Privacy Policy – How 168jl Protects Your Personal Data

Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "168jl," "we," "us," or "our" – the online gaming platform operated at 168jl.club and its authorized operating entity.
• "Player," "you," or "your" – any individual who accesses, registers on, or uses the 168jl platform in any capacity.
• "Personal Data" – any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual, as defined under Section 3(g) of RA 10173.
• "Sensitive Personal Information" – personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic or sexual life, or any proceeding for any offense committed or alleged to have been committed by such person, as defined under Section 3(l) of RA 10173.
• "Processing" – any operation or set of operations performed upon personal data including collection, recording, organization, storage, updating, retrieval, use, consolidation, blocking, erasure, or destruction.
• "Data Controller" – 168jl, as the entity that determines the purposes and means of processing personal data collected through the platform.
• "Data Processor" – any natural or juridical person who processes personal data on behalf of 168jl pursuant to a contractual arrangement.
• "NPC" – the National Privacy Commission of the Philippines, the government body responsible for administering and implementing RA 10173.
• "PAGCOR" – the Philippine Amusement and Gaming Corporation, the regulatory authority for gaming operations.
• "KYC" – Know Your Customer; the identity and age verification process conducted by 168jl in compliance with PAGCOR and AML requirements.

Scope & Application

This Privacy Policy applies to all personal data collected, processed, stored, and used by 168jl in connection with the operation of the 168jl.club platform, including all game products, payment services, customer support interactions, promotional communications, and any other service offered by 168jl to its players.

This Policy applies to all individuals who interact with 168jl, regardless of whether they have completed account registration. It covers data collected through the website at 168jl.club, any mobile-responsive version of the platform, and all communications channels operated by 168jl including live chat and email.

By registering an account or using the 168jl platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. This consent is in addition to, and does not replace, any specific consent obtained at the time of data collection.

Personal Data We Collect

168jl collects the following categories of personal data in connection with the provision of gaming services:

How We Collect Your Data

168jl collects personal data through the following mechanisms:

• Directly from You: Information you provide when registering your 168jl Account, completing KYC verification, submitting payment information, contacting customer support, or configuring your account preferences.
• Automatically During Platform Use: Technical data including IP address, device identifiers, browser type, session duration, pages visited, and clickstream data collected automatically when you access the 168jl website or use platform services. This data is collected via server logs, cookies, and similar tracking technologies (see Section 9).
• From Payment Service Providers: Confirmation and status data from GCash, Maya, BPI, BDO, UnionBank, and other payment processors to reconcile deposits and withdrawals processed through your 168jl Account.
• From Identity Verification Partners: Results and flags from third-party KYC verification services engaged by 168jl to validate the authenticity of identity documents submitted during account verification.
• From PAGCOR and Regulatory Authorities: 168jl may receive information about players from PAGCOR or other competent Philippine authorities in connection with regulatory compliance, investigations, or enforcement actions.

Purposes of Processing

168jl processes personal data for the following specific, legitimate purposes:

1. Account Management: Creating, maintaining, securing, and administering your 168jl Account, including authentication of your identity at login and enforcement of the one-account-per-player policy.
2. Age and Identity Verification: Verifying that all players meet the minimum age requirement of 21 years and confirming the identity of account holders for KYC compliance purposes as required by PAGCOR.
3. Provision of Gaming Services: Operating and delivering the full range of games and betting services available on the 168jl platform, including processing of wagers, game outcomes, and winnings.
4. Payment Processing: Processing deposits and withdrawals via Philippine payment channels, reconciling transactions, and resolving payment disputes.
5. Regulatory Compliance: Meeting obligations imposed by PAGCOR, the Bangko Sentral ng Pilipinas (BSP), the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, including transaction monitoring, suspicious activity reporting, and record-keeping requirements.
6. Responsible Gaming: Administering deposit limits, loss limits, session reminders, self-exclusion, and other responsible gaming tools; monitoring for indicators of problem gambling; enforcing self-exclusion orders.
7. Customer Support: Responding to account inquiries, technical support requests, payment disputes, and formal complaints submitted by players.
8. Security and Fraud Prevention: Detecting and investigating unauthorized account access, fraudulent transactions, bonus abuse, money laundering, and other prohibited conduct.
9. Platform Improvement: Analyzing aggregated, anonymized gaming activity and technical data to improve platform performance, user experience, and game selection.
10. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out of marketing communications (see Section 14).

