Data Privacy & Protection

j666 Privacy Policy

Effective Date: January 1, 2026  ·  Applies To: All j666 account holders and website visitors  ·  Governing Law: Republic Act No. 10173 (Philippines)

Compliant with PH Data Privacy Act (RA 10173)

YOUR PRIVACY MATTERS TO j666: This Privacy Policy describes how j666 ("j666," "we," "us," "our") collects, processes, stores, shares, and protects personal information you provide when you access or use the j666 platform at j666.bio. This document is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA) of the Republic of the Philippines, and its Implementing Rules and Regulations. By creating a j666 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact us to arrange for the deletion of any data we hold about you.

1

Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173) and this Privacy Policy, the data controller responsible for your personal information is:

  • Platform Name: j666
  • Website: j666.bio
  • Operating Framework: Philippine Amusement and Gaming Corporation (PAGCOR) regulated online gaming platform
  • Data Protection Officer Contact: [email protected] (subject line: "DPO / Privacy Inquiry")

As the data controller, j666 determines the purposes and means by which personal information submitted through the j666 Platform is collected and processed. j666 is responsible for ensuring that all personal data processing activities comply with the DPA, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

2

Categories of Personal Data We Collect

j666 collects personal information in several categories, depending on how you interact with the Platform:

Data Category Specific Examples When Collected
Identity Data Full legal name, date of birth, nationality, government ID number and type Account registration; KYC verification
Contact Data Philippine mobile number (+63), email address Account registration; OTP verification
KYC Documents Scanned copies or photographs of government-issued ID, selfie with ID, proof of address Pre-withdrawal KYC verification process
Financial Data GCash or PayMaya account reference (masked), BDO/BPI/Metrobank account details (masked), deposit/withdrawal history Deposit and withdrawal transactions
Gaming Activity Data Games played, wager amounts, win/loss records, session durations, betting history Continuous during active account use
Technical Data IP address, device type, operating system, browser type and version, screen resolution Each Platform visit or login session
Usage Data Pages viewed, features accessed, navigation paths, session timestamps, click behavior Each Platform visit or login session
Communications Data Support ticket content, live chat transcripts, email correspondence Any contact with j666 support team
Preferences Data Responsible gaming limit settings, notification preferences, language preferences Configured in account settings

Sensitive Personal Information: Government-issued identification documents, financial account details, and data linked to your gaming behavior are treated as sensitive personal information under the DPA. j666 applies enhanced protection measures to these categories, including restricted access controls, encryption at rest, and strict data minimization practices.

3

How We Collect Your Personal Data

j666 collects personal data through the following channels and mechanisms:

  • Direct Submission: Information you actively provide when registering an account, completing KYC verification, making a deposit or withdrawal request, submitting a support ticket, or responding to a promotional offer;
  • Automated Technical Collection: Information automatically generated when you access the j666 Platform, including IP address, device identifiers, and behavioral session data, collected through server logs and session tracking technology;
  • Cookies and Similar Technologies: Browser cookies, web beacons, and local storage objects that remember your preferences, maintain your login session, and allow j666 to analyze platform usage patterns (see Section 7 for full details);
  • Payment Processors: Confirmation and reference data returned by third-party payment processors (GCash, PayMaya, BDO, BPI, Metrobank) upon completion of deposit or withdrawal transactions — j666 does not receive or store full payment account credentials;
  • Identity Verification Services: Where j666 engages a third-party KYC or age verification service to assist in validating submitted identity documents, limited data may be shared with and returned from that provider as part of the verification workflow;
  • Public Sources: In limited circumstances related to fraud prevention or AML compliance, j666 may cross-reference information against publicly available government or regulatory databases.
4

Purposes of Processing Your Personal Data

j666 processes your personal data for the following specific and legitimate purposes:

  • Account Administration: To create, manage, and maintain your j666 account, including authentication, password resets, and account security notifications;
  • Age and Identity Verification: To verify that you meet the minimum age of 21 years and to establish your identity as required under PAGCOR regulations and applicable anti-money laundering legislation;
  • Payment Processing: To process deposits and withdrawals through your selected Philippine payment method and to maintain accurate transaction records;
  • Gaming Services: To provide access to casino games, sports betting, bingo, keno, and other j666 gaming products, and to maintain accurate records of your gaming activity;
  • Regulatory Compliance: To fulfill j666's legal obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws, including the retention of transaction records and submission of required reports to regulators;
  • Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, bonus abuse, and other prohibited activities;
  • Responsible Gaming: To monitor gaming behavior patterns in support of responsible gaming obligations, and to apply and enforce voluntary limits or self-exclusion periods set by you;
  • Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
  • Marketing Communications: Where you have provided explicit consent, to send you promotional offers, bonus notifications, event invitations, and platform updates — you may withdraw this consent at any time through your account settings;
  • Platform Improvement: To analyze aggregated, anonymized usage data for the purpose of improving platform performance, game selection, and user experience.

