222jl Privacy Policy

Introduction

This Privacy Policy ("Policy") sets out how 222jl ("222jl", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of registered players, website visitors, and prospective users ("you", "Data Subject") in connection with the 222jl online gaming platform accessible at https://222jl.co.

222jl is committed to protecting the privacy and personal data of all Filipino players who use our platform. This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). As a PAGCOR-regulated gaming operator, 222jl also complies with data protection requirements imposed under Philippine gaming regulations and Anti-Money Laundering (AML) statutes.

By registering an account on 222jl, using the platform, or otherwise submitting personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

Data Controller Identity

For the purposes of the Data Privacy Act of 2012, the data controller responsible for your personal data collected through the 222jl platform is:

• Entity Name: 222jl (the operating entity behind the 222jl platform)
• Platform URL: https://222jl.co
• Regulatory Authority: Philippine Amusement and Gaming Corporation (PAGCOR)
• Governing Law: Republic of the Philippines
• Data Protection Officer Contact: [email protected] (subject line: "Data Protection / Privacy Inquiry")

As data controller, 222jl determines the purposes and means of processing your personal data. Where 222jl engages third-party service providers to process data on its behalf, those parties act as data processors under contractual data processing agreements that impose obligations consistent with this Policy and the Data Privacy Act.

Personal Data We Collect

222jl collects personal data through several channels: directly from you during registration and account use, automatically through platform interactions, and from third parties where legally required.

3.1 Data You Provide Directly:

• Identity Data: Full legal name, date of birth, nationality, and gender as provided during registration and KYC verification.
• Contact Data: Philippine mobile number (+63 format), email address, and residential address.
• Identity Verification Documents: Copies of Philippine government-issued identification (e.g., PhilSys ID, UMID, Driver's License, Passport) submitted for KYC compliance.
• Financial Data: GCash account reference, Maya account reference, bank account details (BPI, BDO, Metrobank, etc.) as provided for deposit and withdrawal processing. Full payment card numbers are not stored by 222jl and are processed through PCI-DSS compliant third-party gateways.
• Account Credentials: Username and encrypted password hash. Plaintext passwords are never stored.
• Support Communications: Records of live chat, email, and any other correspondence you initiate with 222jl support.

3.2 Data Collected Automatically:

• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and timezone.
• Usage Data: Pages visited, games played, session duration, wagering history, deposit and withdrawal transaction logs, and login timestamps.
• Geolocation Data: Approximate geographic location derived from IP address, used to verify compliance with PAGCOR's territorial restrictions on access.
• Cookie and Tracking Data: Session identifiers, preference cookies, and analytics data as described in Section 7 of this Policy.

3.3 Data Received from Third Parties:

• Transaction confirmation data from GCash, Maya, and banking partners to verify deposit and withdrawal status.
• Identity verification data from KYC processing services where engaged to supplement document-based verification.
• Fraud prevention and AML screening data from PAGCOR-mandated compliance systems.

Purposes of Processing

222jl processes your personal data only for specified, legitimate, and proportionate purposes. The primary purposes are:

1. Account Registration and Management: Creating, maintaining, and administering your 222jl player account, including authentication of login sessions and management of account settings.
2. Identity and Age Verification (KYC): Verifying your identity and confirming that you meet the PAGCOR minimum age requirement of 21 years, as required by law.
3. Payment Processing: Facilitating the deposit and withdrawal of funds via GCash, Maya, BPI, BDO, Metrobank, and other approved Philippine payment channels.
4. Provision of Gaming Services: Operating the live casino, slot, sports betting, bingo, and arcade gaming services available on the 222jl platform.
5. Regulatory Compliance: Meeting obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160, as amended), and related Philippine financial regulations, including mandatory reporting to AMLC.
6. Fraud Detection and Platform Security: Monitoring account activity to detect and prevent fraud, collusion, bonus abuse, unauthorized access, and other prohibited conduct as defined in the 222jl Terms and Conditions.
7. Customer Support: Responding to inquiries, resolving disputes, and processing responsible gaming requests including self-exclusion and deposit limit adjustments.
8. Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and providing relevant support tools or interventions in line with PAGCOR responsible gaming standards.
9. Platform Improvement: Analysing aggregated and anonymised usage data to improve the 222jl platform, game offerings, and user experience.
10. Marketing Communications: Where you have provided express consent, sending you promotional offers, bonus notifications, and platform updates relevant to the 222jl platform. You may withdraw marketing consent at any time.

