vjll Casino Privacy Policy

vjll ("we," "us," "the Operator," or "vjll") is committed to protecting the privacy and personal data of every player who registers for and uses the vjll online casino and sportsbook platform. This Privacy Policy sets out in plain language how we handle your personal information from the moment you create an account through every interaction you have with the vjll platform.

This Policy applies to all personal data collected through the vjll website at vjll.org, including data collected during account registration, KYC verification, deposits and withdrawals, gameplay sessions, customer support interactions, and any marketing communications you consent to receive. It applies equally to players accessing vjll from Manila, Cebu, Davao, Quezon City, Makati, Iloilo, and everywhere else across the Philippines.

This Privacy Policy is governed by and should be read in conjunction with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). Where PAGCOR's licensing conditions impose additional data handling obligations on the Operator, those obligations are reflected in this Policy.

By registering for a vjll Account, you acknowledge that you have read, understood, and consented to the collection and processing of your personal data as described in this Policy. If you do not consent, you must not register for or use the vjll platform.

vjll operates as the data controller for all personal data collected through the vjll platform. As data controller, vjll determines the purposes and means of processing your personal information and bears primary responsibility for ensuring that processing is lawful, fair, and transparent under Republic Act No. 10173.

vjll holds an active PAGCOR (Philippine Amusement and Gaming Corporation) license covering all game categories offered on the platform. As a PAGCOR-licensed operator, vjll is subject to regulatory data obligations administered by both PAGCOR and the National Privacy Commission.

vjll has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy, ensuring NPC compliance, and serving as the primary point of contact for players exercising their rights under RA 10173. Contact details for the DPO are provided in Section 16 of this Policy.

vjll collects the following categories of personal data in the course of operating the platform:

vjll collects personal data through the following means:

• Directly from you — when you complete the registration form, submit KYC documents, initiate a deposit or withdrawal, contact customer support, respond to a survey, or update your account settings.
• Automatically — through cookies, web beacons, session logs, and analytics tools embedded in the vjll platform that record technical and usage data during each session. See Section 7 for details on cookies.
• From payment service providers — including GCash, Maya, BDO, BPI, Metrobank, and 7-Eleven CLiQQ, who transmit transaction confirmation data to vjll upon successful processing of deposits and withdrawals.
• From identity verification services — third-party KYC and facial verification providers who process submitted ID documents and return a verification outcome to vjll.
• From fraud prevention and AML screening services — including sanctions screening databases used to assess regulatory risk prior to account approval and ongoing transaction monitoring.
• From PAGCOR and other regulatory bodies — where regulatory instructions or compliance inquiries require the exchange of player data in accordance with applicable law.

Under the Philippine Data Privacy Act of 2012, vjll processes your personal data on the following legal bases:

• Performance of a contract — processing necessary to open and maintain your vjll Account, process deposits and withdrawals, provide access to games and betting markets, and fulfil our obligations under the Terms and Conditions.
• Compliance with a legal obligation — processing required to fulfil our obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), the Terrorism Financing Prevention and Suppression Act, and tax reporting requirements.
• Legitimate interests — processing necessary to detect and prevent fraud, protect platform security, improve the quality of our services, and manage our business operations, where those interests are not overridden by your fundamental rights and freedoms.
• Consent — processing for direct marketing communications (SMS, email, push notifications regarding vjll promotions), which you may withdraw at any time via your account settings without affecting your ability to use the platform.

vjll uses the personal data it collects for the following purposes:

• Creating and maintaining your vjll Account, including identity verification and age confirmation;
• Processing deposits, withdrawals, and internal fund transfers via GCash, Maya, BDO, BPI, Metrobank, 7-Eleven, and USDT;
• Providing access to all games and betting markets available on the vjll platform;
• Operating responsible gaming tools including deposit limits, session reminders, cool-off periods, and self-exclusion, which require ongoing monitoring of account activity;
• Complying with PAGCOR licensing conditions, including player record-keeping, reporting, and regulatory audit obligations;
• Conducting Anti-Money Laundering (AML) screening, transaction monitoring, and Enhanced Due Diligence (EDD) checks as required by Philippine law;
• Detecting, investigating, and preventing fraud, identity theft, collusion, bonus abuse, and other prohibited conduct;
• Responding to player support queries, complaints, and dispute resolution requests;
• Sending service-related communications — including deposit confirmations, withdrawal notifications, security alerts, and updates to this Policy or the Terms and Conditions;
• Sending promotional communications about vjll bonuses, games, and offers, where you have consented to receive such communications;
• Conducting internal analytics and platform improvement activities to enhance gameplay experience, site performance, and payment reliability;
• Fulfilling any legal obligation imposed by applicable Philippine law or valid regulatory order.

vjll does not use your personal data for automated individual decision-making that produces significant legal effects without human review, except where required by PAGCOR or AML compliance processes — in which case you retain the right to request human review of any such decision.

The vjll platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to maintain your authenticated session, and to collect anonymized usage data that helps us understand how players navigate the site.

vjll employs the following categories of cookies:

• Strictly Necessary Cookies — required for the platform to function. These enable your login session, maintain your game state, and ensure security features operate correctly. They cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies — collect anonymized data about page visits, session durations, and feature usage to help vjll identify performance issues and improve the platform. No personally identifiable information is collected through these cookies.
• Functional Cookies — remember your language preferences, display settings, and notification preferences to provide a more personalized experience on the vjll platform.
• Marketing Cookies — used only where you have provided explicit consent to receive personalized promotional communications from vjll. These cookies help us understand which promotional content is most relevant to you.

You can manage cookie preferences through your browser settings at any time. Note that disabling Strictly Necessary Cookies may prevent you from logging in to your vjll Account or accessing game features. vjll does not use third-party advertising network cookies and does not permit external advertising platforms to set cookies on the vjll platform.

vjll may share your personal data with the following categories of recipients:

• PAGCOR — as required by our operating license, including player records, transaction data, and any information requested in the context of a regulatory audit, compliance review, or player complaint investigation.
• Anti-Money Laundering Council (AMLC) — where we are legally obligated to report suspicious transactions or respond to lawful requests under the Anti-Money Laundering Act.
• Payment Service Providers — GCash, Maya, BDO, BPI, Metrobank, 7-Eleven CLiQQ, and USDT network processors, to the extent necessary to process your deposits and withdrawals.
• Identity Verification and KYC Providers — third-party services that perform document verification and facial matching as part of the PAGCOR-mandated KYC process. These providers process data solely on vjll's instructions and are bound by data processing agreements consistent with RA 10173.
• Game Technology Providers — including Pragmatic Play, PG Soft, JILI, Evolution Gaming, and other game studios, who may receive anonymized game session data for integrity monitoring and RNG audit purposes. These providers do not receive your identity or financial data.
• IT Infrastructure and Security Providers — cloud hosting, cybersecurity, and platform monitoring services that process technical data on vjll's behalf under binding data processing agreements.
• Law Enforcement and Courts — where vjll is required by a valid court order, search warrant, or lawful law enforcement request to disclose player information under Philippine law.
• Professional Advisers — legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

Some of vjll's technology service providers and game platform partners operate servers or data processing infrastructure outside the Philippines. Where your personal data is transferred to a jurisdiction outside the Philippines, vjll takes the following measures to ensure adequate protection:

• vjll executes data processing agreements with all international recipients that incorporate data protection standards consistent with RA 10173 and the NPC's guidelines on cross-border data transfers.
• Where technically feasible, vjll instructs service providers to process Philippine player data on servers located within the Philippines or within jurisdictions recognized by the NPC as providing adequate data protection.
• All international data processing arrangements are documented and disclosed to the NPC in vjll's Privacy Management Program as required under RA 10173.

By using the vjll platform, you acknowledge and consent to the transfer of your personal data to vjll's international service providers as described in this section, subject to the protections outlined above.

vjll retains personal data for as long as necessary to fulfil the purposes described in this Policy, to comply with applicable legal and regulatory retention requirements, and to resolve disputes and enforce agreements. Specific retention periods are as follows:

• Account and Identity Data — retained for the duration of your active Account and for a minimum of 5 years following account closure, consistent with PAGCOR licensing requirements and the Anti-Money Laundering Act's record-keeping obligations.
• Financial Transaction Records — retained for a minimum of 5 years from the date of each transaction, as required by AML and PAGCOR compliance obligations.
• KYC Documents (including ID images and selfie photographs) — retained for the minimum period required by PAGCOR's KYC compliance framework, currently 5 years from the date of verification or account closure, whichever is later.
• Customer Support Records — retained for 3 years from the date of the interaction unless the matter involves an ongoing dispute or legal claim, in which case records are retained until final resolution.
• Technical and Usage Data — retained in anonymized or aggregated form for up to 2 years for platform analytics purposes.
• Marketing Consent Records — retained for the duration of your consent and for 3 years following withdrawal of consent as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with vjll's data disposal procedures.