Data Minimization: j666 collects only the personal information that is directly necessary for the purposes described above. We do not collect personal data "just in case" — if a piece of information is not needed for a specific, identified purpose, we do not collect it.

5

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, every processing activity must have a lawful basis. j666 relies on the following legal bases for processing your personal data, depending on the specific activity:

Processing Purpose Legal Basis Under RA 10173
Account creation and management Contractual necessity — performance of the j666 Terms & Conditions
KYC and age verification Legal obligation — PAGCOR licensing requirements; AMLA compliance
Payment processing Contractual necessity; legal obligation (financial record-keeping)
Fraud prevention and AML Legal obligation; legitimate interest in platform security
Responsible gaming monitoring Legal obligation — PAGCOR responsible gaming requirements
Marketing communications Consent — freely given, specific, and withdrawable at any time
Platform analytics (aggregated) Legitimate interest — improving platform services for all users
6

Sharing Your Personal Data

j666 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. Your data is shared only in the following limited, controlled circumstances:

  • Payment Processors: Transaction reference data is shared with GCash, PayMaya, BDO, BPI, and Metrobank solely to execute your requested deposit or withdrawal. These entities process data under their own privacy policies and applicable financial regulations;
  • KYC and Identity Verification Providers: Where a third-party service is engaged for identity document verification, only the data strictly necessary for verification is transmitted. Results are returned to j666 and the third party is contractually prohibited from retaining or using your data for any other purpose;
  • Game Content Providers: Third-party game developers whose titles are available on j666 may receive anonymized session identifiers necessary for game functionality. These providers do not receive your full personal profile;
  • Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies may receive your data where j666 is under a legal obligation to disclose, including in response to lawful orders, court directions, or regulatory audit requirements;
  • Law Enforcement: j666 will cooperate with Philippine law enforcement agencies where required by valid legal process, including search warrants, subpoenas, and court orders;
  • Fraud Prevention Networks: Anonymized fraud indicators may be shared with industry fraud prevention consortia to protect the integrity of the broader Philippine online gaming market;
  • Professional Advisors: j666's legal counsel, auditors, and compliance consultants may access relevant personal data under confidentiality obligations in the course of providing professional services.

No Unauthorized Commercial Sharing: j666 will never sell your personal data to advertisers, data brokers, or any commercial third party. Any third party that receives j666 player data is contractually required to maintain the same standard of data protection applied by j666.

7

Cookies & Tracking Technologies

j666 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file stored on your device by your browser when you visit a website. j666 uses the following types of cookies:

  • Essential Cookies: Strictly necessary for the Platform to function. These include session cookies that maintain your logged-in state, security tokens, and cookies that remember your language preference. These cannot be disabled without impairing Platform functionality;
  • Functional Cookies: Remember your preferences (e.g., game display settings, responsible gaming limits interface) to provide a personalized experience across sessions;
  • Analytics Cookies: Used to collect aggregated, anonymized data about how users navigate and interact with the j666 Platform, for the purpose of improving the site and user experience. These do not identify individual users;
  • Security Cookies: Used for fraud detection, bot prevention, and to identify suspicious login patterns that may indicate unauthorized account access.

You may configure your browser to block or delete cookies at any time. Note that disabling essential cookies will impact your ability to log in and use j666 core services. j666 does not use third-party advertising cookies or behavioral advertising tracking technologies.