Legal Basis for Processing

Under the Data Privacy Act of 2012, 222jl processes personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the agreement between 222jl and you (the player contract constituted by the Terms and Conditions), including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, KYC regulations, the Data Privacy Act itself, and other applicable Philippine statutes.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests do not override your fundamental rights.
• Consent: Processing for marketing communications and optional analytics, where you have given freely revocable, specific, and informed consent.

Data Sharing & Disclosure

222jl does not sell your personal data. We do not transfer your data to third-party advertisers, data brokers, or commercial partners for their own marketing purposes. Data is shared only in the following strictly controlled circumstances:

• Payment Service Providers: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), BPI, BDO, Metrobank, and other approved Philippine payment processors receive the minimum data necessary to process your deposit and withdrawal transactions.
• PAGCOR: As 222jl's regulatory authority, PAGCOR has access to platform data as required for licensing oversight, compliance audits, and player dispute resolution.
• Anti-Money Laundering Council (AMLC): 222jl is required by the Anti-Money Laundering Act to submit covered transaction reports (CTRs) and suspicious transaction reports (STRs) to the AMLC. This sharing is mandatory and non-optional.
• KYC and Identity Verification Partners: Where 222jl engages third-party identity verification services, only the data necessary for identity confirmation is shared under strict data processing agreements.
• Law Enforcement and Courts: Where required by a valid legal order, warrant, or subpoena issued by a competent Philippine authority, 222jl will disclose personal data as required.
• Technology Infrastructure Providers: Cloud hosting, security monitoring, and platform infrastructure providers who process data on 222jl's behalf under contractual obligations that mirror this Policy's protections.

All third-party data processors engaged by 222jl are required to implement appropriate technical and organisational security measures and to process data only in accordance with 222jl's documented instructions.

Cookies & Tracking Technologies

The 222jl platform uses cookies and similar technologies to enable platform functionality, maintain your logged-in session, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Session authentication cookies that maintain your login state across pages. These are essential for platform operation and cannot be disabled without preventing platform access.
• Functional Cookies: Preference cookies that remember your game lobby settings, language preferences, and notification configurations between sessions.
• Analytics Cookies: Aggregated, anonymised usage analytics to understand how players navigate the 222jl platform and identify areas for improvement. These do not personally identify you.
• Security Cookies: Cookies used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

Non-essential cookies (analytics and functional preference cookies) are activated only where you have provided consent via the cookie preference interface displayed on your first visit to the 222jl platform. You may adjust cookie preferences at any time through your browser settings. Disabling strictly necessary cookies will prevent you from accessing your 222jl account.

Data Security Measures

222jl implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, destruction, and alteration. Measures include:

• Encryption at Rest and in Transit: All personal data is encrypted using AES-256 at rest and transmitted only over TLS 1.2 or higher connections.
• Access Control: Personal data is accessible only to 222jl personnel with a documented business need. Role-based access controls and multi-factor authentication are enforced for all administrative systems.
• Password Security: Account passwords are stored as salted cryptographic hashes. Plaintext passwords are never recorded or visible to any 222jl personnel.
• Intrusion Detection: Real-time monitoring systems detect and alert on anomalous access patterns, potential data breaches, and unauthorized system access attempts.
• Regular Security Audits: 222jl's data processing infrastructure is subject to periodic security assessments by qualified information security professionals.
• Data Breach Response: In the event of a personal data breach that presents a real risk to affected individuals, 222jl will notify affected players and the National Privacy Commission (NPC) within the timeframes prescribed under NPC rules.

