Privacy Policy

Section 01

Introduction

356jl Casino ("356jl," "we," "us," or "our") is committed to protecting the privacy and security of the personal data of all registered players and website visitors. This Privacy Policy has been prepared in compliance with Republic Act No. 10173, otherwise known as the Philippine Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected by 356jl through: the 356jl.win website; the 356jl Login portal; account registration and KYC processes; deposit and withdrawal transactions; game play and betting activity; customer support communications; and any promotional or marketing interaction you have with 356jl.

By creating an account or using the 356jl platform, you acknowledge that you have read, understood, and consented to the collection and processing of your personal data as described in this Policy. If you do not agree to this Policy, please do not use the 356jl platform. This Privacy Policy is incorporated by reference into the Terms and Conditions and forms part of the agreement between you and 356jl.

Section 02

Data Controller

For the purposes of the Philippine Data Privacy Act and this Policy, 356jl Casino is the Personal Information Controller (PIC) in respect of all personal data collected from players and visitors of the 356jl platform. 356jl determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with applicable Philippine data protection law.

Where 356jl engages third-party service providers (such as payment processors, KYC verification vendors, or IT infrastructure providers) to process personal data on its behalf, such parties act as Personal Information Processors (PIP) under written agreements that bind them to the same data protection standards required of 356jl under the DPA.

356jl has appointed a designated Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. Enquiries regarding data privacy may be directed to the DPO via the contact details provided in Section 15 of this Policy.

Section 03

Personal Data We Collect

356jl collects the following categories of personal data, depending on the nature of your interaction with the platform:

Category	Examples	When Collected
Identity Data	Full legal name, date of birth, nationality, gender, government ID number	Registration & KYC verification
Contact Data	Philippine mobile number, email address, home address	Registration & account updates
Financial Data	GCash number, bank account details (BPI, BDO, Metrobank), transaction records	Deposits, withdrawals & KYC
Account Data	Username, password hash, account balance, bonus status, VIP tier	Registration & ongoing account use
Gaming & Betting Data	Game history, bet amounts, wins/losses, session durations, wagering activity	All platform activity
Technical Data	IP address, device type and model, browser type, operating system, cookies	All website visits & logins
Communication Data	Support chat transcripts, email correspondence, SMS records	Customer support interactions
Marketing Data	Communication preferences, promotion claims, survey responses	Opt-in marketing & promotions

356jl does not intentionally collect sensitive personal information (as defined under the DPA, including health data, biometric data, racial or ethnic origin, religious beliefs, or political opinions) unless required for specific regulatory compliance purposes, in which case explicit consent will be sought.

Section 04

How We Collect Your Personal Data

356jl collects personal data through the following channels and methods:

Direct Interactions: Data you provide when completing the 356jl registration form, using the 356jl Login portal, submitting KYC documents, contacting our support team, or participating in promotions and surveys.
Automated Technologies: As you interact with the 356jl website, we automatically collect technical data using cookies, server logs, session tracking tools, and similar technologies. This includes your IP address, device identifiers, browser configuration, and pages visited.
Payment Processors: When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, or cryptocurrency networks, relevant transaction and identity data is shared with 356jl by the payment processor to confirm and record the transaction.
KYC & Identity Verification Providers: 356jl uses accredited third-party identity verification services to validate government-issued IDs and confirm the identity of registered players as required by PAGCOR and AML regulations.
Fraud & Risk Monitoring Systems: 356jl uses automated risk monitoring tools that analyse patterns in account activity and game play to detect suspicious behaviour, protect against fraud, and maintain game integrity.

Section 05

Legal Basis for Processing

Under the Philippine Data Privacy Act, 356jl processes personal data on the following legal bases:

Contractual Necessity: Processing is necessary to perform our obligations under the account agreement, including account management, game access, deposits, withdrawals, and customer support.
Legal Obligation: Processing is required for compliance with Philippine law, including PAGCOR licensing requirements, Republic Act No. 9160 (Anti-Money Laundering Act, as amended), Republic Act No. 10927 (Casino Regulation Act), and tax reporting obligations under the Bureau of Internal Revenue (BIR).
Legitimate Interest: Processing is necessary for 356jl's legitimate interests in fraud prevention, game integrity monitoring, platform security, and the improvement of the platform's features and services, provided such interests are not overridden by your privacy rights.
Consent: Where the above bases do not apply — particularly in relation to direct marketing communications — 356jl will seek and rely upon your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Note on Consent: Consent to marketing communications from 356jl is separate from and in addition to your agreement to these Terms and Conditions. Declining marketing communications will not affect your ability to use any 356jl platform services.

