358jl Privacy Policy

1 Who We Are and How to Contact Us

This Privacy Policy is issued by 358jl ("358jl", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at https://358jl.bet. 358jl operates under a valid license issued by the Philippine Amusement and Gaming Corporation ("PAGCOR") and is subject to the jurisdiction of the Republic of the Philippines.

For all data privacy matters — including requests to exercise your rights as a data subject, queries about this Privacy Policy, or concerns about how your personal information is handled — you may contact 358jl's designated Data Protection Officer (DPO) at the email address displayed in the footer of this page. The DPO is responsible for overseeing 358jl's compliance with Republic Act 10173 (the Data Privacy Act of 2012) and the implementing rules and regulations issued by the National Privacy Commission (NPC).

This Privacy Policy applies to all personal information collected by 358jl in connection with your use of the 358jl platform, including through the website at https://358jl.bet, any 358jl mobile applications, live chat interactions, email correspondence, and telephone communications with 358jl customer support.

2 Personal Data We Collect

358jl collects personal data through several channels: directly from you during registration and account use; automatically through your interaction with the platform; and from third parties where required for identity verification or fraud prevention. The categories of personal data collected are as follows:

2.1 Registration and Account Data

When you register a 358jl account, we collect the following information which you provide voluntarily:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify the 21+ age requirement)
• Philippine mobile number and email address
• Residential address (barangay, city/municipality, province)
• Chosen username and encrypted password
• Preferred currency (Philippine Peso ₱)

2.2 Identity Verification (KYC) Data

To comply with PAGCOR's Know Your Customer requirements and the Anti-Money Laundering Act, 358jl collects copies of government-issued identification documents during the KYC verification process. Acceptable documents include Philippine Passport, SSS ID, UMID, Driver's License, PRC ID, PhilHealth ID, Voter's ID, and Postal ID. We may also collect a selfie or liveness verification image to confirm that the document belongs to the account holder.

2.3 Financial and Transaction Data

358jl records all financial transactions conducted through your account, including deposit amounts, withdrawal requests, GCash or Maya wallet reference numbers, BPI / BDO / Metrobank transfer references, transaction timestamps, and payment method identifiers. Full payment card or bank account numbers are never stored on 358jl's servers — payment processing is handled by PCI-DSS-compliant payment partners.

2.4 Gaming Activity Data

We record your gaming activity on the 358jl platform, including games played, wager amounts, game outcomes, session durations, and bonus participation history. This data is used for account management, responsible gaming monitoring, dispute resolution, and regulatory reporting to PAGCOR as required.

2.5 Technical and Device Data

When you access the 358jl platform, our systems automatically collect certain technical data, including your IP address, browser type and version, operating system, device type, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud prevention, platform optimisation, and geographic access control.

2.6 Communications Data

If you contact 358jl customer support via live chat or email, we retain records of those communications, including your queries, our responses, and any attachments shared, for quality assurance, staff training, and dispute resolution purposes.

3 How We Use Your Personal Data

358jl uses the personal data collected for the following specific purposes:

Purpose	Data Categories Used
Creating and managing your 358jl account	Registration data, KYC data
Verifying your identity and age (21+ compliance)	KYC data, date of birth, government ID
Processing deposits, withdrawals, and bonus payouts	Financial data, registration data
PAGCOR regulatory reporting and license compliance	Registration data, gaming data, financial data
Anti-Money Laundering monitoring and AMLC reporting	Financial data, KYC data, gaming data
Fraud detection and account security	Technical data, financial data, gaming data
Responsible gaming monitoring and intervention	Gaming data, registration data, communications data
Customer support and dispute resolution	Communications data, gaming data, financial data
Sending promotional communications (opt-in only)	Registration data, gaming data (for personalisation)
Platform performance and user experience improvement	Technical data, gaming data (aggregated/anonymised)

358jl does not use your personal data for any purpose that is incompatible with those listed above. If 358jl intends to process your personal data for a new purpose not covered by this policy, we will notify you in advance and, where required by law, seek your consent before proceeding.

