866lj Casino — Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how 866lj Casino ("866lj," "we," "us," or "our"), the operator of the online gaming platform at 866lj.app, collects, uses, stores, shares, and protects the personal data of players, visitors, and other users ("you" or "data subject") who interact with our platform and services.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It supplements and should be read together with the 866lj Terms and Conditions.

By registering an account on 866lj, by accessing the 866lj platform, or by otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, please do not register or use the 866lj platform.

2. Data Controller Information

866lj Casino operates as the personal information controller ("PIC") for all personal data processed through the 866lj platform. 866lj operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to Philippine data protection law. All data processing activities described in this Policy take place within the regulatory framework established by the NPC and PAGCOR.

For all data privacy inquiries, requests, and complaints, please contact our Data Protection Officer (DPO) at: [email protected] (plain text — not a clickable link).

3. Personal Data We Collect

3.1 Registration & Identity Data

When you create a 866lj account, we collect: your full legal name, Philippine mobile number, date of birth, and any government-issued identification document details required for age and identity verification (e.g., SSS, UMID, PhilHealth card, driver's license, or passport number and copy).

3.2 Financial & Transaction Data

We collect data relating to all financial transactions conducted through your 866lj account, including: deposit amounts and timestamps, withdrawal amounts and timestamps, payment method identifiers (e.g., GCash mobile number, bank account number masked to last four digits), and transaction reference numbers.

3.3 Gaming Activity Data

We collect records of your gaming activity on 866lj, including: games played, bets placed and amounts wagered, game outcomes, session durations, responsible gaming tool usage (deposit limits set, self-exclusion requests), and bonus claims and usage.

3.4 Technical & Device Data

We automatically collect certain technical data when you access 866lj, including: IP address, device type and model, operating system and version, browser type and version, time zone and locale settings, and session access logs including login and logout timestamps.

3.5 Communications Data

When you contact 866lj support via live chat, email, or any other channel, we retain records of that communication, including the content of messages, timestamps, and the identity of the support agent who handled the interaction.

4. How We Collect Your Data

866lj collects your personal data through the following means:

• Direct provision: Information you enter during registration, identity verification, deposit and withdrawal requests, support interactions, and responsible gaming tool configuration.
• Automated collection: Technical and device data collected automatically when you access the 866lj platform, through server logs, session management systems, and cookies.
• Third-party payment processors: Transaction confirmation data shared by GCash, Maya, BPI, BDO, Metrobank, 7-Eleven Cliqq, USDT network operators, and Coins.ph when you use these services to deposit or withdraw funds through 866lj.
• Regulatory bodies: In limited circumstances, PAGCOR and the Anti-Money Laundering Council (AMLC) may direct 866lj to collect specific information about a player as part of a compliance or investigation requirement.

5. Purposes & Legal Bases for Processing

866lj processes your personal data for the following purposes and on the following legal bases under the Data Privacy Act:

• Account creation and management — necessary for the performance of the contract between you and 866lj (i.e., the Terms and Conditions).
• Age and identity verification — necessary for compliance with PAGCOR licensing requirements and legal obligations under Philippine law.
• Payment processing and fraud prevention — necessary for contract performance and for compliance with AMLA obligations.
• Customer support — necessary for contract performance and the legitimate interest of 866lj in maintaining service quality.
• Responsible gaming monitoring — necessary for compliance with PAGCOR responsible gaming obligations and in the legitimate interests of player welfare.
• Anti-money laundering (AML) compliance — necessary for compliance with Republic Act No. 9160 (AMLA) and subsequent amendments.
• Marketing communications — based on your explicit consent. You may withdraw consent at any time through your account settings or by contacting support.
• Platform security and abuse prevention — necessary for the legitimate interests of 866lj in protecting the platform and its players from fraud, cheating, and unauthorized access.

