j3j3 Casino — Privacy Policy

1.1 This Privacy Policy ("Policy") describes the practices of j3j3 ("j3j3," "we," "us," or "our") in relation to the collection, processing, storage, disclosure, and protection of personal data obtained through the j3j3.cam website and all associated services, applications, and communication channels ("Platform").

1.2 This Policy applies to all individuals who interact with j3j3, including registered players, prospective players who browse the Platform without registering, and any persons who contact j3j3 via our customer support channels.

1.3 This Policy is intended to comply with the requirements of Republic Act No. 10173 (the Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines. Where applicable, j3j3 also observes internationally recognized data protection principles in the handling of player information.

2.1 For the purposes of applicable data privacy legislation, j3j3 acts as the data controller in respect of personal data processed through the j3j3.cam Platform. As data controller, j3j3 determines the purposes for which and the means by which personal data is processed.

2.2 Where j3j3 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification services, or game software providers — those providers act as data processors and are bound by contractual obligations consistent with the requirements of the Data Privacy Act of 2012.

2.3 For all privacy-related inquiries, requests to exercise data subject rights, or complaints regarding j3j3's data handling practices, players may contact j3j3's designated Data Protection Officer (DPO) using the contact details set out in Section 15 of this Policy.

3.1 The categories of personal data collected by j3j3 vary depending on the stage of your relationship with the Platform. The following table summarizes the primary categories of data collected and their typical sources:

3.2 j3j3 does not intentionally collect special categories of sensitive personal data — such as health information, political opinions, or religious beliefs — unless specifically required by law or provided voluntarily by the player in the context of a responsible gaming disclosure.

4.1 j3j3 collects personal data through the following primary channels:

• Direct Submission: Information you provide when completing the j3j3 registration form, submitting KYC documentation, communicating with customer support, or updating your account settings;
• Transactional Activity: Data generated automatically when you make deposits via GCash or PayMaya, request withdrawals, or engage in real-money gameplay on the Platform;
• Technical Means: Cookies, session tokens, server logs, and device fingerprinting technologies that capture technical and behavioral data as you navigate the j3j3 Platform;
• Third-Party Sources: Identity verification and fraud prevention data received from licensed third-party KYC providers, payment processors, and fraud detection services engaged by j3j3 to support its compliance obligations;
• Publicly Available Sources: In limited circumstances, j3j3 may verify information against publicly available records for AML compliance or fraud prevention purposes.

4.2 Where j3j3 receives data about you from third-party sources, we will only use that data for the specific purpose for which it was disclosed to us and in accordance with the terms of the relevant data sharing arrangement.

5.1 j3j3 processes personal data for the following specific purposes:

• Account Management: Creating, maintaining, verifying, and administering your j3j3 player account, including authentication of your identity at login;
• Service Delivery: Enabling access to and use of j3j3's gaming services, including slots, live casino tables, bingo, and all other Platform features;
• Payment Processing: Processing deposits received via GCash, PayMaya, BPI, BDO, Metrobank, and card channels, and processing withdrawal requests to your registered payment method;
• Regulatory Compliance: Fulfilling j3j3's obligations under applicable Philippine anti-money laundering laws, gaming regulations, and tax reporting requirements;
• Fraud & Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, collusion, bonus abuse, and other forms of platform manipulation;
• Responsible Gaming: Monitoring gameplay patterns for indicators of problem gambling, administering self-exclusion requests, deposit limits, and other player protection tools;
• Customer Support: Responding to player inquiries, resolving disputes, and maintaining records of support interactions for quality assurance;
• Platform Improvement: Analyzing aggregated and anonymized usage data to improve the j3j3 Platform, optimize game performance, and enhance the overall player experience;
• Marketing Communications: Sending promotional communications about j3j3 bonuses, new games, and events — but only where you have provided explicit consent to receive such communications.

6.1 Under the Data Privacy Act of 2012, j3j3 relies on the following legal bases for processing personal data:

• Contractual Necessity: Processing necessary for the performance of the contract between j3j3 and the player — principally the provision of gaming services, payment processing, and account management — is conducted on the basis of contractual necessity;
• Legal Obligation: Processing necessary for j3j3 to comply with its legal obligations under Philippine law, including anti-money laundering requirements, gaming regulations, and tax laws;
• Legitimate Interests: Processing conducted to protect the legitimate interests of j3j3 and its players, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by the rights and interests of individual players;
• Consent: Processing of personal data for marketing communications and certain cookie-based tracking activities is conducted on the basis of your explicit, freely given consent, which may be withdrawn at any time.

7.1 j3j3 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Personal data may be shared with the following categories of recipients only to the extent necessary for the stated purposes:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and card processing networks, to facilitate deposits and withdrawals on your behalf;
• KYC & Identity Verification Services: Licensed third-party providers engaged to verify player identity and age in accordance with applicable Philippine regulations;
• Game Software Providers: Third-party game studios and live casino operators whose games are available on j3j3, to the extent required for game session management and technical support;
• Fraud Prevention Services: Third-party providers of fraud detection, risk scoring, and AML screening services;
• Regulatory Authorities: Philippine government agencies, law enforcement authorities, and gaming regulators, where j3j3 is required by law or regulatory directive to disclose player information;
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by j3j3, subject to confidentiality obligations.

7.2 All third-party processors engaged by j3j3 are subject to contractual data processing agreements that require them to process personal data only on j3j3's documented instructions and to maintain appropriate security measures consistent with applicable data privacy law.

