18ji Casino – Privacy Policy

18ji ("we," "us," "our," or the "Platform") is committed to protecting the privacy and personal data of all users who access and use the 18ji website at https://18ji.app and all related services. This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information when you interact with the 18ji Platform.

This Privacy Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal data processed by 18ji in connection with the services we provide to players based in the Philippines and elsewhere.

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, please discontinue use of the 18ji Platform immediately.

18ji acts as the data controller in respect of the personal data collected through the Platform. As data controller, 18ji determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable data protection laws.

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection practices and ensuring compliance with the Data Privacy Act of 2012. You may contact our DPO directly using the contact details provided in Section 15 of this Privacy Policy.

Where 18ji engages third-party service providers to process personal data on its behalf, such providers act as data processors and are bound by contractual obligations to process data only in accordance with 18ji's instructions and applicable law.

18ji collects personal data that is necessary for the provision of our services, compliance with legal obligations, and the improvement of the Platform. The categories of personal data we collect include:

Registration and Identity Data:

• Full legal name, date of birth, and gender.
• Residential address, city (e.g., Manila, Cebu, Davao, Quezon City, Makati), and province.
• Email address and mobile phone number.
• Username and encrypted password.
• Government-issued identification documents submitted for KYC verification (e.g., PhilSys ID, passport, driver's license, UMID, SSS ID, voter's ID).

Financial Data:

• Payment method details, including GCash account numbers, PayMaya account details, and bank account information (BPI, BDO, Metrobank, and others).
• Transaction history, including deposits, withdrawals, and wagering activity.
• Account balance information.

Technical and Usage Data:

• IP address, device type, operating system, and browser type.
• Login timestamps, session duration, and pages visited on the Platform.
• Game history, betting patterns, and Platform interaction data.
• Cookies and similar tracking technologies (see Section 10).

Communications Data:

• Records of communications between you and 18ji customer support, including live chat transcripts and email correspondence.
• Feedback, survey responses, and promotional opt-in preferences.

18ji uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your player account, including processing your registration, verifying your identity, and enabling you to access the Platform.
• Service Delivery: To provide the gaming services you have requested, process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and other payment methods, and manage your account balance.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR regulations and anti-money laundering requirements under the Anti-Money Laundering Act (AMLA) of the Philippines.
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behavior and implement responsible gaming tools, including deposit limits, self-exclusion, and session time limits.
• Marketing and Promotions: To send you promotional offers, bonuses, and updates about 18ji services, subject to your marketing preferences and applicable law. You may opt out of marketing communications at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the 18ji Platform.
• Legal Claims: To establish, exercise, or defend legal claims in connection with the Platform or our services.

Under the Data Privacy Act of 2012, 18ji processes your personal data on the following legal bases:

• Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications or the use of non-essential cookies.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and 18ji, including account registration, service delivery, and payment processing.
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to 18ji, including KYC verification, anti-money laundering reporting, and regulatory compliance with PAGCOR requirements.
• Legitimate Interests: Where processing is necessary for the legitimate interests of 18ji, such as fraud prevention, Platform security, and service improvement, provided that such interests are not overridden by your rights and freedoms.

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, please contact our Data Protection Officer using the details in Section 15.

18ji does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may, however, share your personal data with the following categories of recipients in the circumstances described below:

• Payment Service Providers: We share necessary financial data with payment processors such as GCash, PayMaya, and banking partners (BPI, BDO, Metrobank) to facilitate deposits and withdrawals.
• Identity Verification Providers: We may share identity documents with third-party KYC verification service providers to confirm your identity and age in compliance with regulatory requirements.
• Game Software Providers: Game providers who supply games available on the 18ji Platform may receive limited technical data necessary for game delivery and fairness certification.
• Regulatory Authorities: We are required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities upon lawful request.
• IT and Security Service Providers: Third-party providers who assist with Platform hosting, maintenance, cybersecurity, and fraud detection may process personal data on our behalf as data processors.
• Legal and Professional Advisors: We may share data with lawyers, auditors, and other professional advisors where necessary for legal compliance, dispute resolution, or corporate governance purposes.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 18ji's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties with whom 18ji shares personal data are required to maintain appropriate technical and organizational security measures and to process data only for the purposes specified by 18ji.

