jj55 Privacy Policy

1. Scope and Application

This Privacy Policy applies to all personal data collected and processed by jj55 in connection with the operation of the jj55 online gaming platform accessible at jj55.bio, including all associated web pages, account systems, payment processing, customer support channels, and promotional communications.

This Policy applies to all individuals who interact with jj55, including registered account holders, applicants for registration, and visitors who access the Platform without registering. By accessing the jj55 Platform or creating an Account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller Identity

The data controller responsible for your personal data collected through the jj55 Platform is the operator of jj55.bio, a PAGCOR-licensed online gaming operator established and operating in the Republic of the Philippines.

For all data privacy inquiries, the designated Data Protection Officer (DPO) for jj55 may be reached via email at the address provided in Section 14 of this Policy. The DPO is responsible for ensuring that jj55's data processing activities remain compliant with the DPA 2012 and related issuances of the NPC.

3. Personal Data We Collect

jj55 collects personal data through several channels: registration forms, account activity, payment transactions, customer support interactions, and automated technical collection from your device and browser. The categories of personal data collected include:

3.1 Identity and Contact Data

• Full legal name as appearing on a valid government-issued Philippine ID
• Date of birth (for mandatory 21+ age verification)
• Philippine mobile number (primary contact and 2FA channel)
• Email address
• Residential address (province/city, required for KYC verification)

3.2 Identity Verification Documents

• Scanned or photographed copies of valid Philippine government-issued IDs (e.g., Philippine National ID, UMID, passport, driver's license, SSS/GSIS ID)
• Selfie or facial photograph where required for biometric KYC verification

3.3 Financial Data

• GCash registered mobile number and account reference
• PayMaya (Maya) account reference
• Bank account details (BDO, BPI, Metrobank) for bank transfer withdrawals
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used

3.4 Gaming Activity Data

• Game session logs (game title, start/end times, bet amounts, outcomes)
• Sports bet history (event, odds, stake, result)
• Bonus redemption and wagering history
• Responsible gaming settings and self-exclusion elections

3.5 Technical and Device Data

• IP address and approximate geographic location derived therefrom
• Device type, operating system, and browser type
• Session timestamps, page views, and navigation paths within the Platform
• Cookie identifiers and similar tracking technology data (see Section 7)

3.6 Communications Data

• Records of live chat conversations with jj55 customer support
• Email correspondence submitted to jj55 support
• Promotional communication preferences (opt-in/opt-out status)

4. Legal Bases for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, jj55 processes personal data on the following legal bases:

5. How We Use Your Personal Data

jj55 uses the personal data it collects for the following specific purposes:

• Account Management: Creating, verifying, maintaining, and securing your jj55 Account, including processing login authentication and two-factor authentication (2FA) via SMS OTP.
• Age and Identity Verification: Confirming that all players are at minimum 21 years of age in compliance with PAGCOR's mandatory age restriction for online gambling in the Philippines.
• Payment Processing: Facilitating GCash, PayMaya, BDO, BPI, and Metrobank deposits and withdrawals, including anti-fraud verification and compliance with AMLA reporting obligations.
• Game Delivery: Operating and delivering all casino, slot, bingo, and sports betting services, including maintaining accurate bet and win records for dispute resolution purposes.
• Responsible Gaming: Monitoring gaming behavior for indicators of problem gambling, administering self-exclusion elections, and managing deposit and loss limits configured by the Player.
• Customer Support: Responding to account inquiries, resolving disputes, and providing technical assistance.
• Legal Compliance: Meeting jj55's obligations under Philippine law, including PAGCOR licensing requirements, AMLA reporting, and NPC data processing compliance.
• Marketing (Consent-Based Only): Sending promotional offers, bonus notifications, and platform updates to Players who have expressly opted in to receive such communications. Marketing opt-in is not a condition of account registration.

6. Sharing and Disclosure of Personal Data

jj55 does not sell, rent, or trade your personal data to third parties for their independent commercial purposes. Personal data may be disclosed to the following categories of recipients, strictly on a need-to-know basis:

• PAGCOR: As jj55's regulatory authority, PAGCOR may lawfully request access to Player data for audit, compliance verification, or investigation purposes. jj55 will comply with all lawful PAGCOR data requests.
• National Privacy Commission (NPC): As required under the DPA 2012 for regulatory compliance and breach notification obligations.
• AMLC (Anti-Money Laundering Council): Transaction reports and suspicious activity reports may be filed with the AMLC as required under R.A. 9160 and its amendments.
• Payment Service Providers: GCash, PayMaya, BDO, BPI, and Metrobank receive transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy and security obligations.
• Game Software Providers: Game providers (e.g., Pragmatic Play, PG Soft, Jili) may receive session data necessary to operate their games on the Platform. This data is pseudonymized where possible.
• KYC / Identity Verification Services: Third-party identity verification providers may process your ID documents and facial biometrics for KYC purposes. These providers are contractually bound to process data solely for verification purposes.
• Law Enforcement and Courts: jj55 will disclose personal data to Philippine law enforcement authorities or courts when required by a valid legal order or to protect jj55's legal rights.

