d63jl Casino — Privacy Policy

d63jl Casino ("d63jl," "we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who use the d63jl platform at d63jl.app. This Privacy Policy applies to all personal data collected by d63jl in connection with the registration and use of our online casino, sports betting, live dealer, lottery, bingo, and related services.

This Privacy Policy is issued in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable, this policy also reflects internationally recognised privacy principles consistent with good governance in data management.

This Privacy Policy should be read together with d63jl's Terms & Conditions, which are available at /terms-conditions. Capitalised terms used but not defined herein have the meanings given to them in the Terms & Conditions.

For the purposes of the Data Privacy Act of 2012, d63jl Casino is the personal information controller (PIC) with respect to the personal data of players and platform visitors. As PIC, d63jl determines the purposes for which and the means by which personal data is processed.

d63jl has designated a Data Protection Officer (DPO) responsible for overseeing data protection strategy and ensuring compliance with applicable data privacy laws. The DPO's contact details are provided in Section 15 of this Privacy Policy. Players are encouraged to contact the DPO directly for any privacy-related queries, complaints, or requests to exercise data rights.

d63jl collects the following categories of personal data from players and platform visitors:

d63jl does not intentionally collect sensitive personal information as defined under the Data Privacy Act (e.g., racial or ethnic origin, political opinions, religious beliefs, health data) unless it is specifically required for regulatory or responsible gaming compliance purposes and you have provided explicit consent.

d63jl collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC, contacting support, or updating your profile settings.
• Automated technologies: Technical and usage data collected automatically when you access the d63jl platform, including through cookies, web beacons, log files, and similar tracking technologies (see Section 8).
• Payment processors: Transaction-related data received from payment providers such as GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment partners in the course of processing deposits and withdrawals.
• Third-party verification services: Identity and fraud-check data received from KYC verification service providers engaged by d63jl to assist with identity authentication and anti-money laundering screening.
• Game providers: Gaming activity data (bet records, outcomes, session duration) provided by d63jl's licensed game providers, including Ezugi and JILI, in connection with the games you play on the platform.

d63jl processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The table below summarises the primary purposes for which we process personal data and the applicable legal basis for each.

d63jl does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment service providers: GCash (Mynt), Maya (Voyager Innovations), GrabPay, BPI, BDO, Metrobank, InstaPay, and other providers, for the purpose of processing deposits and withdrawals. These providers receive only the minimum data necessary to execute the transaction.
• Game software providers: Ezugi, JILI, and other licensed game providers integrated into the d63jl platform. These providers receive gaming session data necessary to deliver game functionality and verify outcomes.
• KYC and fraud prevention services: Third-party identity verification and AML screening vendors used to verify player identities and detect fraudulent activity.
• Regulatory and law enforcement authorities: d63jl may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies where required by law, court order, or legitimate regulatory request.
• IT infrastructure providers: Cloud hosting, security, and data centre providers that process personal data on d63jl's behalf under strict data processing agreements that prohibit independent use of the data.
• Professional advisers: Legal counsel, auditors, and compliance consultants, where necessary, under professional confidentiality obligations.

All third-party service providers acting as personal information processors on d63jl's behalf are contractually required to: (a) process personal data only on d63jl's documented instructions; (b) implement appropriate technical and organisational security measures; and (c) not engage sub-processors without d63jl's prior written consent.

Some of d63jl's service providers — including game software providers and cloud infrastructure partners — may process personal data outside the Philippines. Where personal data is transferred to countries that the National Privacy Commission has not determined to offer an adequate level of data protection, d63jl ensures that appropriate safeguards are in place, which may include: (a) standard contractual clauses approved by the NPC or equivalent; (b) binding corporate rules; or (c) other lawful transfer mechanisms recognised under the Data Privacy Act.

d63jl will not transfer your personal data to a country outside the Philippines without ensuring a lawful basis for that transfer and confirming that adequate protections apply to your data in the recipient country. Players who wish to obtain more information about the specific safeguards applicable to any international transfer of their data may contact d63jl's Data Protection Officer (see Section 15).

d63jl uses cookies and similar tracking technologies on its platform for the following purposes:

These cookies are strictly necessary for the d63jl platform to function. They enable core features such as account login session management, load balancing, and security verification. These cookies cannot be disabled without impairing the platform's operation. No consent is required for essential cookies under applicable Philippine law.

d63jl uses analytics tools to understand how players interact with the platform — which game categories are most visited, how long sessions last, and where players encounter difficulties. This data is used in aggregated, anonymised form to improve platform performance. These cookies require your consent and can be controlled through your browser settings.

Functional cookies allow d63jl to remember your preferences — such as language settings, preferred lobby view, and responsible gaming reminder frequency. Disabling these cookies will not prevent you from using the platform but may reduce your experience quality.

