Privacy Policy – aaa39jl Casino

1. Who We Are — Data Controller

aaa39jl Casino ("aaa39jl," "the Company," "we," "us," "our") is the data controller responsible for the personal information you provide through the aaa39jl platform at aaa39jl.club. aaa39jl operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the data protection obligations imposed by Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations issued by the National Privacy Commission ("NPC").

We have appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may direct any privacy-related queries or concerns to our DPO via the contact details set out in Section 13 of this Policy.

2. Personal Data We Collect

aaa39jl collects personal data in the following categories, to the extent necessary for the purposes described in this Policy:

aaa39jl does not collect sensitive personal information (as defined under the DPA) unless required for a specific regulatory obligation — for example, health information relevant to responsible gaming assessments, where applicable.

3. How We Collect Your Data

aaa39jl collects personal data through the following means:

• Directly from you: When you register an aaa39jl account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automatically through the platform: Technical and usage data is collected automatically when you access and navigate the aaa39jl platform, through server logs, cookies, and similar tracking technologies (see Section 7).
• From third parties: Where necessary, aaa39jl may receive data from payment service providers (such as GCash, PayMaya, BPI, and BDO) to verify payment method ownership; from identity verification service providers engaged to assist with KYC compliance; and from PAGCOR or other regulatory authorities in the context of our licensing obligations.

4. Purposes and Legal Basis for Processing

aaa39jl processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes and corresponding legal bases are as follows:

• Account registration and management — necessary for the performance of the player agreement between you and aaa39jl.
• Identity and age verification (KYC) — required by PAGCOR regulations and applicable Philippine anti-money laundering laws; processing is necessary for compliance with a legal obligation.
• Processing deposits and withdrawals — necessary for the performance of the player agreement.
• Fraud prevention, anti-money laundering, and security monitoring — necessary for compliance with legal obligations and aaa39jl's legitimate interest in protecting the platform and its players.
• Customer support and communications — necessary for the performance of the player agreement and aaa39jl's legitimate interest in maintaining player satisfaction.
• Responsible gaming monitoring — required by PAGCOR responsible gaming obligations; aaa39jl has a legitimate interest in protecting vulnerable players.
• Marketing and promotions — based on your consent, which you may withdraw at any time without affecting the lawfulness of prior processing.
• Platform improvement and analytics — aaa39jl's legitimate interest in maintaining and improving the platform for Filipino players.
• Regulatory reporting — necessary for compliance with PAGCOR reporting requirements and other applicable Philippine laws.

5. Data Retention

aaa39jl retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• KYC and identity documents: Retained for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR requirements.
• Account and gameplay data: Retained for the duration of the account relationship and for three (3) years following account closure, or as otherwise required by regulation.
• Customer support communications: Retained for two (2) years from the date of each interaction, unless a longer period is required for ongoing dispute resolution.
• Technical and usage data: Typically retained for twelve (12) months, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, aaa39jl will securely delete or irreversibly anonymise your personal data in accordance with its data destruction policy.

6. Disclosure of Personal Data to Third Parties

aaa39jl does not sell or rent your personal data to third parties. We may disclose your personal data to the following categories of recipients, strictly to the extent necessary and under appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to assist aaa39jl in verifying player identity and age in compliance with PAGCOR and AML requirements.
• IT and platform service providers: Cloud hosting, cybersecurity, and infrastructure service providers who process data on aaa39jl's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities, where aaa39jl is required by law to disclose information.
• Game content providers: Certified game studios whose products are offered through the aaa39jl platform may receive limited technical data necessary for game functionality.

All third-party service providers who receive personal data from aaa39jl are contractually bound to process such data only as instructed by aaa39jl and in accordance with applicable data protection laws.

7. Cookies and Tracking Technologies

aaa39jl uses cookies and similar tracking technologies to operate the platform, personalise the player experience, and analyse usage patterns. The categories of cookies used are:

• Strictly necessary cookies: Required for the platform to function, including session management and security features. These cannot be disabled.
• Functional cookies: Enable personalisation features such as language preferences, saved login state ("Remember me"), and UI preferences.
• Analytical cookies: Allow aaa39jl to understand how the platform is used — which pages are visited, how long players stay, and where errors occur — enabling platform improvements.
• Marketing cookies: Used to deliver relevant promotions to aaa39jl players based on browsing and gaming behaviour. These are only activated with your prior consent.

