18jl3 Privacy Policy — How We Handle Your Personal Information

1. Introduction and Scope

This Privacy Policy applies to all personal data collected and processed by 18jl3 (the "Platform", "we", "us", or "our") in connection with the operation of the 18jl3 online casino and sports betting platform accessible at https://18jl3.cam.

18jl3 is committed to protecting the privacy of its users in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations. This Policy describes the types of personal data we collect, the purposes for which we process that data, the parties with whom we may share it, and the rights available to you as a data subject.

By registering an account with 18jl3 or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Policy, please discontinue use of the 18jl3 platform immediately.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you create an 18jl3 account or interact with our services, you may provide us with personal data including but not limited to:

• Identity Information: Full legal name, date of birth, nationality, and gender;
• Contact Information: Email address, mobile phone number, and residential address (barangay, city, province);
• Government-Issued Identification: ID type and number (e.g., PhilSys ID, passport number, driver's license, UMID) submitted during Know Your Customer (KYC) verification;
• Financial Information: GCash mobile number, PayMaya account details, bank account name and number (BPI, BDO, Metrobank, or other Philippine bank institutions) used for deposits and withdrawals;
• Account Credentials: Username and encrypted password.

2.2 Data Collected Automatically

When you access and use the 18jl3 platform, certain technical data is collected automatically through our systems and infrastructure:

• Device and Browser Information: Device type, operating system version, browser type and version, screen resolution;
• Network Information: IP address, approximate geographic location derived from IP, internet service provider;
• Session Data: Login timestamps, session duration, pages visited, games accessed, betting history, and deposit/withdrawal transactions;
• Cookies and Local Storage: Session tokens, preference settings, and analytics identifiers. See Section 8 for full cookie details.

2.3 Data from Third Parties

In limited circumstances, 18jl3 may receive personal data about you from third-party sources including payment processors (e.g., GCash, PayMaya), identity verification service providers, fraud detection partners, and regulatory bodies where required by law.

3. Purposes and Legal Basis for Processing

18jl3 processes your personal data only for specified, legitimate purposes, and only to the extent necessary for those purposes. The following table outlines the primary processing activities and their legal bases:

4. Sharing and Disclosure of Personal Data

4.1 We Do Not Sell Your Data

18jl3 does not sell, rent, lease, or otherwise transfer your personal data to third parties for commercial marketing purposes. Your information is used exclusively for the purposes described in this Privacy Policy.

4.2 Authorised Service Providers

We may share your personal data with trusted third-party service providers who assist in operating the 18jl3 platform, strictly under written data processing agreements that require them to maintain confidentiality and process data only on our instructions. These include:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank);
• Identity verification and KYC solution providers;
• Cloud infrastructure and server hosting providers;
• Casino game software providers and live dealer studio operators;
• Fraud detection and cybersecurity vendors;
• Customer support platform providers.

4.3 Legal and Regulatory Disclosure

18jl3 may disclose your personal data to government authorities, regulatory bodies, or law enforcement agencies where required by applicable Philippine law, including but not limited to disclosures required under the Anti-Money Laundering Act (AMLA), the Cybercrime Prevention Act, or orders from the Philippine Amusement and Gaming Corporation (PAGCOR) and the National Privacy Commission (NPC).

5. Data Retention

18jl3 retains your personal data only for as long as it is necessary to fulfil the purposes described in this Policy, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity records: Retained for the duration of your account plus five (5) years after account closure, in compliance with AML and gaming regulatory requirements;
• Financial transaction records: Retained for five (5) years from the date of the transaction;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing preferences and consent records: Retained for the period of consent or until withdrawn, plus one (1) year;
• Technical log data: Retained for twelve (12) months on a rolling basis.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

6. Data Security Measures

18jl3 implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser and the 18jl3 platform is encrypted using TLS (Transport Layer Security) with current cipher suites;
• Encryption at Rest: Sensitive personal data stored in our databases is encrypted at the application and storage layer;
• Access Controls: Internal access to personal data is restricted on a need-to-know basis, with multi-factor authentication required for privileged system access;
• Two-Factor Authentication (2FA): Available and encouraged for all 18jl3 player accounts to prevent unauthorised logins;
• Penetration Testing: The 18jl3 platform undergoes periodic third-party security assessments to identify and remediate vulnerabilities;
• Incident Response: We maintain documented procedures for identifying, containing, and responding to personal data breaches, including notification to the National Privacy Commission (NPC) as required.

7. Your Data Rights Under Philippine Law

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 18jl3:

• Right to be Informed: You have the right to be informed that your personal data is being collected and processed, and about the purposes for which it is being used;
• Right to Access: You may request a copy of the personal data 18jl3 holds about you, including information about how it is being processed;
• Right to Rectification: You may request that inaccurate or outdated personal data be corrected. Some corrections can be made directly through your 18jl3 account settings;
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data where it is no longer necessary for the purposes collected, subject to overriding legal retention obligations;
• Right to Data Portability: You may request your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to Object: You have the right to object to certain processing activities, including direct marketing and processing based solely on automated decision-making;
• Right to Lodge a Complaint: If you believe that 18jl3 has processed your personal data in violation of RA 10173, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC).

To exercise any of the above rights, contact the 18jl3 support team via live chat or at the email address listed in the footer. We will acknowledge your request within three (3) business days and respond fully within fifteen (15) business days, as required under the Data Privacy Act.

8. Cookies and Tracking Technologies

18jl3 uses cookies and similar technologies on our platform to ensure the site functions correctly, to remember your preferences, and to understand how users interact with our services. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting core functionality;
• Functional Cookies: Used to remember your preferences such as language settings and last login state;
• Analytics Cookies: Aggregate, anonymised data used to understand how users navigate the platform, which pages are most visited, and where issues arise. This helps us improve the 18jl3 experience;
• Security Cookies: Used for fraud detection, bot prevention, and session integrity.

18jl3 does not use third-party advertising cookies or cross-site tracking technologies that serve ads on other platforms. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may prevent you from logging in or using core platform features.

9. Age Restriction and Minors

The 18jl3 platform is strictly intended for individuals who are 21 years of age or older, in line with Philippine gaming regulations. We do not knowingly collect personal data from persons under the age of 21. If we discover that a user under 21 has registered an account, we will immediately terminate the account, void any transactions, and delete all associated personal data.

Parents and legal guardians who believe that a minor may have registered on 18jl3 without their knowledge should contact our support team immediately.

10. Cross-Border Data Transfers

18jl3 is primarily operated to serve players in the Philippines, and data processing takes place predominantly within systems and infrastructure located in the Philippines and the Southeast Asia region. In cases where data is transferred to service providers or infrastructure outside the Philippines, such transfers are carried out only where the receiving country provides adequate data protection, or where appropriate safeguards such as standard contractual clauses are in place, consistent with the requirements of the Data Privacy Act of 2012.

11. Contact and Data Protection Inquiries

For any questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data by 18jl3, please contact our Data Protection Officer through the following channels:

• Live Chat: Available inside your 18jl3 member dashboard, 24 hours a day, 7 days a week;
• Email: [email protected] — please include "Privacy Request" in the subject line.

All data-related requests received at the above contact points will be reviewed and handled in compliance with the Data Privacy Act of 2012 and the guidelines issued by the National Privacy Commission of the Philippines.