2jil Casino Privacy Policy

This Privacy Policy ("Policy") is issued by 2jil Casino ("2jil," "we," "us," "our") and applies to all personal data collected from individuals who access, register with, or use the 2jil Casino online gaming platform at 2jil.app ("the Platform"), as well as any associated mobile applications, customer support channels, and promotional communications.

This Policy is intended to inform you — as a data subject and user of the 2jil Casino platform — of your rights and our obligations with respect to your personal data, in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and applicable guidelines issued by the National Privacy Commission ("NPC").

By registering an account with 2jil Casino, accessing the Platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described herein, you should not use 2jil Casino's services.

For the purposes of the Philippine Data Privacy Act of 2012 and this Policy, 2jil Casino, operating the platform at 2jil.app, is the personal information controller ("PIC") in respect of the personal data of its registered players and website visitors.

2jil Casino is a PAGCOR-regulated online gaming operator. In its capacity as personal information controller, 2jil Casino determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that such processing complies with the DPA and all applicable Philippine data privacy laws.

Where 2jil Casino engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or IT hosting providers), those third parties act as personal information processors ("PIPs") and are contractually bound to process your data only on 2jil Casino's documented instructions and in accordance with applicable Philippine and international data protection standards.

2jil Casino collects the following categories of personal data in the course of providing its services to Philippine players:

2jil Casino does not collect sensitive personal information — as defined under Section 3(l) of the DPA — beyond what is strictly necessary for age verification, identity confirmation, and PAGCOR-mandated player due diligence. Specifically, we do not collect information about your health, political affiliations, religious beliefs, or sexual orientation.

2jil Casino collects personal data through the following means:

• Directly from you: When you register a 2jil Casino account, complete the KYC verification process, make a deposit or withdrawal request, contact our customer support team, or update your account settings.
• Automatically through platform use: When you access 2jil.app, our systems automatically collect technical data including your IP address, device identifiers, browser type, operating system, session timestamps, and pages visited. This data is collected through server logs, session management systems, and cookies (see Section 7).
• From third-party service providers: We may receive identity verification results from our KYC partners, transaction confirmation data from payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud-risk signals from our security service providers.
• From PAGCOR and regulatory sources: In limited circumstances, we may receive data from PAGCOR or other Philippine regulatory bodies in connection with our compliance obligations, such as self-exclusion list checks.

2jil Casino processes your personal data for the following purposes, each supported by a lawful basis under the Philippine Data Privacy Act of 2012:

1. Account Registration and Service Delivery — To create and administer your 2jil Casino account, verify your identity, and provide the gaming services you have requested. Legal basis: Performance of a contract to which you are a party.
2. Age Verification and KYC Compliance — To verify that you are at least 21 years of age and to satisfy our PAGCOR-mandated know-your-customer obligations. Legal basis: Compliance with a legal obligation; PAGCOR regulatory requirement.
3. Payment Processing — To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, and to maintain accurate financial records. Legal basis: Performance of a contract; compliance with a legal obligation.
4. Anti-Money Laundering (AML) and Fraud Prevention — To monitor transactions and account activity for signs of money laundering, fraud, or other illegal conduct, as required by the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR directives. Legal basis: Compliance with a legal obligation.
5. Responsible Gaming — To monitor gaming activity and support the implementation of responsible gaming tools, including deposit limits, self-exclusion, and problem gambling interventions. Legal basis: Legitimate interests; PAGCOR regulatory requirement.
6. Customer Support — To respond to your enquiries, complaints, and support requests. Legal basis: Performance of a contract; legitimate interests.
7. Marketing Communications — To send you promotional offers, bonus notifications, and relevant information about 2jil Casino, where you have given your consent or where permitted under applicable law. Legal basis: Consent; legitimate interests (for existing players, subject to opt-out rights).
8. Legal and Regulatory Compliance — To comply with applicable Philippine laws, PAGCOR directives, NPC guidelines, court orders, and other binding legal instruments. Legal basis: Compliance with a legal obligation.
9. Platform Security and Integrity — To detect and prevent unauthorised access, cheating, abuse of promotional terms, and other platform integrity issues. Legal basis: Legitimate interests.

