eejj Casino
Privacy Policy

This Privacy Policy ("Policy") describes how eejj Casino ("eejj," "we," "our," or "us"), the operator of the online gaming platform accessible at eejj.win, collects, uses, stores, shares, and protects personal information relating to registered players, visitors, and prospective users of the eejj platform (collectively, "you" or "Data Subjects").

eejj is committed to protecting the privacy and security of your personal data. This Policy is prepared in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines.

By registering an account on eejj or otherwise using the Platform, you acknowledge that you have read and understood this Policy, and you consent to the collection and processing of your personal data as described herein. This Policy should be read in conjunction with eejj's Terms & Conditions.

This Policy applies to all personal information collected and processed by eejj in connection with your use of the Platform, including:

• Information provided during account registration and identity verification (KYC);
• Information generated through your use of the Platform, including gameplay activity, transaction history, and session data;
• Information collected through eejj's website, mobile-optimised interface, and any future mobile applications;
• Information received from third-party service providers in connection with payment processing, KYC verification, and fraud prevention;
• Information collected through cookies, web beacons, and similar tracking technologies on eejj.win.

This Policy does not apply to the data practices of third-party websites, payment providers, or game providers that may be linked to or integrated with the eejj Platform. Those parties operate under their own privacy policies, and eejj encourages you to review them independently.

For the purposes of the Philippine Data Privacy Act of 2012, eejj Casino is the Personal Information Controller (PIC) with respect to personal data collected and processed through the eejj.win platform. eejj determines the purposes and means by which your personal data is processed.

Third-party service providers engaged by eejj (such as KYC verification partners, payment processors, and game providers) act as Personal Information Processors (PIPs) and process personal data only on eejj's documented instructions and within the scope of their contractual agreements with eejj.

eejj has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the DPA. Contact details for eejj's DPO are set out in Section 17 of this Policy.

eejj collects the following categories of personal data:

4.1 Identity and Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (to verify the 21+ age requirement);
• Registered mobile number (Philippine number, e.g., +63 9XX XXX XXXX);
• Email address;
• Residential address (city, province, postal code);
• Government-issued ID type and ID number (for KYC purposes).

4.2 Financial Data

• GCash account number or PayMaya account details registered in your name;
• Bank account number and bank name (BPI, BDO, Metrobank) where used for deposits or withdrawals;
• Transaction reference numbers for deposits and withdrawals;
• Wallet balance and transaction history within eejj.

eejj does not store full credit card or debit card numbers. Payment card processing, where applicable, is handled exclusively by PCI-DSS compliant third-party payment processors.

4.3 Identity Verification Documents

• Photographs or scans of government-issued Philippine ID documents submitted for KYC;
• Selfie photographs submitted as part of liveness verification;
• Proof-of-address documentation where requested.

4.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, browser type, and version;
• Login timestamps and session duration;
• Pages viewed, game titles played, bet amounts, and game outcomes;
• Referral source (how you arrived at eejj.win).

4.5 Communications Data

• Live chat transcripts between you and eejj support agents;
• Email correspondence sent to or received from eejj support channels;
• Feedback, complaints, and dispute records.

eejj collects personal data through the following means:

• Direct provision by you: Information you provide when registering an account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated technical collection: Data collected automatically through cookies, server logs, and similar technologies when you access and use eejj.win;
• Third-party sources: Identity and fraud-check data received from eejj's KYC verification partners and fraud-prevention service providers, which is cross-referenced with information you provide directly;
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment providers confirming the completion of deposits and withdrawals.

eejj processes your personal data for the following specific, legitimate purposes:

eejj processes your personal data on the following legal bases under the DPA and its IRR:

• Contract performance: Processing necessary for the performance of eejj's contractual obligations to you, including account management, gameplay, and payment processing;
• Legal obligation: Processing required to comply with eejj's legal obligations under Philippine law, including the Anti-Money Laundering Act (AMLA), PAGCOR licensing requirements, and the Data Privacy Act itself;
• Legitimate interests: Processing necessary for eejj's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your data protection rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — particularly for direct marketing communications. You may withdraw consent for marketing at any time without affecting the lawfulness of prior processing.

eejj does not sell, rent, or trade your personal information to third parties. eejj shares personal data only in the following circumstances and only to the extent necessary for the stated purpose:

8.1 Service Providers (Personal Information Processors)

eejj engages third-party service providers to assist in operating the Platform. These include KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, cloud hosting and infrastructure providers, game providers (including Playtech), and customer support tooling providers. Each service provider is bound by a data processing agreement requiring them to protect your personal data and process it only on eejj's documented instructions.

8.2 Regulatory and Law Enforcement Authorities

eejj may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law, court order, or regulatory directive. eejj will notify you of any such disclosure to the extent permitted by law.

8.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of eejj's assets, personal data held by eejj may be transferred to the successor entity, subject to equivalent data protection commitments. eejj will notify affected players of any such transfer.

eejj retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required by AMLA and PAGCOR record-keeping obligations;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, consistent with AMLA requirements;
• KYC documentation: Retained for a minimum of five (5) years following account closure or the conclusion of any related regulatory inquiry, whichever is later;
• Communications and support records: Retained for three (3) years from the date of the communication, or longer where related to an unresolved dispute;
• Technical and usage data: Retained for twelve (12) months from collection, after which it is aggregated or anonymised.

