678jl Privacy Policy

1. Introduction and Scope

1.1 Data Controller Identity

678jl (the "Company," "we," "us," or "our"), operating the online gaming platform at https://678jl.cam, acts as the data controller for all personal information collected through our website, mobile applications, and related services. This Privacy Policy applies to all users ("you," "User," or "Player") who access or use 678jl services, whether as registered account holders or casual visitors.

1.2 Legal Framework and Compliance

This Privacy Policy is drafted in accordance with and operates under the following Philippine legal frameworks:

• Data Privacy Act of 2012 (Republic Act No. 10173) – The principal law governing the protection of personal data in the Philippines;
• National Privacy Commission (NPC) Circulars – Including implementing rules and regulations issued by the NPC;
• Anti-Money Laundering Act of 2001 (AMLA) as amended – Requiring customer due diligence and record retention;
• PAGCOR Regulatory Standards – Data protection requirements for licensed gaming operators;
• E-Commerce Act of 2000 (Republic Act No. 8792) – Governing electronic transactions and data integrity.

1.3 Consent and Agreement

By registering an account with 678jl, accessing our platform, or using our services, you expressly consent to the collection, processing, storage, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with any provision herein, you must immediately cease using 678jl services and refrain from providing any personal information.

2. Personal Information We Collect

2.1 Information You Provide Directly

When you register for a 678jl account or use our services, we collect the following categories of personal information that you voluntarily provide:

Registration Information

• Identity Data: Full legal name as it appears on your government-issued identification, date of birth, nationality, and gender;
• Contact Information: Residential address, email address, mobile phone number, and alternative contact details;
• Account Credentials: Username, password (stored in encrypted hash format), and security questions/answers;
• Government-Issued ID: Copies of Philippine passport, driver's license, UMID, PhilSys ID, or other valid identification documents required for KYC verification;
• Financial Information: Payment method details including GCash account name and number, Maya account information, bank account numbers (BDO, BPI, or other Philippine banks), cryptocurrency wallet addresses, and source of funds documentation for large transactions.

Transaction and Gaming Data

• Deposit and withdrawal history including amounts, dates, times, and payment methods;
• Betting history including game types, stake amounts, odds, results, and winnings;
• Bonus claims, wagering progress, and promotional activity;
• Account balance fluctuations and currency conversion records;
• Customer support communications including chat transcripts, emails, and complaint records.

2.2 Information Collected Automatically

When you access 678jl services, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

Device and Technical Information

• Device Identifiers: IP address, mobile device ID (IMEI, Android ID, IDFA), MAC address, and unique device fingerprints;
• Browser and System Data: Browser type and version, operating system, screen resolution, language settings, time zone, and installed plugins;
• Network Information: Internet Service Provider (ISP), connection type, network performance metrics, and geolocation data derived from IP address;
• Usage Patterns: Pages visited, click-through paths, time spent on pages, referring URLs, search queries within our platform, and feature usage statistics;
• Session Data: Login timestamps, session duration, concurrent device usage, and logout events.

Cookies and Tracking Technologies

678jl uses both first-party and third-party cookies to enhance user experience, maintain session security, and analyze platform performance. Categories of cookies employed include:

• Essential Cookies: Required for basic platform functionality, user authentication, and security features (cannot be disabled);
• Performance Cookies: Collect anonymous data on how users interact with our platform to improve service quality;
• Functionality Cookies: Remember your preferences such as language selection, display settings, and gameplay configurations;
• Analytics Cookies: Provided by third-party services (Google Analytics, Mixpanel) to measure traffic, user behavior, and conversion rates.

You can manage cookie preferences through your browser settings, though disabling essential cookies may impair platform functionality. For detailed information on our cookie practices, please refer to our Cookie Policy accessible through your account settings.

2.3 Information from Third Parties

In certain circumstances, 678jl receives personal information from external sources:

• Payment Processors: GCash, Maya, bank partners, and cryptocurrency exchanges provide transaction verification data, fraud alerts, and payment authentication confirmations;
• Identity Verification Services: Third-party KYC/AML compliance providers conduct identity checks, document authentication, and watchlist screening on our behalf;
• Fraud Prevention Services: Specialized vendors provide device intelligence, behavioral analytics, and risk scoring to detect fraudulent account creation and suspicious betting patterns;
• Marketing Partners: Affiliate networks and advertising platforms provide aggregated campaign performance data (no personally identifiable information is shared without your consent);
• Regulatory Authorities: PAGCOR, Anti-Money Laundering Council (AMLC), and law enforcement agencies may provide or request information in connection with compliance investigations or legal proceedings.

