Privacy Policy

1. Introduction and Data Controller Information

Welcome to the 2222jl Privacy Policy. This document governs the collection, processing, storage, and protection of personal information provided by users ("you," "your," or "User") of the 2222jl online gaming platform (the "Platform"). 2222jl operates as a PAGCOR-licensed online gaming service provider serving Filipino players across the Philippines with bingo, sports betting, casino games, and related entertainment services.

As the data controller, 2222jl is responsible for determining the purposes and means of processing your personal data. We are committed to protecting your privacy and complying with all applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, issuances from the National Privacy Commission (NPC), and PAGCOR regulatory requirements governing online gaming operations.

By registering an account, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and agree to the data processing practices described in this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you must immediately discontinue use of the Platform and refrain from providing any personal information to 2222jl.

This Privacy Policy should be read in conjunction with our Terms & Conditions, which govern your use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions regarding data processing matters, this Privacy Policy shall prevail.

2. Information We Collect

2.1 Personal Information Provided Directly by You

When you register for a 2222jl account or use our services, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, nationality, government-issued identification numbers (passport number, driver's license number, UMID, Philippine National ID number, Professional Regulation Commission ID number), and copies of government-issued photo identification documents
• Contact Information: Residential address, email address, mobile phone number, and alternative contact details
• Financial Information: Bank account details, e-wallet information (GCash, PayMaya account names and numbers), payment card information (processed securely through third-party payment processors), transaction history, deposit and withdrawal records, and betting history
• Account Credentials: Username, password (stored in encrypted form), security questions and answers, and two-factor authentication details
• Verification Documents: Proof of identity documents, proof of address documents (utility bills, bank statements), proof of payment method ownership, and any additional documents required for enhanced due diligence or regulatory compliance
• Communication Records: Customer support chat transcripts, email correspondence, feedback submissions, complaint records, and any other communications with 2222jl staff
• Marketing Preferences: Consent records for promotional communications, newsletter subscriptions, and communication channel preferences

2.2 Information Collected Automatically

When you access or use the 2222jl Platform, we automatically collect certain technical and usage information through cookies, web beacons, log files, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, unique device identifiers, mobile network information, and hardware model
• Connection Data: IP address, geolocation data (country, region, city derived from IP address), internet service provider, connection speed, and network status
• Usage Data: Pages visited, features accessed, time and date of visits, time spent on pages, referring URLs, clickstream data, search queries within the Platform, game play history, betting patterns, session duration, and interaction with marketing materials
• Performance Data: Application crash reports, error logs, loading times, and technical diagnostics

2.3 Information from Third Parties

In certain circumstances, 2222jl may receive personal information about you from third-party sources, including:

• Identity Verification Services: Data from third-party KYC (Know Your Customer) and identity verification providers used to confirm your identity and prevent fraud
• Payment Processors: Transaction confirmation data, payment status information, and fraud screening results from GCash, PayMaya, banks, and other payment service providers
• Credit Reference Agencies: Information used to assess creditworthiness and prevent fraud (where applicable)
• Publicly Available Sources: Information from public registries, social media profiles (if you choose to link your account), and other publicly accessible databases used for verification purposes
• Regulatory and Law Enforcement Agencies: Information provided by PAGCOR, the National Privacy Commission, Anti-Money Laundering Council (AMLC), or law enforcement authorities in connection with compliance investigations

2.4 Sensitive Personal Information

Under the Data Privacy Act of 2012, certain categories of personal information are classified as "sensitive personal information" and are subject to heightened protection. 2222jl processes the following categories of sensitive personal information only when necessary and with your explicit consent:

• Government-issued identification numbers (SSS, TIN, GSIS, passport number, driver's license number)
• Biometric information (if you choose to enable biometric login on mobile devices)
• Health information (only if voluntarily disclosed in connection with responsible gaming self-exclusion requests based on gambling-related harm)

Processing of sensitive personal information is strictly limited to purposes that are necessary for legal compliance, account security, fraud prevention, and the provision of gaming services. We employ enhanced security measures to protect sensitive personal information against unauthorized access, disclosure, or misuse.