You may control non-essential cookies through your browser settings. Disabling certain cookies may affect platform functionality. For Internet Explorer, Chrome, Firefox, Safari, and Edge, cookie management instructions are available in each browser's help documentation.

8. Data Security Measures

aaa39jl implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• TLS 1.3 encryption for all data in transit between your device and aaa39jl's servers.
• AES-256 encryption for all sensitive personal data stored on aaa39jl's infrastructure.
• Multi-factor authentication for all administrative access to systems containing personal data.
• Role-based access controls ensuring that personal data is accessible only to aaa39jl staff with a legitimate operational need.
• Regular penetration testing and vulnerability assessments conducted by qualified third-party security professionals.
• Comprehensive access logging and anomaly detection to identify potential security incidents.
• Player-facing security features including login OTP verification, device recognition, and session management.

Notwithstanding these measures, no system is entirely immune to security risks. aaa39jl encourages players to take responsibility for their own account security, including using strong passwords and enabling two-factor authentication.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by aaa39jl:

• Right to be Informed: The right to be told what personal data aaa39jl collects, how it is used, and with whom it is shared — as set out in this Policy.
• Right to Access: The right to request a copy of the personal data aaa39jl holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most information directly from your aaa39jl account settings.
• Right to Erasure: The right to request deletion of your personal data, subject to aaa39jl's legal obligations to retain certain data (e.g., KYC and transaction records).
• Right to Object: The right to object to processing based on aaa39jl's legitimate interests, and to opt out of direct marketing at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact aaa39jl's Data Protection Officer using the contact details in Section 13. aaa39jl will respond to all valid requests within fifteen (15) days from receipt, as required by NPC regulations. Complex requests may take up to thirty (30) days; you will be notified if an extension is required.

10. Children's Privacy and Age Restrictions

The aaa39jl platform is strictly intended for individuals aged 21 years and above in accordance with PAGCOR regulations governing online gaming in the Philippines. aaa39jl does not knowingly collect personal data from individuals below this age.

aaa39jl conducts age verification during the account registration and KYC processes. If aaa39jl becomes aware that personal data has been collected from a person below 21 years of age, the relevant account will be suspended and the personal data will be deleted in accordance with our data retention policy, except where retention is required to document the violation for regulatory purposes.

If you believe that an underage individual has registered an account with aaa39jl, please notify us immediately at the contact details listed in Section 13.

11. Cross-Border Data Transfers

aaa39jl's primary data processing operations are based in the Philippines. However, certain service providers engaged by aaa39jl may be located outside the Philippines. Where personal data is transferred to recipients in other jurisdictions, aaa39jl ensures that appropriate safeguards are in place in accordance with the DPA and NPC guidelines, including:

• Data processing agreements incorporating NPC-prescribed standard contractual clauses.
• Transfer only to jurisdictions that provide an adequate level of data protection as recognised by the NPC.
• Your explicit consent, where required by applicable law.

12. Updates to This Privacy Policy

aaa39jl may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, aaa39jl will:

• Update the "Last updated" date at the top of this page.
• Where required by law, notify you by email to your registered address and/or via a prominent notice on the aaa39jl platform.

Your continued use of the aaa39jl platform following notification of an update to this Policy constitutes your acceptance of the revised terms. If you disagree with the updated Policy, you should close your account and cease using the platform.

13. Contact Us — Data Protection Officer

If you have questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by aaa39jl, please contact our Data Protection Officer:

• Email: support aaa39jl.club (plain text — not a clickable link)
• Live Chat: Available 24/7 within the aaa39jl platform. Filipino-speaking agents are available for Tagalog-language privacy inquiries.
• Response time: Privacy-related inquiries are treated as priority communications and are typically acknowledged within 24 hours.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that aaa39jl has violated your data privacy rights. Information on how to file a complaint with the NPC is available on the NPC's official website.