29jl Casino Privacy Policy

1. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 29jl Casino ("29jl," "we," "us," or "our") is the data controller responsible for the personal information of players and visitors who use the 29jl Platform at 29jl.one.

As data controller, 29jl determines the purposes and means of processing personal data collected through the registration process, game play, payment transactions, customer support interactions, and general use of the 29jl website and associated services.

29jl has appointed a Data Protection Officer (DPO) in accordance with the requirements of the National Privacy Commission (NPC) of the Philippines. Our DPO oversees all data protection compliance matters at 29jl and is the first point of contact for any data subject rights request or privacy concern. Contact details for the DPO are provided in Section 14 of this Policy.

2. Personal Data We Collect

29jl collects personal data in the categories described below. The specific data collected from any individual player may vary depending on their level of account activity, verification status, and the services they use on the Platform.

2.1 Registration & Account Data

When you create a 29jl account, we collect the information you provide during the registration process, including:

• Full legal name as it appears on a valid Philippine government-issued ID
• Date of birth for the purpose of verifying compliance with the 21+ age requirement
• Philippine mobile number or email address used as your login credential and communication channel
• Account password (stored in hashed, encrypted form — 29jl does not store plaintext passwords)
• Preferred currency (Philippine Peso, PHP) and language settings

2.2 Identity Verification (KYC) Data

To comply with PAGCOR regulatory requirements and the Anti-Money Laundering Act (AMLA) of the Philippines, 29jl collects identity verification documents, which may include:

• Scanned or photographed government-issued ID (PhilSys ID, Driver's License, Passport, SSS UMID, PRC ID, Voter's ID)
• Selfie photographs for facial verification purposes
• Proof of address documentation (utility bills, bank statements) where required
• Source of funds declarations for high-value accounts where required by AMLA compliance

2.3 Financial Transaction Data

29jl processes and records all financial transactions conducted through the Platform, including:

• Deposit amounts, dates, times, and payment method identifiers (GCash account reference, Maya account reference, bank account number)
• Withdrawal requests, amounts, processing status, and destination payment method details
• Full transaction history for the duration of your 29jl account
• Bonus crediting and wagering activity records

2.4 Gaming Activity Data

29jl records all gaming activity on the Platform, including game sessions, bet amounts, game outcomes, win/loss records, and bonus round participation. This data is retained for regulatory compliance, dispute resolution, responsible gaming monitoring, and service improvement purposes.

2.5 Technical & Device Data

When you access 29jl, we automatically collect certain technical information including IP address, device type and model, operating system, browser type and version, screen resolution, and session duration. This data is used for fraud prevention, security monitoring, and platform optimization.

2.6 Communications Data

29jl retains records of all customer support interactions, including live chat transcripts, email correspondence, and support ticket history. These records are maintained for quality assurance, dispute resolution, and training purposes.

3. How We Collect Your Data

29jl collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions
• Automatic collection: Technical and behavioral data collected automatically when you access and use the 29jl Platform, including through cookies, log files, and analytics tools
• Third-party payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, and other payment partners when you conduct financial transactions on 29jl
• Identity verification partners: Verification results from third-party KYC service providers used to confirm the authenticity of identity documents submitted to 29jl
• Fraud prevention and security services: Risk scoring and device fingerprint data from security technology partners used to protect 29jl players from unauthorized account access and fraudulent transactions

4. Legal Basis for Processing

29jl processes personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

5. How We Use Your Personal Data

29jl uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your 29jl account, maintain your player profile, and provide access to all Platform services
• Age and identity verification: To confirm you meet the 21+ age requirement and verify your identity in compliance with PAGCOR and AML regulations
• Payment processing: To process your GCash deposits and withdrawals, verify payment source ownership, and maintain accurate financial transaction records
• Customer support: To respond to your inquiries, resolve disputes, process complaints, and provide assistance with account and payment matters
• Fraud detection and security: To identify and prevent unauthorized access, suspicious transactions, bonus abuse, and other fraudulent activity on 29jl
• Responsible gaming: To monitor gaming behavior for indicators of problem gambling and to enforce the responsible gaming tools activated by the player or applied by 29jl's compliance team
• Regulatory compliance: To fulfill reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) as required by Philippine law
• Marketing (with consent): To send promotional emails, SMS notifications, or push messages about 29jl bonuses, new games, and special offers — but only where you have given explicit consent
• Platform improvement: To analyze aggregated usage patterns and improve the user experience, game lobby design, and payment infrastructure of 29jl for all Filipino players

