800jl Privacy Policy

800jl operates the online gaming platform accessible at https://800jl.club (the "Platform"), offering casino games, sports betting, bingo, and related entertainment services to players in the Philippines. For the purposes of the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations ("IRR"), 800jl acts as the Personal Information Controller ("PIC") in respect of the personal data it collects from registered users and website visitors.

All references to "800jl", "we", "us", or "our" in this Privacy Policy refer to the operator of the 800jl Platform.

800jl collects personal data through registration forms, KYC verification, payment transactions, gameplay activity, customer support interactions, and automated technical means. The categories of personal data we process include:

800jl does not collect sensitive personal information as defined under Section 3(l) of the DPA (such as health data, religious beliefs, or political opinions) except where required by law for identity verification purposes.

800jl uses the personal data it collects for the following purposes:

• Account Management: Creating, maintaining, and securing your 800jl account, including password resets and two-factor authentication via your Philippine mobile number.
• Identity Verification (KYC): Verifying your identity and age (21+) as required under PAGCOR-aligned compliance obligations and Philippine anti-money laundering laws.
• Payment Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and reconciling transaction records.
• Game Provision: Delivering, personalising, and improving the games and features available on the 800jl Platform.
• Fraud Prevention & AML: Detecting and preventing fraudulent activity, money laundering, and other prohibited activities in compliance with the Anti-Money Laundering Act (AMLA) and its amendments.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and administer self-exclusion and deposit limit tools.
• Customer Support: Responding to enquiries, resolving disputes, and maintaining records of support interactions.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in. You may withdraw consent at any time via your account settings.
• Legal Compliance: Meeting obligations under Philippine law, including responding to lawful requests from PAGCOR, AMLC, the NPC, or courts of competent jurisdiction.

800jl processes your personal data on the following lawful bases as recognised under the Data Privacy Act of 2012 and its IRR:

• Contractual Necessity: Processing required to perform our contract with you — operating your account, processing payments, and delivering games.
• Legal Obligation: Processing required to comply with Philippine law, including AML reporting, KYC requirements, and PAGCOR-related compliance obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and optional data analytics, where you have provided explicit, informed consent that you may withdraw at any time.

5.1  800jl does not sell or rent personal data to third parties. We may share personal data with the following categories of recipients only to the extent necessary for legitimate purposes:

• Payment Processors: GCash (Mynt), PayMaya (Maya Bank), BPI, BDO, and Metrobank — solely for the purpose of processing deposits and withdrawals.
• Game Content Providers: Licensed third-party studios whose games are hosted on the 800jl Platform may receive limited technical session data to deliver gameplay. They are bound by data processing agreements.
• Identity Verification Services: Third-party KYC providers used for document verification and fraud screening. These providers process data solely under 800jl's instructions.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and courts of competent jurisdiction, where disclosure is required by law.
• Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and analytics providers operating under strict data processing agreements, with data encrypted at rest and in transit.

5.2  All third parties with whom 800jl shares personal data are required to maintain appropriate technical and organisational security measures consistent with the DPA and its IRR.

6.1  The 800jl Platform uses cookies and similar tracking technologies to maintain your authenticated session, remember your preferences, detect fraudulent login attempts, and analyse aggregate usage patterns for performance improvements.

6.2  The following types of cookies are used on the 800jl Platform:

• Strictly Necessary Cookies: Required for session management and security. Cannot be disabled without impairing Platform functionality.
• Functional Cookies: Store your language preferences, display settings, and last-visited game categories.
• Analytics Cookies: Collect anonymised data on how players navigate the Platform, used to identify performance bottlenecks and improve user experience.

6.3  You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from logging in or using core Platform features.

800jl retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by Philippine law. Specific retention periods include:

• Account and Identity Data: Retained for the duration of the account and for five (5) years following account closure, as required under AMLA obligations.
• Financial Transaction Records: Retained for five (5) years from the date of each transaction, consistent with AMLA and BIR record-keeping requirements.
• Gaming Activity Data: Retained for three (3) years from the date of each session, used for dispute resolution and responsible gaming monitoring.
• Customer Support Records: Retained for two (2) years from the date of resolution of each support case.
• Marketing Consent Records: Retained for the duration of the marketing relationship and six (6) months following opt-out, for compliance audit purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with 800jl's data disposal procedures.

800jl implements technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 800jl servers;
• AES-256 encryption for personal data stored at rest, including financial records and identity documents;
• Role-based access controls ensuring that only authorised personnel can access personal data, subject to the principle of least privilege;
• Multi-factor authentication for all internal systems handling personal data;
• Regular penetration testing and vulnerability assessments by independent security firms;
• A documented data breach response plan with notification procedures consistent with NPC Circular 16-03.

Despite these measures, no data transmission over the internet is completely secure. You use the Platform at your own risk, and 800jl cannot guarantee absolute security against all threats.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 800jl:

The 800jl Platform is not intended for, and must not be used by, individuals under the age of 21 years. 800jl does not knowingly collect personal data from individuals under 21. If we discover that personal data has been collected from a person under the minimum age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please notify us immediately via live chat or support email.

Some of 800jl's technology infrastructure, game content providers, and cybersecurity partners operate servers outside the Philippines. Where personal data is transferred internationally, 800jl ensures that adequate safeguards are in place consistent with Section 21 of the DPA, including contractual clauses that require recipient organisations to apply data protection standards equivalent to those required under Philippine law. We do not transfer personal data to jurisdictions that the National Privacy Commission has determined to offer inadequate levels of protection without additional contractual safeguards.

800jl reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, Philippine legal requirements, or operational changes to the Platform. Material changes will be notified to registered users via the mobile number or email address on file at least fourteen (14) days before the change takes effect, or through a prominent notice on the Platform. Your continued use of 800jl following notification of changes constitutes your acceptance of the revised Privacy Policy. The "Last updated" date at the top of this Policy reflects the most recent revision.

For questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data by 800jl, please contact our Data Protection Officer:

Email: [email protected] (mark your message "Attention: Data Protection Officer")

Live Chat: Available 24/7 on the 800jl Platform. Our Filipino support team can route privacy requests to the DPO.

If you are not satisfied with our response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Contact details for the NPC are available on the official NPC government website.