Section 06

How We Use Your Personal Data

356jl uses your personal data for the following specific purposes:

Creating and managing your 356jl account, including authentication via the 356jl Login system.
Processing deposits and withdrawals in Philippine Pesos (PHP) via GCash, PayMaya, and Philippine banks.
Verifying your identity in compliance with PAGCOR KYC requirements and AML obligations.
Providing customer support and responding to complaints, disputes, and enquiries through all available support channels.
Administering bonuses, promotions, cashback programs, and the 356jl VIP Club in accordance with applicable promotion terms.
Monitoring game and betting activity to detect fraud, collusion, bonus abuse, and other prohibited conduct as defined in the Terms and Conditions.
Fulfilling reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine regulatory bodies.
Sending account-related communications such as transaction confirmations, security alerts, and important policy updates.
Sending marketing communications regarding 356jl promotions and new features, subject to your marketing preferences.
Conducting analytics to improve platform performance, user experience, and game offerings.
Fulfilling responsible gaming obligations, including managing self-exclusion requests and monitoring for problem gambling indicators.

356jl will not use your personal data for purposes that are materially different from those stated above without first notifying you and, where required by law, obtaining your consent.

Section 07

Sharing Your Personal Data

356jl does not sell, rent, or trade your personal data to third-party marketers. Your personal data may be shared with the following categories of recipients where strictly necessary and on a need-to-know basis:

Payment Processors: GCash (Mynt — Globe Fintech Innovations Inc.), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and cryptocurrency processors, to facilitate deposits and withdrawals.
KYC & Identity Verification Providers: Accredited third-party services engaged to verify the identity and age of 356jl players as required by PAGCOR.
Game Providers: Licensed game content providers (including Playtech and other platform partners) receive technical data necessary to deliver and audit game outcomes and RNG certification.
Regulatory Authorities: PAGCOR, the AMLC, the BIR, the NPC, and other competent Philippine government agencies, where disclosure is required by applicable law or by valid legal process.
Law Enforcement: Philippine National Police, National Bureau of Investigation, or other law enforcement bodies where disclosure is required by court order, warrant, or mandatory reporting obligation.
IT & Infrastructure Providers: Cloud hosting, security monitoring, and platform infrastructure providers engaged to support the technical operation of the 356jl platform, under binding data processing agreements.
Professional Advisers: Lawyers, auditors, and compliance consultants engaged in connection with the operation and regulatory compliance of 356jl, subject to professional confidentiality obligations.

🔒 Your data is never sold: 356jl does not engage in the commercial sale or monetization of player personal data. Data sharing is limited strictly to operational necessity and legal obligation.

Section 08

Data Retention

356jl retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or for such longer period as is required or permitted by law. The following general retention periods apply:

Account Data & KYC Records: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR licensing requirements and Republic Act No. 9160 (AMLA), which mandates retention of customer records for a period of five years from the date of each transaction.
Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, or longer where required by BIR or AMLC regulations.
Gaming & Betting History: Retained for a minimum of three (3) years from the date of the relevant gaming activity, or longer where disputes or investigations are pending.
Customer Support Records: Retained for a minimum of three (3) years from the date of the most recent support interaction.
Technical & Log Data: Retained for a maximum of twelve (12) months from the date of collection, unless required to be retained longer in connection with a fraud investigation or security incident.
Marketing Preferences: Retained until you withdraw consent, after which marketing-related processing will cease. Preference records are retained for evidential purposes for three (3) years.

Upon the expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification.

Section 09

Data Security

356jl implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, and destruction. These measures include, but are not limited to:

256-bit SSL/TLS Encryption: All data transmitted between your device and the 356jl platform is encrypted using industry-standard 256-bit SSL/TLS protocols — the same encryption standard used by major Philippine banks and financial institutions.
Password Hashing: Account passwords are never stored in plain text. All passwords are processed using one-way cryptographic hashing algorithms, ensuring that even 356jl staff cannot retrieve your actual password.
OTP Verification: Login attempts from unrecognized devices trigger one-time password (OTP) verification via SMS to your registered Philippine mobile number, providing a second factor of authentication.
Access Controls: Access to personal data within 356jl's systems is restricted on a strict need-to-know basis. Staff access to player data is logged, audited, and subject to regular review.
Secure Infrastructure: The 356jl platform is hosted on hardened server infrastructure with continuous security monitoring, intrusion detection, and regular vulnerability scanning.
Data Minimization: 356jl collects and retains only the personal data that is strictly necessary for the stated processing purposes.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, 356jl will notify you and the National Privacy Commission (NPC) in accordance with the timelines required by the DPA and its Implementing Rules.

✔ Your role in security: You are responsible for keeping your 356jl Login password confidential and for logging out of your account on shared devices. Contact support immediately if you suspect unauthorized access to your account.