6. Data Sharing & Disclosure

29jl does not sell your personal data. We share your personal information only in the limited circumstances described below:

• Payment processors: GCash (G-Xchange Inc.), Maya (Paymaya Philippines Inc.), and other payment partners receive transaction data necessary to process your deposits and withdrawals. These partners are bound by their own data protection policies and applicable Philippine financial regulations.
• KYC and identity verification providers: Third-party verification platforms receive copies of identity documents you submit to 29jl for the purpose of verifying their authenticity. These providers process data solely for KYC purposes under strict data processing agreements.
• Fraud prevention and security providers: Security technology partners may receive device and behavioral data for the purpose of fraud scoring and unauthorized access detection.
• Game software providers: Game providers (JILI, PG Soft, Pragmatic Play, Evolution Gaming, and others) receive a player session token to facilitate game play. These providers do not receive your full personal profile. Game session data is shared for dispute resolution purposes only.
• Regulatory authorities: 29jl will disclose personal data to PAGCOR, the AMLC, the NPC, or other competent Philippine government authorities where legally required to do so, including in response to valid legal orders or regulatory direction.
• Legal proceedings: Where 29jl is a party to legal proceedings, personal data may be disclosed to courts, legal advisors, or opposing parties as required by applicable Philippine law.
• Business transfers: In the event of a merger, acquisition, or asset sale involving 29jl, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection commitments.

7. Cookies & Tracking Technologies

29jl uses cookies and similar tracking technologies on its Platform to deliver and improve our services. A cookie is a small text file placed on your device when you access a website. The following types of cookies are used on 29jl:

You can control cookie settings through your browser's privacy settings. Disabling essential or security cookies may affect the functionality of the 29jl Platform, including the ability to remain logged in. Marketing cookies can be disabled without affecting core Platform functionality.

8. Data Retention

29jl retains personal data for the periods described below. After the relevant retention period expires, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual.

• Account and registration data: Retained for the duration of your active 29jl account, plus 5 years following account closure, in compliance with PAGCOR record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of 5 years from the date of collection, as required under the Anti-Money Laundering Act (AMLA) of the Philippines.
• Financial transaction records: Retained for a minimum of 5 years as required by AMLA and applicable PAGCOR regulations governing transaction record-keeping.
• Gaming activity records: Retained for 2 years following your last active session for dispute resolution purposes, and for 5 years where required by regulatory reporting obligations.
• Customer support communications: Retained for 2 years from the date of the final communication in each support interaction.
• Marketing communication records: Retained until you withdraw consent or close your account, whichever occurs first.

9. Data Security

29jl implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption in transit: All data transmitted between your device and 29jl servers is encrypted using TLS 1.2 or higher (256-bit SSL). The 29jl.one domain enforces HTTPS for all connections.
• Encryption at rest: Sensitive personal data stored in 29jl's databases — including identity documents, financial data, and account credentials — is encrypted at rest using industry-standard AES-256 encryption.
• Password hashing: Account passwords are stored using bcrypt hashing with appropriate cost factors. 29jl does not store plaintext passwords.
• Access controls: Access to personal data within 29jl is restricted to authorized personnel on a strict need-to-know basis. Administrative access is subject to multi-factor authentication and activity logging.
• Vulnerability management: 29jl conducts periodic security assessments and maintains a vulnerability management program to identify and remediate security weaknesses in the Platform.
• Incident response: 29jl maintains a documented data breach response plan in accordance with NPC requirements, including procedures for containment, assessment, notification, and remediation.

