355jl Privacy Policy

1. Introduction

This Privacy Policy ("Policy") is published by 355jl ("we", "us", "our", "the Platform") and governs the collection, processing, storage, sharing, and deletion of personal data belonging to all registered Players and website visitors who interact with the 355jl platform at 355jl.vip.

355jl is committed to protecting the privacy and personal data of its users in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission ("NPC"). This Policy should be read alongside our Terms & Conditions, which are available at 355jl.vip/terms-conditions.

By registering an Account on the 355jl platform, depositing funds, or otherwise using any feature of 355jl.vip, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent to any aspect of this Policy, you should not use the 355jl platform.

2. Data Controller

355jl acts as the Data Controller with respect to the personal data collected from Players and visitors of 355jl.vip. As Data Controller, 355jl determines the purposes and means of personal data processing, bears responsibility for compliance with applicable data protection legislation, and is registered with the National Privacy Commission as required under Philippine law.

For all data protection inquiries, requests to exercise data subject rights, or privacy-related concerns, Players may contact the 355jl Data Protection Officer (DPO) through the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

355jl collects personal data through several channels — directly from Players at registration and during account operation, automatically through platform interactions, and from third-party payment and verification providers. The categories of personal data collected include:

3.1 Registration and Identity Data

• Full legal name (as it appears on government-issued ID)
• Date of birth (for age verification — must confirm 21+ status)
• Philippine mobile number (used as primary account identifier and 2FA channel)
• Email address (where provided during registration)
• Username and password (password stored as a salted cryptographic hash — never in plain text)
• Government-issued photo ID type and document reference number (submitted for KYC verification)

3.2 Payment and Transaction Data

• GCash account number or registered mobile number associated with GCash
• Maya (formerly PayMaya) account identifier
• Bank account name, number, and institution (BPI, BDO, Metrobank) for bank transfer transactions
• USDT wallet address (TRC-20 network) for cryptocurrency transactions
• Transaction amounts, dates, types (deposit/withdrawal), and associated balance states
• Source of funds declarations where required by AML compliance procedures

3.3 Technical and Device Data

• IP address at the time of each login and session
• Device type, operating system, and browser version
• Session timestamps, duration, and login history
• Approximate geolocation derived from IP address (not GPS-level precision)
• Cookie and session token identifiers (see Section 7)

3.4 Gaming Activity Data

• Game titles played, bet amounts, game outcomes, and session duration per game
• Sports bets placed including event, selection, odds, and stake
• Bonus and promotion usage, wagering progress, and loyalty tier status
• Responsible gaming tool activations (deposit limits, self-exclusion events, cool-off periods)

4. How 355jl Uses Your Personal Data

355jl processes personal data for the following specific purposes. For each purpose, we identify the category of data used and the legal basis for processing in Section 5.

5. Legal Basis for Processing

Under Republic Act 10173 and its Implementing Rules, 355jl relies on the following legal bases for personal data processing:

1. Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and game provision.
2. Legal obligation: Processing required to comply with applicable Philippine laws including AML regulations, PAGCOR-aligned gaming compliance requirements, and NPC obligations.
3. Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where these interests are not overridden by your privacy rights.
4. Consent: Processing for direct marketing communications and non-essential cookies, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Disclosure and Sharing of Personal Data

355jl does not sell or rent your personal data. We may share personal data with third parties only in the following circumstances and under strict data processing agreements that require those parties to handle your data in accordance with this Policy and applicable law:

• Payment processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and USDT gateway operators receive only the minimum payment data necessary to process your specific transaction.
• KYC and identity verification providers: Third-party verification services that assist with document authentication and age verification as required for regulatory compliance.
• Game software providers: Game vendors may receive anonymized session data for game performance monitoring purposes. They do not receive your identity or payment data.
• Regulatory authorities: PAGCOR, the NPC, Anti-Money Laundering Council (AMLC), and other competent Philippine authorities may receive data as required by law, lawful order, or official request.
• Fraud prevention networks: Anonymized risk signals may be shared with recognized anti-fraud networks to detect and prevent gaming fraud and financial crime.
• Professional advisors: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations.

7. Cookies and Tracking Technologies

355jl uses cookies and similar technologies on the 355jl.vip platform to maintain session state, enhance security, and improve the player experience. The types of cookies used are as follows:

• Strictly necessary cookies: Required for the platform to function — including authentication session tokens, security CSRF tokens, and load balancing cookies. These cannot be disabled without impairing platform functionality. No consent is required for these cookies.
• Functional cookies: Remember your preferences such as language settings, saved payment methods display, and interface customizations. May be disabled without affecting core functionality.
• Analytics cookies: Collect aggregated, anonymized data about how Players navigate the platform, which game categories are most visited, and where technical errors occur. This data helps us improve the platform. Requires your consent.

