Privacy Policy

1.1 68jil ("we", "us", "the Platform") is committed to protecting the personal data of all individuals who interact with the 68jil platform at 68jil.net ("Players", "Users", "you"). This Privacy Policy describes the types of personal data we collect, the purposes for which we process it, the parties with whom we share it, and the rights available to you under applicable data protection law.

1.2 This Privacy Policy applies to all personal data collected in connection with your use of the 68jil website, player account, live chat support, email correspondence, and any other channel through which 68jil processes personal data.

1.3 By creating a 68jil account or continuing to use the 68jil platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the 68jil platform.

1.4 This Privacy Policy should be read alongside the 68jil Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of the platform.

2.1 For the purposes of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 68jil is the Personal Information Controller ("PIC") responsible for the personal data collected through the 68jil platform.

2.2 68jil's designated Data Protection Officer ("DPO") oversees compliance with applicable data privacy laws and is the primary point of contact for data-related enquiries and complaints. The DPO can be reached via [email protected] with the subject line "Data Privacy — DPO Enquiry".

3.1 68jil collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include:

3.2 Sensitive Personal Information. Certain categories of personal data — including government-issued ID numbers — constitute Sensitive Personal Information under the Data Privacy Act. 68jil processes such data only to the extent necessary for KYC compliance and applies heightened security measures to its storage and handling.

3.3 You are not required to provide all categories of data to access the 68jil platform; however, failure to provide certain data (such as identity and financial data required for KYC) will result in restrictions on your account, including the inability to process withdrawals.

4.1 Directly from you: When you register a 68jil account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or participate in a promotion, you provide personal data directly to 68jil.

4.2 Automatically: When you visit 68jil.net or use the platform, we automatically collect Technical Data including your IP address, device information, browser type and version, pages visited, time and duration of visits, and session activity. This data is collected through cookies, server logs, and similar technologies as described in Section 8.

4.3 From payment providers: When you deposit or withdraw funds using GCash, PayMaya, BPI, BDO, or Metrobank, those providers share transaction data with 68jil for the purpose of processing and reconciling your payment. 68jil does not receive your full payment credentials (such as full card numbers or banking passwords) from these providers.

4.4 From identity verification providers: 68jil may use third-party KYC verification services to confirm the authenticity of documents submitted during the identity verification process. These providers may return verification results and risk assessments to 68jil.

5.1 68jil processes personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving promotional communications from 68jil;
• Contractual necessity: Where processing is necessary to perform the contract between you and 68jil — including operating your account, processing deposits and withdrawals, and providing access to games;
• Legal obligation: Where processing is required to comply with Philippine law, including the Anti-Money Laundering Act (AMLA), Know Your Customer regulations, and the Data Privacy Act itself;
• Legitimate interests: Where processing is necessary for 68jil's legitimate business interests, such as fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your rights and freedoms.

5.2 Where processing is based on consent, you may withdraw that consent at any time by contacting 68jil's DPO. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6.1 68jil uses the personal data we collect for the following purposes:

• Account management: Creating, verifying, and maintaining your 68jil account, processing your deposits and withdrawals, and providing access to all platform features;
• KYC and regulatory compliance: Verifying your identity and age (21+) as required by applicable Philippine gaming regulations; conducting anti-money laundering screening and due diligence;
• Customer support: Responding to your enquiries, complaints, and support requests via live chat, email, and other channels;
• Platform security and fraud prevention: Monitoring for and investigating suspicious account activity, unauthorized access attempts, and potential abuse of bonuses or the platform;
• Responsible gaming: Monitoring your gaming activity to identify patterns indicative of problem gambling and administering self-exclusion, deposit limits, and cooling-off periods that you have set or that 68jil applies in your interest;
• Promotions and communications: Sending you information about promotions, bonuses, and platform updates that you have opted in to receive. You may opt out of marketing communications at any time;
• Platform improvement: Analysing aggregated and anonymised usage data to improve the 68jil platform, identify technical issues, and optimise the player experience;
• Legal compliance: Meeting reporting obligations under the Anti-Money Laundering Act, retaining records as required by gaming regulations, and responding to lawful requests from Philippine regulatory and law enforcement authorities.

7.1 68jil does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your personal data only as described in this section:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive the minimum data necessary to process your transactions;
• KYC and identity verification providers: Third-party verification services that process identity documents and conduct anti-money laundering screening on 68jil's behalf. These providers are bound by data processing agreements and may only use your data for the specific purpose of verification;
• Game providers: Third-party game studios (including live casino operators) receive session data necessary to run the game and resolve any disputes about game outcomes. Game providers do not receive your financial or identity data;
• Regulatory authorities: Philippine government agencies including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) where required by law or by lawful request;
• Law enforcement: Philippine law enforcement agencies where 68jil is required or permitted by law to disclose personal data in connection with an investigation into criminal activity;
• Professional advisers: Legal, accounting, and auditing professionals engaged by 68jil who are subject to professional confidentiality obligations;
• Group companies: Affiliated entities within the 68jil corporate group, where necessary for platform operations, subject to the same data protection standards as set out in this Policy.

7.2 All third parties with whom 68jil shares personal data are required to maintain appropriate technical and organisational security measures and to process your data only for the specified purposes.

