Privacy Policy – 123jl Data Protection & Security

1. Information We Collect

123jl collects various types of personal information to provide, maintain, and improve our online casino services, ensure regulatory compliance, prevent fraud, and deliver personalized gaming experiences. The categories of data we collect include:

1.1 Account Registration Data

When you create a 123jl account, we collect identifying information necessary for account creation and legal compliance:

• Personal Identifiers: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (as required for KYC verification).
• Contact Information: Email address, Philippine mobile phone number, residential address (street, barangay, city, province, postal code).
• Account Credentials: Username, encrypted password hash (we never store plain-text passwords), security questions and answers.
• Verification Documents: Scanned copies or photographs of government-issued ID (passport, driver's license, UMID, postal ID, PRC ID), proof of address documents (utility bills, bank statements), and payment method verification screenshots.

1.2 Financial Transaction Data

To process deposits and withdrawals, 123jl collects payment-related information:

• Payment Method Details: GCash mobile number, Maya account name, bank account numbers (last 4 digits only for security), cryptocurrency wallet addresses, and payment provider transaction IDs.
• Transaction History: Deposit amounts, withdrawal requests, transaction timestamps, payment method used, transaction status (pending, completed, failed), and transaction reference numbers.
• Financial Verification: Bank statements or e-wallet screenshots showing account holder name (for anti-money laundering compliance).

1.3 Gaming Activity Data

123jl tracks your gaming behavior for responsible gaming monitoring, fraud prevention, and service improvement:

• Game Play Records: Games played, bet amounts, win/loss results, session duration, game timestamps, RTP (return to player) statistics, and progressive jackpot contributions.
• Betting History: Sports betting selections, esports wagers, odds accepted, bet outcomes, parlays and accumulators, and live betting activity.
• Bonus Usage: Bonuses claimed, wagering requirements progress, bonus terms compliance, free spins used, and cashback calculations.
• Responsible Gaming Data: Deposit limits set, session time limits, self-exclusion requests, loss limits, and reality check interactions.

1.4 Technical and Device Data

We automatically collect technical information when you access 123jl:

• Device Information: Device type (mobile, tablet, desktop), operating system (iOS, Android, Windows, macOS), browser type and version, screen resolution, device language settings.
• Network Data: IP address, ISP (internet service provider), geolocation data (city, region), timezone, connection type (WiFi, mobile data).
• Usage Analytics: Pages visited, clickstream data, time spent on pages, referral sources, search queries within the site, features used, and navigation patterns.
• Performance Metrics: Page load times, error logs, crash reports, and game performance data.

1.5 Communication Data

When you contact 123jl customer support or participate in surveys:

• Support Interactions: Live chat transcripts, email correspondence, phone call recordings (with notice), support tickets, complaint details, and resolution outcomes.
• Marketing Preferences: Subscription to promotional emails, SMS marketing consent, push notification preferences, and communication frequency preferences.
• Feedback and Surveys: Product feedback, satisfaction ratings, feature requests, and testimonials (if you provide consent to publish).

2. How We Use Your Personal Data

123jl processes your personal information for the following legitimate business purposes, all compliant with the Philippines Data Privacy Act of 2012 and PAGCOR regulations:

2.1 Service Delivery and Account Management

• Creating and maintaining your 123jl account with secure authentication.
• Processing deposits, withdrawals, and internal fund transfers between gaming wallets.
• Providing access to casino games, sports betting, esports wagering, live dealer tables, and bingo rooms.
• Calculating winnings, updating account balances in real-time, and distributing progressive jackpot payouts.
• Managing bonuses, free spins, cashback, and loyalty rewards programs.
• Responding to customer support inquiries via live chat, email, and phone.

2.2 Legal and Regulatory Compliance

• Verifying your identity (KYC) to comply with PAGCOR licensing requirements and Philippine anti-money laundering (AML) laws.
• Confirming you meet the minimum age requirement (21+ years) for legal gambling in the Philippines.
• Detecting and preventing fraudulent activity, money laundering, bonus abuse, and account manipulation.
• Cooperating with law enforcement investigations, court orders, and regulatory audits when legally required.
• Maintaining transaction records for the mandatory retention periods specified by Philippine financial regulators.
• Generating compliance reports for PAGCOR audits and anti-money laundering monitoring.

