Privacy Policy — How 866jl Protects Your Data

Who We Are

866jl ("866jl," "we," "us," "our") operates the online gaming platform accessible at 866jl.asia, providing casino games, sports and esports betting, bingo, fishing games, and related services to players in the Philippines. 866jl acts as the Personal Information Controller (PIC) in respect of all personal data collected through the 866jl platform and processed in connection with the delivery of our gaming services.

866jl has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all other applicable Philippine data protection obligations. Contact details for the DPO are provided in Section 15 of this Policy.

Scope of This Privacy Policy

This Privacy Policy applies to all personal information collected and processed by 866jl through the following touchpoints:

• The 866jl website at 866jl.asia and all associated subdomains
• The 866jl account registration, login, and verification processes
• Deposits, withdrawals, and payment processing via GCash, PayMaya, BDO, BPI, Metrobank, and other approved Philippine payment methods
• Customer support interactions via live chat, email, and any other communication channels maintained by 866jl
• Promotional communications, bonus programmes, and the 866jl VIP loyalty system
• Responsible gaming tools including self-exclusion, deposit limits, and cooling-off periods

Personal Data We Collect

866jl collects only the personal data that is necessary for the specific purposes described in this Policy. The following table summarises the categories of personal data we collect and their primary purpose:

866jl does not collect sensitive personal information as defined under the Data Privacy Act (such as health data, sexual orientation, or political affiliation) except where it becomes directly relevant to a responsible gaming self-exclusion request or a medical-related support interaction, and only with explicit consent in those circumstances.

How We Collect Your Data

866jl collects personal data through the following methods:

Directly from You

• When you complete the 866jl account registration form, including your name, date of birth, and Philippine mobile number
• When you submit identity verification documents during the KYC process
• When you deposit or withdraw funds and provide payment account details
• When you contact 866jl customer support via live chat or email
• When you participate in surveys, promotions, or feedback requests
• When you set responsible gaming preferences such as deposit limits or self-exclusion requests

Automatically Through Your Use of 866jl

• Technical data including your IP address, device identifier, and browser information is collected automatically each time you access the 866jl platform
• Cookies and similar tracking technologies collect usage data as you navigate the site — see Section 9 for full details
• Game session data including timestamps, bet amounts, game outcomes, and session durations is recorded automatically for every active game session

From Third Parties

• Identity verification service providers may return verification status and risk signals when processing your KYC documents
• Payment processors such as GCash and PayMaya confirm transaction status and may flag unusual activity patterns
• Fraud prevention and AML screening services may provide risk scores and watchlist status in connection with account activity

Purpose & Legal Basis for Processing

Under the Philippine Data Privacy Act, 866jl processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to create and manage your 866jl account, process your deposits and withdrawals, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for 866jl's legitimate interests in preventing fraud, detecting security threats, improving platform performance, and conducting responsible gaming monitoring — where these interests are not overridden by your privacy rights.
• Consent: For marketing communications, personalised promotions, and non-essential cookies, 866jl processes your data on the basis of your consent, which you may withdraw at any time through your account settings or by contacting support.

Sharing Your Personal Data

866jl does not sell your personal data to any third party, under any circumstances. We share personal data only where necessary and only with the categories of recipients described below, each of whom is bound by confidentiality and data protection obligations no less protective than this Policy:

• Payment Processors: GCash, PayMaya, BDO, BPI, Metrobank, InstaPay, and other approved Philippine payment service providers receive the minimum financial data necessary to process your deposits and withdrawals.
• Identity Verification Providers: KYC and document verification services receive copies of identity documents and personal details strictly for the purpose of completing age and identity verification as required by law.
• Game Software Providers: JILI, PG Soft, Pragmatic Play, Spadegaming, and other game providers receive anonymised or pseudonymised session data necessary for game delivery, RNG certification, and technical support.
• Fraud Prevention and AML Services: Transaction monitoring and AML screening providers receive transaction data for the purpose of detecting and preventing money laundering, fraud, and other prohibited financial activity.
• Regulatory Authorities: PAGCOR and other competent Philippine regulatory or law enforcement authorities may receive player data where 866jl is legally required to disclose it — for example, in response to a lawful investigation or court order.
• Professional Advisors: 866jl's legal counsel, auditors, and compliance advisors may access relevant personal data where strictly necessary for the provision of professional services, subject to professional confidentiality obligations.

Data Retention

866jl retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as general guidelines:

• Account Data: Retained for the lifetime of your active 866jl account, and for a minimum of five (5) years following account closure — in compliance with AMLA record-keeping requirements applicable to Philippine-regulated gaming platforms.
• Transaction and Bet Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA and applicable PAGCOR record-keeping obligations.
• Identity Verification Documents: Retained for the duration of your account and for five (5) years following account closure, or longer where a legal dispute or regulatory investigation is ongoing.
• Customer Support Records: Retained for three (3) years from the date of the support interaction, unless the record is relevant to an ongoing dispute.
• Marketing Preferences and Consent Records: Retained for the duration of your account, plus three (3) years thereafter to evidence the basis on which communications were sent.
• Technical and Usage Data: Retained for up to twenty-four (24) months from collection, after which it is anonymised or deleted.