3. How We Use Your Personal Information

3.1 Legal Bases for Processing

Under the Data Privacy Act of 2012, 678jl processes your personal information based on the following lawful grounds:

• Consent: You have explicitly agreed to the processing for one or more specific purposes;
• Contract Performance: Processing is necessary to fulfill our obligations under the Terms and Conditions you accepted upon registration;
• Legal Obligation: Processing is required to comply with Philippine laws including anti-money laundering regulations, tax reporting, and PAGCOR licensing requirements;
• Legitimate Interest: Processing is necessary for our legitimate business interests in fraud prevention, security, and service improvement, provided such interests do not override your fundamental rights and freedoms.

3.2 Purposes of Data Processing

Account Management and Service Delivery

• Creating and maintaining your 678jl account;
• Verifying your identity and age to ensure compliance with the 21+ legal gambling age requirement;
• Processing deposits, withdrawals, and fund transfers;
• Managing bets, calculating winnings, and updating account balances;
• Processing bonus claims and tracking wagering requirements;
• Providing customer support and responding to inquiries;
• Sending transactional communications including deposit confirmations, withdrawal notifications, and account alerts.

Regulatory Compliance and Legal Obligations

• Conducting Know Your Customer (KYC) verification as mandated by PAGCOR and AMLA regulations;
• Performing Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) for high-risk transactions;
• Monitoring transactions for suspicious activity and reporting to the Anti-Money Laundering Council when legally required;
• Maintaining transaction records for the mandatory seven-year retention period under Philippine AML laws;
• Responding to lawful requests from regulatory authorities, law enforcement agencies, or courts;
• Complying with tax reporting obligations to the Bureau of Internal Revenue (BIR);
• Implementing responsible gaming measures including self-exclusion, deposit limits, and problem gambling detection.

Security, Fraud Prevention, and Risk Management

• Detecting and preventing fraudulent account registrations, duplicate accounts, and identity theft;
• Identifying irregular betting patterns, bonus abuse, collusion, and other prohibited activities;
• Protecting against unauthorized access, data breaches, and cyber attacks;
• Conducting internal audits and security assessments;
• Verifying the legitimacy of fund sources and destinations to prevent money laundering;
• Enforcing our Terms and Conditions and protecting 678jl's legal rights and property.

Service Improvement and Personalization

• Analyzing user behavior and preferences to enhance platform functionality;
• Conducting A/B testing to optimize user interface and gaming experience;
• Developing new games, features, and payment methods based on user demand;
• Personalizing game recommendations and promotional offers based on your gaming history;
• Improving customer support efficiency through chatbot training and support ticket analysis;
• Measuring platform performance, identifying technical issues, and optimizing loading times.

Marketing and Communications (With Consent)

• Sending promotional emails, SMS messages, and push notifications about bonuses, tournaments, and special offers;
• Displaying personalized advertisements on third-party websites and social media platforms;
• Conducting market research and customer satisfaction surveys;
• Announcing new game launches, platform updates, and company news.

Marketing Opt-Out: You may withdraw consent for marketing communications at any time by clicking "unsubscribe" in emails, adjusting notification settings in your account, or contacting customer support. Opting out of marketing does not affect transactional or security-related communications which are necessary for service provision.

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

678jl shares your personal information with carefully selected third-party service providers who assist in operating our platform and delivering services. These processors are contractually bound to process your data only for specified purposes and in compliance with the Data Privacy Act. Categories of service providers include:

Service Category	Purpose	Data Shared
Payment Processors	Deposit and withdrawal processing	Name, account numbers, transaction amounts, payment method details
KYC/AML Verification	Identity verification and compliance screening	Full name, date of birth, ID documents, address, nationality
Game Providers	Delivering slot games, live dealer tables, and RNG games	User ID (anonymized), bet amounts, game outcomes, session data
Cloud Hosting	Secure data storage and platform hosting	All account data stored on encrypted servers
Customer Support Tools	Managing support tickets and live chat	Name, email, phone, support conversation history
Analytics Providers	Platform performance analysis and optimization	Device information, usage patterns, anonymized behavioral data
Fraud Prevention	Detecting suspicious activity and protecting user accounts	Device fingerprints, IP addresses, transaction patterns, risk scores
Email/SMS Services	Delivering transactional and marketing communications	Email address, phone number, communication preferences

4.2 Legal and Regulatory Disclosures

678jl may disclose your personal information without prior notice when required or permitted by Philippine law, including:

• PAGCOR: Licensing compliance reports, player activity data, and incident reports as required under our gaming license;
• Anti-Money Laundering Council (AMLC): Suspicious Transaction Reports (STRs), Covered Transaction Reports (CTRs), and responses to freeze orders or inquiries;
• Bureau of Internal Revenue (BIR): Tax-related information for players with significant winnings subject to withholding tax;
• National Privacy Commission (NPC): Information requested in connection with privacy investigations or data breach notifications;
• Law Enforcement and Courts: Data required pursuant to valid subpoenas, court orders, warrants, or lawful government requests;
• Legal Proceedings: Information necessary to establish, exercise, or defend legal claims, enforce our Terms and Conditions, or protect the rights, property, and safety of 678jl, our users, or the public.

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy proceeding involving 678jl, your personal information may be transferred to the successor entity. You will be notified via email and prominent platform notice of any such change in ownership or control of your personal data.

4.4 No Sale of Personal Information

678jl does not sell, rent, lease, or trade your personal information to third parties for their marketing purposes. We do not participate in data brokering or share your information with advertisers in a way that personally identifies you without your explicit consent.

5. Data Security Measures

5.1 Technical Safeguards

678jl implements industry-standard security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and 678jl servers is encrypted using TLS 1.3 (Transport Layer Security) protocol with 256-bit encryption. Sensitive data at rest, including passwords and financial information, is encrypted using AES-256 encryption;
• Secure Servers: Personal data is stored on secure servers located in certified data centers with physical access controls, 24/7 monitoring, redundant power supplies, and disaster recovery systems;
• Firewall Protection: Multi-layered firewall architecture filters malicious traffic and prevents unauthorized network access;
• Intrusion Detection: Real-time monitoring systems detect and respond to suspicious activity, attempted breaches, and DDoS attacks;
• Regular Security Audits: Independent third-party security firms conduct penetration testing and vulnerability assessments quarterly;
• Secure Development Practices: Code reviews, static analysis, and security testing are integrated into our software development lifecycle.

5.2 Organizational Safeguards

• Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. Role-based access controls limit data exposure;
• Employee Training: All 678jl employees and contractors undergo mandatory data privacy and security training upon hiring and annually thereafter;
• Non-Disclosure Agreements: All personnel with access to personal data are bound by strict confidentiality obligations;
• Background Checks: Employees in sensitive roles undergo background verification before being granted access to user data;
• Incident Response Plan: A documented data breach response protocol ensures rapid containment, investigation, and notification in accordance with NPC regulations.

5.3 User Responsibilities

While 678jl implements robust security measures, you also play a critical role in protecting your account:

• Choose a strong, unique password containing uppercase and lowercase letters, numbers, and special characters;
• Never share your password, username, or account credentials with anyone;
• Enable two-factor authentication (2FA) if available in your account settings;
• Log out after each session, especially when using shared or public devices;
• Keep your registered email account and mobile phone secure;
• Regularly review your account activity and transaction history for unauthorized access;
• Immediately notify 678jl customer support if you suspect your account has been compromised.

6. Data Retention and Deletion

6.1 Retention Periods

678jl retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations. Specific retention periods by data category:

Data Category	Retention Period	Legal Basis
Account Information	Duration of account plus 7 years after closure	AMLA regulatory requirements
Transaction Records	7 years from transaction date	AMLA and BIR retention mandates
KYC Documents	7 years after account closure	PAGCOR licensing and AMLA compliance
Betting History	7 years from bet placement	Regulatory audit requirements
Customer Support Records	3 years from last interaction	Dispute resolution and service improvement
Marketing Consent	Until consent is withdrawn	User consent
Session and Usage Data	24 months	Security analysis and fraud prevention

6.2 Account Closure and Data Deletion

When you close your 678jl account, either voluntarily or due to Terms and Conditions violations, your personal data handling follows this process:

1. Immediate Actions: Account access is revoked, login credentials are invalidated, and marketing communications are ceased;
2. Cooling-Off Period: Account data is archived for 30 days to allow for dispute resolution or account reactivation requests;
3. Regulatory Retention: After the cooling-off period, personally identifiable information is pseudonymized or anonymized where possible, while maintaining records required for the 7-year legal retention period;
4. Final Deletion: Upon expiration of all legal retention obligations, personal data is securely and permanently deleted from our systems using data sanitization methods that prevent recovery.

