jj333 Casino — Privacy Policy

This Privacy Policy ("Policy") describes how jj333 ("jj333", "we", "us", "our"), operator of the online gaming platform at jj333.org ("Platform"), collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("Data Subjects", "you") who access or use the Platform.

jj333 is committed to protecting the privacy and personal data of all Platform users in full compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and all issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account with jj333, accessing the Platform, or providing personal data through any channel, you acknowledge that you have read, understood, and consent to the practices described in this Policy. If you do not agree with any provision of this Policy, you must cease using the Platform immediately.

This Policy should be read in conjunction with the jj333 Terms & Conditions, which govern your use of the Platform as a whole. In the event of any conflict between this Policy and the Terms & Conditions on a privacy matter, this Policy shall prevail.

jj333 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

jj333 collects personal data through the following methods:

• Direct Submission: Information you voluntarily provide during registration, KYC verification, deposit or withdrawal requests, support interactions, promotion participation, or any other direct interaction with the Platform.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP addresses, device identifiers, browser type, referral URL, session timestamps, and clickstream data — processed by our Platform infrastructure and analytics tools.
• Payment Processors: Transaction confirmation data received from GCash, PayMaya, BDO, BPI, Metrobank, InstaPay, and other integrated payment service providers when you conduct financial transactions on the Platform.
• Identity Verification Providers: Verification outcomes, document validity flags, and biometric comparison results from licensed KYC service providers engaged by jj333 to process identity verification.
• Game Providers: Session data, round outcomes, and bet history data exchanged with licensed game studios whose products are integrated into the jj333 Platform.
• Cookies and Tracking Technologies: Information collected through cookies, pixel tags, and similar technologies as described in Section 10 of this Policy.

jj333 processes personal data for the following specific and legitimate purposes only. Data collected for one purpose will not be reused for a materially different purpose without fresh consent or a new legal basis:

Under the Data Privacy Act of 2012, jj333 relies on the following legal bases for processing personal data:

• Contractual Necessity (Section 12(b) DPA): Processing required to perform the service agreement between you and jj333 — including account creation, game access, payment processing, and customer support.
• Legal Obligation (Section 12(c) DPA): Processing required to comply with Philippine law, including AML reporting obligations, PAGCOR regulatory requirements, NPC data breach notification obligations, and court orders.
• Legitimate Interests (Section 12(f) DPA): Processing necessary for jj333's legitimate interests in fraud prevention, security, platform improvement, and responsible gaming monitoring — where such interests are not overridden by your fundamental rights and freedoms.
• Consent (Section 12(a) DPA): Processing based on your freely given, specific, informed, and unambiguous consent — primarily used for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

jj333 does not sell personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Licensed Game Providers: Game session data (including username, wager amounts, and round outcomes) is shared with the licensed game studios whose titles you play on the Platform, for the purpose of facilitating gameplay and resolving disputes.
• Payment Service Providers: Financial data necessary to process deposits and withdrawals is shared with integrated Philippine payment providers including GCash, PayMaya, BDO, BPI, Metrobank, and InstaPay. These providers are bound by their own privacy frameworks and Philippine Bangko Sentral ng Pilipinas (BSP) regulations.
• KYC and Identity Verification Providers: Identity document images and biographical data are shared with licensed third-party KYC verification providers engaged by jj333. All KYC partners are bound by confidentiality agreements and DPA-compliant data processing agreements.
• Regulatory Authorities: jj333 discloses personal data to PAGCOR, the AMLC, the NPC, and other Philippine government bodies where required by law, regulation, or lawful order.
• Responsible Gaming Service Providers: Aggregated behavioural data may be shared with responsible gaming research and monitoring organisations in anonymised form to support industry-wide harm reduction efforts.
• Corporate Transactions: In the event of a merger, acquisition, or asset transfer involving jj333, personal data may be disclosed to the relevant counterparties as part of due diligence, subject to equivalent data protection obligations being imposed on the recipient.

jj333 retains personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable Philippine law. The following retention periods apply:

After the applicable retention period expires, personal data will be securely deleted or irreversibly anonymised. Data that is subject to ongoing legal proceedings or regulatory investigations will be retained for the duration of those proceedings regardless of the standard retention period.

jj333 implements comprehensive technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between users and jj333 servers is encrypted using TLS 1.3 with AES-256 cipher suites.
• Encryption at Rest: Sensitive personal data fields, including identity document data and financial account details, are encrypted at rest using AES-256 encryption in jj333's database systems.
• Access Controls: Internal access to personal data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication for all administrative systems.
• Password Security: User passwords are stored as salted cryptographic hashes using industry-standard algorithms. jj333 does not store plaintext passwords and cannot retrieve your actual password.
• Penetration Testing: jj333 conducts periodic security assessments and penetration tests of the Platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: jj333 maintains a formal Personal Data Breach Management Policy. In the event of a breach that is likely to result in risks to your rights and freedoms, jj333 will notify the NPC within 72 hours and affected Data Subjects without undue delay, as required under NPC Circular 16-03.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jj333. To exercise any of these rights, contact our Data Protection Officer as described in Section 14:

jj333 will respond to all Data Subject rights requests within fifteen (15) business days of receipt. Where a request is complex or where a high volume of requests is pending, jj333 may extend this period by a further thirty (30) days, with written notice to you explaining the reason for the extension.

jj333 uses cookies and similar tracking technologies to operate and improve the Platform. A "cookie" is a small text file placed on your device when you visit a website. The following cookie categories are used on jj333.org:

You may manage cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core Platform features, including logging in to your jj333 account.

The jj333 Platform is strictly intended for individuals aged 21 years or older, in accordance with PAGCOR's mandatory minimum age requirement for casino-type gambling in the Philippines. jj333 does not knowingly collect personal data from individuals under 21 years of age.

All account registrations are subject to KYC age verification procedures. Where jj333 discovers or reasonably suspects that an account has been created by or on behalf of an individual under 21, the account will be immediately suspended, all activity will be voided, and any deposited funds will be returned via the original payment method after identity verification of the account holder.

If you believe a minor has registered a jj333 account or is using the Platform, please contact our support team immediately via 24/7 live chat so the matter can be investigated and the account closed.

Some of jj333's third-party service providers — including game studios, cloud infrastructure providers, and analytics platforms — may operate servers outside of the Philippines. Where personal data is transferred to a country that the NPC has not determined to provide an adequate level of protection, jj333 will ensure appropriate safeguards are in place, which may include:

• Standard data protection clauses approved by the NPC or equivalent data protection authority;
• Binding corporate rules where the recipient is part of the same corporate group;
• Explicit consent from the Data Subject where other mechanisms are not available or appropriate.

All cross-border data transfers by jj333 are conducted in accordance with Section 21 of the DPA and NPC Circular No. 17-01. You may request details of the specific safeguards in place for any transfer by contacting the Data Protection Officer.

jj333 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or operational requirements. The "Last Updated" date at the top of this page will reflect the most recent revision.

Where changes are material — meaning they significantly affect how your personal data is processed or your rights as a Data Subject — jj333 will notify you via SMS to your registered mobile number and/or by a prominent notice on the Platform at least seven (7) days before the changes take effect.

Your continued use of the jj333 Platform following notification of a material policy update constitutes your acceptance of the revised Policy. If you do not agree with the updated terms, you must cease using the Platform and may request account closure as described in the Terms & Conditions.

jj333 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy, and who serves as the primary point of contact for Data Subject rights requests, privacy complaints, and regulatory inquiries.