3. How We Use Your Personal Data

2222jl processes your personal data for the following legitimate business purposes, all of which are necessary for the provision of our services, compliance with legal obligations, or pursued in our legitimate interests as a licensed gaming operator:

3.1 Account Management and Service Provision

• Creating, maintaining, and managing your user account
• Verifying your identity and age to ensure compliance with 21+ age requirements
• Processing deposits, withdrawals, and other financial transactions
• Providing access to gaming services (bingo, sports betting, slots, live casino)
• Maintaining accurate betting and transaction records
• Calculating winnings, bonuses, and loyalty rewards
• Processing bonus claims and promotional offers

3.2 Legal and Regulatory Compliance

• Complying with PAGCOR licensing requirements and regulatory obligations
• Conducting Know Your Customer (KYC) and Customer Due Diligence (CDD) procedures
• Fulfilling anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Republic Act No. 9160 (Anti-Money Laundering Act of 2001, as amended)
• Detecting, preventing, and investigating fraud, money laundering, collusion, cheating, and other illegal activities
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) when required by law
• Responding to lawful requests from PAGCOR, the National Privacy Commission, law enforcement agencies, and courts
• Maintaining audit trails and records for regulatory inspections
• Complying with tax reporting obligations where applicable

3.3 Security and Fraud Prevention

• Protecting your account from unauthorized access and identity theft
• Monitoring for suspicious account activity and unusual betting patterns
• Detecting and preventing bonus abuse, collusion, and advantage play
• Verifying the authenticity of documents submitted for KYC verification
• Preventing underage gambling and enforcing geographic restrictions
• Investigating Terms & Conditions violations and policy breaches
• Blocking access from prohibited jurisdictions using geolocation technology

3.4 Customer Support and Communication

• Responding to customer inquiries, support requests, and complaints
• Providing technical assistance and troubleshooting
• Investigating and resolving disputes regarding game outcomes, transactions, or account issues
• Sending account-related notifications (transaction confirmations, security alerts, account status changes)
• Communicating policy updates, Terms & Conditions changes, and regulatory announcements

3.5 Marketing and Promotional Communications (With Consent)

• Sending promotional offers, bonus announcements, and exclusive deals via email, SMS, or push notifications (only with your explicit consent)
• Personalizing marketing communications based on your gaming preferences and activity
• Inviting VIP members to exclusive events and promotions
• Conducting customer satisfaction surveys and feedback requests

You may withdraw your consent to marketing communications at any time by clicking the unsubscribe link in promotional emails, adjusting your account communication preferences, or contacting Customer Support. Withdrawal of marketing consent will not affect our ability to send transactional and account-related messages necessary for service provision.

3.6 Platform Improvement and Analytics

• Analyzing usage patterns and user behavior to improve Platform functionality and user experience
• Conducting A/B testing and feature optimization
• Identifying and fixing technical issues, bugs, and performance problems
• Developing new features, games, and services based on user preferences
• Generating anonymized and aggregated statistical reports (which do not identify individual users)

3.7 Responsible Gaming and Player Protection

• Implementing deposit limits, loss limits, and session time restrictions
• Processing self-exclusion and cooling-off period requests
• Monitoring for signs of problem gambling behavior and offering intervention resources
• Maintaining records of responsible gaming tool usage for regulatory compliance

4. Data Sharing and Disclosure to Third Parties

2222jl does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your p ersonal information with the following categories of third parties when necessary for the purposes described in this Privacy Policy:

4.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, banks, and other financial institutions that process deposits and withdrawals on your behalf
• Identity Verification Services: Third-party KYC and AML screening providers that verify your identity and assess fraud risk
• Technology Providers: Cloud hosting services, data storage providers, cybersecurity firms, and IT maintenance contractors
• Game Providers: Third-party game developers and live dealer studios whose games are integrated into the Platform
• Customer Support Tools: Live chat software providers and helpdesk platforms used to manage customer inquiries
• Marketing Service Providers: Email service providers and SMS gateway operators used to send promotional communications (only if you have consented to marketing)
• Analytics Providers: Web analytics services that help us understand Platform usage and improve user experience

All third-party service providers are carefully selected and are contractually obligated to process your personal data only in accordance with our instructions, to implement appropriate security measures, and to comply with applicable data protection laws. Service providers are prohibited from using your personal data for their own purposes.