18ji implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the 18ji Platform is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Account passwords are stored using strong cryptographic hashing algorithms. We never store passwords in plain text.
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Regular Security Audits: We conduct regular security assessments, penetration testing, and vulnerability scans to identify and address potential security risks.
• Two-Factor Authentication (2FA): We offer 2FA for player accounts to provide an additional layer of security against unauthorized access.
• Incident Response: We maintain a data breach response plan and will notify affected players and the National Privacy Commission in accordance with the Data Privacy Act of 2012 in the event of a personal data breach.

18ji retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general data retention practices are as follows:

• Active Account Data: Personal data associated with an active player account is retained for the duration of the account's existence and for a period of at least five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction Records: Financial transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years as required by the Anti-Money Laundering Act (AMLA) and PAGCOR regulations.
• KYC Documents: Identity verification documents are retained for the period required by applicable regulatory requirements, typically five (5) years from the date of submission or account closure, whichever is later.
• Customer Support Records: Communications with our customer support team are retained for up to three (3) years from the date of the last interaction.
• Marketing Data: Data used for marketing purposes is retained until you withdraw your consent or opt out of marketing communications.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with our data disposal procedures. Where data is anonymized, it may be retained indefinitely for analytical and statistical purposes.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by 18ji:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as described in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that 18ji holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that your data protection rights have been violated.

To exercise any of the above rights, please submit a written request to our Data Protection Officer using the contact details provided in Section 15. We will respond to your request within fifteen (15) business days, as required by the Data Privacy Act of 2012.

18ji uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver relevant content. The types of cookies we use include:

• Essential Cookies: These cookies are strictly necessary for the operation of the Platform, including maintaining your login session and ensuring Platform security. These cannot be disabled without affecting Platform functionality.
• Performance Cookies: These cookies collect anonymous information about how visitors use the Platform, such as which pages are visited most frequently, to help us improve Platform performance.
• Functional Cookies: These cookies remember your preferences, such as language settings and display preferences, to provide a more personalized experience.
• Analytics Cookies: We use analytics tools to understand how players interact with the 18ji Platform, enabling us to make data-driven improvements to our services.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 18ji Platform. By continuing to use the Platform after being informed about our use of cookies, you consent to our use of cookies as described in this section.

The 18ji Platform may contain links to third-party websites or services, including payment providers and game software suppliers. This Privacy Policy applies solely to the 18ji Platform and does not cover the privacy practices of any third-party websites or services.

We encourage you to review the privacy policies of any third-party websites you visit. 18ji is not responsible for the privacy practices, content, or security of third-party websites, and the inclusion of a link to a third-party website does not constitute an endorsement of that website or its privacy practices.

The 18ji Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 18ji Platform, please contact us immediately using the details in Section 15.

In the course of providing our services, 18ji may transfer your personal data to recipients located outside the Philippines, including third-party service providers and game software suppliers operating in other jurisdictions.

Where personal data is transferred outside the Philippines, 18ji ensures that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012. Such safeguards may include:

• Contractual clauses requiring the recipient to maintain data protection standards equivalent to those required under Philippine law.
• Transfers to countries or organizations that have been assessed as providing an adequate level of data protection.
• Other legally recognized transfer mechanisms as approved by the National Privacy Commission.

By using the 18ji Platform, you acknowledge and consent to the transfer of your personal data to recipients outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

18ji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this document.

When material changes are made to this Privacy Policy, we will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.

Your continued use of the 18ji Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with any changes, please discontinue use of the Platform and contact us to close your account.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 18ji, please contact our Data Protection Officer (DPO) using the details below:

• Data Protection Officer: 18ji Data Protection Office
• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 directly on the 18ji Platform.
• Response Time: We aim to respond to all privacy-related requests within fifteen (15) business days.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 and can be reached through their official website.

We take all privacy concerns seriously and are committed to resolving any issues in a fair, transparent, and timely manner. Our team is fluent in both English and Filipino, so feel free to reach out in whichever language you prefer.