688jl Casino
Privacy Policy

1 Introduction & Data Controller

1.1 — Identity of the Data Controller. The personal data controller for all data processing activities described in this Policy is 688jl Casino, the operator of the online gaming platform at https://688jl.club. 688jl is registered with the National Privacy Commission as required under RA 10173 and holds a PAGCOR license authorizing the operation of online gaming services for Filipino players.

1.2 — Scope. This Policy applies to all personal data collected through: the 688jl website and all its sub-pages; the 688jl mobile application; any registration, KYC, deposit, withdrawal, or support interaction conducted through 688jl's services; and any marketing communications you receive from 688jl, provided you have opted in to such communications.

1.3 — Acceptance. By registering an account on the 688jl platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, please do not register an account or use the 688jl services.

2 Definitions

• "Personal Data" — any information that can directly or indirectly identify a natural person, including name, mobile number, email address, date of birth, financial details, IP address, and device identifiers.
• "Sensitive Personal Information" — personal data about an individual's age, national identification numbers, government-issued ID details, financial transactions, and other categories defined as sensitive under RA 10173.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, transfer, disclosure, erasure, and destruction.
• "Data Controller" — 688jl Casino, the entity that determines the purposes and means of processing personal data.
• "Data Processor" — a third party that processes personal data on behalf of 688jl under a written data processing agreement.
• "Data Subject" — the individual whose personal data is being processed; in the context of 688jl, primarily registered Players and website visitors.
• "NPC" — the National Privacy Commission of the Philippines, the regulatory authority responsible for enforcing RA 10173.
• "KYC" — Know Your Customer, the identity verification process required by PAGCOR and AMLC regulations.

3 Personal Data We Collect

3.1 — 688jl collects personal data through multiple touchpoints across the player lifecycle. The categories of data collected are described below.

3.2 — Data You Provide Voluntarily. Certain data — such as your GCash number or bank account details — is provided voluntarily by you to enable specific services. Failure to provide data required for KYC or payment processing may result in the temporary suspension of withdrawal rights or limitation of account functionality, as required by PAGCOR compliance rules.

3.3 — Data Collected Automatically. Technical and device data is collected automatically when you access the 688jl platform, regardless of whether you are logged in. This data is used for platform security, fraud prevention, and service optimization and does not require explicit consent under RA 10173 where it falls within legitimate interests.

4 Lawful Bases for Processing

688jl processes personal data only where at least one of the following lawful bases under RA 10173 applies:

1. Consent: Where you have given freely given, specific, informed consent to the processing — for example, for marketing communications or optional profile features;
2. Contractual Necessity: Where processing is necessary to perform the contract between you and 688jl (the Terms & Conditions you accepted at registration), including account management, game access, and financial transactions;
3. Legal Obligation: Where processing is required to comply with a legal obligation under Philippine law, including PAGCOR licensing conditions, Anti-Money Laundering Act reporting obligations (RA 9160), and RA 10173 data retention mandates;
4. Legitimate Interests: Where processing is necessary for 688jl's legitimate interests — such as platform security, fraud detection, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your fundamental rights and freedoms.

5 How 688jl Uses Your Personal Data

5.1 — 688jl uses the personal data collected for the following specific purposes:

• Account Management: Creating, maintaining, and securing your 688jl account; authenticating your identity at login; processing password resets and account recovery;
• KYC Compliance: Verifying your identity and age (21+) as required by PAGCOR regulations and Philippine anti-money laundering law;
• Transaction Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank; generating transaction records; detecting and preventing payment fraud;
• Game Delivery: Providing access to all games in the 688jl lobby; maintaining fair game records; resolving any game result disputes;
• Customer Support: Responding to support queries, complaints, and responsible gaming requests submitted through live chat or email;
• Regulatory Reporting: Filing mandatory reports to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory authorities as required by law;
• Responsible Gaming: Monitoring gaming activity for indicators of problem gambling; communicating with Players who may benefit from responsible gaming tools; enforcing self-exclusion requests;
• Platform Security: Detecting and preventing unauthorized account access, cheating, collusion, and other forms of fraud or abuse;
• Service Improvement: Analyzing aggregated and anonymized usage data to improve platform performance, game selection, and player experience;
• Marketing Communications (consent-based only): Sending promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications.