Legal Basis for Processing

168jl processes personal data on the following legal bases as recognized under RA 10173:

• Consent (Section 12(a)): Where you have provided express, freely given, and informed consent to specific processing activities — including marketing communications — at the time of data collection.
• Contractual Necessity (Section 12(b)): Processing necessary for the performance of the contract between you and 168jl, including account registration, gaming services, and payment processing.
• Legal Obligation (Section 12(c)): Processing necessary for compliance with legal obligations imposed on 168jl by PAGCOR, AML legislation (RA 9160 as amended by RA 10365), the Data Privacy Act itself, BSP circulars, and other applicable Philippine law.
• Legitimate Interests (Section 12(f)): Processing necessary for the legitimate interests pursued by 168jl, including fraud prevention, platform security, responsible gaming enforcement, and internal analytics, provided these interests are not overridden by your fundamental rights and freedoms.

Data Sharing & Disclosure

168jl does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. Personal data is shared only in the following limited and controlled circumstances:

• Payment Service Providers: GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven CLiQQ, Coins.ph, and cryptocurrency network operators, solely to the extent necessary to process authorized deposit and withdrawal transactions.
• KYC and Identity Verification Partners: Third-party identity document verification services engaged by 168jl to validate KYC submissions. These processors are contractually bound to use your data solely for this purpose.
• Game Content Providers: Game studios and platform providers whose software powers games available on 168jl may receive session and transaction data necessary for game operation, payout validation, and technical support.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and other competent Philippine government bodies, where disclosure is required by law, court order, or regulatory direction.
• Technology and Infrastructure Providers: Cloud hosting, cybersecurity, analytics, and customer support technology vendors engaged by 168jl under Data Processing Agreements (DPAs) that impose obligations at least equivalent to those described in this Policy.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by 168jl, subject to professional confidentiality obligations.

International Data Transfers

168jl's primary data processing infrastructure is located within the Philippines. In limited circumstances, personal data may be transferred to, processed by, or stored in facilities located outside the Philippines — for example, where a game technology provider's servers are located in another jurisdiction, or where cloud infrastructure operates across multiple data centers.

Any international transfer of personal data by 168jl is subject to the following safeguards in accordance with NPC guidelines:

• The recipient country provides an adequate level of protection for personal data, or
• The transfer is governed by contractual clauses that impose data protection standards at least equivalent to those required under RA 10173, or
• The transfer is necessary for the performance of the contract between you and 168jl (e.g., processing a payment through an international payment network), or
• The transfer is required by Philippine law or a binding order of a competent Philippine authority.

168jl will not transfer your Sensitive Personal Information (as defined in RA 10173) to processors located outside the Philippines without your explicit consent, except where required by law.

Cookies & Tracking Technologies

The 168jl website uses cookies and similar tracking technologies to provide a functional, secure, and personalized gaming experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the 168jl platform — including maintaining your authenticated session, preventing CSRF attacks, and enabling core platform functionality. These cookies cannot be disabled without disrupting platform services.
• Performance Cookies: Collect anonymized data about how visitors use the 168jl website — including pages visited, time on site, and error logs — to help 168jl identify performance issues and improve the platform. No personally identifiable information is collected by these cookies.
• Functional Cookies: Remember your preferences including language settings, display preferences, and "Remember Me" login preferences, to provide a more personalized experience on return visits.
• Analytics Cookies: Used by 168jl's internal analytics tools to understand aggregate player behavior and platform usage patterns for the purpose of improving game selection, promotional targeting, and user experience. Data is processed in aggregated, anonymized form.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair or prevent access to the 168jl platform. Blocking performance, functional, or analytics cookies will not prevent access but may reduce the personalization and efficiency of your experience.

Data Retention

168jl retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to minimum retention periods required by applicable Philippine law:

• Account and KYC Data: Retained for a minimum of five (5) years following the closure or suspension of your 168jl Account, as required by PAGCOR regulations and AML record-keeping obligations under RA 9160.
• Transaction Records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years from the date of each transaction, in compliance with BSP and AMLC record-keeping requirements.
• Customer Support Records: Retained for three (3) years from the date of the interaction, to support dispute resolution and regulatory inquiries.
• Marketing Preferences: Retained until you withdraw consent for marketing communications or request deletion, whichever occurs first.
• Technical Logs: IP address logs and session data retained for ninety (90) days for security monitoring purposes, unless a longer period is required for an active security investigation.