4.2 Regulatory and Law Enforcement Authorities

2222jl may disclose your personal information to regulatory bodies, government agencies, and law enforcement authorities when required by law or when necessary to comply with legal obligations, including:

• Philippine Amusement and Gaming Corporation (PAGCOR) for licensing compliance and regulatory reporting
• Anti-Money Laundering Council (AMLC) for suspicious transaction reports and AML investigations
• National Privacy Commission (NPC) in response to lawful data protection inquiries
• Philippine National Police (PNP), National Bureau of Investigation (NBI), or other law enforcement agencies pursuant to valid court orders, subpoenas, or legal processes
• Tax authorities for tax compliance and reporting purposes where applicable

4.3 Legal and Professional Advisors

We may share your personal information with lawyers, auditors, accountants, and other professional advisors who assist us with legal compliance, financial audits, and business operations. These advisors are bound by professional confidentiality obligations.

4.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity or acquiring party. You will be notified of any such transfer, and the new data controller will continue to be bound by this Privacy Policy unless you are provided with notice and an opportunity to object to any material changes.

4.5 With Your Consent

We may share your personal information with third parties not listed above if you provide explicit consent for such disclosure at the time of collection or subsequently through your account settings.

5. Data Security Measures

Protecting your personal information is a top priority for 2222jl. We implement robust technical, organizational, and administrative security measures designed to safeguard your data against unauthorized access, disclosure, alteration, destruction, or loss. Our security framework includes:

5.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols. Sensitive data stored in our databases, including passwords and payment information, is encrypted at rest using AES-256 encryption or equivalent standards.
• Firewalls and Intrusion Detection: Our network infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS) that monitor for and block malicious activity.
• Secure Authentication: Passwords are hashed using bcrypt or similar one-way cryptographic algorithms. We offer two-factor authentication (2FA) and encourage all users to enable this feature for enhanced account security.
• Access Controls: Access to personal data is restricted to authorized personnel only, based on the principle of least privilege. Employees and contractors are granted access only to the data necessary for their specific job functions.
• Regular Security Testing: We conduct regular vulnerability assessments, penetration testing, and security audits to identify and remediate potential weaknesses in our systems.
• Data Segregation: Customer data is logically segregated from other data and stored in secure, access-controlled databases with audit logging enabled.

5.2 Organizational Security Measures

• Employee Training: All employees with access to personal data receive mandatory training on data protection principles, security best practices, and their obligations under the Data Privacy Act of 2012.
• Confidentiality Agreements: Employees, contractors, and third-party service providers are bound by confidentiality agreements that prohibit unauthorized disclosure of customer information.
• Incident Response Plan: We maintain a comprehensive data breach response plan that outlines procedures for detecting, containing, investigating, and reporting security incidents in accordance with NPC guidelines.
• Background Checks: Personnel with access to sensitive systems and data undergo background verification and screening processes.
• Data Protection Officer: 2222jl has designated a Data Protection Officer (DPO) responsible for overseeing compliance with data protection laws and serving as the point of contact for privacy-related inquiries.

5.3 Your Role in Security

While 2222jl implements comprehensive security measures, account security also depends on your actions. You can protect your account by:

• Choosing a strong, unique password and never sharing it with others
• Enabling two-factor authentication (2FA) for an additional layer of protection
• Logging out of your account after each session, especially on shared or public devices
• Keeping your email address and mobile number up to date for security notifications
• Being cautious of phishing attempts and never clicking suspicious links claiming to be from 2222jl
• Reporting any suspected unauthorized access to your account immediately

6. Data Retention and Deletion

2222jl retains your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, enforce our Terms & Conditions, and maintain business records. Our retention practices are guided by the following principles:

6.1 Active Account Data

While your account remains active, we retain all personal information necessary to provide gaming services, maintain accurate transaction records, and comply with ongoing regulatory requirements. This includes identity documents, financial records, betting history, and communication logs.

