27jl Privacy Policy

1. Who We Are

"27jl," "we," "us," and "our" refer to the operator of the 27jl online gaming platform accessible at 27jl.one. 27jl serves as the data controller responsible for the personal information collected through the Platform. For questions or concerns relating to your personal data, you may contact us at the details provided in Section 13 of this Policy.

27jl operates in compliance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as applicable Philippine gaming regulatory requirements.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a 27jl account or interact with the Platform, you may provide the following personal information:

• Full legal name as it appears on your government-issued identification;
• Date of birth (required for 21+ age verification);
• Philippine mobile number and, where applicable, email address;
• Residential address in the Philippines;
• Government-issued identification documents (e.g., Philippine National ID, passport, driver's license, SSS/GSIS card) submitted for KYC verification;
• Payment information, including GCash or PayMaya account references and bank account details for deposit and withdrawal processing;
• Any communications you send to 27jl support.

2.2 Information Collected Automatically

When you use the 27jl Platform, certain technical information is collected automatically:

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Pages visited, features accessed, and session duration;
• Game activity logs, betting history, and wagering records;
• Login timestamps and session identifiers;
• Cookies and similar tracking technologies (see Section 6).

2.3 Information From Third Parties

27jl may receive personal information from third-party service providers including payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), identity verification services, and fraud prevention providers. This information is used solely to verify your identity, process transactions, and fulfil our regulatory obligations.

3. How We Use Your Information

4. Legal Basis for Processing

27jl processes your personal information on the following legal bases as recognised under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to fulfil our obligations to you as a registered user, including account management, payment processing, and provision of gaming services.
• Legal obligation: Processing required to comply with applicable Philippine law, including AML regulations, age verification requirements, PAGCOR licensing conditions, and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

5. Data Sharing & Disclosure

27jl does not sell your personal information to third parties. We may share your personal information with the following categories of recipients only as necessary:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other Philippine payment service providers, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to authenticate your identity and confirm eligibility.
• Game content providers: Licensed game studios and live dealer platform operators whose games are accessible through 27jl, to the extent required for game functionality and fairness auditing.
• Regulatory authorities: PAGCOR and other competent Philippine government agencies, where disclosure is required by law or lawful demand.
• Fraud and AML compliance: Financial intelligence units and fraud prevention networks, where required by applicable law.

All third-party service providers engaged by 27jl are contractually obligated to handle your personal information in accordance with applicable data protection standards and to use it solely for the purpose for which it was shared.

6. Cookies & Tracking Technologies

27jl uses cookies and similar technologies to operate the Platform, enhance user experience, and gather analytics. The categories of cookies used are:

• Essential cookies: Required for the Platform to function, including session management, login state, and security. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand how users interact with the Platform — page visits, feature usage, and session patterns. Data is aggregated and anonymised.
• Preference cookies: Store your Platform settings such as language, display preferences, and notification choices.
• Marketing cookies: Used only with your consent to personalise promotional content. You may opt out via your account settings.

You may manage non-essential cookies through your browser settings or 27jl account preferences. Disabling essential cookies will impair your ability to use the Platform.

7. Data Retention

27jl retains your personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account records and KYC documents: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction and betting records: Retained for a minimum of five (5) years from the date of the relevant transaction.
• Support communications: Retained for a minimum of two (2) years from the date of resolution.
• Marketing consent records: Retained until you withdraw consent and for a reasonable period thereafter as evidence of prior consent.

Where retention beyond these periods is required by law or regulatory obligation, 27jl will retain the relevant data accordingly. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Data Security

27jl implements appropriate technical and organisational measures to protect your personal information against unauthorised access, accidental loss, destruction, or disclosure. Security measures include:

• SSL/TLS encryption for all data transmitted between your device and 27jl servers;
• Encrypted storage of sensitive personal data and payment information;
• Access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of platform infrastructure;
• Two-factor authentication for account access and sensitive account changes.

Notwithstanding these measures, no internet transmission or electronic storage system is entirely secure. 27jl cannot guarantee absolute security but is committed to maintaining industry-standard protections. In the event of a data breach that poses a risk to your rights, 27jl will notify affected users and relevant authorities in accordance with applicable law.

9. Your Rights Under Philippine Data Privacy Law

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by 27jl:

• Right to be informed: To know what personal information 27jl holds about you and how it is being processed.
• Right of access: To obtain a copy of your personal information held by 27jl.
• Right to rectification: To have inaccurate or incomplete personal information corrected.
• Right to erasure: To request deletion of your personal information where retention is no longer legally required or justified.
• Right to object: To object to certain processing activities, including direct marketing.
• Right to data portability: To receive your personal information in a structured, machine-readable format where technically feasible.
• Right to withdraw consent: To withdraw previously given consent to processing at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: To file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your rights have been violated.

To exercise any of the above rights, contact 27jl at the email address provided in Section 13. We will respond to verified requests within thirty (30) days in accordance with applicable law.

10. Children's Privacy

The 27jl Platform is strictly for adults. In compliance with Philippine law governing casino-style online gambling, users must be at least 21 years of age to register and use the Platform. 27jl does not knowingly collect personal information from individuals under 21 years of age. If 27jl becomes aware that personal information has been collected from an underage individual, that account will be immediately suspended, any associated winnings forfeited, and the data deleted in accordance with our retention policies. If you believe a minor has registered on the Platform, please contact us immediately.

11. International Data Transfers

Some of 27jl's service providers and technology partners may be located outside the Philippines. Where your personal information is transferred to a recipient in another country, 27jl ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law. Such transfers are conducted in compliance with the Data Privacy Act of 2012 and applicable NPC guidelines on cross-border data transfers.

12. Changes to This Privacy Policy

27jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. Material changes will be communicated to registered users via the mobile number or email address on file, or by prominent notice on the Platform. The updated Policy will be effective from the date indicated at the top of the document. Your continued use of the 27jl Platform following notification of changes constitutes acceptance of the revised Policy.

13. Contact & Data Privacy Officer

For questions, concerns, or requests relating to this Privacy Policy or your personal information, please contact 27jl's designated Data Privacy Officer:

Email: [email protected]

We aim to acknowledge all privacy-related inquiries within five (5) business days and to resolve them within thirty (30) days. For unresolved concerns, you may also file a complaint with the National Privacy Commission of the Philippines.