Your Privacy Matters
at 323jl Casino

1 Who We Are

323jl operates the online gaming and sports betting platform accessible at 323jl.net and is the data controller responsible for your personal information collected through the platform. 323jl provides its services to Filipino players and residents of the Philippines, and processes personal data in accordance with the Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules and regulations.

For any privacy-related queries, concerns, or data subject requests, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

2 Data We Collect

323jl collects the following categories of personal data from players and platform visitors:

We do not intentionally collect sensitive personal information such as racial or ethnic origin, religious beliefs, political opinions, or health data, except where strictly required by applicable anti-money laundering or responsible gaming regulations (for example, where a player voluntarily discloses a gambling-related health concern to activate self-exclusion).

3 How We Collect Your Data

323jl collects personal data through the following means:

• Direct registration: Information you provide when creating or updating your 323jl account, completing KYC verification, or submitting support requests.
• Transactions: Information generated when you make deposits, request withdrawals, claim bonuses, or engage in gameplay on the 323jl platform.
• Automated technical collection: Technical data collected automatically via server logs, cookies, and similar tracking technologies when you access the platform through a browser or mobile device.
• Third-party payment processors: Confirmation data received from GCash, Maya, BPI, BDO, UnionBank, Metrobank, Coins.ph, 7-Eleven Cliqq, and USDT TRC20 payment partners when processing your transactions. Note that these providers operate under their own separate privacy policies.
• Game providers: Session and outcome data received from certified game providers such as Evolution Gaming, Pragmatic Play, PG Soft, and others, for the purpose of settling bets, resolving disputes, and complying with regulatory reporting requirements.
• Identity verification partners: Where 323jl engages a third-party KYC verification service, that service may return identity confirmation data to 323jl following document verification.
• Customer support communications: Records of interactions via live chat, Messenger, Viber, and email that you initiate with the 323jl support team.

4 How We Use Your Data

323jl uses your personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your player profile, and manage your account settings and preferences.
• Transaction processing: To process deposits, withdrawals, and any related financial transactions on your account, including reconciling records with payment processors.
• Regulatory compliance: To meet our obligations under Philippine gaming regulations, anti-money laundering laws, and the Data Privacy Act of 2012, including the maintenance of transaction records and the filing of required regulatory reports.
• KYC and fraud prevention: To verify your identity, detect and prevent fraudulent activity, money laundering, underage gambling, and other prohibited conduct on the platform.
• Customer support: To respond to your queries, investigate complaints, resolve disputes, and provide assistance through our live chat, Messenger, Viber, and email support channels.
• Platform improvement: To analyse usage patterns, identify technical issues, test new features, and improve the overall performance and user experience of the 323jl platform.
• Responsible gaming: To monitor gaming behaviour for signs of problem gambling, enforce deposit limits and self-exclusion requests, and facilitate responsible gaming tools available in your account.
• Marketing communications: Where you have opted in, to send you promotional offers, bonus notifications, and news about 323jl via email or SMS. You may withdraw this consent at any time.
• Legal claims: To establish, exercise, or defend legal claims in the event of a dispute, regulatory investigation, or legal proceeding involving your account or activity on the platform.

323jl will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your consent or being required to do so by applicable law.

5 Legal Basis for Processing

323jl processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 of the Philippines:

• Contractual necessity: Processing that is necessary to perform the contract between you and 323jl — specifically, to operate your player account, process your transactions, and deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering obligations, gaming regulatory requirements, and tax reporting duties.
• Legitimate interests: Processing carried out for 323jl's legitimate interests, including fraud prevention, platform security, abuse detection, and the improvement of our services, provided those interests are not overridden by your privacy rights.
• Consent: Processing based on your explicit consent, including the sending of marketing communications and any non-essential cookie usage. You have the right to withdraw consent at any time, though withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Vital interests: In limited circumstances, processing may be necessary to protect your vital interests or those of another person — for example, in connection with a responsible gaming intervention.

6 Sharing Your Personal Data

323jl does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for each stated purpose:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, Metrobank, Coins.ph, 7-Eleven Cliqq, and USDT TRC20 partners receive the minimum data required to process your deposits and withdrawals. These parties process your data under their own privacy policies and security standards.
• Game providers: Certified game providers receive session identifiers and bet data necessary to operate games, settle outcomes, and resolve player disputes. Game providers do not receive your full identity information.
• KYC and identity verification partners: Where a third-party KYC service is engaged, your identity documents and related data are shared solely for the purpose of completing the verification process required by Philippine gaming regulations.
• Regulatory authorities: PAGCOR and other Philippine government agencies may require 323jl to disclose player information as part of regulatory oversight, audits, or investigations. 323jl will comply with all lawful regulatory requests.
• Law enforcement: 323jl will disclose personal data to Philippine law enforcement agencies where required by a court order, subpoena, or lawful request in connection with the investigation or prosecution of criminal activity.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by 323jl may have access to personal data on a strictly confidential and need-to-know basis.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of 323jl's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

7 Data Retention

323jl retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, regulatory, accounting, and reporting obligations.

