97jl Privacy Policy

This Privacy Policy applies to all personal data collected and processed by 97jl in connection with the operation of the 97jl online gaming platform available at 97jl.app, including all associated pages, features, games, and services (collectively, the "Platform").

97jl is committed to protecting the privacy and personal data of its Players, visitors, and any other individuals whose data we process. This Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have in relation to your personal data.

This Privacy Policy should be read together with the 97jl Terms and Conditions, which are available at 97jl.app/terms-conditions. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

97jl collects the following categories of personal data from Players and platform visitors. Collection is limited to data that is reasonably necessary for one or more of the purposes described in Section 4 of this Policy.

97jl does not collect sensitive personal information as defined under RA 10173 (including race, ethnicity, health, sexual orientation, or political beliefs) unless specifically required to fulfill a legal obligation, in which case you will be notified and separate consent obtained.

97jl collects personal data through the following channels and mechanisms:

• §
  Direct submission: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting support, or responding to surveys and promotions.
• §
  Automated collection: Technical and gameplay data collected automatically as you access and use the Platform, including through cookies, web beacons, and server log files. See Section 8 for full details.
• §
  Third-party payment processors: Transaction confirmation data shared with 97jl by GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and other payment partners when you complete a deposit or withdrawal.
• §
  Identity verification services: Data returned by third-party KYC (Know Your Customer) and identity verification providers used to confirm the authenticity of documents submitted during account verification.
• §
  Regulatory sources: In certain circumstances, data from public registries or regulatory bodies where required to fulfill anti-money laundering (AML) or fraud prevention obligations.

97jl processes personal data only where there is a lawful basis for doing so under the Data Privacy Act of 2012. The following table maps processing purposes to their applicable legal basis:

97jl does not sell, rent, or trade your personal data. We share data only in the following limited circumstances:

• §
  Payment processors: GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and other payment partners receive the minimum data necessary to process deposit and withdrawal transactions.
• §
  Game providers: Third-party game studios and live casino operators (e.g., PG Soft, JILI, Pragmatic Play, Evolution Gaming) may receive anonymized session and game data necessary to provide their licensed content on the 97jl platform.
• §
  Identity verification partners: KYC service providers who process identity documents and biometric verification data solely for account verification purposes, under strict data processing agreements.
• §
  Regulatory authorities: PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities where disclosure is required by law, court order, or regulatory mandate.
• §
  Technical infrastructure providers: Cloud hosting, CDN, and cybersecurity service providers who maintain 97jl's platform infrastructure, all of whom are bound by contractual data protection obligations.

All third parties with whom 97jl shares personal data are required to process that data only for the specified purpose and in accordance with applicable data protection law. 97jl maintains data processing agreements with all relevant third-party processors.

97jl retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

• §
  Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required under AML regulations.
• §
  Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as mandated by Philippine financial reporting and AML requirements.
• §
  Gameplay and session data: Retained for up to three (3) years from the date of each session for operational, auditing, and regulatory purposes.
• §
  Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution.
• §
  Marketing preference records: Retained until you withdraw consent or request deletion, plus a reasonable period to confirm the withdrawal has been actioned.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized. Anonymized data, which can no longer be linked to an individual, may be retained indefinitely for aggregate analytics purposes.

97jl implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• ✓256-bit SSL/TLS encryption for all data transmitted between your device and 97jl's servers.
• ✓Bcrypt hashing of passwords — your password is never stored in plaintext form.
• ✓Role-based access controls limiting internal access to personal data to authorized personnel only.
• ✓Multi-factor authentication requirements for internal staff accessing data processing systems.
• ✓Regular security audits and penetration testing by qualified cybersecurity professionals.
• ✓Data minimization practices — only the minimum necessary data is collected and retained.
• ✓Incident response and breach notification procedures in place, in compliance with NPC requirements.

97jl uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• §
  Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled without impairing Platform functionality.
• §
  Functional Cookies: Remember your preferences such as language settings, game display options, and notification preferences to personalize your experience.
• §
  Analytics Cookies: Collect anonymized data about how Players interact with the Platform — pages visited, session duration, and navigation patterns. This data helps 97jl improve the user experience.
• §
  Security Cookies: Used for device fingerprinting and login activity monitoring to detect unusual access patterns and protect your account against unauthorized access.

You may control cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. Session cookies are automatically deleted when you close your browser; persistent cookies remain until they expire or you delete them.

97jl does not use third-party advertising cookies or permit external advertising networks to place tracking cookies on the Platform.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data processed by 97jl. These rights may be exercised by contacting 97jl's Data Protection Officer (DPO) as described in Section 13.

To exercise any of the above rights, submit a written request to 97jl's Data Protection Officer via the contact details in Section 13. 97jl will respond to verified requests within thirty (30) calendar days. Identity verification will be required before acting on any data subject request to prevent unauthorized disclosure.

97jl implements mandatory age and identity verification for all accounts prior to permitting access to real-money gaming services. Account registration requests that cannot be verified as belonging to a person aged 21 or above will be declined.

If 97jl becomes aware that personal data has been inadvertently collected from a person under 21 years of age, that data will be immediately deleted and the associated account closed. Any balance associated with an underage account will be returned to the payment source.

If you are a parent or guardian and believe a minor in your care has created a 97jl account, please contact our support team immediately at [email protected] (email address — not a clickable link) or via live chat.

Some of 97jl's third-party service providers — including cloud infrastructure providers, game content licensors, and KYC service providers — may be located outside of the Philippines. Where personal data is transferred to a country outside the Philippines, 97jl ensures that:

• §Transfers are made only to recipients located in countries with an adequate level of data protection, or under appropriate contractual safeguards (including standard data protection clauses).
• §All third-party recipients of personal data are contractually bound to process it only for specified purposes and in a manner consistent with RA 10173 and this Privacy Policy.
• §Cross-border transfers are disclosed to the National Privacy Commission where required by applicable NPC regulations.

By using the 97jl Platform, you acknowledge that your personal data may be transferred to, stored, or processed in jurisdictions outside the Philippines. 97jl will take all steps reasonably necessary to ensure your data is treated securely in accordance with this Privacy Policy wherever it is processed.

97jl may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable legal requirements, or the features and functionality of the Platform. When material changes are made, 97jl will:

• ✓Update the "Last Updated" date at the top of this Privacy Policy.
• ✓Notify registered Players via email or an in-platform notification at least seven (7) days before the updated Policy takes effect.
• ✓Where required by law, obtain fresh consent for materially changed processing activities.

Your continued use of the Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you should cease using the Platform and contact 97jl to request account closure.

The current version of this Privacy Policy is always accessible at 97jl.app/privacy-policy.

97jl has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. To exercise your rights as a data subject, submit a privacy inquiry, or raise a complaint, you may contact the 97jl DPO through the following channels:

• ✓
  Support Email: [email protected] — Please include "Privacy Request" or "DPO Inquiry" in the subject line. Response time: within 30 days.
• ✓
  Live Chat: Available 24/7 through the 97jl Platform. For data subject requests, ask to be connected to the Privacy/DPO team.
• ✓
  Support Hours: 24 hours a day, 7 days a week, 365 days a year for general support queries. DPO-specific requests are handled on business days within the 30-day response window.