638jl Privacy Policy

638jl ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all players and visitors who use the 638jl online gaming platform at https://638jl.app. This Privacy Policy ("Policy") sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by 638jl.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines. It applies to all personal data collected through the 638jl website, mobile-optimized platform, customer support channels, and any other services we provide.

Please read this Policy carefully. By registering an account with 638jl or continuing to use the Platform, you confirm that you have read, understood, and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the 638jl Platform.

638jl acts as the Personal Information Controller ("PIC") in respect of the personal data collected through the Platform. As PIC, 638jl determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the DPA 2012 and all applicable Philippine privacy regulations.

638jl has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at any time using the contact details provided in Section 14 of this Policy.

638jl collects personal data that is necessary for the operation of the Platform, compliance with regulatory obligations, and the provision of a safe and personalized gaming experience. The categories of personal data we collect include:

We collect this data directly from you during registration and account use, automatically through your interaction with the Platform (via cookies and server logs), and from third-party identity verification and payment processing partners where necessary.

638jl does not collect sensitive personal information as defined under the DPA 2012 (such as health data, political opinions, or religious beliefs) unless specifically required by law or with your explicit consent.

638jl processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your 638jl player account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to the games, promotions, and features available on the 638jl Platform.
• Financial Transactions: To process deposits and withdrawals, verify payment methods, and maintain accurate financial records in compliance with Philippine accounting and AML regulations.
• Regulatory Compliance: To fulfill our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), the Data Privacy Act (RA 10173), and other applicable Philippine laws.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and apply deposit limits and other responsible gaming tools.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the Platform and its players.
• Customer Support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Platform Improvement: To analyze usage patterns, troubleshoot technical issues, and enhance the overall performance and user experience of the 638jl Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time.

638jl will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

Under the Data Privacy Act of 2012, 638jl processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 638jl — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate Interests: Processing is necessary for the legitimate interests of 638jl, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as marketing communications and the use of non-essential cookies — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

638jl does not sell, rent, or otherwise transfer your personal data to unaffiliated third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government agencies, where disclosure is required by law or regulatory directive.
• Payment Processors: Licensed Philippine payment service providers (including GCash, Maya, and partner banks such as BPI, BDO, Metrobank, UnionBank, Landbank, PNB, and Security Bank) for the purpose of processing your deposits and withdrawals.
• Identity Verification Partners: Third-party KYC and identity verification service providers engaged by 638jl to fulfill our regulatory obligations under PAGCOR licensing conditions.
• Game Providers: Licensed third-party game suppliers whose games are hosted on the 638jl Platform, to the extent necessary for game delivery and technical support.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged by 638jl under strict data processing agreements that prohibit unauthorized use of your data.
• Law Enforcement: Philippine law enforcement agencies, where disclosure is required by a valid court order, subpoena, or other lawful process.

All third-party service providers engaged by 638jl are required to process your personal data only in accordance with our instructions and applicable Philippine data protection law. We do not permit our service providers to use your data for their own purposes.

638jl retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and its implementing regulations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and fraud prevention purposes.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with NPC guidelines, unless further retention is required by law.

638jl implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• AES-256 encryption for all personal and financial data stored on our servers.
• TLS 1.3 protocol for all data transmitted between your device and the 638jl Platform.
• Bcrypt hashing for all account passwords — your password is never stored in readable form.
• Multi-factor authentication options for player accounts.
• Regular penetration testing and vulnerability assessments conducted by independent security firms.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• 24/7 automated intrusion detection and security monitoring systems.
• Regular staff training on data protection and information security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 638jl will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the DPA 2012 and NPC Circular No. 16-03.

While 638jl takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your 638jl login credentials and for notifying us immediately if you suspect unauthorized access to your account.

638jl uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cookies cannot be disabled without affecting Platform functionality.
• Performance Cookies: Used to collect anonymized data about how players use the Platform, such as pages visited and error messages encountered, to help us improve performance and user experience.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.

638jl does not use third-party advertising or tracking cookies. We do not allow third-party advertisers to place cookies on the Platform.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the 638jl Platform, including logging in to your account.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 638jl:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of Access: The right to request a copy of the personal data 638jl holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days of receipt. We may need to verify your identity before processing your request to protect the security of your account.

Please note that certain rights are subject to limitations under the DPA 2012 — for example, we may be unable to erase data that we are legally required to retain under PAGCOR regulations or the Anti-Money Laundering Act.

The 638jl Platform is strictly intended for individuals who are at least 21 years of age, as required by PAGCOR regulations governing online casino gaming in the Philippines. 638jl does not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account with 638jl, please contact us immediately at [email protected].

Parents and guardians are encouraged to use parental control tools and to monitor the online activities of minors in their care to prevent underage access to online gaming platforms.

The 638jl Platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies solely to the 638jl Platform and does not cover the privacy practices of any third-party websites or services. 638jl is not responsible for the content or privacy practices of third-party sites.

We encourage you to review the privacy policies of any third-party services you access through or in connection with the 638jl Platform before providing them with your personal data.

638jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via the email address associated with their account and/or through a prominent notice on the Platform, with a minimum of seven (7) days' notice before the changes take effect.

The date of the most recent revision is indicated at the top of this page. We encourage you to review this Policy periodically to stay informed about how 638jl protects your personal data. Your continued use of the Platform following the publication of any amended Policy constitutes your acceptance of the revised terms.

The current version of this Privacy Policy is always available at https://638jl.app/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 638jl, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Data Privacy Request – [Your Account Username]
• Live Chat: Available 24/7 through the 638jl Platform
• Response Time: We aim to acknowledge all data privacy requests within 72 hours and resolve them within 30 days

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC): privacy.gov.ph
• NPC Complaints: [email protected]

638jl is committed to working cooperatively with the NPC and to resolving all data privacy complaints in a fair, transparent, and timely manner.