Privacy Policy

This Privacy Policy ("Policy") is issued by 29jl Casino ("29jl," "we," "us," "our") and governs the collection, processing, storage, and disclosure of personal data provided by or collected from users ("you," "Player," "Data Subject") in connection with the 29jl Casino platform and all associated services.

This Policy applies to all interactions you have with 29jl — whether you register a player account, visit the website without registering, contact customer support, participate in promotions, or make financial transactions. It covers all devices and access methods, including desktop browsers, mobile browsers, and any app-based access that may be provided in the future.

By using the 29jl platform, you consent to the data practices described in this Policy. Where consent is the legal basis for processing, you have the right to withdraw consent at any time — though withdrawal may affect your ability to use certain features of the platform. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 29jl Casino is the Personal Information Controller (PIC) with respect to personal data collected from players and visitors on the 29jl.asia platform.

As the Personal Information Controller, 29jl Casino determines the purposes for which personal data is processed and the means by which it is processed. 29jl Casino has appointed a Data Protection Officer (DPO) whose contact details are set out in Section 15 of this Policy.

29jl Casino operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) for licensed online gaming operators. Compliance with PAGCOR's player identification and anti-money laundering obligations forms part of the lawful basis on which 29jl processes certain categories of personal data.

29jl Casino collects the minimum personal data necessary to provide a safe, compliant, and high-quality gaming experience. The categories of personal data we collect are set out below:

3.1 Registration & Identity Data

• Full legal name as it appears on a valid government-issued ID
• Date of birth — required to verify the 21+ age requirement under Philippine law
• Philippine mobile number — primary account identifier and communication channel
• Email address — used for account communications and verification
• Username and password — stored in encrypted form; passwords are never stored in plain text
• Residential address — collected during KYC for identity and anti-money laundering purposes

3.2 Identity Verification (KYC) Documents

• Government-issued photo ID (e.g., Philippine Passport, PhilSys ID, Driver's License, SSS/GSIS ID, Voter's ID)
• Proof of address documentation (e.g., utility bill, bank statement issued within 90 days)
• Source-of-funds documentation — requested where transaction patterns trigger AML review thresholds
• Selfie or liveness verification image — used to confirm that the submitted ID belongs to the account holder

3.3 Financial & Transaction Data

• Deposit and withdrawal records including amounts, timestamps, and payment method identifiers
• GCash and PayMaya account reference numbers (partial, not full credentials)
• Bank account details where bank transfers are used for withdrawals
• Bonus redemption history, wagering records, and win/loss summaries

3.4 Gameplay & Behavioural Data

• Game session records, including games played, bet amounts, outcomes, and session duration
• Platform navigation behaviour and feature interaction logs
• Responsible gaming tool usage, including deposit limit settings and self-exclusion requests

3.5 Technical & Device Data

• IP address at the time of access — used for geolocation compliance, fraud detection, and security monitoring
• Device type, operating system, and browser information
• Session identifiers, login timestamps, and access logs
• Cookie and tracking technology data — see Section 9 for full details

3.6 Communications Data

• Support chat transcripts and email correspondence with the 29jl team
• Records of complaints, disputes, and their resolutions
• Player-initiated feedback and survey responses

29jl Casino collects personal data through the following channels and mechanisms:

• Direct provision by you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to a promotion.
• Automated collection during platform use — session data, device information, and behavioural data are collected automatically as you navigate and use the 29jl platform.
• Identity verification providers — where 29jl engages licensed third-party KYC service providers, personal data including ID images may be processed on our behalf by those providers under strict data processing agreements.
• Payment processors — when you initiate a financial transaction, your payment method details are processed by our licensed payment processing partners. 29jl receives transaction confirmation data and reference identifiers, not your full payment credentials.
• Cookies and tracking technologies — subject to your cookie preferences, certain usage data is collected automatically via cookies and similar technologies when you access the 29jl website. See Section 9 for full details.

29jl Casino processes personal data only for specific, legitimate purposes and only where a valid lawful basis exists under the Data Privacy Act of 2012. The following table summarises the primary processing purposes and their legal bases:

Table: Primary processing purposes, associated data categories, and applicable legal bases under RA 10173.

29jl Casino does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data is shared only in the circumstances described below and only to the extent strictly necessary for the stated purpose.

6.1 Service Providers (Personal Information Processors)

29jl Casino engages third-party service providers who process personal data on our behalf under written data processing agreements that require them to maintain confidentiality and security standards consistent with this Policy. These include:

• KYC / identity verification providers — to process submitted ID documents and verification images
• Payment processors — GCash, PayMaya, and banking partners process financial transaction data to facilitate deposits and withdrawals
• IT infrastructure and hosting providers — data centres and cloud services hosting the 29jl platform under strict security and confidentiality obligations
• Customer support tools — licensed helpdesk software used to manage support tickets and live chat interactions
• Fraud detection and security services — specialist providers assisting with suspicious activity monitoring and account security

6.2 Regulatory Authorities

29jl Casino is required by law to disclose certain personal data to PAGCOR and other Philippine regulatory and law enforcement authorities upon lawful request. This includes disclosure obligations under the Anti-Money Laundering Act (AMLA) and other applicable Philippine statutes. 29jl Casino will comply with all lawful orders, warrants, or regulatory directions requiring disclosure of player data.

6.3 Legal Proceedings

Personal data may be disclosed where necessary to establish, exercise, or defend a legal claim in which 29jl Casino is a party, or where required by a court order or equivalent legal process.

Some of 29jl Casino's service providers and infrastructure partners may be located outside the Republic of the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, 29jl Casino ensures that appropriate safeguards are in place to protect the data in accordance with the Data Privacy Act of 2012.

