Privacy Policy — 576jl

Introduction

576jl ("we," "us," or "our") operates the online gaming platform accessible at https://576jl.net and is committed to protecting the privacy and personal data of all users ("you," "Player," or "data subject") who access or use our services. This Privacy Policy sets out in clear, plain language how 576jl collects, processes, stores, discloses, and protects your personal information.

This policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and relevant issuances of the National Privacy Commission (NPC) of the Philippines. Where applicable, it also reflects obligations arising from PAGCOR's licensing framework for online gaming operators.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the 576jl Platform and are incorporated herein by reference.

Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" — any information from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual.
• "Sensitive Personal Information" — personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic or sexual life, or proceedings for any offense committed or alleged to have been committed by such person, and the disposal of such proceedings, or the sentence of any court in such proceedings.
• "Processing" — any operation or set of operations performed upon personal data including, but not limited to, the collection, recording, organization, storage, updating or modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction of data.
• "Data Controller" — 576jl, as the entity that controls the collection and processing of personal data on the Platform.
• "Data Processor" — any natural or legal person, or any other body, public authority, agency, or any other instrumentality that processes personal data on behalf of 576jl.
• "Data Protection Officer" or "DPO" — the designated individual within 576jl responsible for ensuring compliance with RA 10173 and this Privacy Policy.
• "NPC" — National Privacy Commission of the Philippines, the independent government body mandated to administer and implement RA 10173.
• "PAGCOR" — Philippine Amusement and Gaming Corporation, the regulatory authority overseeing online gaming operations.
• "KYC" — Know Your Customer; the identity verification process required before real-money deposits, withdrawals, or bonus claims are processed.

Data We Collect

576jl collects personal data through multiple touchpoints throughout your use of the Platform. We collect only what is necessary, proportionate, and relevant to the specific purpose for which it is gathered.

3.1 Registration Data

When you create a 576jl Account, we collect: full legal name, date of birth, nationality, residential address (including city — e.g., Manila, Cebu, Davao, Makati, or Quezon City), email address, and mobile number. This information is required to open an account and cannot be omitted.

3.2 KYC and Identity Verification Data

To comply with PAGCOR regulations and Anti-Money Laundering Act (AMLA) obligations, we collect government-issued photo ID documents (such as PhilSys National ID, passport, driver's license, SSS/GSIS ID, or Voter's ID), proof of address documents, and in some cases, source of funds declarations. These documents constitute Sensitive Personal Information under RA 10173 and are handled with the highest level of protection.

3.3 Financial Transaction Data

We collect payment method details, transaction history, deposit and withdrawal amounts (in Philippine Peso / PHP), GCash or PayMaya mobile numbers used for transactions, and bank account details provided for BPI, BDO, or Metrobank transfers. We do not store full credit or debit card numbers — only tokenized references are retained.

3.4 Gaming Activity Data

We maintain records of your gaming sessions, game types played (slots, bingo, live dealer, Royal Fishing, HRG Live, sabong, sports betting), bet amounts, win/loss history, session durations, responsible gaming tool usage, and self-exclusion requests. This data is used for platform integrity, compliance, and responsible gaming purposes.

3.5 Technical and Device Data

We automatically collect IP address, device type and operating system, browser type and version, geolocation data (city/region level), session timestamps, pages visited, and referral URLs. This data is collected via server logs and first-party analytics tools.

3.6 Communications Data

If you contact our support team via live chat or email, we retain records of those communications including the content of messages, timestamps, and resolution notes. This helps us maintain service quality and handle disputes fairly.

