27jl Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 27jl ("27jl," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("Player," "you," or "your") who access or use the 27jl online gaming platform at https://27jl.net and all associated services, features, and applications (collectively, the "Platform").

27jl is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). We also adhere to applicable PAGCOR data governance requirements.

By registering an account or using the 27jl Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, 27jl acts as the Personal Information Controller (PIC) in respect of the personal data you provide when using the Platform. This means 27jl determines the purposes and means of processing your personal information.

Our designated Data Protection Officer (DPO) oversees compliance with this Policy and applicable data privacy laws. You may contact our DPO directly at the email address provided in Section 15 of this Policy.

3. Personal Data We Collect

27jl collects the following categories of personal data, depending on how you interact with the Platform:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification — players must be 21 or older)
• Gender
• Nationality and country of residence
• Government-issued ID details (e.g., Philippine passport, driver's license, SSS/UMID card number)
• Username and encrypted password

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, province, postal code)

3.3 Financial Data

• GCash or PayMaya mobile wallet number
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks)
• Credit or debit card details (Visa, Mastercard — card number is tokenized and never stored in plain text)
• Transaction history, deposit and withdrawal records

3.4 Gaming & Behavioral Data

• Game session history, wager amounts, and outcomes
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Customer support interaction logs

3.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and login history
• Cookie identifiers and analytics data

4. How We Collect Your Data

27jl collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and behavioral data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and use the Platform.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; geolocation data from IP intelligence services. All third-party data processors engaged by 27jl are contractually bound to handle your data in accordance with applicable Philippine privacy law.

5. How We Use Your Personal Data

27jl processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your 27jl player account.
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity in compliance with PAGCOR and anti-money laundering regulations.
• Transaction processing: Processing deposits, withdrawals, and bonus credits via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard.
• Platform operation and improvement: Delivering games, personalizing your experience, diagnosing technical issues, and improving Platform performance.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, collusion, and other prohibited conduct.
• Regulatory compliance: Meeting our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering self-exclusion, deposit limit, and cooling-off tools.
• Customer support: Responding to your inquiries, complaints, and support requests via live chat and email.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent, and always with an easy opt-out mechanism.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 27jl processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration (e.g., account management, payment processing).
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA, and the Data Privacy Act.
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

27jl does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — to process your financial transactions.
• KYC and identity verification providers: To verify your identity and age in compliance with regulatory requirements.
• Game content providers: Licensed game studios and live dealer operators whose games are available on the 27jl Platform — limited to session data necessary to deliver gameplay.
• IT and cloud infrastructure providers: Hosting, database, and security service providers who process data on our behalf under strict contractual obligations.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law or court order.
• Fraud prevention networks: Industry fraud detection services to identify and prevent fraudulent activity across the online gaming sector.

All third-party data processors engaged by 27jl are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with our documented instructions.

8. Cookies & Tracking Technologies

27jl uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled without affecting core functionality such as login sessions and security tokens.
• Performance and analytics cookies: Collect anonymized data about how players use the Platform, helping us identify areas for improvement.
• Functional cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming tool configurations.
• Session security cookies: Used to detect and prevent fraudulent login attempts and unauthorized account access.

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to use the Platform. 27jl does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

9. Data Retention

27jl retains your personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer support records: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

10. Data Security

27jl implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 27jl Platform.
• Encryption of sensitive data at rest, including financial credentials and government ID details.
• Payment card tokenization — raw card numbers are never stored on 27jl servers.
• Multi-factor authentication options for player accounts.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Continuous monitoring of Platform systems for anomalous activity and potential security incidents.
• A documented data breach response procedure, including NPC notification within 72 hours where required by law.

While 27jl takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

11. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 27jl:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Policy.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations under PAGCOR regulations and AMLA.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines.

12. Children's Privacy

The 27jl Platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online casino-style gambling. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data and close the associated account. If you believe a minor has registered on the Platform, please notify us immediately at [email protected].

13. Cross-Border Data Transfers

Some of 27jl's third-party service providers — including game content providers, cloud infrastructure partners, and fraud prevention services — may be located outside the Philippines. Where personal data is transferred to recipients in other countries, 27jl ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating the NPC's standard data protection clauses.
• Transfers only to jurisdictions that provide an adequate level of data protection as recognized by the NPC.
• Technical and organizational measures equivalent to those applied within the Philippines.

By using the 27jl Platform, you consent to the transfer of your personal data to these third-party processors in accordance with the safeguards described above.

14. Updates to This Privacy Policy

27jl reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the 27jl Platform following the posting of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the 27jl Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 on the 27jl Platform
• Response Time: Within 15 business days for formal data privacy requests; under 2 minutes via live chat for general inquiries

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been adequately addressed by 27jl.