7. Cookies and Tracking Technologies

jj55 uses cookies and similar browser-based tracking technologies to operate the Platform effectively and to understand how Players interact with it. The categories of cookies used include:

• Strictly Necessary Cookies: Required for core Platform functionality including login session maintenance, security tokens, and payment flow integrity. These cookies cannot be disabled without disabling core Platform features.
• Performance Cookies: Collect anonymized data about page load times, error rates, and navigation patterns to help jj55 identify and resolve technical issues.
• Functional Cookies: Remember your Platform preferences including language settings, game lobby filters, and last-visited sections.
• Analytics Cookies: Used with third-party analytics tools to understand aggregate user behavior patterns on the Platform. Analytics data is aggregated and does not identify individual users.

You may configure your browser to refuse or delete cookies; however, disabling strictly necessary cookies may prevent you from logging in or completing transactions on the jj55 Platform. jj55 does not use cookies to serve third-party advertising.

8. Data Retention

jj55 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and for as long as required by applicable Philippine law. Key retention periods include:

• Account and Identity Data: Retained for the duration of the account and for a minimum of five (5) years following permanent account closure, as required by PAGCOR and AMLA regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with AMLA record-keeping requirements.
• Game Session Logs: Retained for a minimum of twelve (12) months for dispute resolution purposes; extended to five (5) years where a dispute or investigation is ongoing.
• Customer Support Records: Retained for three (3) years from the date of the last support interaction.
• Marketing Consent Records: Retained for three (3) years from the date of consent or until consent is withdrawn, whichever is earlier.

Upon expiry of the applicable retention period, jj55 will securely delete or anonymize personal data so that it can no longer be attributed to an identifiable individual.

9. Security Measures

jj55 implements industry-standard technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jj55 servers
• Encryption of sensitive data fields (passwords, financial identifiers) at rest using AES-256 or equivalent standards
• Multi-factor authentication requirements for administrative access to jj55 production systems
• Access controls limiting employee access to personal data on a strict need-to-know basis
• Regular penetration testing and security audits of the Platform and underlying infrastructure
• Comprehensive security incident response procedures aligned with NPC breach notification requirements

In the event of a personal data breach that poses a real risk to the rights and freedoms of affected Players, jj55 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay as required by the DPA 2012.

10. Cross-Border Data Transfers

Some of jj55's service providers and game software partners — including RNG certification bodies, KYC verification providers, and certain game studios — may process data outside the Philippines. Where such cross-border transfers occur, jj55 ensures that appropriate safeguards are in place consistent with Section 21 of the DPA 2012, including contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law.

jj55 does not transfer personal data to countries that do not provide an adequate level of data protection without first implementing appropriate contractual safeguards and, where required, obtaining prior clearance from the NPC.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you — as a data subject — hold the following rights with respect to your personal data processed by jj55:

• Right to Be Informed: The right to know what personal data jj55 holds about you, the purposes for which it is processed, and the basis for that processing. This Policy is the primary vehicle through which jj55 fulfills this obligation.
• Right to Access: The right to request a copy of the personal data jj55 holds about you. Requests must be submitted in writing to the DPO contact provided in Section 14.
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated personal data. Minor corrections (e.g., mobile number updates) may be made directly in Account Settings; corrections to identity documents require DPO-assisted verification.
• Right to Erasure / Right to be Forgotten: The right to request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to jj55's legal retention obligations under PAGCOR and AMLA regulations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. Marketing opt-out can be effected via account settings or by contacting the DPO.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated. Complaint procedures are published on the NPC website.

To exercise any of the above rights, submit a written request to jj55's Data Protection Officer using the contact details in Section 14. jj55 will respond to data subject access requests within fifteen (15) business days of receipt.

12. Children's Privacy

The jj55 Platform is strictly restricted to individuals 21 years of age and above in accordance with PAGCOR regulations. jj55 does not knowingly collect personal data from individuals under the age of 21. If jj55 becomes aware that personal data has been collected from an individual under 21, that data will be deleted and the associated account permanently closed.

If you are a parent or guardian and believe that an individual under 21 has registered an account on jj55, please contact our support team immediately so that appropriate action can be taken.

13. Changes to This Privacy Policy

jj55 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or operational circumstances. Material changes will be communicated to registered Players via the email address on file or via a prominent notice on the Platform no fewer than seven (7) days before the change takes effect, except where immediate changes are required by law or NPC directive.

The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Continued use of the jj55 Platform following the effective date of a revised Policy constitutes acceptance of the updated terms.

14. Contact and Data Protection Officer

For all data privacy inquiries, subject access requests, correction requests, erasure requests, or complaints, please contact jj55's Data Protection Officer: