638jl Privacy Policy

638jl is an online gaming platform accessible at 638jl.net, offering casino games, live dealer tables, slots, bingo, sports betting, and related gaming services to eligible players in the Philippines. For the purposes of this Privacy Policy, 638jl acts as the Personal Information Controller in respect of the personal data you provide when registering for and using the platform.

As a Personal Information Controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA"), 638jl determines the purposes and means by which your personal data is processed. We are committed to processing your data lawfully, fairly, and transparently.

By accessing the 638jl platform or creating a registered account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

638jl collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are set out in the table below:

638jl collects your personal data through the following channels:

• Direct interactions: When you register for an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion, you directly provide us with personal data.
• Automated technologies: When you access the 638jl platform, we automatically collect technical data including your IP address, device identifiers, browser type, and session activity through cookies, server logs, and similar tracking technologies. See Section 7 for more detail on cookies.
• Third-party payment providers: When you transact via GCash, PayMaya, BPI, BDO, or Metrobank, we receive transaction confirmation data from those providers to reconcile your account balance. We do not receive your full payment credentials from these providers.
• Identity verification services: Where 638jl uses a third-party KYC or identity verification provider, that provider may share the results of document verification checks with us. The underlying documents are processed in accordance with the provider's own privacy policy, which we will make available to you at the time of verification.
• Publicly available sources: In limited circumstances related to fraud prevention or regulatory compliance, 638jl may cross-reference information you provide against publicly available records or databases maintained by Philippine government agencies.

638jl processes your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity and age (21+ requirement), and maintain your account in good standing.
• Service delivery: To provide you with access to games, process your deposits and withdrawals in Philippine Peso (₱), and deliver the full range of 638jl gaming services.
• Regulatory compliance: To comply with our obligations under Philippine gaming regulations, anti-money laundering (AML) laws, and the Data Privacy Act of 2012. This includes maintaining transaction records and filing reports as required by PAGCOR and the Anti-Money Laundering Council (AMLC).
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the platform.
• Responsible gaming: To monitor gaming patterns and identify players who may be exhibiting signs of problem gambling, and to administer self-exclusion requests and deposit limit settings.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Marketing and promotions: Where you have given your consent, to send you information about 638jl promotions, bonuses, and new game releases. You may withdraw this consent at any time by updating your communication preferences in your account dashboard.
• Platform improvement: To analyze usage patterns, conduct A/B testing, and improve the performance, security, and user experience of the 638jl platform.

Under the Philippine Data Privacy Act of 2012, 638jl relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing is necessary to perform the contract between you and 638jl — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including gaming regulations administered by PAGCOR, AML obligations under Republic Act No. 9160 (as amended), and tax reporting requirements.
• Legitimate interests: Processing is necessary for 638jl's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and business analytics, provided those interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and the use of non-essential cookies, 638jl relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

638jl does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• KYC and identity verification providers: Third-party providers engaged to verify your identity and age receive the documents and data you submit during the KYC process. These providers are contractually bound to process your data only for verification purposes.
• Game content providers: Third-party game studios and live dealer providers may receive your player ID and session data to deliver game content. They do not receive your full identity or financial data.
• Regulatory authorities: 638jl is required to share certain player data with PAGCOR, the AMLC, the National Privacy Commission, and other Philippine government agencies upon lawful request or as required by applicable regulations.
• IT and security service providers: Cloud hosting, cybersecurity, and analytics providers who support the operation of the 638jl platform may process technical data on our behalf under strict data processing agreements.
• Legal proceedings: Where required by a court order, subpoena, or other lawful legal process, 638jl may disclose personal data to law enforcement agencies or courts of competent jurisdiction in the Philippines.

638jl uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage, and — where you have consented — deliver relevant promotional content. The types of cookies we use are described below:

You can manage your cookie preferences through the cookie consent banner displayed when you first visit the 638jl platform, or by adjusting your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the platform and prevent you from logging in or completing transactions.

638jl implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS encryption: All data transmitted between your device and the 638jl platform is encrypted using Transport Layer Security (TLS) protocols.
• Encryption at rest: Sensitive personal data stored in 638jl's systems — including identity documents and financial account details — is encrypted at rest using industry-standard algorithms.
• Access controls: Access to personal data within 638jl's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data necessary to perform their specific job functions.
• Two-factor authentication: 638jl supports and encourages the use of two-factor authentication (2FA) for player accounts to provide an additional layer of security beyond username and password.
• Regular security assessments: 638jl conducts periodic security assessments and vulnerability testing of its platform infrastructure to identify and remediate potential security weaknesses.
• Staff training: All 638jl staff who handle personal data receive regular training on data protection obligations and security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 638jl will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the DPA and its implementing rules.

638jl retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, 638jl will securely delete or anonymize your personal data so that it can no longer be associated with you. Where data is anonymized rather than deleted, the anonymized data may be retained for statistical and analytical purposes without limitation.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 638jl:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of access: You have the right to request a copy of the personal data 638jl holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You can update most account information directly through your account dashboard.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 638jl's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data where that processing is based on legitimate interests, including profiling for direct marketing purposes.
• Right to data portability: You have the right to receive a copy of the personal data you have provided to 638jl in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 638jl has processed your personal data in violation of the DPA. The NPC can be reached at privacy.gov.ph.

The 638jl platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. 638jl does not knowingly collect personal data from individuals under the age of 21.

If 638jl becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any winnings generated by an underage player will be forfeited.

In the course of providing gaming services, 638jl may transfer your personal data to service providers or game content partners located outside the Philippines — for example, live dealer studios or cloud infrastructure providers operating in other jurisdictions.

Where such transfers occur, 638jl ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses that impose DPA-equivalent data protection obligations on the recipient.
• Transfers to jurisdictions that the National Privacy Commission has recognized as providing an adequate level of data protection.
• Binding corporate rules where the recipient is part of the same corporate group as 638jl.

You may request further information about the specific safeguards in place for any cross-border transfer by contacting our Data Protection Officer.

638jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. The "Last Updated" date at the top of this page will be revised whenever a change is made.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — 638jl will notify you via the email address registered to your account or through a prominent notice on the platform prior to the changes taking effect.

We encourage you to review this Privacy Policy periodically to stay informed about how 638jl protects your personal data. Your continued use of the platform following the publication of any updated Privacy Policy constitutes your acknowledgment of the changes.

638jl has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:

If you are not satisfied with our response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act of 2012.