618jl Privacy Policy – How We Protect Your Personal Data

1. Introduction

This Privacy Policy describes how 618jl collects, uses, stores, and protects personal data provided by players and visitors to the 618jl platform. It applies to all interactions you have with 618jl — from the moment you visit the website, through account registration, gameplay, payments, and customer support communications.

618jl is committed to handling your personal data responsibly and transparently. As a platform serving Filipino players, we operate in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the circulars issued by the National Privacy Commission (NPC).

By registering an account at 618jl or by using the platform, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described here. If you do not agree with any part of this policy, please do not use the 618jl platform and contact our support team to close your account.

2. Data Controller

The data controller for personal data processed through the 618jl platform is 618jl, which operates the website at https://618jl.best. As data controller, 618jl determines the purposes and means of processing your personal data and is responsible for ensuring that processing is lawful, fair, and transparent.

618jl has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy, ensuring compliance with RA 10173, handling data subject requests, and acting as the point of contact for the National Privacy Commission. The DPO can be reached via the contact details in Section 13 of this policy.

If 618jl engages third-party processors who handle personal data on its behalf — such as payment processors and identity verification providers — those processors act under written agreements that require them to maintain the same standard of data protection as 618jl itself. They process your data only for the specific, documented purpose for which they were engaged and are not permitted to use it for any other reason.

3. Data We Collect

618jl collects only the personal data that is necessary for the lawful operation of the platform. The categories of data we collect are:

Account and Identity Data

• Full legal name
• Date of birth
• Mobile number and email address
• Username and password (passwords are stored as one-way hashes — 618jl cannot read your actual password)
• Government-issued ID details (collected during identity verification / KYC)
• Selfie or photo for identity matching where required

Financial and Payment Data

• GCash or Maya mobile wallet number
• Bank account details where bank transfer is used
• Visa/Mastercard details where card payment is used (card data is processed by our PCI-DSS compliant payment partner — 618jl does not store full card numbers)
• Deposit and withdrawal history

Gameplay and Activity Data

• Game sessions, bet history, and win/loss records
• Bonus and promotion usage history
• Account login timestamps and session durations

Technical and Device Data

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser type
• Cookie identifiers and session tokens (see Section 10)

Communication Data

• Records of support chat conversations, emails, and callback requests
• Survey responses where voluntarily provided

4. How We Collect Your Data

618jl collects personal data through the following methods:

• Directly from you — when you register an account, complete identity verification, make deposits or withdrawals, contact support, or respond to surveys.
• Automatically through the platform — technical data such as your IP address, device type, and cookie identifiers are collected automatically when you access the 618jl website or app.
• From third-party identity verification providers — when you submit a government ID for KYC verification, our partner provider processes the document and returns a verification result to 618jl. The raw document data is handled by the verification provider under its own data protection obligations.
• From payment processors — transaction confirmation data (amount, timestamp, reference number) is shared with 618jl by payment processors to reconcile your deposits and withdrawals. 618jl does not receive your full card number or bank credentials through this channel.

5. Why We Use Your Data

618jl uses your personal data only for specific, documented purposes. The table below sets out each purpose and the legal basis for processing under RA 10173:

618jl will not use your personal data for any purpose that is not listed above without obtaining your explicit consent or unless required to do so by law.

6. Sharing Your Data

618jl does not sell, rent, or disclose your personal data to third parties for commercial purposes. Your data is shared only in the following circumstances, and only to the extent necessary for each purpose:

• Payment processors — GCash, Maya, GrabPay, Coins.ph, bank partners, and card processing providers receive the transaction data necessary to complete your deposit or withdrawal. They process this data under their own privacy policies and regulatory obligations.
• Identity verification providers — Where KYC is required, your ID document and facial image are processed by an accredited verification partner to confirm your identity. The result is shared with 618jl; the raw document is retained by the provider in accordance with its own data retention policy.
• Technology and hosting providers — 618jl uses cloud hosting and infrastructure providers to operate the platform. These providers access server data as part of their service but are bound by strict data processing agreements.
• Regulatory and law enforcement authorities — 618jl may disclose your data to the National Privacy Commission, PAGCOR, or other government authorities where legally required to do so. This includes anti-money laundering (AML) reporting obligations.
• Professional advisers — Lawyers, auditors, and accountants may access personal data on a need-to-know basis for compliance, legal, and financial reporting purposes. All are bound by confidentiality obligations.

7. Data Retention

618jl retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including meeting our legal, regulatory, and contractual obligations.