Section 10

Cookies & Tracking Technologies

The 356jl website uses cookies and similar tracking technologies to enhance your experience, maintain your session state, and collect analytics data about how the platform is used. The following categories of cookies are used by 356jl:

Strictly Necessary Cookies: Required for the platform to function. These include session cookies that keep you logged in via the 356jl Login system, security tokens, and CSRF protection cookies. These cannot be disabled without breaking core functionality.
Performance & Analytics Cookies: Used to collect aggregated, anonymized data about how visitors use the 356jl platform — including pages visited, time on page, and navigation paths — to help us improve platform performance and user experience.
Functional Cookies: Store your preferences such as language settings, game lobby layout preferences, and notification preferences to personalize your experience on subsequent visits.
Security & Fraud Prevention Cookies: Used by 356jl's fraud detection and risk monitoring systems to identify and flag unusual account behaviour that may indicate unauthorized access or automated activity.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the 356jl platform. 356jl does not use third-party advertising cookies or permit third-party ad networks to place cookies on the 356jl.win domain.

Section 11

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, all registered 356jl players and website visitors have the following rights with respect to their personal data. To exercise any of these rights, contact the 356jl Data Protection Officer using the details in Section 15:

Right to Access

You have the right to obtain confirmation of whether 356jl holds personal data about you, and to receive a copy of that data, along with information about how it is processed.

Right to Correction

You have the right to request correction of inaccurate or incomplete personal data held by 356jl. Account details can be updated via your account settings or by contacting support.

Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations that may require 356jl to retain certain data.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. Upon receipt of an objection to marketing, 356jl will cease all marketing communications within 72 hours.

Right to Data Portability

You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where processing is based on consent or contract and carried out by automated means.

Right to Lodge a Complaint

If you believe 356jl has processed your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the country's data protection supervisory authority.

356jl will respond to all verifiable data subject requests within fifteen (15) calendar days of receipt. Where a request is complex or involves a large volume of data, the response period may be extended by a further fifteen (15) days, with notification to the requesting party. Identity verification will be required before any data is disclosed or modified in response to a subject access request.

Section 12

Children & Minors

The 356jl platform is strictly intended for persons aged 21 years and above in compliance with PAGCOR regulations and Philippine law. 356jl does not knowingly collect personal data from any person under the age of 21. The 356jl registration system includes age declaration requirements, and all accounts are subject to mandatory KYC verification to confirm that the account holder meets the minimum age requirement.

If 356jl discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age — whether through registration, the 356jl Login system, or any other means — the following actions will be taken without delay:

The account will be immediately and permanently suspended.
All personal data associated with the account will be flagged for expedited deletion, subject to any mandatory retention required for regulatory reporting purposes.
Any deposits made by the underage individual will be returned to the originating payment method, net of any applicable fees, in accordance with PAGCOR requirements.
The matter will be reported to PAGCOR as required by applicable regulatory obligations.

Parents or guardians who believe their child may have accessed or registered on the 356jl platform are encouraged to contact the 356jl Data Protection Officer immediately using the contact details in Section 15.

Section 13

International Data Transfers

The 356jl platform's primary data processing infrastructure is located within or operates in compliance with applicable Philippine data protection law. However, certain third-party service providers engaged by 356jl — including payment processors, KYC verification providers, and cloud infrastructure vendors — may process or store data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, 356jl ensures that an adequate level of data protection is in place through one or more of the following mechanisms:

The receiving country or organization has been determined by the NPC to offer an adequate level of data protection comparable to the Philippine DPA.
The transfer is governed by a data sharing or processing agreement that contains binding data protection commitments equivalent to those required under the Philippine DPA.
The transfer is necessary for the performance of a contract between you and 356jl (e.g., processing a GCash or cryptocurrency payment via an international payment network).

You may request information about the safeguards in place for international data transfers by contacting the 356jl Data Protection Officer.

Section 14

Changes to This Privacy Policy

356jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business practices, or the features and services offered on the platform. The date of the most recent revision will be updated at the top of this document each time a change is made.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — 356jl will provide advance notice to registered players via the platform, by email to your registered address, or by SMS to your registered Philippine mobile number, at least seven (7) days prior to the revised Policy taking effect.

For minor or non-material changes (such as clarifications, formatting corrections, or updates to contact information), 356jl reserves the right to make such changes without specific prior notice. Your continued use of the 356jl platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised Policy, you must stop using the platform and may request account closure in accordance with the Terms and Conditions.

📌 Stay informed: Bookmark this Privacy Policy page and review it periodically. The "Last Updated" date at the top of this document will change whenever this Policy is revised.

Section 15

Contact & Complaints

For all privacy-related enquiries, data subject rights requests, complaints regarding the processing of your personal data, or questions about this Privacy Policy, please contact the 356jl Data Protection Officer:

Platform: 356jl Casino — 356jl.win
Data Protection Officer Email: [email protected]
Subject Line: [Privacy / DPO Request]
Response Time: Within 15 calendar days of receiving your verified request
Languages: English and Filipino
Availability: 24/7 via support channel; DPO responses within business days

If you are unsatisfied with 356jl's handling of your personal data or with the response to your data subject rights request, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Philippine Data Privacy Act.

For responsible gaming concerns, self-exclusion requests, or problem gambling support, please visit the dedicated Responsible Gaming page or contact 356jl support directly. Responsible gaming requests are handled by a dedicated team with strict confidentiality.