2jl17 Privacy Policy

This Privacy Policy ("Policy") describes how 2jl17 ("the Platform," "we," "us," or "our"), a PAGCOR-licensed online gaming platform operating in the Philippines, collects, uses, stores, shares, and protects your personal information when you access or use the 2jl17 website and its associated services.

We are committed to protecting the privacy and security of our players' personal data. This Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the applicable circulars and advisories issued by the National Privacy Commission (NPC).

This Policy applies to all players accessing 2jl17 from anywhere within the Philippines — including Metro Manila, Cebu City, Davao, Quezon City, Makati, and all other regions — as well as to any visitor who browses the website without registering an account. It covers all data collected through the website, mobile browser, and any future 2jl17 application.

2jl17 acts as the Personal Information Controller (PIC) for all personal data collected through the platform, as defined under Section 3(h) of the Philippine Data Privacy Act of 2012. As PIC, 2jl17 determines the purposes for which personal data is processed and the means by which it is processed.

Certain service providers engaged by 2jl17 — including payment processors, KYC verification partners, and game content studios — act as Personal Information Processors (PIPs) under written agreements that bind them to data protection obligations consistent with the Philippine DPA and this Policy. 2jl17 remains responsible for ensuring that all PIPs process your data lawfully and securely.

For all privacy-related inquiries, requests, and complaints, you may contact the 2jl17 Data Protection Officer (DPO) via the channels set out in Section 14 of this Policy.

2jl17 collects personal data through several channels — directly from you when you register and use the platform, automatically through your device and browser, and from third-party verification services. The categories of data collected are detailed in the table below:

2jl17 does not collect sensitive personal information as defined under Section 3(l) of the Philippine DPA (such as racial or ethnic origin, political opinions, or health records) except where a player voluntarily discloses a gambling-related health concern through the responsible gaming tools, in which case such information is treated with the highest level of protection.

2jl17 uses the personal data it collects strictly for the following purposes. We do not use your data for any purpose that is incompatible with those listed here without first obtaining your separate consent:

• Account Registration and Management: Creating and maintaining your 2jl17 player account, verifying your identity, and administering your account settings and preferences.
• KYC and Age Verification: Confirming that you meet the mandatory 21+ age requirement imposed by PAGCOR, and verifying your identity documents in compliance with our licensing obligations.
• Payment Processing: Processing deposits via GCash, Maya, GrabPay, BPI, BDO, Metrobank, USDT, Coins.ph, and 7-Eleven, and processing withdrawal requests to your verified payment method.
• Anti-Money Laundering (AML) Compliance: Monitoring transactions for suspicious patterns and reporting to the Anti-Money Laundering Council (AMLC) as required by Republic Act No. 9160, as amended.
• Gaming Experience Delivery: Operating and optimising the bingo, slot, live casino, sports betting, sabong, esports, and fishing game services you access on the platform.
• Customer Support: Responding to your queries, resolving disputes, and managing feedback and complaints through live chat and email.
• Responsible Gaming Monitoring: Detecting early indicators of problem gambling, applying player-requested limits, and fulfilling 2jl17's duty of care under PAGCOR responsible gaming guidelines.
• Promotional Communications: Sending you bonus offers, tournament notifications, and platform updates where you have opted in to receive marketing communications. You may opt out at any time.
• Platform Security and Fraud Prevention: Detecting and investigating fraud, duplicate accounts, bot activity, and other prohibited conduct described in the 2jl17 Terms and Conditions.
• Legal and Regulatory Compliance: Meeting all obligations imposed by PAGCOR, the NPC, the AMLC, and other competent Philippine regulatory and law enforcement authorities.

Under the Philippine Data Privacy Act of 2012, all processing of personal data must rest on a valid legal basis. 2jl17 relies on the following legal bases for its data processing activities:

• Consent (Section 12(a), DPA): Where you have provided clear, informed, and freely given consent — for example, when opting in to marketing communications or when you voluntarily share additional information through responsible gaming tools.
• Contractual Necessity (Section 12(b), DPA): Processing that is necessary to perform the contract between you and 2jl17 — including account creation, game delivery, payment processing, and customer support.
• Legal Obligation (Section 12(c), DPA): Processing required to comply with 2jl17's obligations under Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and NPC registration requirements.
• Legitimate Interests (Section 12(f), DPA): Processing for the legitimate interests of 2jl17 where those interests are not overridden by your rights as a data subject — including fraud prevention, platform security, and responsible gaming monitoring.

2jl17 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your data is shared only in the following limited and controlled circumstances:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), GrabPay, BPI, BDO, Metrobank, and other payment partners receive the minimum transaction data required to process your deposits and withdrawals.
• KYC Verification Providers: Accredited identity verification service providers receive your identity documents for the sole purpose of confirming your identity and age in compliance with PAGCOR requirements.
• Game Content Studios: Third-party game providers such as JILI Games, Evolution Gaming, and Pragmatic Play receive anonymised session data necessary for game delivery and technical support. These providers do not receive your identity or payment data.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities may receive your data as required by law, court order, or regulatory directive.
• Customer Support Platform: Our live chat and customer support infrastructure provider processes communications data solely for the purpose of delivering support services to you.
• Fraud and Security Vendors: Cybersecurity and fraud detection partners may access limited technical data (IP address, device fingerprint) for the purpose of protecting the platform and its players from fraudulent activity.

All third parties who process personal data on behalf of 2jl17 are bound by written data processing agreements that impose obligations at least as protective as those described in this Policy and as required by the Philippine DPA.

2jl17 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit the website. They allow the platform to recognise your device on subsequent visits and personalise your experience.

The following types of cookies are used on 2jl17:

• Essential Cookies: Strictly necessary for the website to function. These include session authentication cookies that keep you logged in, security tokens that protect against cross-site request forgery, and cookies that remember your language and display preferences. These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Used to remember your preferences and settings — such as your preferred game categories, deposit method, and responsible gaming limit configurations — so you do not need to re-enter them on each visit.
• Analytics Cookies: Used to understand how players navigate the platform, which game categories are most popular, and where technical issues may be occurring. Analytics data is aggregated and anonymised wherever possible. 2jl17 uses only first-party analytics tools; no third-party advertising trackers are deployed.
• Responsible Gaming Cookies: Used to maintain your session duration records and alert triggers consistent with the session limits you have configured in your account settings.

You can manage your cookie preferences through your browser settings. Disabling essential cookies will affect your ability to log in and use the platform. For instructions specific to your browser (Chrome, Safari, Firefox, or the default browser on your Android or iOS device), refer to your browser's help documentation.

2jl17 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key security controls include:

• Transport Layer Security (TLS): All data in transit between your device and the 2jl17 platform is encrypted using TLS 1.2 or higher, providing 256-bit encryption strength.
• Data Encryption at Rest: Sensitive data stored in 2jl17's databases — including identity documents and payment references — is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. Staff with access to player data are subject to background checks, confidentiality obligations, and regular security training.
• Two-Factor Authentication (2FA): 2FA is available and strongly encouraged for all player accounts. Players who enable 2FA add a significant additional layer of protection to their account login.
• Intrusion Detection and Monitoring: 2jl17's infrastructure is monitored continuously for suspicious access patterns, intrusion attempts, and anomalous data activity.
• Regular Security Audits: The platform undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 2jl17 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC Circular No. 16-03 on mandatory breach notification. Affected players will be notified directly where the breach poses a high risk to their data subject rights.

2jl17 retains personal data only for as long as it is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR licensing conditions. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with NPC guidelines on data disposal. Where data is anonymised rather than deleted, the resulting dataset no longer constitutes personal data and is no longer subject to this Policy.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 2jl17. These rights may be exercised at any time by contacting the 2jl17 Data Protection Officer through the channels listed in Section 14:

• Right to Be Informed: You have the right to be told what personal data we collect, why we collect it, and how it is used. This Privacy Policy fulfils that obligation.
• Right to Access: You may request a copy of the personal data 2jl17 holds about you. We will provide a response within 15 calendar days of a verified request.
• Right to Correction: If any personal data we hold about you is inaccurate, incomplete, or outdated, you may request that it be corrected. Identity data corrections may require supporting documentation.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you have withdrawn consent. Note that erasure requests cannot override legal retention obligations under the AMLA or PAGCOR requirements.
• Right to Object: You may object to the processing of your personal data where it is based on legitimate interests, including any profiling or direct marketing activities. Where you object to marketing, we will cease processing your data for that purpose immediately.
• Right to Data Portability: You may request that your personal data be provided to you in a structured, commonly used, machine-readable format so that you can transmit it to another service provider.
• Right to Damages: If you suffer damage as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data, you have the right to seek indemnification from 2jl17.

To exercise any of these rights, submit a written request to the 2jl17 Data Protection Officer via the email address provided in Section 14. We will verify your identity before processing any data subject request and will respond within the timeframe required by the NPC.

During the registration process, 2jl17 requires all applicants to confirm their date of birth and to submit a valid government-issued Philippine ID for KYC verification. Accounts where the player is found to be under 21 years of age will be immediately suspended, all winnings forfeited, and any deposits returned in accordance with PAGCOR guidelines.

If 2jl17 becomes aware that personal data has been collected from an individual under the age of 21 — whether through registration fraud, misrepresentation, or error — that data will be deleted as soon as practicable, and the account will be permanently closed. If you are a parent or guardian and believe that your child has registered on 2jl17, please contact us immediately via live chat or the email address in Section 14 so we can take prompt action.

This age restriction is not merely a platform rule — it is a legal requirement under the PAGCOR regulatory framework and reflects 2jl17's genuine commitment to protecting young Filipinos from the potential harms associated with gambling.

Some of the third-party service providers engaged by 2jl17 — such as game content studios and certain technical infrastructure providers — may be located outside the Philippines. Where personal data is transferred to a recipient in a foreign country, 2jl17 takes the following steps to ensure your data remains protected:

• 2jl17 enters into written data transfer agreements with all foreign recipients that impose data protection obligations at least equivalent to those required by the Philippine DPA and NPC implementing rules.
• Where the foreign recipient is located in a country that the NPC has determined to provide an adequate level of data protection, 2jl17 relies on that adequacy determination as the basis for the transfer.
• In all other cases, 2jl17 implements appropriate safeguards — including standard contractual clauses approved by the NPC — to ensure that the transfer is lawful and that your rights as a data subject remain enforceable.

Cross-border transfers of your personal data are limited to what is strictly necessary for the delivery of services and are never carried out for purposes incompatible with those described in Section 4 of this Policy.

2jl17 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidance, or the platform's data processing practices. Material changes to this Policy will be communicated to registered players via email notification and a prominent notice on the 2jl17 website at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this page will always reflect when the most recent version of the Policy was published. Your continued use of the 2jl17 platform after the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree with a material change, you have the right to close your account before the change takes effect by contacting the 2jl17 support team.

We encourage all players to review this Privacy Policy periodically — particularly after receiving a notification of changes — to stay informed about how 2jl17 is protecting your personal data.

For all privacy-related inquiries, data subject rights requests, or complaints regarding 2jl17's handling of your personal data, please contact the 2jl17 Data Protection Officer through the following channels:

• Email: [email protected] (subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 directly on the 2jl17 website. For DPO matters, request to escalate to the Data Protection Officer.

2jl17 will acknowledge all privacy-related requests within five (5) business days and will provide a substantive response within fifteen (15) calendar days of verifying your identity. Complex requests may require additional time, in which case you will be notified of the expected response timeline.

If you are not satisfied with how 2jl17 has handled your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC can be reached through its official website and is the competent supervisory authority for data protection matters in the Philippines. 2jl17 will cooperate fully with any NPC investigation or inquiry conducted on behalf of a data subject.

All formal written privacy complaints and DPO correspondence must be submitted in English. 2jl17 support staff are available in Filipino (Tagalog) via live chat for your convenience, but official DPO records are maintained in English.