5.2 — 688jl will not use your personal data for any purpose incompatible with those stated above without obtaining fresh consent or establishing a new lawful basis.

6 Data Sharing & Disclosure

6.1 — 688jl does not sell, rent, or trade personal data to third parties for commercial purposes. Data is shared only in the following limited circumstances:

• Payment Service Providers: GCash (G-Xchange Inc.), PayMaya Philippines, BPI, BDO Unibank, and Metrobank receive only the transaction data necessary to process your deposit or withdrawal. These providers are independently regulated under BSP rules.
• KYC & Identity Verification Providers: 688jl may use regulated third-party identity verification services to process KYC documents. These processors operate under written data processing agreements requiring compliance with RA 10173.
• Gaming Software Providers: Slot and live dealer game providers (such as Pragmatic Play, PG Soft, JDB, and Jili) receive the minimum game session data necessary to deliver their games. Provider data processing is governed by supplier agreements.
• PAGCOR: As a PAGCOR licensee, 688jl is obligated to provide player data, gaming records, and financial reports to PAGCOR upon request or as part of routine regulatory reporting.
• AMLC and Philippine Law Enforcement: 688jl complies with mandatory reporting obligations under the Anti-Money Laundering Act and will disclose personal data to the AMLC, the NBI, PNP, or other competent Philippine authorities where legally required, without prior notice to the Player.
• Professional Advisers: 688jl's legal counsel, auditors, and compliance advisers may access personal data under confidentiality obligations where necessary for their professional services.

7 Cookies & Tracking Technologies

7.1 — 688jl uses cookies and similar tracking technologies on the platform website and mobile application. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function — authentication tokens, session identifiers, security cookies. These cannot be disabled without impairing your ability to use the 688jl platform.
• Functional Cookies: Remember your preferences such as language setting, game lobby filters, and display options. Disabling these cookies may affect the personalized experience of the 688jl platform.
• Performance & Analytics Cookies: Collect aggregated, anonymized data about how players use the 688jl platform — pages visited, session duration, error reports. This data helps 688jl improve platform performance.
• Marketing Cookies (consent-required): Used only where you have opted in to marketing communications. Track which promotions you have viewed or interacted with. These can be disabled via your browser settings or account notification preferences.

7.2 — You can manage cookie preferences through your browser settings. Blocking all cookies may impair your ability to log in to and use the 688jl platform. Strictly necessary cookies cannot be disabled via your browser without breaking core platform functionality.

8 Data Retention

8.1 — 688jl retains personal data for the periods described below, after which data is securely erased or anonymized unless a longer retention period is required by applicable Philippine law:

• Active Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act (RA 9160 as amended);
• KYC and Identity Documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by AMLC regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years in accordance with AMLC and BSP record-keeping requirements;
• Gaming Activity Logs: Retained for a minimum of two (2) years for dispute resolution purposes, and up to five (5) years where required by PAGCOR;
• Support Correspondence: Retained for two (2) years after resolution of the relevant support interaction;
• Marketing Preference Records: Retained for the duration of your account plus two (2) years, to demonstrate compliance with consent obligations.

9 Security Measures

9.1 — 688jl implements appropriate technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• TLS 1.3 encryption for all data transmitted between your device and the 688jl platform;
• AES-256 encryption for sensitive personal data stored in 688jl databases;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication required for all 688jl internal system access;
• Regular security audits and penetration testing by qualified cybersecurity professionals;
• Intrusion detection systems monitoring 688jl platform infrastructure 24/7;
• Formal data breach response plan maintained and tested in accordance with NPC notification requirements.

9.2 — While 688jl takes all reasonable precautions, no system is completely immune to security incidents. Players are encouraged to protect their own accounts by using strong unique passwords and enabling two-factor authentication via the 688jl account security settings.

