555jl Privacy Policy —
Your Data, Your Rights,
Our Obligations

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by 555jl ("Company," "we," "us," "our") and applies to all personal data collected, processed, and stored in connection with your use of the 555jl online casino and sports betting platform accessible at https://555jl.one, including all associated games, services, and communications channels.

555jl is committed to protecting the privacy of Filipino players and complying fully with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. This Policy also reflects 555jl's obligations under PAGCOR's anti-money laundering and know-your-customer compliance requirements.

By registering an account or continuing to use the 555jl platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must immediately cease using the 555jl platform.

2 Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal data is:

• Platform Name: 555jl
• Website: https://555jl.one
• Regulatory Status: PAGCOR-licensed online gaming operator
• Data Protection Officer Contact: [email protected]

555jl has designated a Data Protection Officer (DPO) as required under the DPA Implementing Rules. The DPO is responsible for overseeing compliance with this Policy, managing data subject rights requests, and coordinating with the National Privacy Commission on data breach notifications and compliance filings. You may contact the DPO at [email protected] with the subject line "Data Privacy — DPO Request."

3 Personal Data We Collect

3.1 Registration and Account Data

When you register a 555jl account, we collect:

• Legal full name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement under PAGCOR regulations)
• Philippine mobile number (used for account login and SMS verification)
• Email address (used for account communications and bonus notifications)
• Username and encrypted password
• Preferred payment method (GCash number, PayMaya, bank account details where applicable)

3.2 Identity Verification (KYC) Data

For accounts reaching specified transaction thresholds — as required by PAGCOR's anti-money laundering compliance framework — we collect:

• Copy of a valid Philippine government-issued photo ID (passport, driver's license, UMID, PhilSys card, SSS ID, voter's ID, or postal ID)
• Proof of address (utility bill, bank statement, or barangay certificate not older than three months)
• Selfie with ID for biometric matching where required by PAGCOR directive
• Source of funds declaration for accounts above enhanced due diligence thresholds

3.3 Financial Transaction Data

We collect records of all deposits and withdrawals processed through your 555jl account, including GCash transaction reference numbers, bank transfer confirmation codes, amounts, timestamps, and payment channel identifiers. This data is retained for PAGCOR audit and Philippine anti-money laundering law compliance.

3.4 Gaming Activity Data

555jl records all gaming activity on your account, including game sessions, bets placed, outcomes, bonus activations, and responsible gaming tool usage. This data is used for account management, PAGCOR regulatory reporting, and responsible gaming monitoring.

3.5 Technical and Device Data

We automatically collect certain technical information when you access the 555jl platform, including your IP address, device type and operating system, browser type and version, session timestamps, and page navigation patterns. This data is used for security, fraud prevention, and platform performance optimization.

3.6 Communications Data

If you contact 555jl customer support, we retain records of that communication — including live chat transcripts, email correspondence, and any information you provide in the course of resolving a support request. These records are used for quality assurance, dispute resolution, and PAGCOR compliance purposes.

4 How We Collect Your Data

555jl collects personal data through the following channels:

• Directly from you: Information you provide when registering, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automatically: Technical and device data collected through your use of the 555jl platform via cookies, session logs, and server-side request records.
• From payment providers: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment processors used to verify deposits and process withdrawals.
• From identity verification services: Confirmation of document authenticity from third-party KYC verification providers engaged by 555jl to meet PAGCOR compliance requirements.
• From fraud prevention services: Risk signals and device fingerprinting data from fraud detection providers used to protect the platform and its players.

5 Purposes of Processing

555jl processes your personal data for the following purposes:

• To create, manage, and operate your 555jl player account.
• To verify your identity and age (21+ requirement) at registration and KYC checkpoints.
• To process deposits via GCash, PayMaya, and Philippine bank channels, and to settle withdrawals to your registered payment method.
• To comply with PAGCOR licensing obligations, including anti-money laundering (AML) reporting, responsible gaming monitoring, and player transaction auditing.
• To administer bonuses, promotions, and the 555jl VIP loyalty program.
• To detect, prevent, and investigate fraud, money laundering, bonus abuse, and other prohibited conduct.
• To provide customer support and resolve account disputes.
• To monitor responsible gaming indicators and apply appropriate interventions where required.
• To communicate important account and platform updates, security alerts, and promotional offers (where you have consented to marketing communications).
• To maintain the technical security, integrity, and performance of the 555jl platform.

6 Legal Bases for Processing

Under the Data Privacy Act of 2012, 555jl processes your personal data on the following legal bases:

• Consent: For marketing communications, optional data collection, and processing of sensitive personal information where required. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual necessity: For processing required to operate your 555jl account, process transactions, and deliver the services described in the Terms and Conditions — i.e., the contract between you and 555jl.
• Legal obligation: For KYC verification, AML transaction monitoring, PAGCOR regulatory reporting, and other processing required by Philippine law, including RA 9160 (Anti-Money Laundering Act) as amended.
• Legitimate interests: For fraud detection, platform security, responsible gaming monitoring, and improving platform features — where these interests are not overridden by your data subject rights.