3.7 Data Collection Summary

Purpose of Processing

576jl processes your personal data for the following specific, legitimate, and declared purposes:

• Account Creation and Management — to register your account, authenticate your identity at login, and maintain your account in good standing.
• KYC and Regulatory Compliance — to verify that you meet the minimum age requirement (21+) as mandated by PAGCOR, and to fulfill obligations under the Anti-Money Laundering Act (RA 9160 as amended) and other applicable Philippine laws.
• Payment Processing — to facilitate deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and USDT, and to maintain transaction records for financial reporting purposes.
• Gameplay and Platform Services — to deliver gaming services including slots, bingo, live dealer, Royal Fishing, HRG Live, and sports betting, and to maintain game integrity and fair play.
• Responsible Gaming — to monitor gaming patterns and enforce responsible gaming tools such as deposit limits, session limits, and self-exclusion periods in accordance with PAGCOR requirements.
• Fraud Prevention and Security — to detect, investigate, and prevent fraud, money laundering, bonus abuse, and unauthorized account access.
• Customer Support — to respond to your inquiries, process complaints, and resolve disputes through our support channels.
• Marketing Communications — to send you promotional offers, bonus notifications, and platform updates, where you have given separate explicit consent. You may opt out at any time.
• Legal and Regulatory Reporting — to comply with reporting obligations to PAGCOR, AMLC, NPC, and other Philippine government bodies as required by law.
• Platform Analytics and Improvement — to analyze aggregated, anonymized usage data to improve the user experience, game performance, and platform reliability.

Legal Basis for Processing

Under Section 12 of RA 10173, 576jl relies on the following legal bases for processing your personal data:

• Consent — For marketing communications and certain optional features, we process your data based on your freely given, specific, and informed consent.
• Contractual Necessity — For account management, payment processing, and delivery of gaming services, processing is necessary to perform our contract with you as set out in our Terms & Conditions.
• Legal Obligation — For KYC, AML reporting, and PAGCOR compliance, processing is required by applicable Philippine law and cannot be waived or opted out of.
• Legitimate Interests — For fraud detection, platform security, and gaming analytics, we process data based on 576jl's legitimate interests in operating a secure, fair, and compliant gaming platform, balanced against your rights and reasonable expectations as a player.

Data Sharing & Third Parties

576jl does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data only in the following specific circumstances:

6.1 Payment Service Providers

To process deposits and withdrawals, we share necessary financial data with GCash, PayMaya, BPI, BDO, Metrobank, Visa/Mastercard acquiring banks, and USDT wallet processors. These providers are contractually bound to process your data only for payment purposes and under equivalent data protection obligations.

6.2 Game Content Providers

Some games on the 576jl Platform are powered by third-party software providers. These providers may receive session tokens and anonymized player identifiers to deliver game content. They do not receive your full identity or financial data unless required for specific game regulatory compliance.

6.3 Regulatory and Law Enforcement Bodies

576jl is legally obligated to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities when required by law, court order, or regulatory directive. We will notify you of such disclosures where permitted by law.

6.4 Professional Advisors

We may share your data with lawyers, auditors, accountants, or other professional advisors where necessary for compliance, dispute resolution, or corporate governance purposes. All such advisors are bound by professional confidentiality obligations.

Data Retention

576jl retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention schedule is as follows:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification.

Data Security

576jl implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS 1.3. Sensitive personal data and financial records stored at rest are encrypted using AES-256.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo data privacy training and are bound by confidentiality obligations.
• Infrastructure Security: Our platform infrastructure is hosted in secure data centers with physical access controls, redundant power, and fire suppression systems. Regular penetration testing and vulnerability assessments are conducted by independent third parties.
• Account Security: We support two-factor authentication (2FA) for player accounts and employ real-time anomaly detection to flag suspicious login attempts.
• KYC Document Handling: Identity documents submitted for KYC verification are stored in isolated, access-controlled vaults separate from general account data, with automatic encryption applied upon receipt.

Cookies & Tracking Technologies

576jl uses cookies and similar tracking technologies on the Platform for the following limited purposes:

9.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable session management, authentication state, and security features such as CSRF protection. These cannot be disabled without breaking core Platform functionality.

9.2 Analytics Cookies

We use first-party analytics cookies to understand how players use the Platform in aggregate — which pages are most visited, where users navigate from, and which games are most popular. This data is anonymized and used solely to improve Platform performance and user experience. We do not use Google Analytics or other third-party analytics tools that share data externally.

9.3 No Advertising Trackers

576jl does not deploy third-party advertising cookies, retargeting pixels, Facebook Pixel, or any cross-site tracking technology. We do not participate in programmatic advertising networks that use behavioral profiling.

9.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling essential cookies may prevent you from logging in or using core Platform features. For instructions specific to your browser, refer to your browser's help documentation.

Minors & Age Policy

The 576jl Platform is strictly intended for individuals aged 21 years and above, as required by PAGCOR regulations. We do not knowingly collect personal data from individuals under 21 years of age.

Parents and guardians who believe their child may have registered on the 576jl Platform should contact our Data Protection Officer immediately at the contact details provided in Section 15 of this policy.

Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), every Filipino data subject is entitled to the following rights with respect to their personal data held by 576jl. We are committed to honoring these rights promptly and transparently.

How to Exercise Your Rights

To exercise any of the above rights, send a written request to our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." Include your full name, registered email address, and a clear description of the right you wish to exercise. We will acknowledge your request within 72 hours and respond substantively within 15 business days, consistent with NPC guidelines.

If you believe your rights have been violated, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines at [email protected] or visit the NPC website at privacy.gov.ph.

International Data Transfers

In limited circumstances, personal data processed by 576jl may be transferred to or accessed by parties located outside the Philippines — for example, where a game content provider or infrastructure vendor maintains servers or operations in another jurisdiction.

When such transfers occur, 576jl ensures that appropriate safeguards are in place consistent with Section 21 of RA 10173 and NPC Circular No. 16-01, including:

• Data Processing Agreements (DPAs) that require recipient parties to maintain equivalent data protection standards.
• Standard contractual clauses approved by the NPC or internationally recognized equivalents.
• Transfer only to jurisdictions that provide an adequate level of protection for personal data, as assessed by the NPC.

Data Breach Protocol

Despite our robust security measures, no system can guarantee absolute immunity from security incidents. In the event of a personal data breach that poses a real risk of serious harm to data subjects, 576jl will act swiftly in accordance with NPC Circular No. 16-03 on Personal Data Breach Management:

• Internal Response: Our security team will contain the breach, assess its scope and impact, and implement remediation measures within 24 hours of discovery.
• NPC Notification: We will notify the National Privacy Commission within 72 hours of becoming aware of a reportable breach, providing all required information under NPC Circular 16-03.
• Player Notification: Affected data subjects will be notified promptly — and in no case later than 7 calendar days from the discovery of the breach — with details of what happened, what data was affected, and what steps 576jl and the affected players should take to mitigate harm.
• Post-Incident Review: Following any reportable breach, 576jl will conduct a thorough root cause analysis and implement corrective measures to prevent recurrence.

Policy Amendments

576jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business operations, or Platform features. When material changes are made, we will notify registered players via email and/or a prominent notice on the Platform at least 14 days before the changes take effect.

The "Last Updated" date at the top of this document will always reflect the most recent revision. Your continued use of the 576jl Platform after the effective date of any amendment constitutes your acceptance of the revised policy. If you do not agree to the amended terms, you must stop using the Platform and may request account closure in accordance with our Terms & Conditions.

We encourage you to review this Privacy Policy periodically so that you remain informed about how we are protecting your personal data.

Contact & Data Protection Officer

576jl has designated a Data Protection Officer (DPO) in compliance with Section 21(c) of RA 10173 and NPC Circular No. 17-01. The DPO is responsible for overseeing 576jl's data protection program, ensuring compliance with the DPA, and serving as the primary point of contact for data subject rights requests and privacy-related inquiries.

You may contact the 576jl Data Protection Officer through the following channel:

For general platform support, account inquiries, or responsible gaming assistance, you may also reach our customer support team at the same email address. Please use a descriptive subject line so your message is routed to the correct team.

For complaints or concerns that remain unresolved after contacting our DPO, you may escalate directly to the National Privacy Commission of the Philippines.