j678 Privacy Policy — How We Handle Your Personal Data

1 Introduction

j678 is committed to protecting the privacy and security of all personal data entrusted to us by our players. We recognise that the trust of Filipino players — from Metro Manila to Cebu, Davao, and beyond — is fundamental to our platform, and we take our data protection obligations seriously.

This Policy applies to all personal data collected through the j678 website, mobile-optimised platform, customer support channels, and any other interaction you have with j678. It covers data collected from registered players, prospective players who browse the platform without registering, and individuals who contact our support team.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and its implementing rules, j678 acts as the personal information controller in respect of the personal data collected through the j678 platform. As data controller, j678 determines the purposes and means by which your personal data is processed.

j678 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with applicable data protection laws and for handling data subject requests. You may contact our DPO using the contact details provided in Section 15 of this Policy.

3 Data We Collect

j678 collects the following categories of personal data from players and prospective players:

3.1 Identity and Registration Data

• Full legal name as it appears on a government-issued identification document;
• Date of birth (used to verify the 21+ age requirement);
• Gender (where voluntarily provided);
• Nationality and country of residence;
• A copy of a valid government-issued ID (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, PRC ID) submitted during KYC verification.

3.2 Contact Data

• Email address;
• Philippine mobile number;
• Residential address (for KYC and regulatory purposes).

3.3 Financial Data

• GCash or Maya account number linked to your j678 account;
• Bank account details (BPI, BDO, Metrobank) where provided for bank transfer deposits or withdrawals;
• Transaction history including deposits, withdrawals, wagers placed, and bonuses received;
• Cryptocurrency wallet address where USDT TRC20 transactions are used.

3.4 Technical and Usage Data

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used on the j678 platform;
• Game history, bet amounts, win/loss records, and session activity logs;
• Login timestamps and authentication event logs.

3.5 Communications Data

• Records of communications between you and j678 customer support, including live chat transcripts, email correspondence, and support ticket logs;
• Responses to surveys, feedback forms, or promotional communications where you have chosen to participate.

4 How We Collect Your Data

j678 collects your personal data through the following means:

• Direct registration: Data you provide when creating a j678 account, completing KYC verification, or updating your account profile;
• Platform interaction: Data generated automatically when you use the j678 platform, including gameplay activity, session data, and technical logs;
• Transactions: Data generated when you make deposits, place wagers, or request withdrawals through GCash, Maya, BPI, BDO, or other accepted payment methods;
• Support contacts: Data you provide when contacting j678 customer support via live chat, email, or any other support channel;
• Cookies and tracking: Technical data collected automatically via cookies, web beacons, and similar technologies as described in Section 8 of this Policy;
• Third-party verification: Data received from KYC verification service providers, fraud detection partners, and payment processors in connection with your account verification and transactions.

5 How We Use Your Data

j678 uses the personal data we collect for the following purposes:

6 Legal Basis for Processing

j678 processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing required to fulfil our contractual obligations to you as a registered j678 player, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), PAGCOR-aligned requirements, and the Data Privacy Act;
• Legitimate interests: Processing conducted in pursuit of j678's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and interests;
• Consent: Processing for optional purposes such as marketing communications and non-essential cookies, which is conducted only where you have provided clear and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Data

j678 does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

7.1 Payment Processors

GCash, Maya, BPI, BDO, Coins.ph, and other payment service providers receive necessary financial and identity data to process your deposit and withdrawal transactions. These providers process your data under their own privacy policies and are independently responsible for their data handling practices.

7.2 KYC and Identity Verification Providers

j678 uses trusted third-party KYC service providers to assist with identity verification and fraud screening. These providers receive your identity documents and personal details solely for verification purposes and are contractually bound to process such data in accordance with applicable law.

7.3 Game Providers

Third-party game studios whose games are hosted on the j678 platform may receive limited technical data (such as a pseudonymous player identifier and session token) necessary to deliver game services. Game providers do not receive your full identity or financial data.

7.4 Regulatory and Law Enforcement Authorities

j678 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine regulatory and law enforcement agencies where required to do so by applicable law, court order, or legitimate regulatory request. j678 will notify you of any such disclosure where legally permitted to do so.

