jjwin Privacy Policy — Your Data, Protected

This Privacy Policy is issued by jjwin ("jjwin," "we," "us," or "our"), the operator of the online gaming platform accessible at https://jjwin.live ("Platform"). jjwin acts as the data controller in respect of the personal data of registered players and visitors to the Platform, as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA").

This Privacy Policy applies to all personal data collected through the Platform, including data collected during account registration, gameplay, payment processing, customer support interactions, and general browsing of the jjwin website. By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

jjwin collects the following categories of personal data from players and Platform visitors:

jjwin does not collect sensitive personal information (as defined under the DPA, such as health data, political opinions, or religious beliefs) unless specifically required by law or with your explicit consent.

jjwin collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs. See Section 7 for details on our cookie practices.
• Third-party sources: Identity and financial verification data received from payment processors (GCash, Maya, banks), identity verification service providers, and fraud prevention agencies, where you have authorised such sharing.
• Regulatory sources: Data received from PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or investigation requirements.

jjwin uses your personal data for the following purposes:

• To create, verify, and manage your jjwin account, including age verification to enforce the 21+ requirement.
• To process deposits and withdrawals through GCash, Maya, bank transfer, and debit card payment methods.
• To comply with anti-money laundering (AML) obligations, PAGCOR regulatory requirements, and other applicable Philippine laws.
• To detect, investigate, and prevent fraud, cheating, collusion, and other prohibited conduct on the Platform.
• To provide customer support and resolve disputes.
• To send you account-related communications, including transaction confirmations, security alerts, and policy updates.
• To monitor your gaming activity for responsible gaming purposes and to apply any self-imposed limits or exclusions.
• To personalise your experience on the Platform, including game recommendations and promotional offers where you have consented to receive them.
• To analyse Platform usage and improve our services, games, and user interface.

Under the Data Privacy Act of 2012, jjwin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your jjwin account, process transactions, and provide gaming services.
• Legal obligation: Processing required to comply with Philippine law, including AML regulations, PAGCOR licensing conditions, and tax reporting obligations.
• Legitimate interests: Processing necessary for jjwin's legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your rights.
• Consent: Processing for purposes such as marketing communications and non-essential cookies, where you have given your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jjwin does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya/Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML screening services to verify your identity and comply with regulatory obligations.
• Game software providers: Licensed game developers whose titles are hosted on the jjwin Platform, to the extent necessary to deliver gameplay and resolve technical disputes.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where required by law or court order.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors operating under strict data processing agreements that prohibit independent use of your data.

All third-party service providers who process personal data on jjwin's behalf are bound by contractual data processing agreements that require them to implement appropriate security measures and process data only on jjwin's documented instructions.

jjwin uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings and game display options to personalise your experience.
• Analytics cookies: Collect anonymised data about how visitors use the Platform to help us improve performance and user experience. Used only with your consent.
• Security cookies: Help detect and prevent fraudulent activity, bot access, and account takeover attempts.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, but may affect certain personalisation features. Note that strictly necessary cookies cannot be disabled as they are required for secure login and session management.

jjwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and jjwin servers.
• AES-256 encryption for sensitive data stored in jjwin databases, including financial information and identity documents.
• Multi-factor authentication (MFA) options for player accounts to prevent unauthorised access.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Role-based access controls ensuring that jjwin staff can only access personal data necessary for their specific job function.
• 24/7 security monitoring and automated anomaly detection to identify and respond to potential breaches in real time.
• Incident response procedures in place to notify affected players and the National Privacy Commission within 72 hours of discovering a personal data breach, as required by the DPA.

While jjwin takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for keeping your account credentials confidential and for notifying jjwin immediately if you suspect unauthorised access to your account.

jjwin retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Customer support communications: Retained for three (3) years from the date of the interaction, or longer if related to an ongoing dispute or regulatory investigation.
• Technical and usage data: Retained for up to twelve (12) months for analytics purposes, after which it is anonymised or deleted.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised using industry-standard data destruction methods. Anonymised data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jjwin:

• Right to be informed: The right to know what personal data jjwin holds about you and how it is being processed — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data jjwin holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to jjwin's legal retention obligations.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting prior processing.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe jjwin has violated your data privacy rights.

To exercise any of these rights, please contact jjwin's Data Protection Officer at [email protected]. We will respond to all verified data subject requests within fifteen (15) business days. We may need to verify your identity before processing your request.

The jjwin Platform is strictly intended for persons aged 21 years and above, in accordance with PAGCOR regulations governing online casino gaming in the Philippines. jjwin does not knowingly collect personal data from individuals under the age of 21.

If jjwin discovers or is notified that personal data has been collected from a person under 21, the relevant account will be immediately suspended, all personal data associated with that account will be deleted, and any funds in the account will be handled in accordance with applicable regulatory requirements.

jjwin reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Privacy Policy. If you do not agree with the revised policy, you must cease using the Platform and may request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or jjwin's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Response time: Within 15 business days for data subject requests; within 3 business days for general privacy enquiries.
• Language: English and Filipino

If you are not satisfied with jjwin's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint is available on the NPC's official website.

For questions about your account, responsible gaming tools, or self-exclusion, please also visit our Responsible Gaming page or review our Terms & Conditions.