JJWin Privacy Policy

1 Introduction

JJWin ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of every player who registers and uses the JJWin online gaming platform at jjwin.today (the "Site") and its associated mobile application (the "App"). This Privacy Policy describes how JJWin collects, uses, stores, shares, and protects your personal information in connection with the services we provide.

This Privacy Policy applies to all JJWin players, visitors, and any individual whose personal data is processed by JJWin in the course of operating the platform. It should be read together with JJWin's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

By registering a JJWin account, accessing the Site, or using the App, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with any part of this Privacy Policy, you should not use the JJWin platform.

2 Data We Collect

JJWin collects personal data from you directly when you register, use the platform, or contact us, as well as automatically through your use of the Site and App. The categories of personal data we collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 21+ age requirement).
• Email address and mobile phone number.
• Username and encrypted password.
• Residential address, city, and province (e.g., Manila, Cebu, Davao, Quezon City, Makati).

2.2 Verification (KYC) Data

• Copies of government-issued identification documents such as a Philippine passport, SSS ID, PhilHealth ID, UMID, or driver's license.
• Proof of address documents such as utility bills or bank statements.
• Selfie or facial image submitted for identity verification purposes.
• Source-of-funds documentation where required for large transactions or regulatory compliance.

2.3 Financial and Transaction Data

• Payment method details including GCash account number, PayMaya account number, BPI, BDO, or Metrobank account details (stored in tokenized or masked form only).
• Deposit and withdrawal transaction history, including amounts in Philippine Peso (₱), timestamps, and payment method used.
• Bonus and promotional credit history.

2.4 Gameplay and Activity Data

• Games played, bet amounts, win/loss records, and session durations.
• Responsible gaming settings, including deposit limits, session limits, and self-exclusion status.
• Customer support interactions, including chat transcripts and email correspondence.

2.5 Technical and Device Data

• IP address and approximate geolocation data.
• Device type, operating system, browser type and version.
• Cookies, session tokens, and similar tracking technologies (see Section 6).
• Log data including access times, pages visited, and referring URLs.

3 How We Use Your Data

JJWin uses the personal data we collect for the following purposes:

JJWin will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by applicable law.

4 Legal Basis for Processing

JJWin processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing is necessary to perform the contract between you and JJWin — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and reporting obligations to relevant Philippine authorities.
• Legitimate interests: Processing is necessary for JJWin's legitimate interests in operating a secure, fair, and commercially viable gaming platform, including fraud prevention, platform security, and responsible gaming enforcement, provided such interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending you marketing communications or using non-essential cookies — JJWin relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Sharing Your Data

JJWin does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals. These providers receive only the data necessary to complete the relevant transaction.
• Identity verification providers: Third-party KYC and AML compliance service providers who assist JJWin in verifying player identities and screening for sanctions and politically exposed persons (PEPs).
• Game providers: Licensed game software providers whose games are available on the JJWin platform. These providers may receive anonymized or pseudonymized gameplay data for the purpose of game operation and integrity monitoring.
• Regulatory and law enforcement authorities: JJWin may disclose personal data to the relevant Philippine government agencies, including the National Privacy Commission, law enforcement bodies, and gaming regulators, where required by law or in response to a valid legal request.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on JJWin's behalf under strict data processing agreements.
• Professional advisors: Legal, accounting, and auditing firms engaged by JJWin, subject to professional confidentiality obligations.

6 Cookies & Tracking Technologies

JJWin uses cookies and similar tracking technologies on the Site and App to enhance your experience, maintain session security, and analyze platform usage. The types of cookies we use include:

• Essential cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cookies cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming configurations, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the JJWin platform, helping us identify areas for improvement. This data does not identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the JJWin platform. JJWin does not use third-party advertising cookies or cross-site tracking technologies.

7 Data Retention

JJWin retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• KYC verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Gameplay and activity data: Retained for the duration of your account and for up to two (2) years following account closure for responsible gaming monitoring and dispute resolution purposes.
• Customer support records: Retained for up to three (3) years from the date of the interaction.
• Technical and device data: Retained for up to twelve (12) months from the date of collection, unless required for longer retention for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with JJWin's data disposal procedures. Where data is anonymized rather than deleted, the resulting anonymized data may be retained indefinitely for analytical purposes.

8 Data Security

JJWin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and JJWin's servers.
• Encryption of sensitive data at rest, including payment method details and government ID information.
• Role-based access controls ensuring that JJWin staff can only access personal data that is necessary for their specific job function.
• Regular security audits, vulnerability assessments, and penetration testing of the JJWin platform.
• Multi-factor authentication options for player accounts and mandatory multi-factor authentication for all JJWin administrative systems.
• Automated monitoring systems for detecting and alerting on suspicious access patterns and potential security incidents.
• Staff training on data protection obligations and security best practices.

While JJWin takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying JJWin immediately if you suspect any unauthorized access to your account.

9 Your Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by JJWin:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed, which is the primary purpose of this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data JJWin holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data JJWin holds about you. You may update certain account details directly through your JJWin account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to JJWin's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to JJWin's overriding legitimate grounds.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to JJWin in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that JJWin has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact JJWin's Data Protection Officer using the contact details provided in Section 12. JJWin will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case you will be notified of the extension and the reasons for it.

10 Children's Privacy

The JJWin platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. JJWin does not knowingly collect personal data from individuals under the age of 21.

If JJWin becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. All funds associated with an underage account will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe that your child has registered a JJWin account or provided personal data to JJWin, please contact us immediately using the details in Section 12 so that we can take appropriate action.

11 Policy Updates

JJWin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. The date of the most recent revision will always be displayed at the top of this page.

Where changes to this Privacy Policy are material — meaning they significantly affect your rights or how your personal data is processed — JJWin will notify registered players via the platform, the App, or the email address associated with your account, at least fourteen (14) days before the changes take effect.

Your continued use of the JJWin platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Privacy Policy, you should cease using the platform and may request account closure in accordance with the Terms and Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how JJWin is protecting your personal data.

12 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way JJWin processes your personal data, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly through the JJWin platform and mobile App. This is the fastest way to reach our support team.
• Email: [email protected] — please mark your message "Privacy Request" or "Data Rights Request" in the subject line for faster routing.

JJWin aims to acknowledge all privacy-related inquiries within 48 hours and to resolve them within 30 days. For formal data rights requests, please include your full name, registered email address, and a description of your request to help us process it efficiently.

For complaints that have not been resolved to your satisfaction, you may contact the National Privacy Commission of the Philippines. Contact details for the NPC are available on their official government website.