7.5 Professional Advisers

j678 may share personal data with legal counsel, auditors, and other professional advisers on a strictly need-to-know basis and subject to appropriate confidentiality obligations.

8 Cookies and Tracking Technologies

j678 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit j678. We use the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without impairing core platform functionality;
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience;
• Analytics cookies: Collect aggregated data on how players use j678, which pages are most visited, and where technical issues occur. This data helps us improve the platform;
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and suspicious login behaviour.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the j678 platform. j678 does not use third-party advertising cookies or share data with external advertising networks.

9 Data Security

j678 implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the j678 platform;
• Encryption of sensitive data at rest, including financial data and identity documents;
• Role-based access controls limiting data access to authorised j678 personnel with a legitimate operational need;
• Regular security assessments, vulnerability scanning, and penetration testing of the j678 platform and infrastructure;
• Audit logs recording all access to and modifications of personal data by j678 personnel;
• Two-factor authentication (2FA) options for player accounts to reduce the risk of unauthorised access.

While j678 takes data security seriously, no system is completely immune to risk. In the event of a personal data breach that is likely to result in harm to affected individuals, j678 will notify the National Privacy Commission and affected players in accordance with the timelines and requirements of the Data Privacy Act of 2012.

10 Data Retention

j678 retains your personal data only for as long as necessary to fulfil the purposes described in this Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required under the Anti-Money Laundering Act;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction in accordance with AMLA and applicable tax regulations;
• KYC documents: Retained for a minimum of five (5) years after account closure or the completion of the relevant transaction;
• Customer support communications: Retained for up to three (3) years from the date of the last communication;
• Technical and usage logs: Retained for up to twelve (12) months for security and platform improvement purposes;
• Marketing consent records: Retained for the duration of your active consent and for one (1) year following withdrawal of consent as evidence of prior consent.

At the end of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

11 Your Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by j678:

• Right to be informed: The right to be notified of how your personal data is collected, used, and processed — which this Policy fulfils;
• Right to access: The right to obtain a copy of the personal data j678 holds about you and information about how it is processed;
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held about you;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to j678's legal retention obligations;
• Right to object: The right to object to the processing of your personal data on grounds of legitimate interest, including processing for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to withdraw consent: The right to withdraw consent for consent-based processing at any time, without affecting the lawfulness of processing conducted prior to withdrawal;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact j678 using the details in Section 15. j678 will respond to all verified data subject requests within thirty (30) days of receipt, or notify you if additional time is required.

12 Children's Privacy

j678 is strictly intended for individuals who are 21 years of age or older. j678 does not knowingly collect personal data from any person under the age of 21. The 21+ age requirement is enforced through mandatory KYC verification during the account registration process.

If j678 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated personal data will be securely deleted (except where retention is required by law for fraud reporting purposes), and any balance in the account will be handled in accordance with applicable regulations.

If you believe that a person under 21 has registered a j678 account or provided personal data to j678, please contact us immediately at [email protected] so that we may take appropriate action.

13 Third-Party Links

The j678 platform may contain references to third-party game providers, payment service providers, and other services. These third parties operate independently and have their own privacy policies governing the collection and use of personal data on their respective platforms. j678 is not responsible for the privacy practices, content, or security measures of any third-party service.

j678 strongly encourages you to review the privacy policies of any third-party service with which you interact in connection with your use of j678, including your GCash or Maya provider, BPI or BDO banking services, and any other external platform.

14 Changes to This Policy

j678 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material, j678 will notify registered players via in-platform notification or by email to their registered address, and will post the updated Policy on the j678 website with a revised effective date.

Your continued use of j678 following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you must cease using j678 and may request account closure in accordance with the Terms & Conditions. We encourage you to review this Policy periodically to stay informed about how j678 handles your personal data.

15 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the personal data j678 holds about you, please contact our Data Protection Officer using the following details:

j678 | [email protected] | Philippines | Serving verified players aged 21 and above nationwide, from Manila to Cebu to Davao.