599jl Privacy Policy

1.1 Identity of the Data Controller. The 599jl platform, accessible at 599jl.vip, is the data controller responsible for personal information collected through the platform. When this Policy refers to "599jl," "we," "us," or "our," it means the entity operating the 599jl platform and making decisions about the collection and use of personal data.

1.2 Scope of This Policy. This Privacy Policy applies to all personal information collected from individuals who: (a) register an account on the 599jl platform; (b) visit the 599jl website without registering; (c) contact 599jl customer support; or (d) interact with 599jl through any communication channel. It applies regardless of the device or method of access.

1.3 Applicable Law. This Policy is governed by and prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC). Where applicable, PAGCOR's data governance requirements for licensed online gaming operators also apply.

1.4 Data Protection Officer. 599jl has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO using the contact details provided in Section 13 of this Policy.

2.1 Information You Provide Directly. When you register and use your 599jl account, we collect personal information that you actively provide, including:

• Registration data: Full legal name, date of birth, email address, mobile phone number (Philippine number required), and chosen username
• Identity verification (KYC) data: Copies of government-issued identification documents (e.g., PhilSys National ID, driver's license, passport, SSS ID, UMID, GSIS ID, voter's ID), selfie photographs, and proof of address where required
• Financial data: GCash account reference, Maya account reference, bank account details (for bank transfer withdrawals), and transaction records. Note: 599jl does not store complete bank account numbers — only masked references sufficient for reconciliation
• Support communications: Content of your messages with the 599jl customer support team, including chat transcripts and email correspondence
• Responsible gaming data: Self-imposed deposit limits, self-exclusion requests, and session limit configurations

2.2 Information Collected Automatically. When you access the 599jl platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Session timestamps, duration, and login history
• Pages visited, games accessed, and navigation paths within the platform
• Referral source (if you arrived via an internal link or promotional campaign)
• Cookie and session data (see Section 6)

2.3 Information from Third Parties. In certain circumstances, 599jl may receive personal information about you from third-party sources, including:

• Identity verification service providers used to cross-check the accuracy of your KYC documents
• Payment processors, e-wallet operators (GCash, Maya), and banking institutions, for transaction confirmation and fraud screening purposes
• Regulatory or law enforcement bodies, where we are required by law to receive and act on information about specific individuals

The following table summarizes the primary purposes for which 599jl processes your personal data and the corresponding legal basis for each:

3.1 Marketing Communications. If you have opted in to receiving promotional communications from 599jl, we may use your email address or mobile number to send you information about bonuses, game launches, and special offers. You may withdraw your consent at any time by updating your communication preferences in Account Settings or by contacting support.

Under RA 10173, 599jl processes personal data on one or more of the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and 599jl — i.e., to operate your account, process your transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine law, including PAGCOR operating requirements, Anti-Money Laundering Act (RA 9160, as amended) obligations, and any lawful direction from a Philippine government authority.
• Legitimate interests: Processing is necessary for 599jl's legitimate business interests, including fraud prevention, platform security, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: Where no other legal basis applies and where required by law, processing is based on your freely given, specific, and informed consent, which you may withdraw at any time without detriment to your use of core platform services.

5.1 No Sale of Personal Data. 599jl does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. This is a firm policy commitment, not a conditional statement.

5.2 Service Providers. 599jl shares personal data with carefully selected third-party service providers who assist in operating the platform. These providers are contractually bound to use your data only for the specific purpose of providing their service to 599jl and must implement data protection standards consistent with RA 10173. Current categories of service providers include:

• Payment processors and e-wallet operators (GCash, Maya, and banking partners) for transaction processing
• Identity verification and KYC service providers for compliance with PAGCOR and anti-money laundering requirements
• Game software providers whose titles are hosted within the 599jl lobby, where technical game data is required for RNG certification and fairness auditing
• Cloud infrastructure and hosting providers that provide the servers on which the 599jl platform runs
• Customer support software providers for live chat and ticket management functionality
• Fraud detection and cybersecurity service providers

5.3 Regulatory Disclosure. 599jl may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine government authorities where disclosure is required by law, court order, or lawful regulatory direction. 599jl will comply with such requirements and, where legally permitted, will notify affected users.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of the 599jl platform, personal data may be transferred to the successor entity as part of the transaction. You will be notified of any such change in data controller at least 30 days prior to the effective date.

5.5 Aggregated Data. 599jl may share aggregated, anonymized statistical data (which cannot be used to identify any individual) with business partners, regulators, or the public for reporting and analytical purposes. This aggregated data is not personal data.

6.1 What Are Cookies. Cookies are small text files placed on your device by the 599jl website when you access it. They allow the platform to recognize your session, remember your preferences, and deliver a functional, personalized experience.

6.2 Types of Cookies Used. 599jl uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — these include session authentication cookies that keep you logged in, security cookies, and load balancing cookies. These cannot be disabled without breaking platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and last-visited game sections, improving your experience on return visits.
• Analytics cookies: Collect aggregated data about how players navigate and use the platform, helping 599jl identify and improve underperforming features. These cookies do not identify you personally.
• Security cookies: Used for fraud detection, session integrity checks, and to identify unusual account activity patterns that may indicate unauthorized access.

6.3 Managing Cookies. You may configure your browser to refuse or delete cookies. Note that disabling strictly necessary cookies will prevent you from accessing certain platform features, including the ability to log in. Most modern browsers — including Chrome on Android, which many Filipino users use — allow granular cookie management through the browser Settings menu.

