367jl Privacy Policy —
How We Handle Your Data

This Privacy Policy applies to all personal data collected, stored, processed, and used by the 367jl online gaming platform, accessible at 367jl.org and any related mobile or web-based interfaces offered under the 367jl brand (collectively, the "Platform").

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), 367jl acts as the Personal Information Controller (PIC) in respect of the personal data you provide when registering, playing, transacting, or otherwise interacting with the Platform.

This Policy covers data collected from registered players and visitors to the Platform located in the Philippines. By creating a 367jl account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

367jl collects personal data that is necessary and proportionate to the purposes for which it is collected. The categories of personal data we collect are set out below:

2.1 Registration Data

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth (used to verify the 21+ age requirement under PAGCOR regulations)
• Philippine mobile number (+63 prefix)
• Email address (if provided during registration or account updates)
• Username and encrypted password
• Residential address (required for certain KYC verification tiers)

2.2 Identity Verification (KYC) Data

• Scanned copy or photograph of a valid Philippine government-issued ID (e.g., PhilSys, Passport, UMID, Driver's License)
• Selfie or live photograph for facial comparison (where required by enhanced KYC procedures)
• Proof of address documents where required for high-value account verification

2.3 Financial Transaction Data

• GCash account reference associated with deposit and withdrawal transactions
• PayMaya account reference associated with deposit and withdrawal transactions
• Bank account details (account name, bank name) provided for bank transfer transactions
• Transaction amounts, dates, times, and reference numbers
• Deposit and withdrawal history

2.4 Gaming Activity Data

• Game history, including game titles played, wager amounts, outcomes, and session duration
• Betting history for sports, sabong, and other event-based products
• Bonus and promotion usage records
• VIP tier progression and loyalty point history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

2.5 Technical & Usage Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser or app version
• Pages visited, features accessed, and interactions with the Platform interface
• Session timestamps and login/logout records
• Cookie identifiers and similar tracking technologies (see Section 7)

2.6 Communications Data

• Records of live chat conversations with 367jl support
• Email correspondence sent to or received from 367jl support
• SMS OTP delivery records (metadata only — OTP content is not retained)
• Complaint and dispute records

367jl collects personal data through the following channels and mechanisms:

• Directly from you — when you register an account, complete KYC, make deposits or withdrawals, contact support, or update your account settings.
• Automatically through Platform use — when you access the Platform, our systems automatically record technical and usage data including your IP address, device information, and in-session activity.
• Through cookies and tracking technologies — as described in Section 7, 367jl uses cookies and similar technologies to collect session and preference data.
• From payment service providers — when you deposit or withdraw using GCash, PayMaya, or a Philippine bank, we receive confirmation data from those providers to verify and record the transaction.
• From identity verification partners — where 367jl uses third-party KYC verification tools for document authentication, those providers may share verification results with us.

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, 367jl processes your personal data on the following legal bases:

367jl uses the personal data we collect for the following specific purposes:

5.1 Account Management & Service Delivery

• Creating and maintaining your 367jl account.
• Verifying your identity and age (21+) as required by PAGCOR regulations.
• Processing deposits and withdrawals through your selected Philippine payment channels (GCash, PayMaya, BPI, BDO, Metrobank, bank transfer).
• Providing access to all game categories on the 367jl platform.
• Administering bonuses, promotions, and VIP rewards applicable to your account.

5.2 Regulatory & Legal Compliance

• Fulfilling anti-money laundering (AML) obligations under Republic Act No. 9160, as amended — including transaction monitoring and suspicious activity reporting.
• Complying with PAGCOR audit, reporting, and player data retention requirements.
• Responding to lawful requests from Philippine law enforcement or regulatory agencies.
• Maintaining records required for dispute resolution and legal proceedings.

5.3 Security & Fraud Prevention

• Detecting and preventing unauthorised account access, identity fraud, and payment fraud.
• Monitoring for multi-accounting, bonus abuse, and other prohibited activities under the 367jl Terms and Conditions.
• Investigating security incidents and responding to reported account compromises.

5.4 Responsible Gaming

• Monitoring gaming activity patterns to identify behaviour that may indicate problem gambling.
• Enforcing deposit limits, session limits, cooling-off periods, and self-exclusion requests set by the player or required by regulatory intervention.
• Maintaining records of responsible gaming tool usage for regulatory compliance and player protection audits.

5.5 Platform Improvement & Analytics

• Analysing aggregate, anonymised platform usage data to improve user experience, game lobby design, and performance on Philippine mobile networks.
• Testing new features and identifying technical issues affecting player experience.

5.6 Marketing Communications (Consent-Based)

• Sending promotional notifications about 367jl bonuses, new game releases, and tournaments — only where you have given explicit consent to receive such communications.
• You may opt out of promotional communications at any time by updating your notification preferences in Account Settings or contacting 367jl support.

367jl does not sell your personal data. We may share your personal data with third parties only in the following limited circumstances:

6.1 Payment Service Providers

Transaction data is shared with GCash (G-Xchange Inc.), PayMaya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, and other Philippine payment providers solely for the purpose of processing your deposit or withdrawal. These providers are bound by their own privacy policies and Philippine financial regulation.