You may control cookie placement by adjusting the settings in your browser. Most modern browsers (Chrome, Safari, Firefox, Samsung Internet) provide options to block or delete cookies. Please note that blocking all cookies may affect the functionality of the d63jl platform, including the ability to stay logged in during a session.

d63jl retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, in accordance with PAGCOR licensing requirements and anti-money laundering record-keeping obligations under Philippine law.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, as required by RA 9160 (Anti-Money Laundering Act) and related AMLA implementing rules.
• KYC documents: Retained for the period required by applicable AML law, typically a minimum of five (5) years from the end of the business relationship.
• Gaming activity data: Retained for a period of three (3) years following the date of the relevant game session, except where a longer retention period is required for dispute resolution or regulatory investigation purposes.
• Support communications: Retained for two (2) years from the date of the communication, or longer where the communication relates to an unresolved dispute.
• Marketing data (consent records): Retained for the duration of the marketing relationship and for three (3) years following opt-out, as evidence of prior consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents re-identification. Where anonymisation is technically infeasible, data will be securely destroyed.

d63jl implements comprehensive technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. Key security measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and the d63jl platform is encrypted using industry-standard TLS encryption, preventing interception by third parties.
• Encryption at rest: Sensitive personal data stored on d63jl servers is encrypted at rest using AES-256 encryption.
• Password security: Player passwords are stored as salted cryptographic hashes using industry-standard algorithms. d63jl staff cannot retrieve or view your plain-text password under any circumstances.
• Access controls: Access to personal data is restricted to d63jl employees and contractors who have a legitimate business need to access it. Access privileges are subject to regular review and revocation upon role change or employment termination.
• Two-factor authentication: d63jl offers 2FA for player accounts using SMS-based OTPs. Players are strongly encouraged to enable this feature.
• Security monitoring: d63jl employs real-time security monitoring, intrusion detection systems, and regular vulnerability assessments to identify and address potential threats to platform security.
• Data breach procedures: d63jl maintains documented data breach response procedures. In the event of a personal data breach that is likely to result in risk to the rights and freedoms of players, d63jl will notify the National Privacy Commission and affected players in accordance with NPC Circular No. 16-03 and applicable data breach notification rules.

You have the right to obtain confirmation from d63jl as to whether your personal data is being processed, and if so, to receive a copy of that personal data and information about how it is being processed. d63jl will provide this information within fifteen (15) business days of receiving a valid access request.

You have the right to request the correction of any inaccurate or incomplete personal data that d63jl holds about you. Rectification requests will be acted upon within a reasonable time, and d63jl will notify relevant third parties (such as payment processors) of corrections where required.

You have the right to request the deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you have withdrawn consent and there is no other legal basis for processing; or (c) the data has been unlawfully processed. Please note that this right is subject to legal retention obligations (see Section 9) — d63jl cannot delete data that we are legally required to retain.

You have the right to object to the processing of your personal data based on d63jl's legitimate interests, including direct marketing. Where you object to direct marketing, d63jl will cease that processing immediately.

You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another data controller, where technically feasible.

If you believe that d63jl has handled your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC may be contacted through its official website and complaint-handling procedures. We encourage players to contact d63jl's DPO first so we may attempt to resolve the matter directly before escalation to the NPC.

In compliance with Philippine gaming regulations, d63jl requires all players to confirm that they are at least 21 years of age at registration. Identity verification (KYC) is used to enforce this age restriction. If d63jl discovers that personal data has been inadvertently collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be closed. If you are a parent or guardian and believe that your child has provided personal data to d63jl, please contact us immediately at [email protected].

d63jl may send you promotional communications about new games, bonuses, tournaments, and platform updates, including via SMS to your registered Philippine mobile number and email, where you have provided your consent to receive such communications.

Marketing consent is obtained separately from the acceptance of these Terms and this Privacy Policy. You may withdraw your marketing consent at any time by: (a) updating your notification preferences in your d63jl account settings; or (b) using the unsubscribe mechanism included in any marketing email or SMS we send; or (c) contacting d63jl support directly.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal, and will not prevent d63jl from sending you service-related communications that are necessary for the administration of your account (such as transaction confirmations, security alerts, and account notices).

d63jl reserves the right to update this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidance, our data processing practices, or the services we offer. The effective date at the top of this document will be updated each time a material change is made.

Where changes are material — meaning they significantly affect how your personal data is used or your rights in relation to it — d63jl will notify you via email to your registered address or via a prominent notice on the d63jl platform at least seven (7) days before the changes take effect. For non-material changes, updated Terms will be posted without individual notification.

Your continued use of the d63jl platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. We recommend reviewing this Privacy Policy periodically to stay informed about how d63jl protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or d63jl's processing of your personal data — including requests to exercise your data rights under RA 10173 — please contact us through any of the following channels:

All formal data rights requests must include: (a) your full name as registered on your d63jl account; (b) your registered Philippine mobile number; (c) a clear description of your request and the right you wish to exercise; and (d) a copy of a valid government-issued ID for identity verification purposes. d63jl will not process data rights requests that cannot be linked to a verified account identity.