7.1 Technical Safeguards. 599jl implements the following technical security measures to protect your personal data:

• SSL/TLS encryption for all data in transit between your device and 599jl servers
• Encryption of sensitive personal data at rest in storage systems
• Access control systems restricting data access to authorized personnel only
• Multi-factor authentication for staff access to systems holding personal data
• Regular security testing including vulnerability assessments and penetration testing
• Intrusion detection and real-time monitoring of system access logs

7.2 Organizational Safeguards. In addition to technical measures, 599jl maintains organizational safeguards including: data protection training for all staff handling personal data; a formal incident response procedure; data minimization practices that limit internal access to personal data on a need-to-know basis; and regular review of data processing activities.

7.3 Data Breach Notification. In the event of a personal data breach that poses a real risk of serious harm to affected individuals, 599jl will notify the National Privacy Commission within 72 hours of becoming aware of the breach. Affected individuals will be notified without undue delay in accordance with the requirements of RA 10173 and the NPC Circular on Personal Data Breach Management.

7.4 Your Role in Security. The security of your account also depends on the password and credentials you choose and how you safeguard them. We strongly recommend enabling two-factor authentication (2FA) on your 599jl account and never sharing your login details with anyone.

8.1 Retention Periods. 599jl retains personal data for as long as is necessary to fulfill the purpose for which it was collected, comply with applicable legal obligations, resolve disputes, and enforce agreements. The following general retention periods apply:

• Active account data: Retained for the duration of your account's existence and for a minimum of five (5) years after account closure, in compliance with anti-money laundering record-keeping obligations under RA 9160
• Transaction records: Minimum five (5) years from the date of the transaction, as required by AMLC regulations
• KYC documentation: Minimum five (5) years from account closure or the date of the last transaction, whichever is later
• Support communications: Two (2) years from the date of the interaction, unless the communication relates to a formal complaint or legal matter, in which case it is retained for the duration of the matter plus one (1) year
• Marketing preference data: Until you withdraw consent or request erasure, subject to any legal retention requirements
• Anonymized analytics data: Retained indefinitely as it cannot be used to identify any individual

8.2 Secure Disposal. Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized using methods appropriate to the sensitivity of the data and the format in which it is stored.

As a data subject under RA 10173, you have the following rights with respect to your personal data held by 599jl:

• Right to be informed: The right to know whether 599jl holds personal data about you and to receive a copy of this Privacy Policy.
• Right of access: The right to request a copy of the personal data 599jl holds about you and information about how it is being processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data about you. You may update many details directly through your Account Settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations. Note that regulatory record-keeping requirements may prevent immediate deletion of certain data categories.
• Right to object: The right to object to certain types of processing, including processing based on legitimate interests and processing for direct marketing purposes.
• Right to data portability: The right to receive a structured copy of the personal data you have provided to 599jl in a commonly used electronic format.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission if you believe your rights under RA 10173 have been violated.

9.1 Exercising Your Rights. To exercise any of the above rights, contact 599jl's Data Protection Officer via the support channels listed in Section 13. Requests will be acknowledged within 3 business days and substantively responded to within 15 business days, consistent with NPC guidelines. Some requests may require identity verification before they can be processed.

10.1 Age Restriction. The 599jl platform is strictly restricted to individuals who are 21 years of age or older. 599jl does not knowingly collect personal data from individuals under the age of 21. If we become aware that an individual under 21 has provided personal data to 599jl in the course of attempting to register or use the platform, that data will be deleted and the account will be permanently closed.

10.2 Reporting. If you have reason to believe that a minor has registered an account on 599jl, please notify us immediately through the support channels listed in Section 13. We will investigate and take appropriate action.

11.1 International Data Transfers. Certain third-party service providers used by 599jl — including game software providers, cloud infrastructure providers, and KYC platforms — may process personal data on servers located outside the Philippines. Where such transfers occur, 599jl ensures that appropriate safeguards are in place consistent with the requirements of RA 10173 and the NPC's guidelines on cross-border data transfers.

11.2 Safeguards. Safeguards applied to cross-border transfers include: contractual data protection clauses with the receiving party obligating them to provide equivalent protection to that required under Philippine law; transfer only to jurisdictions with NPC-recognized adequacy; and, where applicable, explicit consent from the data subject where no other safeguard is available.

12.1 Right to Amend. 599jl reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or data processing practices. The effective date at the top of this Policy will be updated with each revision.

12.2 Notification of Material Changes. Where changes to this Policy are material — meaning they significantly affect the nature, scope, or legal basis of processing — 599jl will notify registered players via email or platform notification at least 14 days prior to the new Policy taking effect. For non-material updates (such as clarifications), the updated Policy will be published without prior individual notice.

12.3 Continued Use. Your continued use of the 599jl platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you may request account closure before the effective date.

For questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by 599jl, please contact us through the following channels:

• Data Protection Officer: Reachable via the live chat support widget on 599jl.vip or by email at [email protected] — mark your message "Privacy / DPO Request"
• Live Chat Support: Available 24/7 on the 599jl platform for general privacy inquiries and data subject requests
• Formal Written Requests: Submitted via email to [email protected] with the subject line "Formal Privacy Request" for documented responses under RA 10173 timelines

For complaints that cannot be resolved directly with 599jl, you may also contact the Philippine National Privacy Commission:

• National Privacy Commission (NPC): The regulatory body for data privacy in the Philippines — accessible at privacy.gov.ph (note: this URL is referenced for informational purposes only and is an external link not controllable by 599jl)