358jl Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 358jl ("358jl," "the Company," "we," "us," or "our") collects, uses, stores, shares, and protects personal information relating to individuals who register an account, access, or otherwise interact with the 358jl online gaming platform available at https://358jl.cam and any associated mobile-optimised interfaces (collectively, the "Platform").

358jl is a PAGCOR-licensed online casino and sports betting platform serving Filipino players across the Philippines. We process personal data in our capacity as a Personal Information Controller under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC") of the Philippines.

By registering an account on 358jl or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any provision of this Policy, please do not use the Platform and contact us to request account closure.

2 Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and all applicable data protection legislation, the Personal Information Controller responsible for your personal data is:

358jl
Online Gaming Platform, Philippines
Contact email: [email protected]
PAGCOR-licensed operator

358jl has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and with applicable data protection law. The DPO can be contacted at the email address above, clearly marking the subject line "Data Protection Officer — Privacy Enquiry."

3 Personal Data We Collect

358jl collects the following categories of personal data from players and, where applicable, from third parties in the course of providing the Platform:

358jl does not collect sensitive personal information — such as racial or ethnic origin, religious beliefs, political opinions, health data, or biometric data for identification purposes — except where explicitly required by PAGCOR regulations or Philippine anti-money laundering law (e.g., source of funds declarations).

4 How We Collect Your Data

4.1 Directly from You

The majority of personal data 358jl holds about you is provided directly by you during registration, KYC verification, payment method linking, customer support interactions, promotional opt-ins, and general use of the Platform.

4.2 Automatically via the Platform

When you access the 358jl Platform, we automatically collect technical and usage data including your IP address, device identifiers, browser information, session timing, and gameplay activity through server logs, cookies, and similar technologies. This data is collected to maintain Platform security, prevent fraud, and improve the user experience.

4.3 From Third Parties

358jl may receive personal data about you from the following third-party sources:

• Identity verification providers: Used to confirm your identity and age (21+ as required by PAGCOR) through cross-referencing with government databases and document verification services
• Payment processors: GCash, Maya, GrabPay, BPI, BDO, and Metrobank may share transaction confirmation and account holder matching data necessary to process your deposits and withdrawals
• Fraud and AML screening services: Watchlist screening and transaction monitoring providers used to comply with Republic Act No. 9160 (Anti-Money Laundering Act) obligations
• PAGCOR: Regulatory data shared between 358jl and PAGCOR pursuant to licensing obligations

5 Purpose & Legal Basis for Processing

358jl processes your personal data for the following purposes, each grounded in a lawful basis under the Data Privacy Act of 2012:

• Account registration and management — necessary for the performance of the contract between you and 358jl (DPA Section 12(b))
• Identity verification and age confirmation (21+) — compliance with PAGCOR licensing requirements and legal obligation (DPA Section 12(c))
• Processing deposits and withdrawals — performance of contract and compliance with BSP payment regulations (DPA Section 12(b) and 12(c))
• Anti-money laundering monitoring and reporting — legal obligation under RA 9160 as amended (DPA Section 12(c))
• Responsible gaming interventions — legitimate interests and PAGCOR regulatory compliance; protection of player welfare (DPA Section 12(e))
• Customer support and dispute resolution — performance of contract and legitimate interests (DPA Section 12(b) and 12(e))
• Platform security and fraud prevention — legitimate interests of 358jl and protection of other players (DPA Section 12(e))
• Marketing communications — consent, which may be withdrawn at any time (DPA Section 12(a))
• Analytics and platform improvement — legitimate interests, subject to appropriate safeguards (DPA Section 12(e))
• Regulatory reporting to PAGCOR and government authorities — legal obligation (DPA Section 12(c))

6 Sharing Your Personal Data

358jl does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:

6.1 Service Providers and Sub-processors

358jl engages carefully selected third-party service providers to support platform operations. These include payment processors (GCash, Maya, GrabPay, BPI, BDO, Metrobank), identity verification and KYC providers, game software suppliers, cloud infrastructure providers, customer support tooling, and fraud detection and AML screening services. All sub-processors are subject to contractual data processing agreements that require them to process personal data only on 358jl's documented instructions, maintain appropriate security standards, and comply with the Data Privacy Act of 2012.

6.2 Regulatory and Legal Disclosure

358jl is required by law to disclose personal data to Philippine government agencies and regulators in specific circumstances, including:

• PAGCOR — for licensing compliance, player dispute escalation, and regulatory audit purposes
• Anti-Money Laundering Council (AMLC) — for covered and suspicious transaction reporting under RA 9160
• National Bureau of Investigation (NBI), Philippine National Police (PNP), or other law enforcement bodies — where 358jl is legally obligated or compelled by valid court order or subpoena
• National Privacy Commission (NPC) — for data breach notifications and compliance enquiries

Where permitted by law, 358jl will notify you of such disclosures, unless prohibited from doing so by the relevant legal authority.

6.3 Business Transfers

In the event that 358jl undergoes a merger, acquisition, restructuring, or sale of all or substantially all of its assets, personal data held by 358jl may form part of the transferred assets. Affected players will be notified in advance and will be provided an opportunity to exercise their rights under this Policy prior to any material change in the processing of their data.