Upon expiry of applicable retention periods, 168jl will securely delete or anonymize personal data in a manner that prevents its reconstruction or re-identification.

Security Measures

168jl implements a multi-layered security program to protect personal data against unauthorized access, disclosure, alteration, destruction, and accidental loss. Key security measures include:

• Encryption in Transit: All data transmitted between your device and the 168jl platform is encrypted using TLS 1.2 or higher (HTTPS). Payment data is transmitted using 256-bit SSL encryption.
• Encryption at Rest: Sensitive personal data and financial records stored in 168jl's databases are encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to systems containing personal data is restricted to authorized personnel on a role-based, need-to-know basis. All administrative access requires multi-factor authentication (MFA).
• Password Security: Player passwords are stored as one-way cryptographic hashes (bcrypt or equivalent). Plain-text passwords are never stored or accessible to 168jl staff.
• Penetration Testing: Regular security assessments and penetration testing are conducted to identify and remediate vulnerabilities in the 168jl platform.
• Incident Response: 168jl maintains a documented data breach incident response plan. In the event of a breach posing real risk of harm, 168jl will notify the NPC within 72 hours and affected data subjects as soon as practicable, in accordance with NPC Circular 16-03.

Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you are entitled to the following rights with respect to your personal data held by 168jl. To exercise any of these rights, contact 168jl's Data Protection Officer at [email protected]:

168jl will respond to all data subject requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, the response period may be extended by a further sixty (60) days with notification to the data subject. Requests that are manifestly unfounded or excessive may be refused, with written reasons provided.

If you believe 168jl has not handled your personal data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

Children's Privacy

If 168jl discovers or receives credible information that personal data of an individual under 21 years of age has been collected through the platform, 168jl will:

• Immediately suspend the relevant account pending investigation.
• Delete all personal data associated with the account within thirty (30) days, subject to any reporting obligations to PAGCOR or other regulatory authorities arising from the underage access.
• Refund any real-money deposits made to the account to the payment source from which they originated.

If you are a parent or guardian and believe your child under 21 years of age has registered a 168jl Account, please contact us immediately at [email protected]. Prompt reporting enables 168jl to take corrective action as quickly as possible.

Marketing Communications

Subject to your marketing preferences, 168jl may send promotional communications including bonus offers, game announcements, and platform updates via SMS to your registered Philippine mobile number and/or email to your registered email address.

168jl will only send marketing communications to players who have provided consent at registration or who have not objected to marketing communications. Consent to marketing is separate from, and not a condition of, using the 168jl platform. You may withdraw consent or object to marketing at any time by:

• Updating your communication preferences in your 168jl Account settings.
• Clicking the unsubscribe link in any marketing email from 168jl.
• Replying STOP to any marketing SMS from 168jl.
• Contacting 168jl support at [email protected] with a written opt-out request.

Opt-out requests are processed within five (5) business days. Following your opt-out, 168jl will continue to send transactional and account-related communications that are necessary for the operation of your account — including deposit confirmations, withdrawal notifications, security alerts, and regulatory communications. These service messages are not marketing and are not subject to opt-out.

Changes to This Privacy Policy

168jl reserves the right to update or revise this Privacy Policy from time to time to reflect changes in Philippine privacy law, NPC guidelines, PAGCOR regulatory requirements, platform features, or our data processing practices.

When material changes are made to this Policy, 168jl will provide notice to registered players via email to their registered address and/or an in-platform notification, with at least fourteen (14) days' notice before the revised Policy takes effect. The updated Policy will be published on this page with a revised "Effective Date."

Your continued use of the 168jl platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you should cease using the platform and may request account closure as described in the 168jl Terms & Conditions.

Minor, non-material changes (such as grammatical corrections, clarifications that do not alter the substance of data processing, or updates to contact details) may be made without advance notice, provided the effective date is updated.

Contact & Data Protection Officer

168jl has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173, handling data subject requests, and serving as the primary point of contact for the National Privacy Commission.

To exercise any data subject right, raise a data privacy concern, or submit a formal complaint, please contact the 168jl Data Protection Officer through the following channels:

168jl is committed to acknowledging all data privacy requests within seventy-two (72) hours and providing a substantive response within the periods specified in Section 12 of this Policy.