4 Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012 and its implementing rules and regulations, 358jl processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions you accepted upon registering your 358jl account — including account creation, transaction processing, and customer support.
• Legal Obligation: Processing is required for 358jl to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and directives from the AMLC and NPC.
• Legitimate Interests: Processing serves 358jl's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and freedoms as a data subject.
• Consent: Where none of the above bases apply — primarily for optional marketing communications — 358jl will seek your express, informed, and freely given consent before processing. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5 Data Sharing and Third-Party Disclosure

5.1 Regulatory Bodies

358jl is legally required to share certain player data with PAGCOR as part of its licensing obligations, and with the Anti-Money Laundering Council (AMLC) for transactions that trigger mandatory reporting thresholds under the Anti-Money Laundering Act. These disclosures are not discretionary — they are obligations imposed by Philippine law. 358jl will inform you of any such disclosure where it is legally permissible to do so.

5.2 Payment Processing Partners

To process your deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and UnionBank, 358jl shares the minimum necessary financial information with accredited payment processors. All payment processing partners engaged by 358jl are required to comply with applicable Philippine data protection laws and PCI-DSS payment security standards. Data shared with payment partners is limited strictly to what is needed to complete your transaction.

5.3 KYC and Identity Verification Providers

358jl may engage third-party identity verification service providers to assist with KYC document verification and liveness checks. These providers act as data processors under 358jl's instructions and are contractually bound to process your KYC data solely for identity verification purposes on 358jl's behalf, in compliance with the Data Privacy Act.

5.4 Technology and Infrastructure Providers

358jl's platform is supported by cloud infrastructure, software, and security service providers who may process personal data in the course of delivering their services to 358jl. All such providers are engaged under data processing agreements that impose strict confidentiality and security obligations consistent with the Data Privacy Act.

5.5 No Commercial Data Sales

358jl does not sell, rent, lease, or otherwise commercially transfer your personal information to any third party for their own marketing, advertising, or commercial purposes. This prohibition is absolute and applies to all categories of personal data collected by 358jl.

5.6 Law Enforcement and Legal Process

358jl may disclose personal data to Philippine law enforcement authorities, courts, or other government bodies where required by a valid legal order, warrant, or statutory obligation. 358jl will notify the affected player of such a disclosure where permitted by law and where doing so would not compromise an ongoing investigation.

6 Cookies and Tracking Technologies

6.1 How 358jl Uses Cookies

The 358jl platform uses cookies and similar tracking technologies (local storage, session storage, pixel tags) to operate essential platform functions, maintain your login session, remember your preferences, and analyse platform performance. Cookies are small text files stored on your device by your browser.

6.2 Categories of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. You cannot opt out of strictly necessary cookies without ceasing to use the platform.
• Functional Cookies: Remember your language preferences, notification settings, and last-used payment method to improve your experience on return visits.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the 358jl platform, which games are most popular, and where technical errors occur. This data is used solely to improve the platform and is not linked to individual player identities.

6.3 Managing Cookies

You can control non-essential cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies via the Privacy or Security section of your browser preferences. Note that blocking strictly necessary cookies will impair your ability to log in and use the 358jl platform. 358jl does not use third-party advertising cookies or behavioural tracking cookies for cross-site advertising.

7 Data Retention

358jl retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC record-keeping requirements.
• Gaming activity records: Retained for three (3) years from the date of activity, or longer where required for an open dispute or regulatory investigation.
• Customer communications: Retained for two (2) years from the date of the communication, unless the communication relates to an unresolved dispute, in which case it is retained until the dispute is fully resolved.
• Technical and device data: Retained for twelve (12) months from collection, unless flagged as part of a fraud investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 358jl's data disposal procedures. You may request early deletion of your data subject to the exceptions described in Section 9 below.