vjll implements technical and organisational security measures designed to protect your personal data from unauthorized access, disclosure, alteration, loss, or destruction. These measures include, without limitation:

• Encryption — all data transmitted between your device and the vjll platform is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including KYC documents and financial records, is encrypted using AES-256 or equivalent standards.
• Access Controls — access to personal data is restricted on a strict need-to-know basis. Administrative access to sensitive data systems requires multi-factor authentication and is logged for audit purposes.
• OTP Authentication — vjll player accounts are protected by OTP (One-Time Password) verification for sensitive account actions, including password changes and withdrawal method updates.
• Intrusion Detection and Monitoring — vjll's platform is monitored continuously by security systems designed to detect and respond to unauthorized access attempts, anomalous behavior, and data breach indicators.
• Vendor Security Assessments — all third-party data processors are subject to security assessment prior to engagement and are contractually required to maintain security standards consistent with vjll's obligations under RA 10173.
• Data Breach Response — vjll maintains a documented Personal Data Breach Response Plan. In the event of a breach likely to result in harm to affected players, vjll will notify the NPC within 72 hours of becoming aware of the breach and will notify affected players without undue delay, as required by RA 10173.

While vjll takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. Players are encouraged to maintain the security of their own account credentials and to report any suspicious account activity to vjll's support team immediately.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by vjll:

• Right to be Informed — you have the right to be informed that your personal data is being collected and processed, including the purpose of processing and the identity of the data controller. This Privacy Policy fulfils that obligation.
• Right to Access — you have the right to request a copy of the personal data vjll holds about you, and to receive information about how that data is being processed.
• Right to Correction (Rectification) — you have the right to request correction of inaccurate, incomplete, or outdated personal data held in your vjll Account. Minor corrections (such as contact details) can be made directly from Account Settings.
• Right to Erasure or Blocking — you have the right to request the deletion or blocking of your personal data in circumstances where processing is unlawful or no longer necessary for the stated purpose, subject to vjll's legal retention obligations under PAGCOR and AML requirements.
• Right to Object — you have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your specific situation justifies it.
• Right to Data Portability — you have the right to receive a copy of your personal data in a commonly used, machine-readable format, and to transmit that data to another controller, where technically feasible.
• Right to Damages — you have the right to claim compensation for damages arising from a breach of your rights under RA 10173 where vjll is found to be liable.
• Right to File a Complaint — you have the right to file a complaint with the National Privacy Commission (NPC) if you believe vjll has violated your rights under RA 10173. NPC contact details are publicly available on the NPC's official government website.

Age verification is conducted at the point of registration using date of birth information and is confirmed through the KYC process. Where vjll discovers that an Account has been registered by, or personal data has been collected from, an individual under 21 years of age, vjll will immediately close that Account, return any deposited funds to the payment source (subject to AML verification), and delete all personal data associated with that Account without delay.

If you believe that vjll has inadvertently collected personal data from a person under 21, please contact the Data Protection Officer immediately at [email protected].

The vjll platform does not contain links to external third-party websites for commercial or advertising purposes. Where any reference to a regulatory body or external organization is made within the platform — such as PAGCOR or the National Privacy Commission — vjll does not control or operate those external websites and is not responsible for their privacy practices or content.

Players who access third-party payment platforms (such as the GCash or Maya applications) to complete deposits or withdrawals are subject to those platforms' own privacy policies. vjll encourages players to review the privacy policies of all payment platforms they use.

vjll reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, PAGCOR regulatory guidance, or NPC issuances. The effective date at the top of this document reflects when the current version came into force.

Where amendments are material — meaning they significantly affect how we process your personal data or your rights as a data subject — vjll will notify active players via email or in-platform notification at least 14 days before the amended Policy takes effect. Continued use of the vjll platform following notification of an amendment constitutes acceptance of the revised Privacy Policy.

The current version of this Privacy Policy is always accessible from the footer of every page on the vjll platform.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by vjll, please contact our Data Protection Officer through the following channels:

• DPO Email: [email protected] (plain text — not a clickable link)
• General Support Email: [email protected]
• Live Chat: Available 24/7 via the support function on the vjll platform.
• Account Settings: Formal data subject rights requests may also be submitted through the Privacy & Data section of your vjll Account settings.

vjll acknowledges all privacy-related correspondence within 48 hours. Rights requests under Section 12 are handled within 30 calendar days. Complex requests involving large volumes of data may require up to 60 days, in which case vjll will notify you of the extended timeline and the reason for it.