and regulatory inquiries;
• Philippine law enforcement agencies and courts — where required by a valid court order, subpoena, or other legal process issued by a competent Philippine authority.

899jl implements and maintains comprehensive technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-Bit SSL/TLS Encryption: All data transmitted between your device and 899jl's servers is protected by 256-bit SSL/TLS encryption — the same standard used by major Philippine commercial banks for internet banking services;
• Encrypted Storage: Sensitive data at rest, including KYC documents and financial account details, is stored using AES-256 encryption on secured servers with restricted access;
• Password Hashing: Member passwords are never stored in plaintext. All passwords are cryptographically hashed using a strong, industry-standard algorithm with salting before storage;
• Access Controls: Access to systems containing personal data is restricted to authorized 899jl personnel on a strict need-to-know basis, with role-based access controls and audit logging;
• Multi-Factor Authentication: Administrative access to 899jl's backend systems requires multi-factor authentication;
• Regular Security Audits: 899jl's platform infrastructure undergoes regular security audits and penetration testing by qualified security professionals;
• Incident Response: 899jl maintains a documented data breach incident response procedure. In the event of a personal data breach affecting your rights and freedoms, 899jl will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected members without undue delay.

899jl uses cookies and similar tracking technologies to operate and improve the Platform, personalize your experience, and maintain session security. Cookies are small data files stored on your device's browser when you access the 899jl platform.

You may manage or disable cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to log in to and use the 899jl platform. Disabling analytics or functional cookies will not prevent you from accessing 899jl's core gaming features but may affect personalization and certain convenience features.

On mobile browsers, cookie settings are typically accessible through your browser's privacy or site settings menu. Refer to your specific browser's help documentation for instructions on managing cookies.

Under Republic Act No. 10173 (Data Privacy Act of 2012), as a data subject, you have the following rights with respect to your personal data held by 899jl:

• Right to be Informed: The right to be notified about the collection and processing of your personal data, the purposes thereof, and the identity of the data controller — which is fulfilled by this Privacy Policy;
• Right of Access: The right to obtain confirmation from 899jl as to whether personal data concerning you is being processed and, if so, to access a copy of that personal data and related processing information;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or completed. You may update basic account information directly in your 899jl account settings. For KYC-related data corrections, please contact support;
• Right to Erasure (Right to be Forgotten): The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent, subject to 899jl's overriding legal and regulatory retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. You may unsubscribe from 899jl marketing communications at any time;
• Right to Block or Restrict Processing: The right to request that 899jl restrict the processing of your personal data in certain circumstances, such as while a rectification request is under review;
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible;
• Right to Damages: The right to be compensated for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, in accordance with the DPA.

To exercise any of these rights, please submit a written request to 899jl's Data Protection Officer at the contact details provided in Section 14. 899jl will respond to your request within fifteen (15) working days of receipt. In complex cases requiring additional investigation, this period may be extended, and you will be notified accordingly.

If 899jl discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, any balance will be held pending investigation, and the account will be permanently closed. If personal data of a person under 21 is found to have been collected due to misrepresentation of age, such data will be promptly deleted from 899jl's systems upon confirmation.

Parents and guardians are encouraged to implement appropriate parental control software and browser monitoring tools to prevent minors from accessing online gaming platforms. If you have reason to believe that a minor has registered for an 899jl account, please contact 899jl's customer support team immediately so that appropriate action can be taken.

As a PAGCOR-licensed online gaming operator, 899jl is classified as a covered person under Republic Act No. 9160, the Anti-Money Laundering Act of 2001, as amended by Republic Acts 9194, 10167, 10365, and 10927. 899jl is legally required to:

• Conduct customer due diligence (CDD) and enhanced due diligence (EDD) for high-risk accounts and transactions;
• Monitor and record all financial transactions conducted through the 899jl platform;
• File Covered Transaction Reports (CTRs) with the Anti-Money Laundering Council (AMLC) for single transactions exceeding the threshold prescribed by law and applicable AMLC regulations;
• File Suspicious Transaction Reports (STRs) with the AMLC where there are reasonable grounds to suspect that a transaction is related to money laundering, terrorism financing, or any other unlawful activity;
• Maintain all transaction records, KYC documentation, and related reports for the period prescribed by law.

Reporting to the AMLC is conducted in accordance with strict confidentiality requirements under the AMLA. 899jl personnel are prohibited from disclosing to any person the fact that a suspicious transaction report has been filed or is being considered. The act of filing such reports does not constitute a breach of any duty of confidentiality owed to the customer.

In the course of providing its services, 899jl may transfer certain personal data to third-party service providers whose infrastructure or processing operations are located outside the Philippines, including but not limited to game software providers, cloud server infrastructure providers, and KYC verification platform providers.

Any cross-border transfer of personal data by 899jl is conducted in strict compliance with Section 21 of the Data Privacy Act of 2012 and the implementing rules and regulations of the National Privacy Commission. 899jl ensures that:

• Recipient countries or entities provide a level of data protection that is at least comparable to the standards required under the DPA;
• Appropriate contractual safeguards — including data processing agreements incorporating Standard Contractual Clauses or equivalent protections — are in place for all cross-border data transfers;
• Cross-border transfers are limited to what is strictly necessary for the purpose for which the data was collected.

Where 899jl relies on third-party processors located outside the Philippines, those processors are contractually prohibited from processing the data for any purpose other than the specific service they provide to 899jl, and are required to maintain security standards no less protective than those described in Section 7 of this Policy.

899jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, new legal or regulatory requirements, or improvements to the 899jl platform. The revised Policy will be published on this page with an updated effective date.

For material changes to this Policy — particularly changes that affect the rights of 899jl members or introduce new categories of data processing — 899jl will provide notice to registered members via email, in-platform notification, or both, prior to the changes taking effect, where practicable.

Your continued use of the 899jl platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated Policy. If you do not accept the revised Policy, you should cease using the Platform and may close your account in accordance with 899jl's Terms and Conditions. 899jl recommends that you review this page periodically to stay informed of how your personal data is being handled.

In accordance with Section 21 of the Data Privacy Act of 2012 and NPC Circular 17-01 (Guidelines on the Registration of Data Processing Systems and Designation of Data Protection Officers), 899jl has designated a Data Protection Officer responsible for:

• Overseeing 899jl's compliance with the Data Privacy Act of 2012 and NPC issuances;
• Serving as the primary point of contact between 899jl and the National Privacy Commission;
• Receiving and responding to data subject rights requests from 899jl members;
• Managing 899jl's data breach notification procedures;
• Conducting data privacy impact assessments for new or modified data processing activities.

To submit a data subject rights request, a data privacy inquiry, or a privacy complaint, please contact 899jl's Data Protection Officer using the contact information provided in Section 15 of this Policy. All requests should be submitted in writing and should include your 899jl registered username, a description of your request or concern, and any relevant account or transaction reference numbers.

For any data privacy-related inquiries, data subject rights requests, or privacy complaints, please contact 899jl through the following channels:

If you are not satisfied with 899jl's response to your data privacy concern, or if you believe that 899jl has failed to comply with the Data Privacy Act of 2012 in the handling of your personal data, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines through its official government complaint channels. 899jl encourages all members to contact us first so that we have an opportunity to resolve your concern directly and promptly.