10 Your Data Subject Rights

10.1 — Under the Data Privacy Act of 2012 (RA 10173), as a Filipino data subject you have the following rights in relation to your personal data held by 688jl:

• Right to be Informed: The right to know what personal data 688jl collects about you, how it is used, and with whom it is shared — addressed by this Privacy Policy;
• Right of Access: The right to obtain confirmation of whether 688jl holds personal data about you and to receive a copy of that data in a portable format;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data 688jl holds about you;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 688jl's legal retention obligations;
• Right to Object: The right to object to certain processing activities, including direct marketing and processing based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, machine-readable format and to have it transmitted to another controller where technically feasible;
• Right to Damages: The right to claim compensation for damages suffered as a result of inaccurate, incomplete, outdated, or unlawfully obtained personal data;
• Right to Complain: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 688jl has violated your data privacy rights.

10.2 — To exercise any of the above rights, please contact 688jl's Data Protection Officer via the contact details in Section 15. 688jl will respond to data subject rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. Some requests may take longer where identity verification is required.

11 Minors & Age Policy

11.1 — The 688jl platform is strictly restricted to individuals aged 21 years and above in compliance with PAGCOR regulations. 688jl does not knowingly collect, process, or store personal data from individuals under the age of 21.

11.2 — Age verification is conducted during the KYC process for all registered accounts. Where 688jl discovers or reasonably suspects that an account has been registered by an individual under 21 years of age, the account will be immediately suspended, all balances forfeited, and the personal data of the minor erased to the extent not required to be retained for legal compliance purposes.

11.3 — Parents or guardians who believe their child has registered an account with 688jl should contact the 688jl Data Protection Officer immediately using the contact details in Section 15.

12 Cross-Border Data Transfers

12.1 — Some of 688jl's third-party service providers — particularly gaming software providers operating international platforms — may process certain game session data on servers located outside the Philippines. Where such cross-border transfers occur, 688jl ensures that:

• The recipient country provides an adequate level of data protection as assessed by the NPC, or;
• Appropriate safeguards are in place through contractual clauses requiring the recipient to meet data protection standards equivalent to those under RA 10173;
• The transfer is limited to the minimum data necessary for the specific service being provided.

12.2 — 688jl does not transfer KYC identity documents, financial account details, or Philippine government-issued identification numbers to overseas servers beyond those operated by providers expressly subject to the safeguards described above.

13 Data Breach Protocol

13.1 — In the event of a personal data breach that poses a real risk of harm to affected Data Subjects, 688jl will:

• Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in the format prescribed by NPC Circular No. 16-03;
• Notify affected Data Subjects without undue delay where the breach is likely to result in high risk to their rights and freedoms;
• Document all breaches, regardless of whether NPC notification is required, in accordance with RA 10173 accountability obligations.

13.2 — The breach notification to affected 688jl players will be sent to the mobile number or email address on file and will include: the nature of the breach; the categories and approximate number of records affected; the likely consequences; and the measures taken or proposed to address the breach.

14 Policy Amendments

14.1 — 688jl reserves the right to amend this Privacy Policy at any time to reflect changes in Philippine data protection law, NPC guidance, PAGCOR regulatory requirements, or 688jl's data processing practices. Amendments will be published on this page with an updated "Last Updated" date.

14.2 — For material changes that significantly affect how your personal data is processed, 688jl will provide at least fourteen (14) days' advance notice via the mobile number or email address on file. Your continued use of the 688jl platform after the effective date of any amendment constitutes acceptance of the revised Policy.

14.3 — We encourage you to review this Privacy Policy periodically. The current version is always accessible at https://688jl.club/privacy-policy.

15 Contact & Data Protection Officer

15.1 — 688jl has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. You may contact the 688jl DPO or exercise any data subject right through the following channels:

• Live Chat: Available 24/7 on the 688jl website — the fastest channel for data subject rights requests;
• Email: support@688jl.club — mark your email subject "Data Privacy Request" to ensure prompt routing to the DPO team. Please allow up to fifteen (15) business days for a full response.

15.2 — If you are not satisfied with 688jl's response to your data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint process.