7 Data Retention

358jl retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal, regulatory, and accounting obligations. The following retention guidelines apply:

• Account data and KYC documents: Retained for a minimum of five (5) years from the date of account closure, as required under PAGCOR licensing conditions and RA 9160 AML obligations
• Transaction and gaming activity records: Retained for five (5) years from the date of each transaction, consistent with PAGCOR audit trail requirements and Bureau of Internal Revenue (BIR) record-keeping obligations
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the communication relates to a formal dispute or legal proceeding, in which case it is retained until the matter is fully resolved
• Technical and log data: Retained for a rolling period of thirteen (13) months for security monitoring purposes
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with NPC guidelines on data disposal.

8 Security Measures

358jl implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the 358jl Platform
• Encryption of sensitive personal data at rest using industry-standard algorithms
• Role-based access controls restricting personal data access to authorised 358jl personnel on a documented need-to-know basis
• Multi-factor authentication for 358jl internal systems that process personal data
• Regular penetration testing and vulnerability assessments by independent security specialists
• Continuous monitoring of 358jl systems for anomalous access patterns and potential intrusions
• Data processing agreements with all third-party sub-processors, requiring equivalent security standards
• Internal data protection training for all 358jl staff who handle personal data

While 358jl takes all reasonable steps to protect your personal data, no digital transmission over the internet and no system of data storage can be guaranteed to be 100% secure. You share responsibility for protecting your account by maintaining a strong, unique password, enabling two-factor authentication, and logging out of the 358jl Platform on shared devices.

9 Cookies & Tracking Technologies

The 358jl Platform uses cookies, web beacons, pixel tags, and similar tracking technologies to provide core platform functionality, remember your preferences, maintain your authenticated session, prevent fraud, and analyse how Filipino players use the Platform to guide improvements.

9.1 Cookie Categories

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in to your 358jl account, security cookies that prevent cross-site request forgery, and load-balancing cookies. These cannot be disabled.
• Functional Cookies: Remember your preferences such as display settings, preferred language, and last visited game category. Disabling these may affect Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform — which pages are visited most, session durations, and game engagement patterns. This data helps 358jl improve the Platform experience for Filipino users.
• Fraud Prevention Cookies: Used alongside server-side monitoring to detect and prevent fraudulent activity, account takeover attempts, and bot traffic.

9.2 Managing Cookies

You may manage non-essential cookie preferences through the cookie preferences panel accessible from the 358jl Platform footer. You can also configure your browser to block or delete cookies; however, blocking strictly necessary cookies will prevent you from accessing authenticated features of the Platform, including your 358jl account.

10 Minors and Age Restriction

The 358jl Platform is strictly restricted to individuals who are twenty-one (21) years of age or older, pursuant to PAGCOR regulations and Republic Act No. 9287 (as amended). 358jl does not knowingly collect personal data from persons under 21 years of age.

Parents and guardians who believe a minor under their care has registered on the 358jl Platform should contact 358jl support immediately at [email protected]. 358jl will investigate and take appropriate action as a matter of urgency.

11 Your Data Privacy Rights

Under Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by 358jl:

To exercise any of the above rights, please submit a written request to 358jl's Data Protection Officer at [email protected], clearly marking the subject line "Data Privacy Rights Request." 358jl will acknowledge your request within five (5) business days and aim to fulfil it within thirty (30) calendar days, unless the request is complex or high in volume, in which case the period may be extended by a further thirty (30) days with prior notice.

358jl reserves the right to decline requests that are manifestly unfounded, excessive, or that would require the deletion of data that must be retained under applicable law (e.g., AML record-keeping obligations). Reasons for any such refusal will be provided in writing.

12 International Data Transfers

In the course of operating the 358jl Platform, personal data may be transferred to and processed in countries other than the Philippines — principally where third-party service providers (such as cloud infrastructure providers and game software suppliers) maintain their primary data processing operations. Such transfers are governed by appropriate safeguards including:

• Data processing agreements incorporating the NPC's standard contractual clauses or equivalent contractual protections
• Transfers only to jurisdictions recognised by the NPC as providing an adequate level of data protection
• Binding corporate rules where applicable within corporate group structures

Where personal data is transferred internationally, 358jl ensures that the receiving entity is subject to data protection obligations that are substantially equivalent to those under the Data Privacy Act of 2012 and its IRR.

13 Changes to This Policy

358jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidelines, or 358jl's data processing practices. The "Last Updated" date at the top of this Policy will be revised upon each update.

Where amendments are material — meaning they significantly affect how 358jl processes your personal data or the rights available to you — 358jl will provide advance notice via a notification displayed upon your next login to the Platform and/or by email to your registered address. Your continued use of the Platform following the effective date of the amended Policy constitutes your acceptance of the changes. If you do not accept the amended Policy, you must discontinue use of the Platform and contact us to close your account.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to 358jl's processing of your personal data, please contact our Data Protection Officer:

Data Protection Officer, 358jl
Email: [email protected]
Subject Line: Data Protection Officer — Privacy Enquiry
Language: English or Filipino (Tagalog)
Response Time: 5 business days for acknowledgement; 30 calendar days for resolution

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated:

National Privacy Commission (NPC)
Website: privacy.gov.ph
Email: [email protected]
Address: 3rd Floor, Core G, GSIS Headquarters, Financial Center, Roxas Boulevard, Pasay City, Metro Manila

This Privacy Policy was last reviewed and published on 1 January 2026. All prior versions of the 358jl Privacy Policy are superseded by this document.