8

Data Retention Periods

j666 retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

Data Category Retention Period Basis
Account identity and contact data Duration of account plus 5 years post-closure AMLA record-keeping requirements
KYC documents Duration of account plus 5 years post-closure PAGCOR / AMLA regulatory obligations
Financial transaction records 10 years from the date of transaction Anti-Money Laundering Act (RA 9160, as amended)
Gaming activity and session data Duration of account plus 2 years post-closure Responsible gaming monitoring; dispute resolution
Support communications 3 years from the date of communication Dispute resolution; service improvement
Marketing consent records Duration of consent plus 3 years Consent accountability under DPA
Technical / access logs 12 months from collection Security monitoring; fraud investigation

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized, such that it can no longer be associated with any individual. Data subject to ongoing regulatory investigation or legal proceedings will be retained until the matter is fully resolved, regardless of the standard retention schedule.

9

Data Security Measures

j666 implements technical and organizational security measures designed to protect your personal information against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

  • Encryption in Transit: All data transmitted between your device and the j666 Platform is protected by 256-bit Transport Layer Security (TLS) encryption — indicated by HTTPS in your browser address bar;
  • Encryption at Rest: Sensitive personal data stored in j666 databases, including KYC documents, financial records, and identity data, is encrypted at rest using industry-standard AES-256 encryption;
  • Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. j666 employees and contractors access only the data necessary for their specific role, governed by role-based access control (RBAC) policies;
  • Two-Factor Authentication: Account login processes incorporate SMS OTP two-factor authentication for new device sessions, reducing the risk of unauthorized account access even if credentials are compromised;
  • Security Monitoring: j666 operates continuous security monitoring systems to detect anomalous access patterns, intrusion attempts, and data breach indicators in real time;
  • Vendor Security Assessment: Third-party service providers who process j666 player data are assessed against data security standards prior to engagement and subject to contractual data protection obligations;
  • Incident Response: j666 maintains a data breach response plan. In the event of a personal data breach that poses a risk to affected individuals, j666 will notify the National Privacy Commission (NPC) and affected data subjects within the timeframes prescribed under the DPA.

Security Note: While j666 takes all reasonable steps to protect your data, no online system is completely immune to security incidents. You also play an important role in keeping your account secure — use a strong, unique password, enable SMS OTP, and never share your j666 login credentials with anyone.

10

Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by j666. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request." j666 will respond within 15 business days.

11

Children's Privacy

STRICT AGE RESTRICTION: The j666 Platform is intended exclusively for adults who are at least 21 years of age in compliance with PAGCOR regulations. j666 does not knowingly collect personal data from any person under the age of 21. If j666 discovers that personal data has been collected from an underage individual, that data will be immediately deleted and the associated account will be permanently closed. If you believe a minor has accessed j666 using falsified age information, please contact us immediately at [email protected].

j666 employs age verification as part of the registration and KYC processes specifically to prevent underage access to gambling services. This is a regulatory requirement under PAGCOR and a core component of j666's responsible gaming framework. No exceptions apply — age verification is mandatory for all accounts before withdrawal functionality is enabled.

12

Cross-Border Data Transfers

j666 primarily processes and stores personal data within the Philippines. Where the nature of the services requires engagement with third-party game providers, technical infrastructure providers, or fraud prevention services whose servers or operations are located outside the Philippines, personal data may be transferred internationally. Such cross-border transfers are conducted only where:

  • The recipient country has been assessed to provide an adequate level of data protection, or
  • Appropriate contractual safeguards are in place between j666 and the recipient entity, including data processing agreements that impose DPA-equivalent obligations, or
  • The transfer is strictly necessary for the performance of a contract between j666 and you (e.g., processing a payment through a provider with international infrastructure).

Any cross-border data transfers involving sensitive personal information are reported to the National Privacy Commission as required under NPC Circular No. 16-01. j666 maintains a register of all third-party data processors, including their jurisdictions, available to the NPC upon request.

13

Third-Party Websites and Services

The j666 Platform may contain references to third-party payment service providers (GCash, PayMaya, BDO, BPI, Metrobank) and game content providers. When you interact with these third-party services, you are subject to their own privacy policies and data practices, which are independent of j666's Privacy Policy.

j666 is not responsible for the privacy practices, content, or data security measures of any third-party service. j666 recommends that you review the privacy policy of any third-party service before providing personal information to that service. If you have concerns about how a third-party service handles your data, please contact that service directly.

j666 does not embed third-party social media widgets, advertising trackers, or external analytics scripts that transmit personal data to external parties without disclosure in this Privacy Policy.