2.3 Security and Fraud Prevention

• Monitoring account activity for suspicious patterns indicating unauthorized access, account takeover attempts, or coordinated fraud.
• Implementing multi-factor authentication (2FA), login anomaly detection, and device fingerprinting to secure accounts.
• Analyzing betting patterns to identify collusion, bot usage, arbitrage abuse, or advantage play exploitation.
• Protecting 123jl infrastructure from DDoS attacks, SQL injection, cross-site scripting, and other cyber threats.
• Investigating duplicate accounts, identity theft, document forgery, and payment fraud.

2.4 Responsible Gaming and Player Protection

• Monitoring gaming behavior for signs of problem gambling (excessive session times, chasing losses, deposit escalation).
• Enforcing deposit limits, loss limits, and session time limits set by players.
• Processing self-exclusion requests and preventing self-excluded players from creating new accounts.
• Providing responsible gaming resources, counseling referrals, and support services to at-risk players.
• Generating reality check reminders and sending session time notifications.

2.5 Marketing and Communications

• Sending promotional offers, bonus announcements, and personalized game recommendations (with your consent).
• Delivering transactional notifications (deposit confirmations, withdrawal status updates, security alerts).
• Informing you of platform updates, new game releases, and maintenance schedules.
• Conducting customer satisfaction surveys and collecting product feedback.
• Analyzing marketing campaign effectiveness and optimizing promotional strategies.

2.6 Platform Improvement and Analytics

• Analyzing user behavior to improve website navigation, mobile app performance, and user interface design.
• Testing new features through A/B testing and measuring user engagement.
• Optimizing game loading times, reducing latency for live dealer streams, and improving mobile responsiveness.
• Developing personalized game recommendations based on play history and preferences.
• Creating aggregated, anonymized statistics for business intelligence and strategic planning.

3. Data Sharing and Disclosure

123jl does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your data with carefully selected partners and service providers under strict confidentiality agreements in the following circumstances:

3.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya, Philippine banks (BPI, BDO, UnionBank, Metrobank), cryptocurrency payment gateways, and over-the-counter collection partners (7-Eleven) to process deposits and withdrawals.
• Game Providers: Pragmatic Play, Evolution Gaming, Microgaming, and other licensed casino game suppliers who require limited player data (anonymized user IDs, bet amounts) to deliver game content.
• Identity Verification Services: Third-party KYC/AML compliance platforms that verify government-issued IDs, cross-reference identity databases, and detect document forgery.
• Cloud Hosting Providers: Secure data centers and cloud infrastructure providers (operating within or with data protection agreements covering the Philippines) that host 123jl servers and databases.
• Customer Support Tools: Live chat software, helpdesk ticketing systems, and customer relationship management (CRM) platforms used to deliver support services.
• Analytics Services: Website analytics, fraud detection systems, and performance monitoring tools that help optimize 123jl services.

3.2 Legal and Regulatory Authorities

We may disclose personal information to government agencies, regulators, and law enforcement when legally required:

• PAGCOR: Regulatory reports, audit requests, license compliance verification, and responsible gaming incident reports.
• Philippine National Police and NBI: Cooperation with criminal investigations involving fraud, money laundering, identity theft, or other illegal activities.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports (STRs) as mandated by Philippine AML laws.
• Courts and Legal Proceedings: Response to subpoenas, court orders, legal discovery requests, and arbitration proceedings.
• National Privacy Commission (NPC): Compliance with data protection audits and breach notification requirements.

3.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity as part of the transaction. You will be notified via email and website notice before any such transfer, and the new entity will be bound by the same privacy protections outlined in this policy.

3.4 With Your Consent

We may share persona l information with third parties when you provide explicit consent, such as sharing testimonials or reviews on social media, participating in promotional events with prize sponsors, or authorizing third-party account linking.

