963jl Casino Privacy Policy

This Policy governs all personal information processed by 963jl in connection with the Platform, including information collected through account registration, gameplay activity, financial transactions, customer support interactions, and marketing communications. It applies equally to personal information collected online and, where applicable, through any offline channel such as telephone support.

This Policy does not apply to the privacy practices of third-party game providers, payment processors, or other partners whose services you may access through links or integrations within the Platform. 963jl encourages you to review the privacy notices of those third parties directly, as their data handling is outside 963jl's control.

963jl Casino is the personal information controller ("Controller") in respect of your personal data processed in connection with the Platform. As Controller, 963jl determines the purposes for which and the means by which your personal information is processed. 963jl is registered with the National Privacy Commission of the Philippines in compliance with NPC registration requirements applicable to personal information controllers.

963jl collects the following categories of personal information, depending on how you interact with the Platform:

963jl collects personal information through the following channels:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions.
• Automatically — through cookies, web beacons, server logs, and similar technologies as you browse and use the Platform. See Section 10 (Cookies & Tracking) for further details.
• From payment processors — transaction confirmation and status data from GCash, PayMaya, BPI, BDO, Metrobank, and other integrated payment partners.
• From identity verification services — where 963jl uses a third-party KYC service to verify identity documents, that service returns a verification result to 963jl. 963jl does not retain raw biometric data from third-party KYC processes.
• From fraud prevention and AML services — risk scoring, sanctions screening, and politically exposed persons (PEP) checks required under Philippine AML law (Republic Act No. 9160, as amended).

963jl processes your personal information only where a lawful basis exists under the Data Privacy Act of 2012. The applicable basis depends on the specific processing activity:

• Contractual necessity — processing required to provide you with a 963jl account and deliver the Platform services you have registered for, including deposits, withdrawals, and gameplay.
• Legal obligation — processing required to comply with PAGCOR licensing conditions, Philippine AML laws, NPC requirements, AMLC reporting obligations, and applicable court or regulatory orders.
• Legitimate interests — processing necessary for fraud detection, account security monitoring, responsible gaming monitoring, product improvement, and the prevention of problem gambling, where these interests are not overridden by your rights.
• Consent — processing for marketing communications, promotional profiling, and optional personalisation features, where you have given clear, informed, and voluntary consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

963jl uses your personal data for the following purposes:

• Creating and managing your 963jl account, including login authentication and account security.
• Processing deposits, withdrawals, and maintaining an accurate transaction history.
• Complying with PAGCOR licensing conditions and reporting requirements.
• Conducting Know Your Customer (KYC) identity verification and ongoing AML monitoring as required under Philippine law.
• Detecting and preventing fraud, money laundering, and prohibited conduct as defined in the 963jl Terms & Conditions.
• Providing responsible gaming tools including deposit limits, loss limits, and self-exclusion — and monitoring for indicators of problem gambling behaviour.
• Resolving account disputes, responding to support requests, and maintaining support records.
• Sending transactional notifications (account activity, payment confirmations, security alerts) — these cannot be opted out of as they are essential to account operation.
• Sending promotional communications, including bonus offers and new game announcements, where you have consented to receive them.
• Improving the Platform through analysis of anonymised usage data and player feedback.

963jl does not sell your personal information to third parties. We do not share your data with advertisers or data brokers. We share your personal data only in the following limited circumstances:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank and other payment partners receive the data necessary to process your transactions. These parties act as independent controllers for their own processes.
• Game providers — licensed game software providers (such as Pragmatic Play, PG Soft, Jili) receive session tokens and pseudonymised player identifiers necessary to operate their games through the 963jl platform. These providers do not receive your full identity data.
• KYC and AML service providers — third-party identity verification and sanctions screening services that process data strictly as processors under contract with 963jl and under 963jl's documented instructions.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government bodies where disclosure is required by law, court order, or valid regulatory demand.
• Technology service providers — cloud hosting, security, and infrastructure partners who process data strictly as processors under data processing agreements that bind them to 963jl's confidentiality and security standards.
• Legal and professional advisors — lawyers, auditors, and compliance consultants under professional confidentiality obligations where disclosure is necessary for legal proceedings or compliance advice.

963jl retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as a general guide:

• Active account data is retained for the duration of the account relationship and for a period of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC verification documents are retained for five (5) years following account closure or the last transaction date, whichever is later.
• Customer support records are retained for three (3) years following closure of the relevant support interaction.
• Marketing consent records are retained for the duration of the consent and for two (2) years following withdrawal of consent, to evidence compliance with consent requirements.
• Technical log data (server logs, IP records) is retained for a maximum of twelve (12) months unless required for a specific active investigation.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal information.