Safeguards for international transfers may include standard contractual clauses approved by the National Privacy Commission (NPC), binding corporate rules, or reliance on the adequacy of the recipient country's data protection framework as recognised under Philippine law.

By using the 29jl platform and accepting this Policy, you consent to the transfer of your personal data to recipients in other countries, subject to the safeguards described above. 29jl Casino will never transfer your data to a jurisdiction with inadequate privacy protections without implementing compensating measures.

29jl Casino retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or for such longer period as is required by applicable law or regulation.

• Active player accounts: Personal data is retained for the full duration of the account relationship plus a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLA record-keeping requirements.
• KYC documentation: Identity verification documents are retained for a minimum of five (5) years from the date of verification, or longer if required by applicable law.
• Financial transaction records: Records of deposits, withdrawals, and wagering activity are retained for a minimum of five (5) years from the date of the transaction.
• Support communications: Customer support interactions are retained for a minimum of two (2) years to facilitate dispute resolution and quality improvement.
• Marketing preferences: Opt-in consent records and communication preferences are retained for as long as the account is active and for one (1) year following account closure or opt-out.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual. 29jl Casino conducts periodic data audits to ensure compliance with its retention obligations.

29jl Casino uses cookies and similar tracking technologies to operate the platform effectively, maintain secure sessions, and understand how players use the service. This section explains what cookies we use and why.

9.1 What Are Cookies?

Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember your actions and preferences over a period of time so that you do not have to re-enter them whenever you return or navigate between pages.

9.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for the 29jl platform to function. These enable secure login sessions, remember your authentication state, and maintain the security of your account. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations to provide a personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the 29jl platform — which pages are visited most frequently, how long sessions last, and where users encounter difficulties. This data is used to improve the platform.
• Security Cookies: Help detect and prevent fraudulent activity, monitor for unusual login patterns, and protect your account from unauthorised access attempts.

9.3 Cookie Management

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 29jl platform, including the ability to maintain a logged-in session. For detailed instructions on managing cookies in your browser, consult your browser's help documentation.

29jl Casino implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and the 29jl platform — indicated by the padlock icon in your browser's address bar.
• Encrypted storage of sensitive personal data, including password hashing using industry-standard cryptographic algorithms. Passwords are never stored in plain text under any circumstances.
• Access controls — internal access to personal data is restricted on a need-to-know basis. Staff with access to personal data undergo training on data protection obligations.
• Two-factor authentication (2FA) available to all 29jl account holders to prevent unauthorised login even if account credentials are compromised.
• Intrusion detection and monitoring — the 29jl infrastructure is continuously monitored for suspicious activity, and automated alerts are triggered by anomalous access patterns.
• Regular security assessments including vulnerability scanning and periodic review of data processing systems and controls.
• Incident response procedures — in the event of a personal data breach, 29jl Casino will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach where legally required, and will notify affected data subjects where the breach is likely to result in high risk to their rights.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by 29jl Casino. These rights may be exercised by contacting our Data Protection Officer as described in Section 15.

• Right to be Informed: You have the right to know what personal data 29jl Casino holds about you, how it is being used, and with whom it has been shared.
• Right of Access: You may request a copy of the personal data we hold about you in a structured, readable format.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data without undue delay. Account profile information can be updated directly within your 29jl account settings.
• Right to Erasure / "Right to be Forgotten": You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR, AMLA, and other applicable law.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: Where processing is based on consent or contract and carried out by automated means, you may request that your personal data be provided in a machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of prior processing.
• Right to Lodge a Complaint: If you believe that 29jl Casino has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

29jl Casino will respond to all rights requests within fifteen (15) business days of receipt of a valid, verified request. We may require identity verification before processing a rights request to ensure that we disclose or modify data only to or at the direction of the data subject.

The 29jl Casino platform is strictly intended for adults aged 21 years and above in accordance with Philippine law governing casino-style gambling. 29jl Casino does not knowingly collect personal data from any person under the age of 21.

Registration on the 29jl platform requires confirmation that you are at least 21 years of age, followed by mandatory identity verification to confirm this. If 29jl Casino discovers that an account has been registered by or on behalf of an individual under 21 years of age, the account will be immediately suspended, all associated personal data will be deleted (to the extent not required by law to be retained), and the matter may be reported to the relevant authorities.

The 29jl Casino platform may contain references to or integrations with third-party services such as payment processors (GCash, PayMaya, BDO, BPI, Metrobank, UnionBank), game studios, and support tools. When you interact with these third-party services — for example, by completing a GCash payment — your data is subject to the privacy policy of that third party, not this Policy.

29jl Casino is not responsible for the data practices of any third-party service provider beyond the data processing agreements we have in place with our contracted processors. We encourage all players to review the privacy policies of payment providers and any other services they use in connection with their 29jl account.

29jl Casino reviews this Privacy Policy periodically and reserves the right to amend it at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Effective Date" at the top of this document indicates when the most recent version came into force.

When material changes are made to this Policy, 29jl Casino will notify registered players by posting a notice on the platform and, where practicable, by sending a notification to your registered mobile number or email address. Continued use of the 29jl platform following the effective date of an updated Policy constitutes acceptance of the revised terms.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the personal data 29jl Casino holds about you, please contact our Data Protection Officer (DPO) using the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the 29jl platform. For data privacy matters, please identify your enquiry as a "Data Privacy Request" so it can be routed to the correct team. Average response time: 3–5 minutes.
• Email: [email protected] — For data privacy requests, please include "Data Privacy" in your subject line. Responses to formal data rights requests are provided within fifteen (15) business days of identity verification.
• Languages: Data privacy requests are handled in both English and Filipino (Tagalog).

If you are not satisfied with 29jl Casino's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for the enforcement of the Data Privacy Act of 2012.