6.2 Identity Verification Partners

KYC document data may be processed by third-party identity verification technology providers engaged by 367jl to perform automated document authentication. These providers process data solely on 367jl's instructions and are contractually required to maintain equivalent data security standards.

6.3 Game Software Providers

To deliver game services, certain technical identifiers (such as session tokens and anonymised player IDs) are shared with 367jl's licensed game software providers including JILI, PG Soft, Pragmatic Play, and others. These providers do not receive your full personal details — only the minimum data required to deliver the game session.

6.4 Regulatory & Law Enforcement Authorities

367jl is required to share certain player data with PAGCOR as part of its licensing obligations. Where required by a valid legal order, court process, or lawful request from Philippine law enforcement, 367jl will disclose necessary data. 367jl will notify affected players of such disclosures where legally permitted to do so.

6.5 Anti-Money Laundering Council (AMLC)

Under Republic Act No. 9160 (Anti-Money Laundering Act), 367jl is required to report covered and suspicious transactions to the AMLC. Such reports may include personal and transaction data. This is a legal obligation and not subject to player consent.

The 367jl Platform uses cookies and similar client-side technologies to deliver a functional, personalised, and secure experience. The types of cookies used on the Platform are:

• Essential Cookies: Required for core Platform functionality including login session management, wallet display, and game loading. These cannot be disabled without breaking the Platform's basic functionality.
• Security Cookies: Used to detect fraudulent activity, enforce login session integrity, and support two-factor authentication (2FA) flows. These are necessary for account security.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate and use the Platform — helping 367jl improve performance and usability. No personally identifiable information is included in analytics data sets.
• Preference Cookies: Used to remember your language, display settings, and game lobby preferences between sessions, reducing the need to reconfigure each time you log in.

You may manage cookie preferences through your browser settings. Note that disabling essential or security cookies may impair or prevent access to your 367jl account. 367jl does not use third-party advertising cookies or cross-site tracking pixels.

367jl retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

367jl implements a multi-layered data security framework to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and the 367jl Platform is encrypted using TLS 1.2 or higher (256-bit SSL). This includes login credentials, payment data, and all game session communications.
• Encryption at Rest: Sensitive data categories — including KYC documents, payment credentials, and passwords — are encrypted at rest using AES-256 encryption in 367jl's database infrastructure.
• Access Controls: Access to personal data within 367jl's systems is restricted on a strict need-to-know basis. Internal access is logged and audited. Support staff access to player data is role-based and monitored.
• Password Security: Player passwords are stored as salted cryptographic hashes — 367jl never stores plaintext passwords and cannot retrieve them. This is why password recovery uses OTP reset rather than disclosure of the original password.
• Two-Factor Authentication: 367jl offers SMS OTP-based 2FA for all player accounts. This provides a critical additional security layer beyond password protection, particularly important given the sensitivity of financial account access.
• Incident Response: 367jl maintains a data breach response plan. In the event of a confirmed personal data breach that poses a real risk to affected players, 367jl will notify the National Privacy Commission (NPC) and affected players within the timeframes prescribed by RA 10173 and its Implementing Rules.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 367jl. These rights may be exercised by contacting 367jl's Data Protection Officer (DPO) via the contact details in Section 13:

• Right to be Informed: You have the right to know what personal data 367jl collects, why it is collected, how it is used, and with whom it is shared — this Privacy Policy fulfils that obligation.
• Right of Access: You have the right to request a copy of the personal data 367jl holds about you. 367jl will provide this within a reasonable timeframe, subject to identity verification.
• Right to Rectification: You have the right to request correction of any inaccurate, incomplete, or outdated personal data in your 367jl account. Some corrections may require submission of supporting documentation.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data. Note that this right is subject to 367jl's legal retention obligations — data that must be retained under AML law, PAGCOR requirements, or for pending dispute resolution cannot be deleted before the mandated retention period expires.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes. Objection to processing based on legitimate interests is also available where your individual circumstances warrant it.
• Right to Data Portability: You may request that 367jl provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to Lodge a Complaint: If you believe 367jl has processed your personal data in violation of RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The 367jl Platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR's age restriction requirements for online casino gaming in the Philippines. 367jl does not knowingly collect personal data from individuals under the age of 21.

Date of birth information is collected during registration and verified through KYC procedures specifically to enforce this age requirement. Where 367jl discovers that personal data has been provided by or on behalf of an individual under 21, that data will be deleted and the associated account will be immediately terminated.

If you are a parent or guardian and believe that a minor may have registered a 367jl account using false date-of-birth information, please contact 367jl support immediately so that the account can be suspended and the data deleted.

367jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or operational changes to the Platform.

Where changes are material — meaning they substantially affect your rights or how we use your data — 367jl will provide advance notice via the Platform interface or by SMS or email to your registered contact details, where applicable. Minor updates (such as clarifications of language) may be made without individual notice.

The date of the most recent revision is displayed prominently at the top of this document. Continued use of the 367jl Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised policy, you may close your account by contacting 367jl support.

If you have questions about this Privacy Policy, wish to exercise any of your RA 10173 data rights, or need to report a data privacy concern, please contact 367jl's Data Protection Officer using the details below:

Complaints to the National Privacy Commission

If you are not satisfied with 367jl's response to your privacy concern or believe that 367jl has violated your rights under RA 10173, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information about filing NPC complaints is available on the NPC's official government website.