Privacy Policy

01. Introduction and Scope

This Privacy Policy applies to all personal data collected, processed, stored, and used by 168JL in connection with the operation of its online gaming platform, accessible at 168jl.app and through the 168JL mobile application. It applies to all registered players, prospective players who interact with the platform, and visitors to the 168JL website.

By registering an account on 168JL or by continuing to use the platform after this Privacy Policy has been updated, you acknowledge that you have read and understood this policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must not use the 168JL platform.

This policy should be read alongside our Terms & Conditions, which govern the overall use of the 168JL platform.

02. Data Controller Information

168JL acts as the data controller for all personal data collected through the platform. As data controller, 168JL determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law.

For all data privacy-related inquiries, requests, or complaints, you may contact our Data Protection Officer at the following address:

03. Personal Data We Collect

168JL collects personal data that is necessary for the lawful operation of our gaming platform, compliance with regulatory obligations, and the delivery of a safe and personalized player experience. The categories of personal data we collect include:

// DATA_CATEGORY	// EXAMPLES	// PURPOSE
Identity Data	Full name, date of birth, government-issued ID	Account registration, age verification, KYC compliance
Contact Data	Email address, Philippine mobile number, home address	Account communication, support, verification
Financial Data	GCash number, PayMaya account, BPI/BDO account details	Deposit and withdrawal processing, fraud prevention
Technical Data	IP address, device type, browser, operating system	Platform security, fraud detection, service optimization
Usage Data	Games played, session duration, betting history	Responsible gaming monitoring, personalization
Communications Data	Support chat logs, email correspondence	Customer service, dispute resolution, quality assurance

168JL does not collect sensitive personal information as defined under RA 10173 (such as health data, political affiliations, or religious beliefs) unless specifically required by law or regulatory directive.

04. How We Collect Your Data

We collect personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the platform, including IP addresses, device identifiers, session data, and cookies.
• Third-party sources: Identity verification data from document verification service providers; fraud screening data from payment processors; and regulatory data from PAGCOR or other competent authorities where required by law.

05. Legal Basis for Processing

168JL processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, anti-money laundering laws (Republic Act No. 9160, as amended), and other applicable Philippine legislation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional personalization features, where you have provided explicit consent. You may withdraw consent at any time by contacting our support team.

06. How We Use Your Personal Data

168JL uses the personal data we collect for the following purposes:

• To create, verify, and manage your player account on the 168JL platform;
• To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods;
• To verify your identity and age in compliance with PAGCOR regulations and Philippine law (21+ requirement);
• To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activity;
• To monitor gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling;
• To communicate with you regarding your account, transactions, promotions, and platform updates;
• To provide customer support and resolve disputes;
• To improve the platform, personalize your experience, and develop new features;
• To comply with our legal and regulatory obligations under Philippine law.

07. Cookies and Tracking Technologies

168JL uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device that help us recognize you, maintain your session, and understand how you use the platform.

We use the following categories of cookies:

• Essential cookies: Required for the platform to function. These cannot be disabled without affecting core functionality, including login sessions and security features.
• Analytics cookies: Used to understand how players interact with the platform, which pages are visited most, and where technical issues occur. This data is aggregated and anonymized.
• Preference cookies: Used to remember your settings and preferences, such as language and display options.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You may manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use the platform.

08. Data Sharing and Disclosure

168JL does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions;
• Identity verification providers: Third-party KYC service providers engaged to verify your identity and age in compliance with regulatory requirements;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory directive;
• IT and security service providers: Cloud hosting, cybersecurity, and fraud prevention vendors engaged to support platform operations, subject to strict data processing agreements;
• Professional advisors: Legal counsel, auditors, and compliance consultants, where necessary for the conduct of 168JL's business.

All third-party service providers engaged by 168JL are contractually required to process personal data only for the specified purpose and in compliance with applicable data protection law.

09. Data Retention

168JL retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and anti-money laundering regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Support communications: Retained for three (3) years from the date of the communication;
• Technical and usage data: Retained for up to two (2) years, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 168JL's data disposal procedures.

10. Data Security

168JL implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 168JL platform;
• Encryption of sensitive data at rest, including financial account details and identity documents;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for the detection, reporting, and remediation of personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 168JL will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173 and NPC Circular No. 16-03.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 168JL:

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed, as set out in this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data 168JL holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond to all verified requests within thirty (30) days.

12. Marketing Communications

With your consent, 168JL may send you promotional communications about new games, bonuses, and platform updates via email or SMS to your registered Philippine mobile number. You may opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email;
• Replying STOP to any promotional SMS;
• Contacting our support team and requesting removal from marketing lists.

Opting out of marketing communications will not affect transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts.

13. Children's Privacy

The 168JL platform is strictly intended for individuals aged 21 years and above, in compliance with PAGCOR regulations and Philippine gaming law. 168JL does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account and delete the data in accordance with our data disposal procedures. If you believe a minor has registered on the platform, please notify us immediately at [email protected].

14. Cross-Border Data Transfers

168JL primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting or fraud screening services — 168JL ensures that such transfers are subject to appropriate safeguards, including contractual data processing agreements that require the recipient to maintain data protection standards equivalent to those required under Philippine law.

15. Changes to This Privacy Policy

168JL reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform operations. Material changes will be communicated to registered players via email or platform notification at least seven (7) days before taking effect. The date of the most recent revision is displayed at the top of this page. Your continued use of the platform following the effective date of any update constitutes your acceptance of the revised Privacy Policy.