8.1 68jil uses cookies and similar technologies (including session tokens, local storage, and pixel tags) to operate the platform and improve your experience. The categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function, including session management, login persistence, and security tokens. These cannot be disabled without impairing platform functionality;
• Functional cookies: Remember your preferences such as language settings and game lobby layout. These improve your experience but are not essential;
• Analytics cookies: Collect aggregated data about how Players navigate the 68jil platform to help us identify usability issues and improve page performance. The data collected through analytics cookies does not identify individual Players;
• Security cookies: Help detect and prevent fraudulent activity, including bot traffic and account compromise attempts.

8.2 You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the 68jil platform. 68jil does not use third-party advertising or retargeting cookies.

8.3 Session tokens generated at login expire automatically when your session ends or after a period of inactivity. This is a security measure and cannot be disabled.

9.1 68jil retains personal data for the duration of your account and for the periods specified below after account closure, in accordance with applicable Philippine legal requirements:

• Account and identity data: Retained for a minimum of five (5) years after account closure, as required by anti-money laundering regulations;
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA requirements;
• Gaming and wagering history: Retained for a minimum of three (3) years from the date of each session, for dispute resolution and regulatory purposes;
• Customer support communications: Retained for two (2) years from the date of the communication, unless the subject matter forms part of an ongoing dispute;
• Technical and session data: Retained for twelve (12) months from collection, unless required for longer for security or fraud investigation purposes.

9.2 Where retention is required solely by contract (not by law), 68jil will retain data only for as long as necessary to fulfil the contractual purpose and will securely delete or anonymise it thereafter.

9.3 Personal data that is the subject of a valid erasure request (see Section 11) will be deleted promptly to the extent permitted by applicable law. Where a legal retention obligation prevents immediate deletion, 68jil will restrict further processing of the data until the retention period expires.

10.1 68jil implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, and disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 68jil platform;
• Encryption of sensitive data at rest, including financial records and KYC documents;
• Access controls limiting internal access to personal data on a need-to-know basis, with role-based permissions enforced across all systems;
• Multi-factor authentication requirements for all internal systems that process Player data;
• Regular security assessments and penetration testing conducted by qualified third-party security professionals;
• Staff training on data protection obligations and information security practices;
• Incident response procedures for detecting, investigating, and reporting personal data breaches.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 68jil will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected individuals without undue delay in accordance with the Data Privacy Act.

10.3 Notwithstanding the security measures described above, no data transmission over the internet is completely secure. Players are responsible for keeping their login credentials confidential and for using a secure, private network connection when accessing 68jil.

11.1 Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by 68jil:

11.2 To exercise any of the above rights, submit a written request to 68jil's DPO via [email protected] with the subject line "Data Subject Rights Request". You will be asked to verify your identity before your request is processed. 68jil will respond to all valid requests within fifteen (15) calendar days.

11.3 If you are not satisfied with 68jil's response to a data privacy complaint or request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

12.1 The 68jil platform is strictly intended for individuals aged 21 years and older. 68jil does not knowingly collect personal data from individuals under the age of 21.

12.2 If 68jil becomes aware that personal data has been collected from an individual under 21, that data will be deleted immediately and the associated Account will be closed in accordance with the 68jil Terms & Conditions.

12.3 If you are a parent or guardian and believe that a minor has registered a 68jil account or submitted personal data to 68jil, please contact us immediately via [email protected]. We will investigate and take appropriate action without delay.

13.1 Some of 68jil's third-party service providers — including game studios, KYC verification providers, and infrastructure suppliers — may process personal data outside of the Philippines. Where such international transfers occur, 68jil takes steps to ensure that appropriate safeguards are in place, including contractual data processing agreements that impose data protection standards consistent with those required by the Data Privacy Act.

13.2 Personal data transferred internationally by 68jil is protected by contractual commitments that require recipient parties to handle data with the same degree of care and security as 68jil itself.

14.1 The 68jil platform integrates with third-party services for game content, payment processing, and identity verification. Each third-party provider operates under its own privacy policy, which governs that provider's processing of personal data. 68jil is not responsible for the privacy practices of third-party providers beyond the contractual data processing terms we impose upon them.

14.2 68jil does not include links to external third-party websites within the platform content. Any navigation within 68jil.net uses internal platform URLs only.

15.1 68jil may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or the services we offer. The updated Privacy Policy will be published on 68jil.net with a revised effective date.

15.2 Where amendments are material in nature, 68jil will notify registered Players via the contact details held on their Account before the new version takes effect. Your continued use of the 68jil platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

15.3 We recommend that Players review this Privacy Policy periodically to stay informed about how 68jil handles their personal data.

16.1 For any questions, concerns, or requests relating to this Privacy Policy or 68jil's handling of your personal data, please contact our Data Protection Officer using the following details:

• Email: [email protected] (subject line: "Data Privacy Enquiry")
• Live Chat: Available 24/7 via the 68jil platform dashboard
• Response time: Data privacy requests acknowledged within 48 hours; substantive responses within 15 calendar days

16.2 If you are not satisfied with 68jil's response to a data privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC's contact details and complaints procedure are available on the NPC's official government website.