e3jl Casino – Privacy Policy

This Privacy Policy ("Policy") is published by e3jl Casino ("e3jl," "we," "us," or "our"), the operator of the online gaming platform at https://e3jl.club and its associated subdomains and mobile web interfaces (the "Platform"). This Policy describes how e3jl collects, processes, stores, shares, and protects personal data relating to individuals who register accounts, visit the Platform, or otherwise interact with e3jl's services.

e3jl acts as the Data Controller for personal data processed under this Policy, as defined in Republic Act 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations. We are also subject to PAGCOR's data-handling requirements as a condition of our operating license.

This Policy should be read alongside e3jl's Terms & Conditions and Responsible Gaming Policy, which together govern your use of the Platform.

e3jl collects personal data through several channels: directly from you during registration and account use, automatically through your use of the Platform, and from third-party identity verification and payment providers. The categories of data we collect are set out below.

e3jl does not intentionally collect sensitive personal information as defined under RA 10173 — such as health data, political opinions, religious beliefs, or biometric data — unless specifically required for identity verification purposes and with your explicit consent.

e3jl processes your personal data for the following purposes:

• Account Management: Creating and maintaining your e3jl account, authenticating your identity at login, and processing account recovery requests.
• Service Delivery: Processing deposits and withdrawals, crediting winnings, applying bonuses, and providing access to all games and features on the e3jl Platform.
• KYC and Fraud Prevention: Verifying your identity and age (21+), detecting and preventing fraudulent account activity, money laundering, and unauthorized access, as required by PAGCOR and the Anti-Money Laundering Act.
• Customer Support: Responding to queries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
• Responsible Gaming: Monitoring gaming patterns to identify problem gambling indicators, applying player-requested deposit limits and self-exclusions, and providing access to responsible gaming tools.
• Legal and Regulatory Compliance: Fulfilling reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies.
• Platform Improvement: Analyzing aggregate usage data to improve the e3jl user experience, optimize game loading, and identify technical issues.
• Marketing Communications: Sending promotional offers and updates via SMS or email where you have provided consent or where permitted under applicable law. You may opt out at any time.

Under the Data Privacy Act of 2012, e3jl relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and e3jl — including account creation, game access, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting requirements, tax obligations, and other applicable Philippine law.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming oversight — where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications, where required. You may withdraw consent at any time without affecting the lawfulness of prior processing.

e3jl does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly as necessary and subject to appropriate data protection safeguards:

• Payment Processors: GCash (GXI), PayMaya (Voyager Innovations), BDO, BPI, Metrobank, and other payment service providers — for the purpose of processing deposits and withdrawals. These providers process data under their own privacy policies and applicable Philippine financial regulations.
• Game Providers: Third-party game studios (including JILI, Pragmatic Play, and similar providers) whose game content is hosted on or integrated with the e3jl Platform. These providers may receive limited session and bet data to facilitate gameplay.
• Identity Verification Services: Third-party KYC and age verification providers engaged by e3jl to verify account holder identity and comply with PAGCOR requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory order.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and fraud detection vendors acting as data processors under written agreements that bind them to confidentiality and DPA-compliant data handling.
• Professional Advisors: Legal, accounting, and compliance consultants under strict confidentiality obligations.

The e3jl Platform uses cookies and similar tracking technologies to deliver a functional user experience, maintain login sessions, and analyze platform usage. Cookies are small text files placed on your device when you access the Platform.

The types of cookies used by e3jl include:

• Strictly Necessary Cookies: Essential for platform operation — session authentication, security tokens, and load balancing. These cannot be disabled without preventing core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytical Cookies: Collect aggregated data about how players use the e3jl Platform — pages visited, session duration, and error logs — to help us improve the service. Data collected is anonymized where possible.
• Session Tracking: Monitor active gambling sessions for responsible gaming purposes, including session duration notifications where you have enabled this feature.

e3jl retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following retention periods apply:

• Active Account Data: Retained for the duration of your account's existence plus 5 years following account closure, as required by PAGCOR regulations and AMLA record-keeping obligations.
• KYC and Identity Documents: Retained for a minimum of 5 years from the date of collection or last transaction, in compliance with AMLA requirements (Republic Act 9160 as amended).
• Financial Transaction Records: Retained for 5 years from the date of each transaction in accordance with AMLA regulations.
• Customer Support Records: Retained for 2 years from the date of the final interaction, unless a longer period is required for ongoing dispute resolution.
• Technical and Log Data: Server logs and IP records retained for 12 months. Aggregated, anonymized analytics data may be retained indefinitely.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymized. Where deletion is not immediately possible due to backup cycles or legal hold requirements, the data will be isolated and protected from further processing until deletion can be completed.

e3jl implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• Transport Security: All communication between your device and e3jl's servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Password Hashing: Account passwords are stored as salted cryptographic hashes. e3jl never stores plain-text passwords.
• Two-Factor Authentication: OTP-based two-factor authentication is available and encouraged for all e3jl accounts, providing an additional security layer beyond the username and password.
• Access Controls: Internal access to personal data is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and undergo data privacy training.
• Infrastructure Security: e3jl's servers operate behind enterprise-grade firewalls and are monitored for intrusion attempts around the clock. Regular penetration testing and security audits are conducted.
• Payment Data Handling: Full payment account numbers are never stored on e3jl's systems. Payment transactions are processed by PCI-DSS compliant third-party payment providers.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by e3jl. To exercise any of these rights, contact our Data Privacy Officer (see Section 13).