Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 998jl Casino ("998jl", "we", "us", or "the Company"), the operator of the online gaming platform at 998jl.org, collects, uses, stores, discloses, and otherwise processes personal data relating to registered players, prospective users, and visitors to our platform (collectively "Data Subjects").

This Policy applies to all personal data processed in connection with your use of the 998jl platform, including data collected through the main website at 998jl.org, any associated mobile-optimized interfaces, our customer support channels, and promotional activities conducted by 998jl in the Philippines.

998jl is committed to the responsible handling of personal data and to full compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations (IRR) as administered by the National Privacy Commission (NPC) of the Philippines. By registering an account on 998jl or by continuing to use our platform, you acknowledge that you have read and understood this Policy.

2. Data Controller

998jl Casino acts as the Personal Information Controller (PIC) with respect to personal data collected through the 998jl platform. Our designated Data Protection Officer (DPO) can be contacted at the details provided in Section 14 of this Policy.

Where 998jl engages third-party service providers (such as payment processors, game providers, or KYC verification services) to process personal data on our behalf, such third parties act as Personal Information Processors (PIPs) and are contractually required to process data only on 998jl's documented instructions and in compliance with the DPA.

3. Categories of Personal Data We Collect

998jl collects the following categories of personal data from players and platform users:

998jl does not collect sensitive personal information as defined under Section 3(l) of the DPA (e.g., health data, political opinions, religious beliefs) unless such information is voluntarily provided in connection with a responsible gaming self-exclusion request or similar welfare-related interaction.

4. How We Collect Personal Data

998jl collects personal data through the following methods:

• Direct Submission: When you complete the registration form, submit KYC documents, contact our support team, or participate in promotions at 998jl.
• Automated Collection: When you browse or interact with the 998jl platform, we automatically collect technical data including IP addresses, device identifiers, and browsing behavior through cookies and server logs.
• Third-Party Sources: Where applicable and lawful, 998jl may receive identity verification results from licensed KYC service providers, or transaction confirmation data from payment processors such as GCash and Maya.
• PAGCOR Regulatory Reporting: In fulfilling our obligations to the Philippine Amusement and Gaming Corporation (PAGCOR), certain gaming activity data may be cross-referenced with PAGCOR-maintained player databases.

5. Purposes of Processing

998jl processes personal data for the following specific, legitimate purposes:

• Creating, verifying, and maintaining your 998jl player account;
• Processing deposits and withdrawals via GCash, Maya, and Philippine bank channels;
• Fulfilling Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under Philippine law;
• Verifying player eligibility (age 21+) as required by PAGCOR regulations;
• Providing customer support, resolving disputes, and responding to player inquiries;
• Administering bonuses, promotions, and the 998jl loyalty program;
• Detecting, investigating, and preventing fraudulent activity, cheating, and platform abuse;
• Complying with legal obligations, regulatory reporting requirements, and law enforcement requests;
• Improving platform functionality, game offerings, and user experience through aggregated analytics;
• Sending transactional communications (deposit confirmations, withdrawal notifications, account security alerts) via SMS and email.

6. Legal Bases for Processing

998jl processes personal data under the following lawful bases as set out in Section 12 of the DPA:

• Contractual Necessity: Processing required to register your account, process transactions, and deliver the services you have requested from 998jl.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Cybercrime Prevention Act, the DPA, and other applicable Philippine statutes.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your fundamental rights.
• Consent: For marketing communications (SMS/email promotions), where consent is separately obtained and may be withdrawn at any time.

7. Data Sharing and Disclosure

998jl does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following circumstances and strictly on a need-to-know basis:

• Payment Processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, InstaPay, and PesoNet — solely for the purpose of processing your deposit or withdrawal transactions.
• KYC/AML Service Providers: Licensed identity verification and anti-money laundering screening providers engaged to verify your identity and screen against relevant watchlists.
• Game Providers: Software providers such as JILI Games, Evolution Gaming, and other certified providers — limited to the technical data required to deliver game services.
• PAGCOR: As required under our gaming license, we report gaming activity data to PAGCOR in the format and frequency prescribed by our licensing conditions.
• Law Enforcement & Courts: Where 998jl is legally compelled to disclose data by a valid court order, subpoena, or government directive from a Philippine authority.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of 998jl, personal data may be transferred to the successor entity subject to the same privacy protections.

