ji77 Privacy Policy

1. Who We Are

ji77 operates the online gaming and sports betting platform accessible at https://ji77.biz ("Platform"). In the context of Philippine data protection law, ji77 acts as the Personal Information Controller (PIC) in respect of personal data collected from Players and visitors to the Platform. ji77 processes personal data in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations promulgated by the National Privacy Commission (NPC).

2. Categories of Personal Data We Collect

ji77 collects the following categories of personal data from Players:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., SSS, PhilSys, UMID, passport number, driver's license number).
• Contact Data: Email address, Philippine mobile number, and residential address (for KYC verification purposes).
• Account Data: Username, hashed password, account creation date, account status, and login history.
• Financial Data: Deposited amount history, withdrawal records, transaction timestamps, and the last four digits or identifier of payment instruments used (e.g., GCash registered number, BPI account last four digits). Full payment credentials are never stored by ji77 — payment processing is handled by PCI-DSS-compliant third-party payment processors.
• Gaming Activity Data: Records of all wagers placed, game types accessed, bet amounts, outcomes, session durations, and responsible gaming tool usage history.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and approximate geographic location derived from IP address.
• Communications Data: Records of support chat sessions, emails, and any other communications submitted to ji77 by the Player.
• KYC Documentation: Copies of government-issued identity documents, selfie verification images, and, where required for AML compliance, proof of source of funds documentation.

3. How We Collect Personal Data

ji77 collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in a promotion.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server log files.
• Third-party sources: Identity verification data received from KYC service providers; transaction verification data from payment processors; geolocation data from IP lookup services used for regulatory compliance.

4. Purpose and Legal Basis for Processing

ji77 processes personal data for the following purposes, each grounded in a lawful basis under the Data Privacy Act of 2012:

1. Account registration and management — necessary for the performance of the contract between ji77 and the Player (DPA Section 12(b)).
2. Identity verification (KYC) — necessary for compliance with PAGCOR regulations and Philippine Anti-Money Laundering Act obligations (DPA Section 12(c)).
3. Processing deposits and withdrawals — necessary for the performance of the contract and compliance with AML/AMLC requirements (DPA Sections 12(b) and 12(c)).
4. Fraud prevention and account security — necessary for the legitimate interests of ji77 in maintaining platform integrity and protecting Players from unauthorized access (DPA Section 12(f)).
5. Responsible gaming monitoring — necessary for compliance with applicable gaming regulations and for the protection of Player welfare (DPA Section 12(c)).
6. Customer support — necessary for the performance of the contract and ji77's legitimate interest in resolving Player disputes and queries (DPA Sections 12(b) and 12(f)).
7. Marketing and promotional communications — based on the Player's consent, which may be withdrawn at any time by contacting ji77 support or updating communication preferences in Account settings (DPA Section 12(a)).
8. Platform improvement and analytics — based on ji77's legitimate interest in improving the Platform experience, using anonymized or aggregated data where possible (DPA Section 12(f)).

5. Data Sharing and Disclosure

ji77 does not sell, rent, or trade your personal data to any third party for their marketing purposes. ji77 may share personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• KYC and identity verification providers: Third-party providers used to verify player identity and age as required under Philippine gaming regulations.
• Payment processors: PCI-DSS-compliant payment service providers (e.g., GCash, PayMaya, banking partners) that process deposits and withdrawals on ji77's behalf.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government agencies where disclosure is required by law or court order.
• IT and infrastructure providers: Cloud hosting, security monitoring, and CDN providers who process technical data under strict data processing agreements binding them to confidentiality and the requirements of the DPA.
• Fraud prevention services: Third-party fraud detection platforms that analyse transaction and behavioural data to identify and prevent fraudulent activity.

All third parties with whom ji77 shares personal data are required to process such data solely in accordance with ji77's instructions and applicable Philippine data protection law.