Data Retention Periods

222jl retains personal data only for as long as is necessary for the purposes for which it was collected or as required by applicable Philippine law. The following retention periods apply as a general framework:

• Account Data (active accounts): Retained for the duration of the account's active status plus a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of the last transaction on the account, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for five (5) years in compliance with PAGCOR and AMLC regulatory requirements.
• Support Communications: Retained for three (3) years from the date of the communication, or longer where relevant to a pending dispute or legal claim.
• Marketing Consent Records: Retained for the duration of the marketing relationship plus two (2) years as evidence of consent.
• Analytics Data: Retained in anonymised, aggregated form indefinitely; no personally identifiable information is retained in analytics datasets beyond twelve (12) months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 222jl's data disposal procedures.

Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules, you — as a Filipino data subject — hold the following rights with respect to your personal data processed by 222jl:

222jl will respond to data rights requests within fifteen (15) business days of receipt, as required under NPC Circular No. 2023-04. Where a request is particularly complex or voluminous, the response period may be extended by an additional fifteen (15) business days, with prior notice to you. There is no fee for exercising your data rights under the Data Privacy Act.

Minors & Age Restriction

The 222jl platform and all its gaming services are strictly restricted to persons who are 21 years of age or older, in compliance with PAGCOR's minimum age requirements for online gaming in the Philippines.

222jl does not knowingly collect or process the personal data of individuals under 21 years of age. Where 222jl discovers that personal data has been collected from a person under 21 — whether through a false declaration or otherwise — the following actions will be taken immediately:

• The relevant account will be suspended and access to all platform features revoked;
• All personal data associated with the underage individual will be securely deleted in accordance with this Policy;
• Any deposited funds (net of any withdrawals already processed) will be returned following a brief fraud-prevention review;
• The matter may be reported to PAGCOR and relevant child protection authorities where circumstances warrant.

If you are a parent or guardian and believe that a minor has registered on the 222jl platform, please contact [email protected] immediately.

Cross-Border Data Transfers

The 222jl platform and its primary data processing infrastructure are located within the Philippines. Where 222jl engages technology service providers — such as cloud infrastructure providers or third-party gaming software vendors — whose servers may be located outside the Philippines, personal data transfers to those jurisdictions are governed by:

• Data Processing Agreements that impose obligations at least equivalent to those required under the Philippine Data Privacy Act of 2012;
• Standard Contractual Clauses approved by the National Privacy Commission where applicable;
• An assessment that the recipient jurisdiction provides an adequate level of data protection for the specific data categories transferred.

222jl will not transfer personal data to jurisdictions that do not provide adequate protections without implementing the safeguards described above and, where required, obtaining your prior consent.

Changes to This Policy

222jl reserves the right to update and amend this Privacy Policy at any time to reflect changes in our data processing practices, new PAGCOR or NPC requirements, or developments in Philippine data protection law.

Material changes to this Policy — particularly those that affect the purposes of processing, the categories of data collected, or your data rights — will be communicated to registered players via email notification or a prominent in-platform notice at least seven (7) days prior to the changes taking effect.

Your continued use of the 222jl platform after the effective date of any amended Policy constitutes your acknowledgement of the changes. If you do not accept the amended Policy, you must cease using the platform and may request account closure by contacting support.

Contact & Data Protection Officer

For all privacy-related inquiries, data rights requests, data breach notifications, and complaints regarding 222jl's data processing practices, please contact us through the following channels:

• Data Protection Officer (DPO) Email: [email protected] — please include "Privacy / DPO Request" in the subject line to ensure your inquiry is routed to the appropriate team.
• Live Chat Support: Available 24/7 within your 222jl account dashboard. For data rights requests, please use the email channel to create a documented record.
• Response Timeline: 222jl will acknowledge all DPO inquiries within 3 business days and provide a substantive response within 15 business days as required under NPC rules.
• Regulatory Authority: National Privacy Commission of the Philippines — privacy.gov.ph. You have the right to lodge a complaint with the NPC if you are not satisfied with 222jl's response to your data rights request.

This Privacy Policy is effective as of 1 January 2026. By using the 222jl platform, you confirm that you have read and understood this Policy. Salamat sa tiwala ninyo sa 222jl.