Following the expiry of the applicable retention period, eejj will securely delete or anonymise your personal data in accordance with industry-standard data destruction procedures.

eejj implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption: All data transmitted between your device and eejj.win is encrypted using 256-bit SSL/TLS. Personal data stored in eejj's databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised eejj personnel on a strict need-to-know basis. Access rights are reviewed regularly and revoked promptly upon role changes or departures.
• Two-Factor Authentication: eejj supports and recommends two-factor authentication (2FA) for all player accounts to add an additional layer of protection beyond the account password.
• Payment Security: GCash and PayMaya transactions are processed through secure API integrations. Bank card data is processed exclusively through PCI-DSS compliant payment processors and is never stored on eejj servers.
• Security Monitoring: eejj operates continuous security monitoring of its platform infrastructure to detect and respond to suspicious activity, including automated intrusion detection systems.
• Penetration Testing: eejj engages independent security professionals to conduct regular penetration testing of the Platform to identify and remediate vulnerabilities.

While eejj takes all reasonable precautions, no data transmission over the internet is completely secure. You play a role in your own account security — use a strong, unique password, enable 2FA, and never share your credentials or OTPs with anyone.

eejj uses cookies and similar tracking technologies on eejj.win to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and cookies that maintain your login state. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, currency display, and game lobby settings.
• Analytics Cookies: Used to collect anonymised data about how visitors use eejj.win — including pages visited, session duration, and entry/exit points — to help eejj improve the Platform. This data does not identify individual users.
• Marketing Cookies: Used to track whether you arrived at eejj from a particular referral source, for the purpose of assessing the effectiveness of eejj's marketing activities. These do not share data with third-party advertisers.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the eejj Platform. For more information on managing cookies in commonly used Philippine mobile browsers, refer to the settings documentation for Chrome on Android or Safari on iOS.

eejj strictly prohibits access to or use of the Platform by any person under 21 years of age, consistent with PAGCOR requirements for online casino operations in the Philippines. eejj does not knowingly collect personal data from individuals under 21.

Where eejj discovers that personal data has been collected from a person who is under 21 years of age, eejj will immediately close the account, return any deposits (net of legitimate deductions), delete the associated personal data, and report the incident as required by applicable law.

If you believe that a person under 21 has registered on eejj, please notify us immediately at [email protected] so that we can take appropriate action.

To exercise any of your data subject rights under the Philippine Data Privacy Act of 2012 (as described above in the "Your Rights" section), please submit a written request to eejj's Data Protection Officer using the contact details in Section 17. Your request should include:

• Your full name and registered eejj account email address or mobile number;
• A clear description of the right you wish to exercise and the specific data or processing activity concerned;
• Sufficient information to verify your identity (to prevent unauthorised disclosure of your data to a third party).

eejj will acknowledge your request within five (5) business days and will respond substantively within thirty (30) days of receipt. In complex cases, eejj may extend this period by a further thirty (30) days and will notify you of the extension.

Please note that certain rights may be limited where processing is required for legal compliance purposes — for example, eejj cannot delete AML-required records before their mandatory retention period expires. Where a right cannot be fully exercised, eejj will explain the reason clearly in its response.

A "personal data breach" means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored, or otherwise processed by eejj.

eejj's breach response procedure includes the following steps:

• Detection and containment: Upon discovering or being notified of a suspected breach, eejj's security team immediately activates its incident response plan to contain the breach and prevent further exposure.
• Assessment: eejj assesses the nature, scope, and likely impact of the breach, including identifying which categories of personal data are affected and the number of individuals involved.
• NPC notification: Where the breach is likely to cause serious harm to Data Subjects, eejj will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the NPC's Breach Notification Guidelines.
• Data Subject notification: Where required or appropriate, eejj will notify affected Data Subjects without undue delay, providing a clear description of the breach, the personal data involved, and the steps eejj is taking to address it.
• Remediation: eejj will implement appropriate remediation measures and conduct a post-incident review to prevent recurrence.

Some of eejj's third-party service providers — including cloud infrastructure providers and game providers — may process personal data outside the Philippines. Where such cross-border transfers occur, eejj ensures that appropriate safeguards are in place consistent with the requirements of the DPA and NPC regulations, including:

• Contractual data processing agreements incorporating the NPC's standard data protection clauses or equivalent protections;
• Transfer only to jurisdictions or organisations that provide an adequate level of data protection as assessed by the NPC or eejj's legal and compliance team;
• Application of technical security measures equivalent to those described in Section 10 of this Policy.

You may contact eejj's DPO to request information about the specific safeguards in place for cross-border transfers involving your personal data.

eejj reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. When material changes are made, eejj will:

• Post the updated Policy on eejj.win with a revised effective date;
• Notify registered players via their registered email address or through an in-platform notification; and
• Where required by law, seek fresh consent before implementing material changes to processing activities.

Your continued use of the eejj Platform following publication of a revised Policy constitutes your acceptance of the revised terms. If you do not agree to the revised Policy, you must stop using the Platform and may request account closure.

eejj has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact us through the following channels:

• General Privacy Enquiries: [email protected] (subject line: Privacy / DPO Request)
• Data Subject Rights Requests: [email protected] (subject line: Data Rights Request)
• Live Chat: Available 24/7 on eejj.win for urgent privacy concerns
• Response Commitment: Acknowledgement within 5 business days; substantive response within 30 days

If you are not satisfied with eejj's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC's contact information and complaint procedures are published on the NPC's official website.