When personal data is no longer required for its original purpose and no legal retention obligation applies, 866jl securely destroys or anonymises the data so that it can no longer be attributed to an identified or identifiable individual.

Security Measures

866jl implements a multi-layered approach to data security designed to protect your personal information against unauthorised access, disclosure, alteration, and destruction:

• 256-bit TLS Encryption in Transit: All data transmitted between your browser or device and the 866jl platform is encrypted using Transport Layer Security (TLS) — the same standard used by Philippine online banking services.
• Encryption at Rest: Personal data stored in 866jl's databases — including identity documents and financial information — is encrypted using AES-256 encryption at rest.
• Access Controls: Access to personal data within 866jl is strictly limited to authorised personnel whose roles require that access. Role-based access controls and least-privilege principles are applied across all internal systems.
• Two-Factor Authentication: Administrative access to systems holding personal data requires multi-factor authentication. Players are also encouraged to enable 2FA on their 866jl accounts for additional protection.
• Penetration Testing and Vulnerability Scanning: 866jl conducts regular security assessments of its platform to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: 866jl maintains a documented data breach response plan. In the event of a personal data breach that is likely to harm affected individuals, 866jl will notify the National Privacy Commission (NPC) within 72 hours and affected players as soon as practicable, in accordance with the Data Privacy Act.

Cookies & Tracking Technologies

The 866jl platform uses cookies and similar technologies to deliver a functional, personalised, and secure gaming experience. Cookies are small data files placed on your device when you visit 866jl.asia. The following types of cookies are used:

• Strictly Necessary Cookies: Essential to the operation of the 866jl platform. These include session cookies that maintain your login state, security cookies that support fraud prevention, and cookies that manage your responsible gaming settings. These cookies cannot be disabled without preventing normal platform function.
• Functional Cookies: Remember your preferences — such as your preferred game category, language setting, and display preferences — to provide a more consistent experience across sessions.
• Analytics Cookies: Collect anonymised data about how players use the 866jl platform — which pages are visited, how long sessions last, and which features are used. This data is used to improve platform design and performance. Analytics cookies are only set with your consent.
• Security and Fraud Prevention Cookies: Help 866jl detect and prevent automated bot activity, brute-force login attempts, and other security threats by establishing device fingerprints across sessions.

You may manage your cookie preferences through your browser settings or through the cookie preference controls available on the 866jl platform. Disabling strictly necessary cookies may impair platform functionality. 866jl does not use third-party advertising or tracking cookies that share your data with external advertising networks.

Your Data Privacy Rights

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights in relation to your personal data held by 866jl. To exercise any of these rights, contact our Data Protection Officer at the details in Section 15.

Children's Privacy and Age Restriction

The 866jl platform is strictly restricted to individuals aged twenty-one (21) years and above. 866jl does not knowingly collect personal data from individuals below the minimum age of 21. The minimum age of 21 for casino-style gambling is a mandatory requirement under Philippine gaming regulations applicable to online gaming platforms, and 866jl enforces this requirement through age verification during the registration process and at withdrawal milestones.

If 866jl discovers that personal data has been collected from an individual who does not meet the minimum age requirement, that account will be suspended immediately, all associated data will be deleted or returned to the extent possible, any deposited funds will be returned to the original payment method, and winnings accrued on the account will be voided.

Third-Party Services and Links

The 866jl platform integrates third-party services including payment processors, game providers, and identity verification services, each of which has its own privacy practices. While 866jl contractually requires all third-party processors to protect personal data consistently with this Policy and applicable Philippine law, 866jl is not responsible for the independent privacy practices of third-party services accessed through the 866jl platform.

866jl does not maintain links to external third-party websites on the 866jl platform. If you independently navigate to any external website, 866jl accepts no responsibility for that site's data collection or privacy practices.

Cross-Border Data Transfers

Some of the third-party service providers engaged by 866jl — including game software providers and fraud prevention services — may process data outside the Philippines. Where such cross-border transfers occur, 866jl ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required by the Philippine Data Privacy Act, including:

• Binding contractual clauses that require overseas recipients to protect personal data to Philippine standards
• Limiting overseas data sharing to service providers operating in jurisdictions with comparable data protection frameworks
• Transferring only the minimum data necessary for the specific service being provided

By registering a 866jl account and accepting this Privacy Policy, you consent to the transfer of your personal data outside the Philippines where necessary for the delivery of 866jl's services, subject to the safeguards described above.

Changes to This Privacy Policy

866jl may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. When material changes are made, 866jl will notify active account holders via their registered Philippine mobile number or email address at least fourteen (14) days before the changes take effect, and will update the "Last Updated" date at the top of this page.

Continued use of the 866jl platform after the effective date of a revised Privacy Policy constitutes acceptance of the updated terms. If you object to a material change, you may close your 866jl account and request deletion of your personal data (subject to applicable legal retention periods) before the change takes effect.

Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights under the Philippine Data Privacy Act, please contact the 866jl Data Protection Officer:

If you are dissatisfied with 866jl's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC's mandate includes investigating alleged violations of the Data Privacy Act and can impose penalties on organisations found to be non-compliant.