355jl does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising. You may manage cookie preferences through your browser settings or via the Cookie Preferences center accessible in the platform footer.

8. Data Retention

355jl retains personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable Philippine legal and regulatory obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of account activity and for five (5) years following account closure, in accordance with AML record-keeping obligations under Republic Act 9160 as amended.
• Transaction and financial records: Retained for seven (7) years from the date of each transaction in compliance with Philippine AML legislation and gaming regulatory requirements.
• KYC documents: Retained for five (5) years following account closure or the last transaction, whichever is later. Originals are stored in encrypted form; working copies are deleted once verification is complete.
• Gaming activity logs: Retained for three (3) years for dispute resolution purposes and responsible gaming monitoring.
• Support communications: Retained for two (2) years to enable resolution of any follow-up queries or regulatory inquiries.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year to maintain an audit trail of consent events.
• Technical logs and IP records: Retained for ninety (90) days, except where retained longer in connection with a security investigation or legal proceeding.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

9. Data Security Measures

355jl implements a layered security architecture designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. Key security measures include:

• AES-256 encryption for all personal data stored at rest in 355jl systems
• TLS 1.3 encryption for all data transmitted between Players' devices and the 355jl platform
• Salted bcrypt hashing for all account passwords — passwords are never stored or transmitted in plain text
• Multi-factor authentication requirements for internal administrative access to player data
• Role-based access controls ensuring staff access only the data necessary for their specific function
• Continuous automated security monitoring with real-time alerting on anomalous access patterns
• Regular third-party penetration testing of the platform infrastructure
• Segregated storage of financial data, identity data, and gaming activity logs

10. Exercising Your Data Subject Rights

To exercise any of the rights described in the feature section above — including access, rectification, erasure, objection, restriction of processing, or data portability — Players should submit a written request to 355jl via:

• Live chat support (available 24/7 via your Account dashboard) — identity will be verified before any request is processed
• Email to the Data Protection Officer at the address provided in Section 15 of this Policy

355jl will acknowledge receipt of all data subject requests within three (3) business days and will complete the requested action or provide a reasoned response within fifteen (15) business days. Complex requests involving large data sets or multi-party coordination may require up to thirty (30) business days, in which case you will be informed of the extension and its reason.

355jl will not charge a fee for exercising data subject rights unless a request is manifestly unfounded, excessive, or repetitive in nature, in which case a reasonable administrative fee may be applied or the request may be declined with a written explanation.

11. Children's Privacy

The 355jl platform is strictly intended for persons aged 21 years and above. 355jl does not knowingly collect personal data from individuals under the age of 21. Age is verified through the KYC process before withdrawal processing, and registration confirmation requires affirmative declaration of age eligibility.

If 355jl becomes aware that personal data has been collected from an individual under the age of 21, that account will be immediately suspended, any balance will be held pending investigation, and all associated personal data will be deleted to the extent permitted by law once the investigation is concluded. Parents or guardians who believe an account has been registered by a minor should contact 355jl support immediately via live chat or email.

12. Cross-Border Data Transfers

Certain operational functions of the 355jl platform — including game software provision, fraud analytics, and cloud infrastructure — may involve the processing of personal data by service providers located outside the Philippines. In all such cases, 355jl ensures that adequate data protection safeguards are in place through contractual mechanisms such as Data Processing Agreements that incorporate standard contractual clauses approved by the NPC.

Data transferred outside the Philippines is protected to a standard that is at minimum equivalent to the requirements of the Philippine Data Privacy Act of 2012. 355jl does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing additional compensating controls.

13. Automated Decision-Making

355jl uses automated systems for certain operational decisions, including: fraud risk scoring during deposit and withdrawal processing, responsible gaming trigger alerts based on gaming pattern analysis, and bonus eligibility verification. Where an automated decision produces a significant effect on a Player — such as account suspension for suspected fraud — 355jl will provide an opportunity for human review upon request.

Players who believe they have been adversely affected by an automated decision may request a human review by contacting 355jl support via live chat or email. 355jl will review the automated decision and provide a response within five (5) business days.

14. Changes to This Privacy Policy

355jl reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Material changes to this Policy will be communicated to registered Players via the contact details on file or through a prominent notice on the 355jl platform at least seven (7) days before the revised Policy takes effect, unless an earlier effective date is required by law.

The effective date displayed at the top of this document reflects the date on which the current version of this Policy entered into force. Players are encouraged to review this Policy periodically. Continued use of the 355jl platform following the effective date of any revised Policy constitutes acceptance of the revised terms.

15. Contact — Data Protection Officer

For all data privacy inquiries, requests to exercise data subject rights, privacy complaints, or questions about this Privacy Policy, please contact the 355jl Data Protection Officer through the following channels:

355jl takes all data privacy requests seriously and will handle them with confidentiality. Identity verification will be required before any personal data is disclosed or modified in response to a data subject request.