7 Data Sharing & Disclosure

555jl does not sell, rent, or trade your personal data to third-party advertisers or data brokers. We share personal data only in the following limited circumstances:

• PAGCOR: As 555jl's licensing and regulatory authority, PAGCOR may require access to player account and transaction data in the course of regulatory inspections, investigations, or compliance audits.
• Philippine anti-money laundering authorities: 555jl is required under RA 9160 to report covered and suspicious transactions to the Anti-Money Laundering Council (AMLC). Transaction data related to such reports may be disclosed to AMLC and, where directed by AMLC, to other Philippine law enforcement authorities.
• Payment processors: GCash (G-Xchange Inc.), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, UnionBank, and other payment providers receive the payment-related data necessary to process your deposits and withdrawals. These providers operate under their own data privacy frameworks and are subject to Bangko Sentral ng Pilipinas (BSP) regulation.
• Game technology providers: JILI Games and other game studio providers may receive anonymized or pseudonymized session data necessary for game integrity monitoring and RNG certification. No directly identifiable personal data is shared with game providers.
• KYC and fraud prevention service providers: Third-party identity verification and fraud detection providers receive KYC documents and device data under data processing agreements that bind them to confidentiality and DPA-compliant data handling standards.
• Professional advisers: 555jl's legal counsel, auditors, and PAGCOR compliance consultants may access personal data on a need-to-know basis, subject to professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or transfer of 555jl's business operations, player personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

8 Data Retention

555jl retains personal data for the minimum period necessary to fulfill the purposes described in this Policy, subject to overriding legal and regulatory retention requirements:

• Account data: Retained for the lifetime of your 555jl account and for a period of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of last account activity, as required under RA 9160 and PAGCOR AML compliance obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the transaction date, as required by PAGCOR and the AMLC.
• Gaming activity records: Retained for three (3) years from the date of each session, or for the lifetime of the account if shorter.
• Customer support communications: Retained for two (2) years from the date of the last communication, or for the lifetime of the account if the account remains open.
• Technical and device data: Session logs retained for twelve (12) months; aggregated analytics data may be retained indefinitely in anonymized form.

Upon expiry of the applicable retention period — and in the absence of any legal hold, PAGCOR directive, or ongoing investigation — 555jl will securely delete or anonymize your personal data in accordance with its data destruction procedures.

9 Security Measures

555jl implements a layered security framework to protect your personal data against unauthorized access, accidental loss, alteration, or destruction. Key security measures include:

• SSL/TLS encryption: All data in transit between your device and the 555jl platform is encrypted using 256-bit SSL/TLS protocols — the same standard used by Philippine banks and GCash.
• Password security: User passwords are stored as one-way cryptographic hashes. 555jl never stores or has access to passwords in readable form.
• Access controls: Personal data is accessible internally only to 555jl staff whose job functions require access. Access is logged, audited, and governed by a least-privilege access control policy.
• Two-factor authentication: 2FA is available on all 555jl player accounts and is strongly recommended to protect against unauthorized account access.
• Penetration testing and security audits: 555jl engages independent security professionals to conduct regular penetration tests and vulnerability assessments of its platform infrastructure.
• Fraud detection: Real-time fraud monitoring identifies suspicious patterns across login, transaction, and gaming activity data to protect player accounts.

10 Cookies & Tracking Technologies

555jl uses the following categories of cookies and similar tracking technologies:

• Essential cookies: Required for platform functionality — session management, login state persistence, security tokens, and CSRF protection. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand aggregate usage patterns on the 555jl platform — which game categories are most visited, session duration, page load performance. Analytics data is anonymized and does not identify individual players.
• Security cookies: Used by fraud detection systems to identify anomalous device behavior and protect player accounts from unauthorized access attempts.

555jl does not use third-party advertising cookies, behavioral tracking pixels, or social media tracking scripts. We do not participate in cross-site advertising networks.

You may manage cookie preferences through your browser settings. Disabling essential cookies will impair your ability to log in and use the 555jl platform. Disabling analytics cookies will not affect your gaming experience but will reduce 555jl's ability to improve the platform based on usage data.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012, registered 555jl players who are Filipino citizens or residents have the following data subject rights with respect to personal data held by 555jl:

555jl will respond to all data subject rights requests within thirty (30) calendar days of receipt. Where a request is particularly complex or numerous, 555jl may extend this period by a further two months, with notification and explanation to you within the initial 30-day window. Data subject rights requests are subject to identity verification — 555jl must confirm that the requester is the data subject or their authorized representative before disclosing or acting on personal data.

12 Children & Minors

The 555jl platform is strictly restricted to individuals aged 21 years and above, in compliance with PAGCOR regulations governing real-money online gaming in the Philippines. 555jl does not knowingly collect personal data from any individual under the age of 21.

If 555jl becomes aware that personal data has been collected from an individual under the age of 21 — whether through account registration or otherwise — the account will be immediately terminated, all data collected will be deleted as promptly as permitted by regulatory obligations, and the matter will be referred to PAGCOR in accordance with its underage access reporting requirements.

If you are a parent or guardian and believe that a minor under your care has registered a 555jl account, please contact [email protected] immediately with the account details to initiate an urgent review.

13 Cross-Border Data Transfers

In the ordinary course of operating the 555jl platform, some personal data may be processed by or transferred to third-party service providers located outside the Philippines — including game technology providers and cloud infrastructure providers.

Any such transfers are conducted in accordance with Section 21 of the Data Privacy Act of 2012, which requires that the receiving country or organization provides a comparable level of data protection. 555jl ensures cross-border transfers are covered by appropriate safeguards including standard contractual clauses, binding corporate rules, or other mechanisms recognized by the National Privacy Commission.

In all cases, personal data transferred outside the Philippines remains subject to this Policy and 555jl's data protection obligations under Philippine law.

14 Policy Updates

555jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, changes in Philippine data protection law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via email or in-platform notification at least fourteen (14) days before taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Continued use of the 555jl platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree to a revised Policy, you must close your account before the effective date of the change.

15 Contact & Complaints

For all data privacy inquiries, data subject rights requests, or concerns about how 555jl handles your personal data, please contact:

• Data Protection Officer, 555jl
• Email: [email protected] (subject line: "Data Privacy — DPO Request")
• Response Time: Within 30 calendar days of receipt of your request

If you are not satisfied with 555jl's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint is available at the NPC's official website. 555jl will cooperate fully with any NPC investigation or inquiry.