4. Data Security Measures

123jl employs industry-standard technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

4.1 Technical Security Controls

• Encryption: All data transmitted between your device and 123jl servers is protected by TLS 1.3 encryption. Sensitive data at rest (passwords, financial information, identity documents) is encrypted using AES-256 encryption.
• Secure Authentication: Password hashing using bcrypt with unique salts, optional two-factor authentication (2FA) via SMS or authenticator apps, and session management with automatic logout after inactivity.
• Network Security: Firewalls, intrusion detection systems (IDS), DDoS mitigation, and regular security vulnerability scans to protect infrastructure.
• Access Controls: Role-based access restrictions ensuring only authorized 123jl personnel can access personal data on a need-to-know basis. All data access is logged and audited.
• Secure Development: Regular code reviews, penetration testing, security patch management, and adherence to OWASP secure coding standards.

4.2 Organizational Security Measures

• All 123jl employees and contractors with access to personal data sign confidentiality agreements and undergo data protection training.
• Background checks for personnel handling sensitive financial or identity information.
• Data minimization practices ensuring we only collect and retain information necessary for specified purposes.
• Regular security audits, compliance assessments, and third-party security certifications.
• Incident response plan with defined procedures for data breach detection, containment, notification, and remediation.

4.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, 123jl will notify affected users within 72 hours of discovering the breach, as required by the Philippines Data Privacy Act. Notification will include the nature of the breach, types of data compromised, measures taken to mitigate harm, and recommended actions for affected individuals. We will also report breaches to the National Privacy Commission as legally mandated.

5. Your Privacy Rights Under Philippine Law

The Philippines Data Privacy Act of 2012 grants you specific rights regarding your personal information. 123jl respects these rights and provides mechanisms to exercise them:

5.1 Right to Access

You have the right to request confirmation of whether 123jl processes your personal data and obtain copies of your information. To exercise this right, submit a written request to our Data Protection Officer. We will provide a comprehensive data report within 15 business days, including account details, transaction history, gaming records, and communications.

5.2 Right to Rectification

You may request correction of inaccurate or incomplete personal information. Access your account settings to update contact information, address, and communication preferences directly. For changes requiring verification (legal name, date of birth), contact customer support with supporting documentation.

5.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal data under certain circumstances: withdrawal of consent, objection to processing, data no longer necessary for original purpose, or unlawful processing. However, 123jl may retain data when legally required for compliance, dispute resolution, or fraud prevention. Mandatory retention periods include seven (7) years for financial transactions (AML compliance) and five (5) years for identity verification records (PAGCOR regulations).

5.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (CSV, JSON) and transmit it to another service provider. Request data export through your account settings or by contacting customer support.

5.5 Right to Object

You may object to processing of your personal data for direct marketing purposes at any time. Unsubscribe from promotional emails using the link in each message, adjust marketing preferences in account settings, or contact customer support. Note that transactional communications (deposit confirmations, security alerts, regulatory notices) cannot be opted out as they are essential to service delivery.

5.6 Right to Restrict Processing

You may request limitation of data processing while disputing accuracy, contesting lawfulness, or pending verification of objection grounds. During restriction periods, 123jl will store but not actively process affected data except with your consent or for legal compliance.

5.7 Right to Lodge Complaints

If you believe 123jl has violated your privacy rights, you may file a complaint with our Data Protection Officer. If unsatisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact NPC at their official website or hotline for guidance on complaint procedures.

6. Cookies and Tracking Technologies

123jl uses cookies, web beacons, pixels, and similar technologies to enhance user experience, analyze site performance, and deliver personalized content. By using 123jl services, you consent to our use of these technologies as described below:

6.1 Types of Cookies We Use

Cookie Type	Purpose	Duration
Essential Cookies	Required for basic site functionality, login authentication, session management, and security features. Cannot be disabled.	Session or up to 30 days
Performance Cookies	Collect anonymous usage data to analyze site traffic, identify errors, and optimize performance.	Up to 2 years
Functional Cookies	Remember your preferences (language, currency, display settings) and personalize user experience.	Up to 1 year
Marketing Cookies	Track visits across websites, measure advertising effectiveness, and deliver targeted promotions based on interests.	Up to 13 months

6.2 Managing Cookie Preferences

You can control cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications before cookies are stored. Note that disabling essential cookies may impair site functionality, preventing login or game access. Adjust cookie preferences in your account settings or browser configuration.

6.3 Third-Party Tracking

123jl uses third-party analytics services (Google Analytics with IP anonymization) to understand user behavior. These services may set their own cookies. We do not share personally identifiable information with analytics providers; data is aggregated and anonymized. Review third-party privacy policies for details on their data practices.