While 29jl employs robust security measures, no online platform can guarantee absolute security. Players are strongly advised to use strong, unique passwords for their 29jl accounts, enable two-factor authentication, and report any suspected unauthorized access to [email protected] immediately.

10. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, 29jl players have the following rights with respect to their personal data. To exercise any of these rights, submit a written request to our Data Protection Officer at [email protected], including your full name, account details, and a description of the right you wish to exercise.

• Right to Access: You have the right to request a copy of the personal data that 29jl holds about you, along with information about how it is being processed. 29jl will respond to access requests within 15 business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. Some corrections may require additional verification documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent, or where processing is unlawful. Note that mandatory regulatory retention periods may limit the scope of this right in some cases.
• Right to Object: You have the right to object to the processing of your personal data where it is based on legitimate interest, including profiling for marketing purposes. Where you object to marketing processing, 29jl will cease that processing immediately.
• Right to Restriction: In certain circumstances, you may request that 29jl restricts the processing of your personal data — for example, while a rectification request is being resolved.
• Right to Data Portability: Where processing is based on your consent or on contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another data controller.

11. Children's Privacy

The 29jl Platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR regulations governing online gambling in the Philippines. 29jl does not knowingly collect, process, or retain personal data of individuals below the age of 21.

Age verification is conducted during the account registration process and enforced through the KYC identity verification system. If 29jl becomes aware that personal data of an individual below 21 years of age has been collected, we will take immediate steps to delete that data and close the associated account in accordance with our Terms and Conditions.

Parents and guardians who believe that a minor may have registered a 29jl account or may have accessed the Platform are encouraged to contact our support team at [email protected] immediately so that we can investigate and take appropriate action without delay.

12. International Data Transfers

29jl's primary operations and data storage are based in the Philippines. In certain circumstances, personal data may be processed by third-party service providers located outside the Philippines — for example, game software providers whose server infrastructure is located in jurisdictions such as Malta, Isle of Man, or other regulated gaming jurisdictions.

Where personal data is transferred outside the Philippines, 29jl ensures that appropriate safeguards are in place to protect your data, including:

• Data processing agreements with receiving parties that impose data protection standards equivalent to those required under Philippine law
• Use of service providers operating in jurisdictions recognized by the NPC as providing adequate levels of data protection
• Contractual clauses binding receiving parties to comply with the data protection requirements of the Philippine Data Privacy Act

You may request details about the specific safeguards applicable to any international transfer of your personal data by contacting our Data Protection Officer at [email protected].

13. Updates to This Privacy Policy

29jl reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, regulatory guidance from the NPC, or operational changes to the 29jl Platform. The "Last Reviewed" date at the top of this document will reflect the date of any material revision.

Where a change to this Privacy Policy materially affects the way we process your personal data, 29jl will notify registered players via email or a prominent notice on the Platform before the change takes effect, where technically and practically feasible. Your continued use of 29jl after the updated Privacy Policy takes effect constitutes your acknowledgment of the revised terms.

14. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data at 29jl, please contact our Data Protection Officer (DPO) through the following channels. 29jl is committed to responding to all data protection inquiries within the timelines required under the Philippine Data Privacy Act.

• Live Chat: Available 24/7 on the 29jl website. For urgent data protection matters, select "Privacy & Data Protection" as the inquiry category to ensure routing to our DPO team.
• Email (DPO): [email protected] — Include "DATA PROTECTION REQUEST" in the subject line. Response within 15 business days for formal data subject rights requests.
• Postal Address: 29jl Casino — Data Protection Officer, Philippines Operations. (Specific address provided upon verified written request for regulatory correspondence.)

When submitting a data subject rights request to 29jl, please include your full name as registered on your account, your registered mobile number or email address, a clear description of the specific right you are exercising, and a copy of a valid Philippine government-issued ID for identity verification purposes. 29jl will acknowledge receipt of your request within 5 business days.