6. Sharing of Personal Data

866lj does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with third parties only in the following circumstances:

• Payment service providers: We share the minimum necessary transaction data with GCash, Maya, BPI, BDO, Metrobank, 7-Eleven Cliqq, USDT network operators, and Coins.ph solely to process your deposit and withdrawal transactions.
• Identity verification providers: We may share identity document data with authorized third-party KYC (Know Your Customer) service providers for the purpose of verifying your identity as required under PAGCOR regulations.
• Regulatory authorities: We are required by law to disclose certain data to PAGCOR, the AMLC, the NPC, and other competent Philippine government authorities upon lawful request or as required by our licensing conditions.
• Game and technology providers: Third-party game developers and technology providers who power specific games on the 866lj platform may receive limited technical and gaming activity data strictly necessary for game delivery and integrity monitoring.
• Legal proceedings: We may disclose personal data where required by a valid court order, subpoena, or other lawful legal process issued by a Philippine court or competent authority.

All third parties with whom 866lj shares personal data are required to maintain confidentiality and process the data only for the specified purpose, subject to data sharing agreements that comply with the Data Privacy Act.

7. Cookies & Tracking Technologies

866lj uses cookies and similar tracking technologies on its platform for the following purposes:

• Essential cookies: Required for platform functionality, including maintaining your login session, remembering your language and region preferences, and ensuring secure access. These cannot be disabled without impairing platform functionality.
• Analytics cookies: Used to understand how players navigate and use the 866lj platform in aggregate, enabling us to improve the user experience. Analytics data is anonymized and aggregated.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and account takeover attempts.

You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to access and use the 866lj platform.

8. Data Retention

866lj retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active account data: Retained for the duration of your active account relationship with 866lj.
• Transaction and gaming activity records: Retained for a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and AMLA record-keeping obligations.
• Identity verification documents: Retained for a minimum of five (5) years following the end of the customer relationship, in accordance with AMLA requirements.
• Support communications: Retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.

Following the expiry of the applicable retention period, 866lj will securely delete or anonymize your personal data in accordance with NPC guidelines.

9. Data Security

866lj implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• TLS encryption for all data transmitted between your device and the 866lj platform.
• Hashing of account passwords using industry-standard algorithms — passwords are never stored in recoverable form.
• Role-based access controls limiting internal access to personal data to authorized personnel only.
• Regular security assessments and vulnerability testing of the 866lj platform infrastructure.
• SMS-based two-factor authentication available to all players for account login.

While 866lj maintains these security measures, no online platform can guarantee absolute security. You also have a responsibility to protect your own account credentials and to notify 866lj immediately if you suspect unauthorized access to your account.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, 866lj will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act 10173, you have the following rights in relation to your personal data held by 866lj:

• Right to be Informed: The right to know what personal data 866lj collects about you and how it is processed — which is the primary purpose of this Policy.
• Right to Access: The right to request a copy of the personal data 866lj holds about you, along with information about how it is processed.
• Right to Correction: The right to request correction of any inaccurate or incomplete personal data 866lj holds about you.
• Right to Erasure / Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 866lj's overriding legal obligations under PAGCOR and AMLA regulations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. This right is unconditional with respect to marketing; objections to other forms of processing are subject to assessment of legitimate grounds.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Damages: The right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data, in accordance with the DPA.

To exercise any of these rights, please contact the 866lj Data Protection Officer at [email protected]. 866lj will respond to all verified data subject requests within fifteen (15) calendar days of receipt. If you are not satisfied with 866lj's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children's Privacy

The 866lj platform is strictly intended for adults aged 21 years and above. 866lj does not knowingly collect personal data from any person under the age of 21. If 866lj becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, the data will be deleted, and any associated funds will be dealt with in accordance with PAGCOR regulations. If you believe that a minor has registered on 866lj, please notify us immediately at [email protected].

12. Changes to This Policy

866lj reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory obligations. Material changes to this Policy will be communicated to registered players via a notice on the 866lj platform or via the registered mobile number on file. The date at the top of this Policy reflects the date of the most recent revision. Your continued use of 866lj following notification of a material change constitutes your acceptance of the revised Policy.

13. Contact & Complaints

For any questions, concerns, or requests relating to this Privacy Policy or 866lj's handling of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 within the 866lj platform — reference "Data Privacy" when initiating the chat to be routed to the appropriate team.

If you are not satisfied with how 866lj has handled your privacy concern, you may escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information about filing a complaint with the NPC is available on the NPC's official government website.