7. Data Retention Periods

123jl retains personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods include:

• Account Data: Retained for the duration of your active account plus seven (7) years after closure to comply with financial record-keeping requirements.
• Transaction Records: Seven (7) years from transaction date as mandated by Philippine anti-money laundering laws and tax regulations.
• Identity Verification Documents: Five (5) years from account closure per PAGCOR compliance requirements.
• Gaming Activity Logs: Five (5) years for dispute resolution and regulatory audit purposes.
• Marketing Communications: Until you withdraw consent or request deletion, whichever occurs first.
• Customer Support Records: Three (3) years from last interaction for quality assurance and training purposes.
• Security and Fraud Logs: Seven (7) years to support ongoing investigations and prevent repeat offenses.

After retention periods expire, personal data is securely deleted through irreversible destruction methods including cryptographic erasure, physical media destruction, and database purging. Aggregated, anonymized data that cannot identify individuals may be retained indefinitely for statistical analysis.

8. International Data Transfers

123jl primarily stores and processes personal data within the Philippines or in jurisdictions offering adequate data protection standards. However, some service providers (cloud hosting, payment processors, game suppliers) may be located outside the Philippines. When transferring data internationally, 123jl ensures appropriate safeguards are in place:

• Adequacy Decisions: Transfers to countries recognized by the National Privacy Commission as providing adequate data protection (such as EEA member states under GDPR).
• Standard Contractual Clauses: Legally binding agreements with international service providers incorporating data protection obligations equivalent to Philippine standards.
• Certification Schemes: Reliance on internationally recognized privacy frameworks (Privacy Shield successor programs, APEC Cross-Border Privacy Rules).
• Explicit Consent: Obtaining your specific consent for transfers when other safeguards are unavailable.

By using 123jl services, you acknowledge and consent to the international transfer of your personal data as described above. We take all reasonable steps to ensure transferred data receives protection comparable to that required under Philippine law.

9. Children's Privacy and Age Verification

123jl services are strictly intended for individuals aged twenty-one (21) years or older. We do not knowingly collect, use, or solicit personal information from anyone under the legal gambling age. Our age verification procedures include:

• Mandatory date of birth entry during registration with automated rejection of underage applicants.
• Government-issued photo ID verification before first withdrawal, confirming age and identity.
• Periodic re-verification for accounts with suspicious activity patterns.
• Immediate account closure and balance return (minus any winnings) upon discovering underage users.

If you believe a minor has provided personal information to 123jl, immediately contact our Data Protection Officer. We will investigate and delete the information within 72 hours if the report is substantiated. Parents and guardians are encouraged to monitor minors' internet usage and implement parental control software to prevent access to gambling websites.

10. Privacy Policy Updates and Amendments

123jl reserves the right to modify this Privacy Policy at any time to reflect changes in legal requirements, business practices, technology, or data processing activities. Material changes will be communicated through:

• Email notification to the address on file at least fourteen (14) days before changes take effect.
• Prominent notice on the 123jl homepage and login screen.
• In-account notification banner requiring acknowledgment before continued use.

The "Last Updated" date at the top of this policy indicates the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of 123jl services after policy updates constitutes acceptance of the revised terms. If you disagree with changes, you must discontinue use and close your account before the effective date.

Version History: This is Privacy Policy version 3.1, effective October 8, 2026. Previous versions are archived and available upon request to our Data Protection Officer for reference purposes.

11. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or 123jl's data practices, please contact our designated Data Protection Officer:

• Data Protection Officer: Privacy Office, 123jl Casino
• Email: [email protected] (monitored daily, response within 48 hours)
• Customer Support: Live chat available 24/7 through website and mobile app
• Written Correspondence: [hypothetical registered office address, Metro Manila, Philippines]

When contacting us regarding privacy matters, please include your account username, registered email address, and detailed description of your inquiry or request. For data access, rectification, or deletion requests, we may require identity verification to prevent unauthorized disclosure.

National Privacy Commission: If you wish to lodge a complaint about our data handling practices, contact the Philippines National Privacy Commission through their official website or hotline. The NPC is the independent regulatory authority overseeing data protection compliance in the Philippines.