As a general guide, the following retention periods apply at 618jl:

• Active account data — retained for the lifetime of your account plus a minimum of 5 years after account closure, as required by anti-money laundering regulations.
• Transaction and financial records — retained for a minimum of 5 years after the transaction date in compliance with Philippine financial regulations.
• Identity verification documents — retained for the period required by our licence obligations, typically 5 years after account closure.
• Support communications — retained for 2 years after the conversation closes, to enable us to reference previous interactions if needed.
• Technical and analytics data — retained in anonymised or aggregated form indefinitely for platform improvement purposes. Personally identifiable technical data is deleted or anonymised after 12 months.

When your data is no longer required, 618jl securely destroys it using industry-standard data destruction methods. Where data is stored digitally, it is permanently deleted or cryptographically anonymised. Where paper records exist, they are shredded.

8. Security Measures

618jl takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it against unauthorised access, accidental loss, alteration, or disclosure.

Technical Measures

• 256-bit SSL/TLS encryption for all data in transit between your device and the 618jl platform
• Encryption of sensitive data at rest in the 618jl database
• One-way hashing of passwords — 618jl staff cannot read your account password
• Two-factor authentication options available to all registered players
• Firewalls, intrusion detection systems, and continuous security monitoring
• Regular penetration testing and vulnerability assessments

Organisational Measures

• Access to personal data is restricted to 618jl staff on a strict need-to-know basis
• All staff handling personal data receive data protection training
• Third-party processors are vetted and bound by data processing agreements
• A formal Data Breach Response Plan is in place — in the event of a breach affecting your personal data, 618jl will notify the NPC within 72 hours and will notify affected players without undue delay

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 618jl. These rights can be exercised free of charge by contacting our Data Protection Officer (see Section 13).

10. Cookies and Tracking Technologies

618jl uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your login session, and understand how players use the site so that we can improve it.

Types of Cookies Used by 618jl

• Essential cookies — required for the platform to function. These include session cookies that keep you logged in and security tokens that protect against cross-site request forgery. You cannot opt out of essential cookies without stopping use of the platform.
• Functional cookies — remember your preferences such as language settings and game display options so you don't have to re-set them each visit.
• Analytics cookies — collect anonymised data about how players navigate 618jl so we can identify what's working and what needs improvement. The data is aggregated and not linked to individual accounts.
• Session tracking cookies — used to monitor session duration for responsible gaming purposes, such as triggering session time reminders.

618jl does not use third-party advertising cookies or behavioral profiling cookies for marketing retargeting. You can manage cookie preferences through your browser settings. Please note that disabling functional or analytics cookies may affect your experience of the 618jl platform but will not prevent you from accessing core features.

11. Minors and Age Verification

618jl does not knowingly collect personal data from individuals under the age of 21. The platform is intended exclusively for adult players. Age verification is a required step in the 618jl account registration process, and additional KYC verification may be triggered at any time to confirm that a player meets the minimum age requirement.

If 618jl discovers that an account has been opened by a person under the age of 21, the account will be immediately closed, all activity on the account will be voided, and any personal data collected will be deleted as soon as it is no longer required for regulatory compliance purposes.

If you believe that a minor has registered at 618jl using false information, please contact our support team immediately at support@618jl.best. We will investigate and act promptly.

12. Changes to This Privacy Policy

618jl may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes — meaning changes that significantly affect how your personal data is handled — we will notify you via:

• A notification displayed prominently on the 618jl platform for a minimum of 14 days
• An email to the address registered on your 618jl account

The effective date of the current version of the Privacy Policy is indicated at the top of this page. If you continue to use 618jl after a revised Privacy Policy takes effect, you are deemed to have accepted the updated policy. If you do not accept the changes, you should stop using the platform and request account closure.

Minor updates — such as clarifications in wording that do not change the substance of our data practices — may be made without a formal notification. The most current version of this Privacy Policy is always accessible from the footer of the 618jl website.

13. Contact Us and Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to report a privacy concern, please contact the 618jl Data Protection Officer through any of the following channels:

• Email: support@618jl.best — use the subject line "Data Subject Request" or "Privacy Concern" to ensure your message is routed to the DPO
• Live Chat: Available 24 hours a day, 7 days a week via the 618jl platform — request to speak with the Data Protection team

618jl commits to acknowledging all privacy-related enquiries within 5 business days and providing a full response within 30 calendar days of receipt. Where a request is complex or requires additional verification, we will inform you of any extension to the response timeline.

If you are not satisfied with 618jl's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which oversees compliance with RA 10173.