yyyjl Casino Privacy Policy

1 Who We Are

yyyjl Casino ("yyyjl," "we," "us," or "the Company") operates the online gaming platform available at yyyjl.net. yyyjl Casino is a PAGCOR-regulated online gaming operator serving Filipino players. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), yyyjl Casino is the Personal Information Controller in respect of the personal data it collects from registered players and website visitors.

This Privacy Policy applies to all personal data collected through:

• The yyyjl.net website and all subdomains associated with it.
• The yyyjl account registration and login process.
• KYC (Know Your Customer) identity verification submissions.
• Deposit, withdrawal, and transaction activity on the platform.
• Customer support interactions via live chat or email.
• Participation in yyyjl promotions, tournaments, and loyalty programs.

2 Data We Collect

yyyjl Casino collects several categories of personal data in the course of providing its services. The categories collected depend on how you interact with our platform.

2.1 Registration and Identity Data

When you create a yyyjl account, we collect:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile number
• Residential address (barangay, city, province)
• Username and encrypted password

2.2 KYC Verification Data

To comply with PAGCOR licensing requirements and the Anti-Money Laundering Act, yyyjl collects:

• Scanned or photographed copies of government-issued photo ID (e.g., PhilSys National ID, UMID, Passport, Driver's License)
• Selfie photograph for liveness verification
• Proof of address documentation where required
• Source of funds declarations for high-volume accounts

2.3 Financial and Transaction Data

• GCash mobile number or PayMaya account details used for deposits and withdrawals
• Bank account details (BPI, BDO, Metrobank) where bank transfer is used
• Deposit and withdrawal history, amounts, and timestamps
• Game wagering history, win/loss records, and bonus usage logs

2.4 Technical and Usage Data

• IP address and approximate geolocation at login
• Device type, operating system, and browser version
• Session duration, pages visited, and features accessed
• Login timestamps and access logs
• Cookies and similar tracking technologies (see Section 6)

2.5 Communications Data

• Live chat transcripts with yyyjl customer support agents
• Email correspondence with the yyyjl support and compliance teams
• Responses to surveys or feedback forms (where applicable)

3 How We Use Your Data

yyyjl Casino uses your personal data for the following purposes:

yyyjl will not use your personal data for any purpose incompatible with those listed above without first obtaining your separate, informed consent, except where required by law or PAGCOR regulation.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, yyyjl relies on the following legal bases to process your personal data:

• Contractual Necessity: Processing your registration data, KYC documents, and payment details is necessary to fulfill our contract with you — that is, to provide you with a functioning, secure yyyjl Casino account and to process your deposits and withdrawals.
• Legal Obligation: AML reporting, PAGCOR regulatory disclosures, and age verification are processing activities required by Philippine law. yyyjl is legally mandated to carry out these activities regardless of your consent preference.
• Legitimate Interests: Fraud detection, platform security monitoring, and internal analytics are carried out on the basis of yyyjl's legitimate interest in operating a secure and compliant gaming platform. These interests are balanced against your privacy rights.
• Consent: Promotional communications (email newsletters, SMS offers, personalized bonus alerts) are sent only to players who have affirmatively opted in. You may withdraw consent at any time by adjusting your account communication preferences or contacting support.

5 Data Sharing and Disclosure

yyyjl Casino does not sell or rent your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and under binding data processing agreements:

5.1 Regulatory and Government Authorities

yyyjl is required by PAGCOR licensing conditions to submit player data, transaction reports, and KYC records to PAGCOR upon request. Additionally, the Anti-Money Laundering Council (AMLC) may require disclosure of transaction data in connection with suspicious transaction reports (STRs) or covered transaction reports (CTRs) under Republic Act No. 9160, as amended.

5.2 KYC and Identity Verification Providers

yyyjl uses accredited third-party KYC verification services to authenticate player identity documents and perform liveness checks. These providers process only the identity documents and biometric data strictly necessary for verification and are prohibited from using that data for any other purpose.

5.3 Payment Processors

Transaction data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors solely to facilitate deposit and withdrawal processing. Each payment processor operates under its own privacy policy and data security standards applicable to licensed financial service providers in the Philippines.

5.4 Game Content Providers

yyyjl's platform includes games supplied by licensed third-party game studios. These providers may receive anonymized game session data (e.g., bet amounts, game outcomes) for the purpose of game performance monitoring and RTP auditing. They do not receive your name, contact details, or financial account information.

5.5 Legal Proceedings

yyyjl may disclose personal data to law enforcement agencies, courts, or other government bodies where required by a valid legal process, court order, or subpoena issued under Philippine law.

6 Cookies and Tracking Technologies

yyyjl Casino uses cookies and similar technologies on its platform. Here is a breakdown of what we use and why:

yyyjl does not use third-party advertising cookies or cross-site tracking technologies. Analytics data collected through cookies is aggregated and anonymized before being used for platform improvement decisions.

