987jl Privacy Policy — How We Handle Your Personal Data

This Privacy Policy is issued by the operator of the 987jl online gaming platform, accessible at 987jl.org (hereinafter referred to as "987jl", "we", "us", or "the Company"). 987jl operates as a PAGCOR-licensed online casino and gaming platform under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), 987jl is the Personal Information Controller in respect of the personal data collected from players and visitors to the 987jl Platform. This means we determine the purposes and means by which your personal data is processed.

We take our obligations as a Personal Information Controller seriously. Our data handling practices are designed to comply with the Data Privacy Act, its Implementing Rules and Regulations, and all applicable guidelines issued by the National Privacy Commission (NPC) of the Philippines.

This policy covers:

• Personal data collected through the 987jl website and mobile web platform;
• Data collected during registration, identity verification (KYC), deposit and withdrawal transactions;
• Data generated through your gameplay activity and account interactions;
• Data shared with 987jl through customer support communications;
• Technical and device data collected automatically when you access the Platform.

This policy does not apply to third-party websites, services, or platforms that may be linked to or integrated with 987jl. Those entities have their own privacy policies and 987jl is not responsible for their data handling practices.

3.1 Data You Provide Directly

987jl collects the following categories of personal data that you provide when using our services:

3.2 Data Collected Automatically

When you access the 987jl Platform, certain technical data is collected automatically:

• Device Data: Device type, operating system, browser type and version, screen resolution, and unique device identifiers;
• Network Data: IP address, mobile network provider (e.g., Globe, Smart, DITO), approximate geographic location derived from IP address;
• Usage Data: Pages visited, features accessed, game sessions initiated, bet amounts and game outcomes, session duration, and click-path data;
• Cookie and Tracking Data: Session cookies, authentication tokens, and analytics data as described in Section 11.

987jl collects personal data through the following methods:

• Direct provision: Data you enter into the 987jl registration form, KYC verification process, deposit and withdrawal forms, and support communications;
• Automatic collection: Technical data gathered by our servers and analytics systems when your browser or device connects to the 987jl Platform;
• Third-party sources: Identity verification data from licensed KYC service providers; fraud detection signals from our payment processing partners; and, where required by PAGCOR regulations, watchlist screening results from authorised Philippine government databases.

987jl does not purchase personal data from data brokers or marketing list providers for the purpose of contacting individuals who have not registered a 987jl account.

Under the Philippine Data Privacy Act, 987jl processes your personal data on the following legal bases:

• Contractual necessity: Processing required to operate your 987jl account, process transactions, and provide the gaming services you have registered to use. Without this processing, we cannot provide the 987jl service;
• Legal and regulatory obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine law. This includes KYC verification, transaction monitoring, and regulatory reporting;
• Legitimate interests: Processing carried out for 987jl's legitimate business interests, including fraud prevention, platform security, responsible gaming compliance, and service improvement — provided these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and optional analytics, where you have provided explicit consent. You may withdraw marketing consent at any time by contacting 987jl support.

987jl uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your 987jl account, including password resets, two-factor authentication, and account security monitoring;
• Transaction processing: Processing deposits and withdrawals via GCash, Maya, Philippine bank transfers, and other accepted payment methods; verifying payment method ownership; preventing payment fraud;
• Identity verification: Conducting KYC checks required by PAGCOR and Philippine anti-money laundering regulations; verifying that you meet the 21+ age requirement;
• Platform operation: Enabling access to 987jl's game library, tracking your wallet balance and transaction history, applying bonuses and promotions to your account;
• Responsible gaming: Monitoring play patterns to identify potential problem gambling indicators; applying self-imposed limits and exclusions; complying with PAGCOR's responsible gaming framework;
• Customer support: Responding to your queries and resolving disputes through live chat and email;
• Fraud and security: Detecting and preventing unauthorised account access, cheating, collusion, money laundering, and other prohibited conduct;
• Legal compliance: Fulfilling reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other regulatory bodies;
• Marketing (with consent): Sending promotional offers, new game announcements, and platform updates to players who have opted in to marketing communications.

987jl shares personal data only in the following circumstances and with the following categories of recipient:

• Game providers: Certain game providers (including Pragmatic Play, JILI, PG Soft, and Evolution) may receive session identifiers and gameplay data to facilitate your gaming experience. These providers are contractually bound to process this data only for service delivery purposes;
• Payment processors: GCash, Maya, and Philippine bank partners receive the financial and identity data necessary to process your deposit and withdrawal transactions;
• KYC and fraud screening services: Licensed identity verification providers receive identity document data to complete KYC checks required by PAGCOR;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, and courts may receive data in response to lawful requests, regulatory obligations, or court orders;
• IT and security service providers: Cloud hosting, cybersecurity, and platform analytics providers who process data on 987jl's behalf under appropriate data processing agreements;
• Professional advisors: Legal counsel, auditors, and compliance consultants under confidentiality obligations where necessary for 987jl's legal or regulatory compliance.