All third-party processors engaged by 998jl are contractually bound to process data solely in accordance with 998jl's instructions and to maintain security standards equivalent to or exceeding those maintained by 998jl.

8. Data Retention

998jl retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Active Account Data: Retained for the duration of your 998jl account plus five (5) years following account closure, to comply with AMLA record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the date of last transaction, as required by the Revised Implementing Rules and Regulations of the AMLA.
• Transaction Records: Retained for five (5) years from the date of each transaction.
• Support Correspondence: Retained for two (2) years from the date of the last interaction, or longer where the correspondence relates to an unresolved dispute.
• Marketing Consent Records: Retained for the duration of consent plus one (1) year following withdrawal of consent.

Upon expiration of the applicable retention period, personal data is securely deleted or irreversibly anonymized.

9. Data Security

998jl implements a comprehensive set of organizational and technical security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• All data transmitted between your device and 998jl servers is encrypted using 256-bit Transport Layer Security (TLS/SSL).
• Passwords are stored using industry-standard one-way cryptographic hashing (bcrypt). 998jl never stores plaintext passwords.
• Player financial data (GCash wallet references, bank details) is tokenized — raw account numbers are never stored on 998jl systems.
• Access to personal data within 998jl is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls.
• 998jl undergoes periodic security audits and penetration testing conducted by qualified third-party cybersecurity professionals.
• In the event of a personal data breach that is likely to adversely affect your rights and freedoms, 998jl will notify the NPC within 72 hours of becoming aware of the breach and will notify affected Data Subjects without undue delay.

10. Cookies and Tracking Technologies

998jl uses cookies and similar tracking technologies on the 998jl.org platform for the following purposes:

• Essential Cookies: Required for core platform functionality including authentication session management and security. These cannot be disabled without impairing platform use.
• Performance Cookies: Aggregate analytics data (page load times, error rates, game performance) used to identify and resolve technical issues. No individual player is identifiable from this data.
• Preference Cookies: Remember your platform settings such as language and display preferences.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of specific 998jl platform features.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 998jl:

• Right to be Informed: The right to know what personal data 998jl holds about you and how it is being processed.
• Right of Access: The right to obtain a copy of your personal data held by 998jl.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to overriding legal retention obligations.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Damages: The right to claim compensation for damages suffered as a result of a violation of the DPA by 998jl.

To exercise any of the above rights, contact 998jl's Data Protection Officer using the details in Section 14. We will respond to all verified data subject requests within fifteen (15) business days, as required by the NPC's guidelines.

12. Minors and Age Restriction

The 998jl platform is strictly restricted to individuals aged 21 years and above. 998jl does not knowingly collect, process, or retain personal data from individuals under 21. If 998jl discovers that personal data of an underage individual has been collected, the associated account will be immediately suspended, any funds subject to regulatory review, and the data deleted in accordance with our retention policy.

If you believe that a minor has registered on 998jl, please report this immediately to our support team.

13. Changes to This Privacy Policy

998jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, or changes to our data processing practices. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Material changes to this Policy will be communicated to registered players via SMS or email notification to the contact details on file, and/or via a prominent notice on the 998jl platform homepage. Continued use of the 998jl platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

14. Contact Our Data Protection Officer

For any questions, requests, or complaints regarding this Privacy Policy or the handling of your personal data by 998jl, please contact our Data Protection Officer:

• Email: support@998jl.org (plain text — not a clickable link)
• Live Chat: Available 24/7 via the chat icon on 998jl.org

If you are not satisfied with our response to a data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.