7 Data Retention

yyyjl retains your personal data for the following periods:

• Active Account Data: Retained for the full duration of your account's active status plus a post-closure period of five (5) years, as required by PAGCOR and AMLC regulations.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later, in accordance with AML record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years as required by PAGCOR licensing conditions and the AMLC's record retention rules.
• Customer Support Communications: Retained for three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Technical and Usage Logs: Retained for twelve (12) months for security monitoring and fraud prevention purposes, then automatically purged.
• Marketing Consent Records: Retained for the duration of your active account plus two (2) years to demonstrate consent compliance.

Upon expiry of the applicable retention period, yyyjl securely deletes or anonymizes personal data using industry-standard data destruction methods.

8 Data Security

yyyjl Casino implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure:

• Encryption at Rest and in Transit: All personal data stored in yyyjl's systems is encrypted at rest using AES-256 encryption. All data in transit is protected by TLS 1.2 or higher.
• Password Security: Player passwords are hashed using bcrypt with individual salts. Plain-text passwords are never stored or transmitted by yyyjl systems.
• Access Controls: Access to personal data within yyyjl's organization is restricted to employees and contractors who require it to perform their job functions, governed by role-based access controls and enforced by multi-factor authentication.
• Penetration Testing: yyyjl engages independent security firms to conduct regular penetration testing and vulnerability assessments on the platform's infrastructure.
• Data Breach Response: In the event of a personal data breach, yyyjl will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where the breach poses a high risk to their rights and freedoms.

9 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you — as a yyyjl Casino player and data subject — have the following rights with respect to your personal data:

• Right to Be Informed: You have the right to be informed of how your personal data is being processed. This Privacy Policy fulfills that obligation.
• Right to Access: You may request a copy of the personal data yyyjl holds about you, including the categories of data, the purposes for which it is processed, and the recipients to whom it has been disclosed.
• Right to Rectification: If any personal data yyyjl holds about you is inaccurate or incomplete, you have the right to request that it be corrected or updated. Account profile corrections can often be made directly in your yyyjl account settings.
• Right to Erasure or Blocking: In certain circumstances — for example, where data is no longer necessary for the purpose for which it was collected — you may request the deletion or blocking of your personal data. Note that this right is subject to yyyjl's legal obligations to retain data under PAGCOR and AML regulations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on yyyjl's legitimate interests, subject to applicable legal requirements.
• Right to Data Portability: You may request that yyyjl provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider, where technically feasible.
• Right to Lodge a Complaint: If you believe yyyjl has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission of the Philippines through its official channels.

To exercise any of these rights, submit your request to yyyjl's Data Privacy Officer at [email protected]. yyyjl will acknowledge your request within five (5) working days and provide a substantive response within fifteen (15) working days.

10 Children and Minors

yyyjl Casino is strictly an adult gaming platform. In the Philippines, individuals must be at least 21 years of age to participate in casino-style online gambling, as mandated by PAGCOR regulations. yyyjl does not knowingly collect personal data from individuals below the age of 21.

Age verification is a mandatory step in the yyyjl KYC process. Any account found to belong to an individual below 21 years of age will be immediately suspended, all balances will be forfeited, and the matter will be reported to PAGCOR as required by our license conditions.

If you believe a minor has registered on yyyjl using false information, please contact our Data Privacy Officer immediately at [email protected] so that we can take prompt action.

11 Cross-Border Data Transfers

Some of yyyjl's third-party service providers — including KYC verification vendors and game content providers — may process data in jurisdictions outside the Philippines. Where such cross-border transfers occur, yyyjl ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements incorporating standard data protection clauses consistent with the Data Privacy Act of 2012 and NPC guidelines.
• Transfer only to jurisdictions or service providers that offer an adequate level of data protection as assessed by yyyjl's Data Privacy Officer.
• Binding corporate rules or equivalent mechanisms where the recipient is part of a regulated corporate group.

yyyjl will not transfer your personal data to a foreign jurisdiction where we cannot reasonably ensure that your privacy rights will be protected at a standard comparable to that provided under Philippine law.

12 Changes to This Policy

yyyjl Casino may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made — meaning changes that significantly affect how we process your personal data or the rights available to you — yyyjl will:

• Post a prominent notice on the yyyjl platform at least seven (7) days before the changes take effect.
• Send a notification to your registered email address where practicable.
• Update the "Effective Date" at the top of this Privacy Policy page.

Your continued use of the yyyjl platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree to the revised Privacy Policy, you must discontinue use of the platform and request account closure before the effective date of the changes.

The current version of this Privacy Policy is always available at yyyjl.net/privacy-policy. We encourage you to review it periodically.

13 Contact and Data Privacy Officer

yyyjl Casino has designated a Data Privacy Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations. If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our DPO:

• Data Privacy Officer — yyyjl Casino
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 from your yyyjl account dashboard

For complaints that remain unresolved after contacting yyyjl's DPO, you may escalate your concern to the National Privacy Commission of the Philippines through its official complaint channels.