Some of 987jl's service providers and game partners operate from outside the Philippines. Where personal data is transferred to a recipient in another country, 987jl takes steps to ensure that such transfers comply with the Data Privacy Act and NPC guidelines, including requiring contractual data protection commitments from overseas recipients.

Game providers based outside the Philippines — including those headquartered in Malta, the Isle of Man, Gibraltar, and other regulated gaming jurisdictions — receive only the session and gameplay data necessary to operate the specific game you are playing. Such providers are required to maintain data security standards equivalent to those required under Philippine law.

987jl maintains its primary player account databases and financial transaction records within the Philippines or in data centres meeting PAGCOR's technical requirements for player data storage.

987jl implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data transmitted between your device and 987jl's servers is protected by 256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive personal data, including identity document information and financial data, is encrypted in our databases;
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis, with role-based access controls and audit logging of all access events;
• Network security: Our platform infrastructure is protected by firewalls, intrusion detection systems, and regular penetration testing;
• Segregated player funds: Your 987jl wallet balance is held in accounts segregated from 987jl's operational funds, protecting your balance in the event of any financial difficulty at the operator level;
• Incident response: 987jl maintains a data breach response plan. In the event of a data breach that creates a real risk of harm to your rights and interests, we will notify you and the National Privacy Commission (NPC) within the timeframes required by the Data Privacy Act.

While 987jl takes data security seriously, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 987jl login credentials. Please review the account security guidance in your account dashboard.

987jl retains your personal data for as long as is necessary for the purposes described in this policy and to comply with our legal obligations. The following retention periods apply:

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, 987jl will securely delete or anonymise it.

987jl uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored in your browser that help us recognise you between visits, maintain your login session, and understand how players navigate the 987jl platform.

11.1 Types of Cookies We Use

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your 987jl account. These cannot be disabled without preventing normal Platform operation;
• Functional cookies: Remember your preferences such as language settings and game display options to improve your experience;
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform to help us improve navigation, game loading, and feature design. We do not use analytics cookies to identify individual players;
• Security cookies: Detect suspicious access patterns, prevent CSRF attacks, and support two-factor authentication functionality.

11.2 Cookie Control

You can manage non-essential cookies through your browser settings. Blocking strictly necessary cookies will prevent you from logging in to your 987jl account. Most modern browsers — including Chrome, Firefox, and Samsung Internet, which are widely used by players accessing 987jl in the Philippines — provide tools to view and manage cookies in the browser settings menu.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of the personal data that 987jl holds about you:

To exercise any of these rights, please contact 987jl's Data Protection Officer via live chat or by email at [email protected] (displayed as plain text — not a clickable link). We will respond to all legitimate requests within 30 days of receipt. Where we cannot comply with a request in full, we will explain the reasons in writing.

All 987jl registrations require a declaration of age eligibility. Our KYC process verifies age through government-issued identification for accounts reaching applicable transaction thresholds. If you are a parent or guardian and you believe a minor has registered a 987jl account, please contact our support team immediately via live chat so we can investigate and take appropriate action.

987jl may update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law, or PAGCOR regulatory requirements. When we make changes, we will update the "Last Updated" date at the top of this document.

For material changes — those that significantly affect your rights or how we handle your personal data — we will provide at least 7 days' advance notice via the mobile number or email address registered with your 987jl account, or via a prominent notice on the Platform when you next log in.

Your continued use of the 987jl Platform following any update to this Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any updated version of this policy, you should contact us to close your account.

For questions about this Privacy Policy, to exercise your data subject rights, or to raise a data privacy concern, please contact 987jl's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the 987jl Platform. Average response time under 2 minutes. Reference "Data Privacy Request" at the start of your message to expedite routing to our privacy team;
• Email: [email protected] (plain text display — not a clickable link). Please use the subject line "Privacy Policy Query" or "Data Subject Rights Request" as applicable.

987jl will acknowledge all privacy-related requests within 3 business days and aim to resolve them within 30 days. Where a request is complex or relates to a large volume of data, we may extend this period by up to an additional 60 days, in which case we will notify you of the extension and the reasons for it.

If you are not satisfied with 987jl's response to a privacy concern, or if you believe your rights under the Philippine Data Privacy Act have been violated, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines through their official channels. For responsible gaming concerns, please visit our Responsible Gaming page. For full platform terms, visit our Terms & Conditions.