6.2 Closed Account Data

When you close your account or your account is terminated by 2222jl, we will retain certain personal information for the following minimum periods:

• Identity and KYC Documents: Retained for seven (7) years from account closure, as required by PAGCOR regulations and anti-money laundering laws
• Financial and Transaction Records: Retained for seven (7) years from the date of the transaction, in accordance with tax laws and financial recordkeeping requirements
• Betting History and Game Records: Retained for seven (7) years to support audit requirements, dispute resolution, and regulatory compliance
• Communication Records: Retained for five (5) years for quality assurance, training, and dispute resolution purposes
• Fraud and Security Incident Records: Retained indefinitely or until no longer needed for fraud prevention, security purposes, or legal proceedings

6.3 Deletion Upon Request

After the applicable retention period has expired, personal information is securely deleted or anonymized. However, we may retain aggregated, anonymized, or de-identified data indefinitely for statistical analysis and research purposes, as such data can no longer be used to identify you individually.

If you wish to request deletion of your personal data before the standard retention period expires, you may submit a deletion request by contacting our Data Protection Officer. Please note that we may not be able to delete all data if retention is required by law, necessary for legal claims, or essential for legitimate business purposes such as fraud prevention.

7. Your Privacy Rights Under Philippine Law

Under the Data Privacy Act of 2012 and its implementing rules, Filipino citizens and residents have specific rights regarding their personal data. As a data subject, you have the following rights:

7.1 Right to Be Informed

You have the right to be informed about the collection and processing of your personal data. This Privacy Policy serves as our primary mechanism for fulfilling this obligation by clearly explaining what data we collect, how we use it, and with whom we share it.

7.2 Right to Access

You have the right to obtain confirmation from 2222jl as to whether or not your personal data is being processed, and to access your personal data upon reasonable request. You can view much of your account information directly through your account dashboard. For additional access requests, contact our Data Protection Officer.

7.3 Right to Rectification

You have the right to correct inaccurate or incomplete personal data. You can update most of your account information (email address, phone number, password) directly through account settings. For changes to identity documents or other verified information, contact Customer Support with supporting documentation.

7.4 Right to Erasure or Blocking

You have the right to request deletion or blocking of your personal data when it is incomplete, outdated, false, unlawfully obtained, or no longer necessary for the purposes for which it was collected. This right is subject to exceptions where retention is required by law or necessary for legal claims.

7.5 Right to Object

You have the right to object to the processing of your personal data, including processing for direct marketing purposes. You can opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in promotional emails.

7.6 Right to Data Portability

You have the right to obtain your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller. To request a copy of your data for portability purposes, contact our Data Protection Officer.

7.7 Right to Damages

You have the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, subject to the provisions of the Data Privacy Act.

7.8 How to Exercise Your Rights

To exercise any of these rights, please submit a written request to our Data Protection Officer via email at [email protected] or through the contact information provided in Section 12 of this Privacy Policy. Your request should include:

• Your full name and registered email address
• A clear description of the right you wish to exercise
• Proof of identity (copy of government-issued ID) to verify your identity
• Specific details about the data or processing activity in question

We will respond to your request within fifteen (15) calendar days from verification of your identity, or within the timeframe prescribed by the National Privacy Commission. If your request is complex or requires additional time, we will notify you of the delay and provide an estimated timeframe for completion.

8. Cookies and Tracking Technologies

The 2222jl Platform uses cookies, web beacons, pixel tags, local storage, and similar tracking technologies to enhance your user experience, analyze Platform performance, and deliver personalized content. This section explains what these technologies are, how we use them, and how you can control them.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow the website to recognize your device and remember information about your visit, such as login status, language preferences, and browsing history. Cookies may be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device until deleted or expired).