The following retention periods apply as general guidelines:

• Account and identity data: Retained for the duration of your account and for a minimum of 5 years following account closure, in accordance with Philippine anti-money laundering regulations.
• Transaction and gaming records: Retained for a minimum of 5 years following the date of the transaction, as required by applicable gaming and financial regulations.
• KYC documents: Retained for a minimum of 5 years following the completion of the KYC process or account closure, whichever is later.
• Support communications: Retained for a minimum of 2 years following the closure of a support case, or longer where a dispute or legal proceeding remains unresolved.
• Marketing consent records: Retained for the duration of any active marketing relationship and for 1 year following withdrawal of consent, as evidence of your prior consent or opt-out.
• Technical and usage data: Retained in aggregated or anonymised form indefinitely for platform analytics; individual session logs are retained for a maximum of 12 months.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

8 Cookies & Tracking Technologies

323jl uses cookies and similar technologies (such as local storage and session tokens) on the 323jl platform. Cookies are small text files stored on your device that help us operate and improve the platform. We use the following types of cookies:

• Strictly necessary cookies: These cookies are required for the platform to function. They include session cookies that maintain your login state, security tokens, and load-balancing cookies. These cannot be disabled without preventing you from using the platform.
• Functional cookies: These cookies remember your preferences, such as language settings, responsible gaming reminders, and display preferences, so that you do not need to reconfigure them on each visit.
• Analytics cookies: 323jl uses first-party analytics tools to collect aggregated, anonymised data about how players navigate the platform. This data helps us identify pages that are difficult to use, features that are rarely engaged with, and technical errors that affect the player experience. We do not use third-party advertising analytics cookies.
• Security cookies: Short-lived cookies used to detect and prevent fraudulent access attempts, bot activity, and account takeover attacks.

You can manage or disable non-essential cookies through your browser's settings. Disabling strictly necessary cookies will impair your ability to use the 323jl platform. Most modern browsers — including Chrome, Firefox, Safari, and Edge — provide cookie management controls in their privacy or settings menus. As 323jl does not use third-party advertising cookies, opting out of our cookies will not affect advertising you see on other websites.

9 Data Security

323jl implements a range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the 323jl platform is protected by SSL/TLS encryption. Look for the padlock icon and "https://" in your browser address bar when using the platform.
• Encrypted data storage: Sensitive data — including passwords (stored as salted hashes), financial account details, and identity documents — is stored using encryption at rest.
• Access controls: Access to personal data within 323jl's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data undergo privacy and security training.
• Two-factor authentication: 323jl supports two-factor authentication (2FA) for player accounts to provide an additional layer of protection against unauthorised access. We encourage all players to enable 2FA in their account security settings.
• Penetration testing and audits: 323jl conducts periodic security assessments and penetration testing to identify and remediate potential vulnerabilities in the platform.
• Incident response: In the event of a data breach that poses a risk to your rights and freedoms, 323jl will notify affected players and the relevant Philippine regulatory authority within the timeframes required by applicable law.

While 323jl takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You also play an important role in keeping your account secure — please use a strong, unique password, enable 2FA, and never share your login credentials with anyone.

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 323jl:

• Right to be informed: The right to be notified that your personal data is being collected and processed, the purposes for which it is processed, and to whom it may be disclosed — all of which are set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data that 323jl holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by 323jl. You may update basic account information (such as your email address or mobile number) directly through your account settings.
• Right to erasure / right to be forgotten: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations described in Section 7.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to other types of processing carried out on the basis of legitimate interests, subject to 323jl's overriding legitimate grounds.
• Right to data portability: The right to receive a copy of the personal data you have provided to 323jl in a structured, commonly used, machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 323jl has processed your personal data in a manner that violates the Data Privacy Act of 2012.

To exercise any of these rights, please contact the 323jl Data Protection Officer using the details in Section 14. We will respond to all verified data subject requests within 30 days of receipt. We may need to verify your identity before processing certain requests to protect the security of your account.

11 Children's Privacy and Age Restriction

If 323jl becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that a minor has registered on the 323jl platform, please contact our support team immediately via live chat or email so that we can investigate and take appropriate action.

323jl employs technical age-verification measures, including date-of-birth validation at registration and mandatory KYC identity document checks prior to the first withdrawal, to enforce this age restriction.

12 International Data Transfers

323jl primarily processes personal data within the Philippines. However, certain third-party service providers — including game providers and technical infrastructure partners — may be located outside the Philippines and may process your data in other jurisdictions as part of delivering their services to 323jl.

Where personal data is transferred outside the Philippines, 323jl ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. These safeguards may include:

• Data processing agreements with contractual clauses that require overseas recipients to protect your data in accordance with Philippine privacy standards.
• Transfers to recipients in jurisdictions that have been assessed as providing adequate data protection by the National Privacy Commission of the Philippines.
• Other legally recognised transfer mechanisms as required by applicable Philippine privacy law.

By using the 323jl platform and providing your personal data, you acknowledge that your data may be transferred to and processed in jurisdictions outside the Philippines, subject to the safeguards described above.

13 Changes to This Privacy Policy

323jl reserves the right to amend, update, or replace this Privacy Policy at any time. When we make material changes to this Policy, we will notify registered players by posting a prominent notice on the 323jl platform and, where appropriate, by sending a notification to the email address registered on your account.

The updated Privacy Policy will take effect from the date it is published on this page. Your continued use of the 323jl platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how 323jl protects your personal data. The "Last updated" date at the top of this page indicates when this Policy was most recently revised.

This Privacy Policy was last reviewed and updated in January 2026. This version supersedes all prior versions of the 323jl Privacy Policy.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 323jl handles your personal data, please contact our Data Protection Officer (DPO) or support team through any of the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the on-site chat widget on the 323jl platform.
• Messenger & Viber: Support is available through the official 323jl Messenger and Viber channels.
• Email: [email protected] (plain text — not a link). Please include "Privacy Request" in the subject line of your email along with your registered account username so that our DPO can respond efficiently.

When submitting a data subject rights request (such as a request for access, rectification, or erasure of your personal data), please include:

• Your full name as registered on your 323jl account.
• Your registered email address or mobile number.
• A clear description of the right you wish to exercise and the specific data concerned.
• A copy of a valid government-issued ID for identity verification purposes.

323jl will acknowledge receipt of your request within 5 business days and will respond substantively within 30 calendar days. In complex cases, we may extend this period by an additional 30 days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.