8.1 j3j3 retains personal data only for as long as is necessary to fulfill the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The following general retention periods apply:

• Active Account Data: Retained for the duration of the player's active account relationship with j3j3;
• KYC Documents and Transaction Records: Retained for a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering regulations;
• Game Session Logs: Retained for a minimum of three (3) years from the date of the session, for dispute resolution and regulatory audit purposes;
• Customer Support Records: Retained for three (3) years from the date of the final interaction;
• Marketing Consent Records: Retained for three (3) years from the date of consent or withdrawal of consent, whichever is later.

8.2 Upon expiration of the applicable retention period, personal data will be securely deleted or irreversibly anonymized in accordance with j3j3's internal data disposal procedures.

9.1 j3j3 implements a comprehensive suite of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption: All data transmitted between your device and the j3j3 Platform is encrypted using 256-bit Transport Layer Security (TLS). Password data is stored exclusively as salted cryptographic hashes — j3j3 staff cannot read your password;
• Access Controls: Access to systems containing personal data is restricted to authorized personnel on a strict need-to-know basis, with access logs maintained and reviewed regularly;
• Multi-Factor Authentication: Internal systems processing sensitive player data are protected by multi-factor authentication requirements for all staff access;
• Network Security: j3j3's technical infrastructure employs firewalls, intrusion detection systems, and regular vulnerability assessments to identify and remediate security risks;
• Incident Response: j3j3 maintains a documented data breach response procedure, including notification protocols to affected players and the National Privacy Commission as required by the Data Privacy Act.

9.2 Notwithstanding the above, no system is entirely immune from security risks. j3j3 recommends that players take reasonable steps to protect their own account security, including using a strong unique password, enabling device-level security features, and reporting any suspected unauthorized account access to j3j3 support immediately.

10.1 j3j3 uses cookies and similar tracking technologies to operate the Platform effectively, recognize returning players, maintain session security, and analyze usage patterns. The following categories of cookies are used on j3j3.cam:

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state and security tokens that protect against cross-site request forgery. These cannot be disabled without disrupting Platform functionality;
• Functional Cookies: Used to remember your preferences, such as language settings and game lobby view configurations, to improve your experience across sessions;
• Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate and use the Platform, enabling j3j3 to identify performance issues and prioritize improvements. No individually identifying data is shared with analytics providers;
• Security Cookies: Used for device recognition and to support OTP-free login on trusted devices, as described in the j3j3 Login security architecture.

10.2 Most web browsers allow you to control cookies through browser settings. Please be aware that disabling certain cookies may impair the functionality of your j3j3 account and gaming experience. j3j3 does not use third-party advertising cookies or track your activity on websites outside of j3j3.cam.

11.1 As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by j3j3. j3j3 is committed to honoring these rights without undue delay and at no charge in ordinary circumstances:

11.2 To exercise any of the above rights, please submit a written request to j3j3's Data Protection Officer using the contact details in Section 15. j3j3 will respond to all valid requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, j3j3 may extend this period by a further thirty (30) days with prior notice.

11.3 j3j3 may require you to verify your identity before processing a data subject rights request, to ensure that information is not disclosed to unauthorized parties.

12.1 j3j3's services are strictly intended for individuals who are twenty-one (21) years of age or older. j3j3 does not knowingly collect personal data from any person below the age of 21.

12.2 j3j3 implements age verification controls at the point of registration and conducts KYC verification that includes confirmation of date of birth through government-issued identification. Any account found to belong to a person under 21 will be immediately closed, all deposits will be returned to the originating payment method, and all gaming history and personal data will be deleted — with the exception of records required to be retained under applicable AML and regulatory obligations.

12.3 If you are a parent or guardian and believe that your child under the age of 21 has registered a j3j3 account or submitted personal data to j3j3, please contact our Data Protection Officer immediately using the contact details in Section 15. j3j3 will investigate and take appropriate action promptly.

13.1 In the course of providing its services, j3j3 may transfer personal data to third-party service providers located outside the Philippines. Such transfers may be necessary to enable certain technical services, including game software delivery from international providers and payment processing through international card networks.

13.2 Where personal data is transferred outside the Philippines, j3j3 ensures that appropriate safeguards are in place to protect the data in accordance with the standards required by the Data Privacy Act of 2012. These safeguards include contractual data processing agreements that impose obligations on the receiving party consistent with Philippine data privacy standards.

13.3 j3j3 will not transfer personal data to any jurisdiction that does not provide an adequate level of data protection without implementing appropriate compensating controls, and will not transfer data to jurisdictions subject to applicable international sanctions.

14.1 j3j3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or j3j3's data processing practices. The current version of this Policy will always be accessible via the footer of the j3j3.cam website, with the effective date clearly displayed at the top of the document.

14.2 Where changes to this Policy are material — meaning they substantively affect how j3j3 processes your personal data — j3j3 will provide advance notice via email to your registered address or through a prominent in-platform notification, before the changes come into effect.

14.3 Your continued use of the j3j3 Platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not accept the amended Policy, you should discontinue use of the Platform and may request account closure in accordance with the Terms and Conditions.

15.1 For all privacy-related inquiries, requests to exercise data subject rights, or complaints regarding j3j3's handling of personal data, please contact j3j3's Data Protection Officer using the following details:

15.2 If you are not satisfied with j3j3's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the government authority responsible for enforcing the Data Privacy Act of 2012 and can be contacted through the official NPC website.

15.3 j3j3 takes all privacy complaints seriously and will investigate each complaint thoroughly, providing a written response within thirty (30) calendar days of receipt in ordinary circumstances.