2jil Casino does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial or marketing purposes. We disclose your personal data only to the following categories of recipients, and only to the extent necessary for each stated purpose:

• Payment Service Providers: GCash (Mynt / G-Xchange Inc.), PayMaya (Maya Bank), BPI, BDO, Metrobank, Visa, and Mastercard — to facilitate deposits, withdrawals, and transaction verification.
• KYC and Identity Verification Providers: Third-party providers engaged to perform automated identity document verification and liveness checks as part of the 2jil Casino KYC process. All such providers are contractually bound to process data only for verification purposes.
• Game Software Providers: Licensed game suppliers (including but not limited to Evolution Gaming, Vivo Gaming, Pragmatic Play, PG Soft, Jili, and Habanero) may process limited technical data (session tokens, RNG seed data) as part of game delivery. These providers do not receive personally identifiable information beyond what is technically required.
• PAGCOR and Philippine Regulatory Authorities: We are legally obligated to share player data, transaction records, and gaming activity data with PAGCOR on request and pursuant to applicable reporting obligations.
• Anti-Money Laundering Council (AMLC): We are required to file covered and suspicious transaction reports with the AMLC as mandated by Philippine AML law.
• National Privacy Commission (NPC): In the event of a personal data breach or pursuant to NPC investigation or directive.
• Law Enforcement and Courts: Where disclosure is required by valid legal process, court order, or warrant issued by a competent Philippine authority.
• IT and Cloud Hosting Providers: Third-party technology partners who provide server hosting, content delivery, and platform infrastructure services, subject to appropriate data processing agreements.
• Fraud Prevention and Security Services: Providers of cybersecurity, device fingerprinting, and transaction fraud screening tools engaged to protect 2jil Casino's platform integrity and player accounts.

Where personal data is shared with processors outside the Philippines, 2jil Casino ensures that appropriate safeguards are in place, as described in Section 10.

2jil Casino uses cookies and similar tracking technologies on the 2jil.app platform. Cookies are small data files stored on your device that help us recognise you on return visits, maintain your session, and improve platform performance and security.

The categories of cookies used by 2jil Casino are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load balancing identifiers. These cookies cannot be disabled without materially impairing platform functionality.
• Functional Cookies: Store your preferences — such as language settings, game lobby display preferences, and responsible gaming limit reminders — to improve your experience on return visits.
• Performance / Analytics Cookies: Collect aggregated, anonymised data about how visitors use the 2jil Casino platform (e.g., pages visited, time on site, game categories accessed). This data is used solely to improve platform performance and user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorised login attempts, and bot traffic.

2jil Casino does not use third-party advertising cookies or tracking pixels that share your browsing behaviour with external advertising networks.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain features of 2jil Casino. Your continued use of the platform following acknowledgement of this Policy constitutes consent to our use of cookies as described above.

2jil Casino implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transmission Security: All data exchanged between your device and 2jil Casino's servers is encrypted using Transport Layer Security (TLS) with a 256-bit key — the same standard used by Philippine commercial banks for online banking transactions.
• Storage Security: Personal data stored on 2jil Casino's servers is encrypted at rest. Access to stored personal data is restricted to authorised personnel on a strict need-to-know basis, enforced through role-based access controls.
• Authentication Security: Player accounts are protected by password hashing (using industry-standard bcrypt or equivalent algorithms), one-time password (OTP) verification for sensitive account actions, and session anomaly detection that flags unusual login patterns for review.
• Organisational Measures: All 2jil Casino personnel with access to personal data undergo data privacy training and are bound by confidentiality obligations. Data access is logged and subject to periodic audit.
• Vulnerability Management: 2jil Casino conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses in its platform infrastructure.
• Third-Party Security Standards: All third-party processors engaged by 2jil Casino are required to maintain security standards no less stringent than those applied by 2jil Casino itself, as enforced through contractual data processing agreements.

2jil Casino retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory requirements. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and applicable AML retention obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, as required by the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR financial reporting obligations.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the relevant due diligence process.
• Gaming Activity Records: Retained for a minimum of three (3) years, or longer where required by PAGCOR audit and reporting obligations.
• Customer Support Communications: Retained for a minimum of two (2) years following resolution of the relevant enquiry or complaint.
• Technical / Log Data: Retained for up to twelve (12) months, after which it is anonymised or deleted unless required for an ongoing security investigation.
• Marketing Consent Records: Retained for the duration of your active account and for one (1) year following account closure, as evidence of lawful marketing communications.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with 2jil Casino's data disposal procedures. Where anonymisation is not technically feasible, data is securely destroyed using industry-standard methods.

Some of 2jil Casino's service providers — particularly cloud hosting, game software, and cybersecurity partners — may process personal data on servers located outside the Philippines. Where personal data is transferred to a recipient in a foreign jurisdiction, 2jil Casino takes steps to ensure that an adequate level of data protection is maintained, including by:

• Entering into data processing agreements with foreign processors that incorporate data protection obligations equivalent to those required under the Philippine DPA and NPC guidelines;
• Transferring data only to jurisdictions with an NPC-recognised adequate level of data protection, or otherwise obtaining specific player consent for the transfer where required; and
• Restricting the scope of data shared with foreign processors to the minimum necessary to deliver the contracted service.

You may contact 2jil Casino's Data Protection Officer (see Section 16) to request further information about the specific safeguards applied to any cross-border data transfer affecting your personal information.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 2jil Casino. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 16.