6.3 Right to Data Deletion

You may request deletion of your personal information at any time by contacting our Data Protection Officer at [email protected]. However, deletion requests are subject to the following limitations:

• Data required for ongoing legal proceedings or regulatory investigations cannot be deleted until such matters are resolved;
• Transaction records mandated by AMLA and tax laws must be retained for the full 7-year period;
• Anonymized or aggregated data that cannot identify you individually may be retained for statistical analysis;
• Information necessary to establish, exercise, or defend legal claims may be retained until the statute of limitations expires.

7. Your Privacy Rights Under Philippine Law

7.1 Data Subject Rights

The Data Privacy Act of 2012 grants you the following rights regarding your personal information held by 678jl:

Right to Be Informed

You have the right to be informed whether your personal data is being processed, including details about the purposes, extent, methods, and consequences of processing. This Privacy Policy serves as our primary notice, supplemented by specific disclosures at the point of data collection.

Right to Access

You may request and obtain from 678jl: (a) confirmation of whether we are processing your personal data; (b) copies of your personal data in our possession; (c) information about how your data has been used and disclosed. Access requests can be made through your account settings or by emailing [email protected].

Right to Object

You may object to processing of your personal data based on legitimate interest, including profiling and direct marketing. Upon receiving a valid objection, 678jl will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for legal claims.

Right to Erasure or Blocking

You may request deletion or blocking of your personal data when: (a) it is no longer necessary for the purposes it was collected; (b) you withdraw consent and there is no other legal ground for processing; (c) you have successfully objected to processing; (d) the data has been unlawfully processed; (e) deletion is required by law. Requests are subject to legal retention obligations outlined in Section 6.

Right to Rectification

You have the right to correct inaccurate or incomplete personal information. Most profile information can be updated directly through your account settings. For changes requiring verification (e.g., name, date of birth), contact customer support with supporting documentation.

Right to Data Portability

Upon request, 678jl will provide your personal data in a structured, commonly used, and machine-readable format (CSV or JSON) to facilitate transfer to another service provider. Data portability applies to information processed based on consent or contract performance.

Right to File a Complaint

If you believe 678jl has violated your privacy rights under the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission. Contact details:

National Privacy Commission
5th Floor, Philippine International Convention Center (PICC)
Vicente Sotto St., Pasay City, Metro Manila 1307
Email: [email protected]
Hotline: (02) 8234-2228

7.2 Exercising Your Rights

To exercise any of the above rights, submit a written request to our Data Protection Officer via:

• Email: [email protected]
• In-App Support: Customer support chat with subject line "Privacy Rights Request"

Include in your request: (a) your full name and registered email address; (b) specific right(s) you wish to exercise; (c) detailed description of your request; (d) preferred format for data delivery (if applicable). We will respond to verified requests within fifteen (15) business days. Complex requests may require up to thirty (30) days, with notification of the extension.

8. International Data Transfers

While 678jl primarily operates in the Philippines, certain technical and operational services may involve cross-border data transfers to jurisdictions outside the Philippines. When personal data is transferred internationally, we ensure adequate protection through:

• Adequacy Determinations: Transferring data only to countries recognized by the National Privacy Commission as providing adequate data protection;
• Standard Contractual Clauses: Implementing NPC-approved or equivalent standard contractual clauses with foreign data processors;
• Binding Corporate Rules: Requiring multinational service providers to adhere to internal privacy policies that meet Philippine standards;
• Appropriate Safeguards: Conducting due diligence on third-party security measures, encryption practices, and data handling protocols.

Cross-border transfers are limited to those necessary for service provision and are subject to the same security standards as domestic data processing. Users will be notified of significant changes to our international data transfer practices.

9. Children's Privacy

678jl services are strictly prohibited for individuals under twenty-one (21) years of age. We do not knowingly collect personal information from minors. Our registration process includes age verification mechanisms, and accounts found to be held by underage individuals are immediately suspended and permanently closed. If you believe a minor has provided personal information to 678jl, please contact us immediately at [email protected] and we will take prompt action to delete such information and close the associated account.

10. Changes to This Privacy Policy

678jl reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through:

• Email notification to your registered email address;
• Prominent banner notification upon login to your account;
• Updated "Last Modified" date at the top of this policy.

Continued use of 678jl services following notification of Privacy Policy changes constitutes acceptance of the revised terms. If you do not agree with modifications, you must cease using our services and may request account closure and data deletion subject to legal retention requirements.

11. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:

678jl Data Protection Officer
Email: [email protected]
Customer Support: Available 24/7 via live chat or [email protected]
Legal Department: [email protected]

We are committed to addressing your privacy concerns promptly and transparently. All privacy-related inquiries will receive a response within five (5) business days, with full resolution targeted within fifteen (15) business days.