14

Amendments to This Privacy Policy

j666 reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable Philippine law, changes in j666's data processing practices, new services or features, or guidance issued by the National Privacy Commission.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — j666 will provide advance notice via the contact details registered on your account, or through a prominent notice on the Platform, no less than 7 days before the revised policy takes effect.

The "Effective Date" at the top of this document reflects the date the current version of the Privacy Policy came into force. Your continued use of the j666 Platform after the effective date of any revision constitutes your acknowledgment of the updated policy. We encourage you to review this page periodically to stay informed of how j666 protects your personal information.

Previous Versions: Prior versions of this Privacy Policy are retained in j666's internal records and are available to the NPC upon request. If you would like to review a prior version for reference purposes, contact the j666 Data Protection Officer at [email protected].

15

Contact & Data Protection Officer

For any questions, requests, or concerns regarding this Privacy Policy or j666's data processing practices, please contact the j666 Data Protection Officer (DPO):

  • Email: [email protected] (subject line: "DPO / Privacy Inquiry")
  • Response Time: 15 business days for formal data subject rights requests; 5 business days for general privacy inquiries
  • Platform: j666.bio
  • Operating Hours: 24/7 for general support; DPO formal responses within Philippine business days

If you believe j666 has failed to address your data privacy concern adequately, you have the right to file a complaint directly with the National Privacy Commission of the Philippines (NPC) through their official complaint channels. The NPC is the government body responsible for enforcing the Data Privacy Act of 2012 in the Philippines.

Your Data Subject Rights Under Philippine Law

As a j666 user and a Philippine data subject, you are entitled to the following rights. To exercise any of these rights, contact j666 at [email protected] — we'll respond within 15 business days.

Right to Be Informed

You have the right to know when your personal data is being collected, what data is being collected, why it is being collected, and how it will be used or shared. This Privacy Policy is j666's fulfillment of that right.

Right to Access

You may request a copy of all personal data j666 holds about you, including the purposes for which it is processed, the sources from which it was obtained, and any third parties to whom it has been disclosed.

Right to Rectification

If any personal data j666 holds about you is inaccurate, incomplete, or outdated, you may request that it be corrected. Identity and contact information can also be updated directly from your j666 account settings.

Right to Erasure

You may request the deletion of your personal data when it is no longer necessary for the purpose it was collected, or where you withdraw consent. Erasure requests are subject to overriding legal retention obligations under AMLA and PAGCOR regulations.

Right to Object

You may object to j666 processing your personal data for marketing purposes at any time, with immediate effect, by updating your communication preferences in your account settings or contacting the j666 DPO directly.

Right to Complain

If you believe j666 has not handled your personal data in accordance with the Data Privacy Act, you have the right to file a formal complaint with the National Privacy Commission of the Philippines — the authority responsible for enforcing RA 10173.

j666 Data Protection Commitments

AES-256 Encryption at Rest

All sensitive personal data stored in j666 databases — KYC documents, financial records, identity information — is encrypted at rest using AES-256, the same standard used by financial institutions and government agencies.

256-bit TLS in Transit

Every data exchange between your device and j666 — login, game play, deposits, withdrawals — is protected by 256-bit TLS encryption. Your information is never transmitted in plain text over any network.

Strict Internal Access Controls

j666 staff access to personal data is governed by role-based access controls. No j666 employee can access player data beyond what their specific function requires — and all access is logged and audited.

Defined Retention Schedules

j666 does not keep your data indefinitely. Clear, legally grounded retention periods apply to each category of personal information — when the retention period expires, data is securely deleted or anonymized.

NPC-Compliant Breach Response

In the event of a personal data breach, j666 is committed to notifying the National Privacy Commission and affected data subjects within the timelines prescribed under the Data Privacy Act and NPC regulations.

No Data Sales — Ever

j666 will never sell, rent, or trade your personal information to advertisers, data brokers, or commercial third parties. Data is shared only where operationally necessary and always under contractual data protection safeguards.

Your Data, Protected — Your Game, Yours

j666 handles your personal information with the same care it applies to your funds — securely, transparently, and in full compliance with Philippine law. Every Filipino player on j666 deserves to know exactly how their data is used, and to trust that it stays protected.

DPA (RA 10173) Compliant PAGCOR Regulated AES-256 Encrypted No Data Sales NPC Accountable

Questions about your privacy? Contact our Data Protection Officer at [email protected]. j666 is strictly for players aged 21 and above, in compliance with PAGCOR regulations.