6. Cookies and Tracking Technologies

1. Essential Cookies: ji77 uses session cookies that are strictly necessary for Platform operation, including authentication tokens, session management, and security features. These cannot be disabled without impairing Platform functionality.
2. Analytics Cookies: ji77 uses analytics tools to collect aggregated, anonymised data about Platform usage patterns — pages visited, session duration, game categories accessed, and device types. This data is used solely to improve Platform performance and user experience.
3. Preference Cookies: Cookies that remember your Platform preferences, such as language settings and preferred game categories, to provide a more personalised experience.
4. Managing Cookies: You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, though some preference features may not function as intended.

7. Data Retention

ji77 retains personal data only for as long as is necessary for the purpose for which it was collected, subject to the following retention periods:

• Account and gaming activity data: Retained for the duration of the Account and for a period of five (5) years following account closure, in accordance with AML record-keeping obligations under Republic Act No. 9160.
• KYC documentation: Retained for a minimum of five (5) years from the date of collection or the date of the last transaction, whichever is later.
• Support communications: Retained for two (2) years from the date of the last communication, unless retention is required for ongoing dispute resolution.
• Technical and log data: Retained for a period of twelve (12) months, after which it is anonymised or deleted.

8. Data Security

ji77 implements appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between the Player's device and ji77's servers.
• AES-256 encryption for personal data stored in ji77's databases.
• Role-based access control ensuring that only authorised personnel with a legitimate need access personal data.
• Regular third-party security audits and penetration testing of the ji77 Platform.
• Two-factor authentication (OTP) enforced for all Player account logins on new devices.
• Formal data breach response procedures, including mandatory NPC notification within 72 hours of becoming aware of a breach that is likely to result in significant harm to Data Subjects.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by ji77:

1. Right to be Informed: The right to be informed whether your personal data is being processed and to receive information about such processing — which this Policy fulfils.
2. Right of Access: The right to request a copy of the personal data ji77 holds about you and information about how it is processed.
3. Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by ji77.
4. Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, or where data was unlawfully processed, subject to ji77's legal retention obligations under AML law.
5. Right to Object: The right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to an assessment of competing interests.
6. Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
7. Right to Damages: The right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data, in accordance with applicable law.
8. Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ji77 has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, contact the ji77 Data Protection Officer as described in Section 13 of this Policy.

10. Children's Privacy

The ji77 Platform is strictly prohibited to persons under the age of 21 years in accordance with PAGCOR regulations governing online gaming in the Philippines. ji77 does not knowingly collect personal data from individuals under 21. If ji77 becomes aware that personal data has been collected from a minor, such data will be immediately deleted and the associated account permanently suspended. If you believe a minor has registered on the Platform, please contact ji77 support immediately.

11. Cross-Border Data Transfers

Where ji77 transfers personal data to third-party service providers located outside the Philippines (for example, cloud infrastructure providers or fraud detection services with servers outside the country), ji77 ensures that such transfers comply with the requirements of Section 21 of the Data Privacy Act and NPC Circular No. 16-01, including ensuring that the recipient country provides an adequate level of protection or that appropriate contractual safeguards are in place. Players may request information about specific cross-border transfer arrangements by contacting the ji77 Data Protection Officer.

12. Updates to This Privacy Policy

ji77 reserves the right to update this Privacy Policy at any time to reflect changes in law, regulatory requirements, or Platform practices. Material changes will be communicated to registered Players via email notification and/or a prominent notice on the Platform at least fourteen (14) days before the changes take effect. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the Platform after a notified revision constitutes acceptance of the updated Policy.

13. Contact & Data Protection Officer

ji77 has appointed a Data Protection Officer (DPO) in compliance with Section 21 of the Data Privacy Act of 2012 and NPC Registration requirements. To exercise your data subject rights, submit a data-related complaint, or make any inquiry regarding this Privacy Policy, please contact the ji77 DPO. The ji77 support and DPO contact email is displayed on this website as plain text: [email protected]. Formal written data subject requests will receive an acknowledgement within 3 business days and a substantive response within 15 business days, as required by the DPA.