963jl implements technical and organisational security measures appropriate to the risks associated with processing player personal information on a licensed gaming platform. These measures include, but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the 963jl Platform.
• Password hashing using industry-standard cryptographic algorithms — 963jl does not store plaintext passwords.
• Two-factor authentication (2FA) available to all players and recommended as standard.
• Access controls — internal access to player personal data is restricted to authorised staff on a need-to-know basis and is subject to documented access logging.
• Regular security assessments including vulnerability scanning and penetration testing of the Platform infrastructure.
• Segregated player fund accounts — financial records associated with player balances are stored separately from operational financial systems.

The 963jl Platform uses cookies and similar tracking technologies to ensure proper Platform functioning, enhance your experience, and support security and analytics operations. The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function, including session management, login state maintenance, and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies — remember your preferences such as language settings and responsible gaming tool configurations between sessions.
• Analytics cookies — collect anonymised data about how players interact with the Platform to support product improvement. No personally identifiable information is included in analytics data sets.
• Security cookies — detect fraudulent login attempts, identify unusual session behaviour, and support rate-limiting of suspicious requests.

963jl does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging into your 963jl account.

The 963jl Platform is strictly restricted to individuals who are at least 21 years of age, in compliance with PAGCOR licensing requirements. 963jl does not knowingly collect personal information from individuals under 21 years of age.

If 963jl discovers or is credibly informed that personal data has been collected from a person under 21, the relevant account will be suspended immediately, all associated personal data will be deleted without undue delay (except where retention is required to report the incident to regulators), and any balance held in the account will not be paid out.

Parents and guardians who believe that a minor may have registered an account on 963jl should contact the 963jl support team immediately via in-account live chat or by emailing [email protected] with subject "Minor Account Report."

To exercise any of the data rights described in this Policy (access, correction, erasure, objection, portability, or complaint), please submit a written request to 963jl's Data Protection Officer through one of the following channels:

• In-account live chat (available 24/7) — state your request type clearly at the start of the conversation.
• Email to [email protected] with the subject line "Data Privacy Request – [Request Type]."

963jl will verify your identity before processing any data rights request to ensure we do not disclose or modify personal data in response to fraudulent requests. We will respond substantively to all verifiable requests within thirty (30) days, as required by the Data Privacy Act of 2012. Complex requests or high-volume periods may require an additional thirty (30) days, of which we will notify you within the initial response period.

Where we are unable to fulfil a request in whole or in part — for example, because legal retention obligations require us to retain data you have requested for deletion — we will explain the applicable legal basis in our response.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, 963jl will notify the National Privacy Commission of the Philippines within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03 on personal data breach management.

Where a breach is likely to result in a high risk to affected players — such as exposure of financial data or identity information — 963jl will also notify affected players without undue delay through the registered email address on file. The notification will describe the nature of the breach, categories of data affected, likely consequences, and steps 963jl has taken or intends to take to address the breach.

The 963jl Platform may contain links to third-party services — such as game providers' own help pages or payment processor portals — that are not operated by 963jl. This Policy does not extend to those third-party services.

963jl has no control over the content or privacy practices of third-party platforms and accepts no responsibility for them. When you navigate away from 963jl to a third-party site, you do so at your own risk and subject to that third party's own privacy policies. 963jl encourages you to read the privacy notices of any third-party service you use in connection with your 963jl account.

963jl reviews and updates this Privacy Policy periodically to reflect changes in Platform functionality, applicable law, regulatory guidance from the NPC or PAGCOR, or 963jl's own data processing practices.

Where an amendment is material — meaning it significantly affects how we use your personal data or your rights in relation to it — 963jl will notify you at least fourteen (14) days before the amended Policy takes effect, via email to the address registered on your account or through a prominent Platform notification at next login.

The effective date displayed at the top of this Policy reflects the date on which the current version took effect. Continued use of the Platform following the effective date of an amended Policy constitutes acknowledgment of the updated terms.

963jl has appointed a Data Protection Officer (DPO) as required by the Data Privacy Act of 2012 for personal information controllers of significant scale. The DPO is responsible for overseeing 963jl's compliance with the Data Privacy Act, liaising with the National Privacy Commission, and handling data subject rights requests.

To contact the 963jl Data Protection Officer:

• Email: [email protected] — Subject: "Data Privacy Request" or "DPO Contact"
• Live Chat: Available 24/7 within your 963jl account. Start the conversation by stating "Data Privacy" to be routed to the appropriate team.

If you are unsatisfied with 963jl's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information about NPC complaint procedures is available through the NPC's official government portal.