578jl Privacy Policy – How We Protect Your Personal Data

1. Data Controller Identity

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations, the personal data controller in respect of the 578jl Platform is 578jl, the operator of the online gaming platform accessible at 578jl.one ("the Platform").

578jl operates within the regulatory framework for online gaming in the Philippines as administered by the Philippine Amusement and Gaming Corporation (PAGCOR). 578jl's Data Protection Officer ("DPO") can be contacted at the details provided in Section 14 of this Privacy Policy.

2. Personal Data We Collect

578jl collects personal data in the following categories, depending on the nature of your interaction with the Platform:

2.1 Registration and Account Data

• Full legal name (as it appears on government-issued identification)
• Date of birth (for age verification — you must be 21 or older)
• Residential address in the Philippines
• Email address
• Philippine mobile number
• Username and hashed account password
• Preferred language and communication preferences

2.2 KYC Verification Data

• Scanned or photographed copies of Philippine government-issued identification (UMID, PhilSys National ID, LTO Driver's License, DFA Passport, or PRC ID)
• Selfie or liveness-check image where required for remote identity verification
• Source of funds documentation where required for enhanced due diligence

2.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and methods (GCash account reference, PayMaya reference, bank account details, or other payment identifiers)
• Gaming transaction history — bets placed, games played, wins and losses, and bonus utilisation
• Account balance history

2.4 Technical and Usage Data

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser information
• Session timestamps and duration
• Pages and games accessed, navigation paths, and feature interactions
• Error logs and crash reports

2.5 Communications Data

• Records of customer support interactions via any channel (email, live chat, or similar)
• Responses to surveys or promotional communications where voluntarily provided

3. How We Collect Personal Data

578jl collects personal data through the following means:

• Directly from you: Information you provide during account registration, KYC submission, customer support contacts, and any voluntary survey or communication you initiate with 578jl.
• Automatically through the Platform: Technical and usage data collected via cookies, session tokens, server logs, and analytics tools as you interact with the 578jl website and games. See Section 10 (Cookies) for more detail.
• From payment service providers: Transaction confirmation data shared by GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors to confirm deposit and withdrawal completion.
• From identity verification services: Where 578jl uses a third-party KYC or age verification service provider, data verified through that process is shared with 578jl in accordance with the applicable service agreement.
• From regulatory authorities: In the context of ongoing PAGCOR compliance, certain data may be sourced from or cross-referenced with PAGCOR or other Philippine regulatory databases.

4. Purposes of Processing

578jl processes personal data for the following specific, legitimate purposes:

• Account creation and management: To create, maintain, and administer your 578jl player account, including authentication and access control.
• Age and identity verification: To comply with the legal requirement that all 578jl players are at least 21 years of age, and to verify that identity documentation is authentic and consistent with account information.
• Gaming operations: To provide, record, and audit all gaming transactions including bets, wins, losses, bonus awards, and game session data.
• Payment processing: To process deposits and withdrawals, reconcile financial transactions, and maintain accurate account balance records.
• Legal and regulatory compliance: To meet 578jl's obligations under PAGCOR's licensing requirements, the Anti-Money Laundering Act (AMLA) and its amendments, and the Data Privacy Act of 2012.
• Anti-fraud and security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, collusion, and unauthorised access.
• Responsible gaming: To monitor gaming patterns for indicators of problem gambling behaviour and to action player-initiated responsible gaming requests such as deposit limits and self-exclusion.
• Customer support: To respond to enquiries, resolve disputes, and maintain records of support interactions.
• Platform improvement: To analyse usage patterns in aggregate form to improve game selection, user experience, and platform performance.
• Marketing communications: To send promotional communications to players who have consented to receive them. Players may withdraw consent at any time via account settings.

5. Legal Bases for Processing

578jl processes personal data on the following legal bases as provided under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing necessary to perform the service agreement between 578jl and the registered player — including account management, gaming operations, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR's regulatory requirements, the AMLA, and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement analytics, and responsible gaming monitoring — where these interests are not overridden by player rights.
• Consent: Processing for optional marketing communications and any non-mandatory data collection, where 578jl has obtained explicit, informed consent that can be withdrawn at any time.

6. Data Sharing and Disclosure

578jl does not sell, rent, or trade personal data to any third party for commercial or marketing purposes. 578jl may share personal data with the following categories of recipients, only to the extent necessary for the specified purpose:

• Payment service providers: GCash (Mynt/Globe), Maya Philippines (PayMaya), BPI, BDO, Metrobank, and other processors — solely for the purpose of completing deposit and withdrawal transactions.
• Identity and KYC verification partners: Third-party providers engaged to assist with age verification, document authentication, and anti-fraud screening.
• Game software providers: Licensed game studios and live casino operators whose software is integrated into the 578jl Platform — to the extent required to deliver game functionality and resolve game-related disputes.
• Cloud and hosting infrastructure providers: Engaged to host and operate the 578jl Platform, under contractual obligations consistent with the Data Privacy Act.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine authorities — where required by law, court order, or regulatory direction.
• Professional advisors: Legal counsel, auditors, and compliance advisors, under professional confidentiality obligations.