8 Data Security Measures

358jl implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and the 358jl platform is encrypted using TLS 1.3 protocol. Connections over unencrypted HTTP are automatically redirected to HTTPS.
• Encryption at Rest: Personal data and financial records stored on 358jl servers are encrypted using AES-256 encryption. Encryption keys are managed through a dedicated key management system with strict access controls.
• Access Controls: Access to personal data within 358jl's internal systems is restricted based on role and business need. All access events are logged. Privileged access requires multi-factor authentication and is subject to quarterly review.
• Intrusion Detection: 358jl employs automated intrusion detection and prevention systems that monitor for anomalous access patterns, brute-force attacks, and data exfiltration attempts in real time.
• Security Assessments: 358jl conducts periodic vulnerability assessments and penetration testing of its platform infrastructure. Critical findings are remediated within defined service level timelines.
• Staff Training: All 358jl personnel with access to personal data complete mandatory data privacy and information security training upon onboarding and annually thereafter.

9 Your Rights as a Data Subject

As a registered 358jl player and Philippine data subject, you hold the following rights under the Data Privacy Act of 2012 (Republic Act 10173). To exercise any of these rights, contact 358jl's DPO at the email address in the footer. 358jl will respond to all valid rights requests within fifteen (15) business days.

If you believe that 358jl has handled your personal data unlawfully or failed to honour your data subject rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official government channels. 358jl will cooperate fully with any NPC inquiry or investigation.

10 Children and Minors

The 358jl platform is strictly for use by individuals who are 21 years of age or older, in accordance with PAGCOR regulations and Philippine gambling law. 358jl does not knowingly collect, process, or retain personal data from persons under 21 years of age. If 358jl discovers that an account has been registered by a person under the age of 21, the account will be immediately closed, all personal data associated with that account will be deleted (subject to any mandatory legal retention requirements), and any deposits made will be returned to the original payment source.

If you are a parent or guardian and believe that a minor has registered a 358jl account or provided personal data to 358jl, please contact our DPO immediately at the email address shown in the footer. We will investigate and take corrective action within twenty-four (24) hours.

11 Cross-Border Data Transfers

Some of 358jl's third-party service providers — including cloud infrastructure providers and KYC verification partners — may process personal data on servers located outside the Republic of the Philippines. Where such cross-border data transfers occur, 358jl ensures that adequate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act.

Safeguards for cross-border transfers may include: contractual clauses approved by the National Privacy Commission; binding corporate rules where the recipient is part of a corporate group; or transfers to jurisdictions whose data protection laws have been recognised as providing adequate protection by the NPC. Details of cross-border transfer arrangements are available on request from 358jl's DPO.

12 Changes to This Privacy Policy

358jl may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or improvements to our platform. Material changes — those that significantly affect how we use your personal data or the rights available to you — will be communicated to registered players via email notification to the registered address and via a prominent notice on the 358jl platform, at least seven (7) days before the revised policy takes effect.

Non-material changes, such as typographical corrections or clarifications that do not alter the substance of our data processing practices, may be made without advance notice. The "Effective Date" at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how 358jl protects your personal data.

Your continued use of the 358jl platform following the effective date of any material revision constitutes your acknowledgement of the updated Privacy Policy. If you do not agree with the revised policy, you must cease using the platform and request account closure before the effective date of the changes.

13 Contact Our Data Protection Officer

For all privacy-related inquiries, data subject rights requests, concerns about this Privacy Policy, or any other matter relating to how 358jl handles your personal information, please contact 358jl's designated Data Protection Officer through the following channels:

• Email: [email protected] — Please include "Data Privacy Request" in the subject line
• Live Chat: Available 24/7 on the 358jl platform — ask to be connected to the DPO team
• Response Time: All data subject rights requests are acknowledged within 24 hours and resolved within 15 business days

If you wish to escalate a privacy concern that has not been resolved to your satisfaction, you may file a complaint directly with the National Privacy Commission (NPC) of the Philippines through its official government channels. 358jl's full licensing and regulatory details are available on our About Us page.

For matters related to responsible gaming or account self-exclusion, please visit our Responsible Gaming page or contact our 24/7 support team directly.