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly. These cookies enable core functionality such as account login, session management, security features, and load balancing. You cannot opt out of essential cookies, as they are necessary for service provision.
• Performance Cookies: Collect information about how you use the Platform, such as which pages you visit most often and whether you encounter error messages. This data helps us improve Platform performance and identify technical issues. Performance cookies do not identify you individually.
• Functional Cookies: Remember your preferences and choices, such as language settings, time zone, display preferences, and account dashboard layout. These cookies enhance your user experience by personalizing the Platform to your preferences.
• Analytics Cookies: Help us understand user behavior, traffic patterns, and Platform usage through third-party analytics tools. We use this information to improve content, optimize features, and develop new services. Analytics data is typically aggregated and anonymized.
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness (only used with your consent). We may use these cookies to show you relevant promotions based on your gaming preferences and browsing behavior.

8.3 Third-Party Cookies

Some cookies are placed by third-party service providers we work with, such as analytics providers, advertising networks, and payment processors. These third parties have their own privacy policies governing how they use information collected through their cookies. We do not control third-party cookies and recommend reviewing the privacy policies of these providers.

8.4 Managing Cookie Preferences

Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies or alert you when a website attempts to place a cookie on your device. You can also delete cookies that have already been stored. Please note that disabling cookies may affect Platform functionality and limit your ability to access certain features.

To manage cookies, consult your browser's help documentation:

• Google Chrome: Settings > Privacy and Security > Cookies and other site data
• Mozilla Firefox: Options > Privacy & Security > Cookies and Site Data
• Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies

9. Protection of Minors

The 2222jl Platform is strictly intended for adults aged 21 years and above, as required by Philippine law and PAGCOR regulations. Online gambling is illegal for minors in the Philippines, and 2222jl is committed to preventing underage access to our services.

We do not knowingly collect, process, or retain personal information from individuals under the age of 21. Our registration process requires all users to confirm their age and provide government-issued identification for verification. If we discover that a user is underage, we will immediately close the account, void all bets and transactions, and delete all associated personal information.

Parents and guardians are strongly encouraged to monitor their children's internet use and employ parental control software to prevent minors from accessing gambling websites. If you become aware that a minor has registered an account on the 2222jl Platform, please report it immediately to Customer Support at [email protected] so we can take appropriate action.

10. International Data Transfers

2222jl primarily stores and processes personal data within the Philippines. However, some of our third-party service providers (such as cloud hosting services, payment processors, and technology vendors) may be located outside the Philippines, which may result in your personal data being transferred to, stored in, or processed in countries other than the Philippines.

When we transfer personal data internationally, we ensure that appropriate safeguards are in place to protect your data in accordance with Philippine data protection laws. These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission
• Ensuring that the recipient country has been determined by the NPC to have adequate data protection standards
• Binding corporate rules for transfers within multinational corporate groups
• Obtaining your explicit consent for the transfer where required

If you have questions or concerns about international data transfers, please contact our Data Protection Officer for more information about the specific safeguards applied to your personal data.

11. Changes to This Privacy Policy

2222jl reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. All changes will be effective immediately upon posting the revised Privacy Policy on the Platform. The "Last Updated" date at the top of this document indicates when the most recent revisions were made.

We will notify you of material changes to this Privacy Policy through one or more of the following methods:

• Prominent notice on the Platform homepage or login page
• Email notification to your registered email address
• In-account notification upon your next login
• SMS notification for significant changes affecting your rights

Your continued use of the Platform after we post or notify you of changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with any changes, you must discontinue use of the Platform and may request closure of your account. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

12. Contact Information and Complaints

If you have questions, concerns, or complaints regarding this Privacy Policy, our data processing practices, or the exercise of your privacy rights, please contact us using the following information:

Data Protection Officer

Email: [email protected]
Customer Support Email: [email protected]
Live Chat: Available 24/7 through the 2222jl Platform
Response Time: We aim to respond to all privacy inquiries within 15 calendar days

Filing a Complaint with the National Privacy Commission

If you are not satisfied with our response to your privacy concern or believe that your data protection rights have been violated, you have the right to file a complaint with the National Privacy Commission (NPC), the Philippine data protection authority:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto Street, Pasay City, Metro Manila 1307
Email: [email protected]
Website: privacy.gov.ph

You also have the right to lodge a complaint with PAGCOR regarding data protection matters related to online gaming operations.