7. International Data Transfers

Some 578jl service providers and game software partners may operate data processing infrastructure outside of the Philippines. Where personal data is transferred to servers or processors located in other jurisdictions, 578jl ensures that such transfers are subject to data transfer safeguards consistent with the Data Privacy Act of 2012, including appropriate contractual protections.

578jl does not transfer KYC documentation or financial transaction records outside of the Philippines regulatory framework without legal justification and appropriate safeguards in place.

8. Data Retention

578jl retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable law:

• Account registration and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR's record-keeping obligations and the AMLA.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Technical and usage logs: Retained for twelve (12) months, after which they are anonymised or deleted.
• Marketing consent records: Retained for the duration of consent and for three (3) years following withdrawal of consent, as evidence of compliance.

Following the expiry of applicable retention periods, personal data is securely deleted or permanently anonymised so that it can no longer be attributed to an identifiable individual.

9. Security Measures

578jl implements technical and organisational security measures proportionate to the sensitivity of the personal data held. Key security measures include:

• Transport Layer Security (TLS 1.3) encryption of all data in transit between player devices and 578jl servers.
• AES-256 encryption of sensitive data at rest, including KYC documents and payment identifiers.
• Cryptographic hashing of account passwords using industry-standard algorithms — passwords are stored in hashed form and cannot be recovered in plaintext.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Multi-factor authentication required for all internal system access by 578jl staff.
• Regular security audits, penetration testing, and vulnerability assessments.
• Anomalous login detection and automated alerting for suspicious account activity.
• Incident response procedures aligned with the NPC's requirements for personal data breach notification.

In the event of a personal data breach that is likely to result in harm to affected players, 578jl will notify the National Privacy Commission and affected individuals in accordance with the timeframes and requirements of the Data Privacy Act and its implementing rules.

10. Cookies and Similar Technologies

578jl uses cookies and similar browser storage technologies to operate and improve the Platform. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session authentication tokens, CSRF protection tokens, and cookies that remember your login state. No personally identifying information beyond your session token is stored in these cookies.

10.2 Analytics Cookies

578jl uses privacy-preserving analytics tools to understand how players interact with the Platform in aggregate — including which games are most played, where players navigate, and how long sessions last. Analytics data is anonymised before analysis and is not used to identify individual players.

10.3 Preference Cookies

These cookies remember your display preferences and settings to improve your experience on return visits — for example, your preferred language or lobby view settings.

You may control cookie settings through your browser's privacy settings. Disabling strictly necessary cookies will impair Platform functionality including login. Disabling analytics cookies will not affect your gaming experience.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its implementing rules and regulations, registered players and data subjects have the following rights in respect of personal data held by 578jl:

• Right to be Informed: The right to know what personal data 578jl holds about you, the purposes for which it is processed, and with whom it is shared.
• Right of Access: The right to request a copy of the personal data 578jl holds about you, in a structured, commonly used format.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through the account settings panel.
• Right to Erasure: The right to request deletion of your personal data, subject to 578jl's legal retention obligations and PAGCOR record-keeping requirements (which may override erasure requests for financial and KYC data).
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time via account settings.
• Right to Data Portability: The right to receive your personal data in a portable, machine-readable format for transfer to another controller.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 578jl has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact 578jl's Data Protection Officer at the contact details in Section 14. 578jl will respond to all data subject requests within fifteen (15) days of receipt, as required by the Data Privacy Act implementing rules.

12. Children and Minors

578jl is strictly an adult gaming platform. The 578jl Platform is not directed at, and is not intended to be used by, any person under the age of 21 years. 578jl does not knowingly collect personal data from individuals under 21 years of age.

578jl employs age verification measures at registration, including date-of-birth collection and KYC document verification, to prevent underage access. If 578jl becomes aware that personal data has been collected from an individual under 21 years of age, that data will be deleted immediately and the account will be permanently closed and reported to relevant PAGCOR authorities.

If you are a parent or guardian and believe that your child may have registered a 578jl account, please contact 578jl support immediately so that we can investigate and take appropriate action.

13. Policy Updates

578jl may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or 578jl's data processing practices. When material changes are made, 578jl will notify registered players via the email address on file at least fourteen (14) days before the updated Policy takes effect.

The date of the most recent update is indicated at the top of this Privacy Policy. Continued use of the 578jl Platform after notification of changes constitutes acceptance of the updated Privacy Policy. If you do not accept the updated Policy, you may close your account by contacting 578jl support.

The current version of this Privacy Policy was last updated in June 2026.

14. Contact and Data Protection Officer

578jl has designated a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. The DPO is responsible for overseeing 578jl's compliance with the DPA and its implementing rules, and for handling data subject requests and complaints.

When contacting the DPO regarding a data subject request, please include your registered 578jl username, the nature of your request, and any relevant details to assist with verification of your identity and the processing of your request.

If you are unsatisfied with 578jl's response to a privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC) through the NPC's official complaint processes.