Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 200jl ("we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you" or "your") who access or use the 200jl online gaming platform, including the website at 200jl.net and any associated mobile applications or services (collectively, the "Platform").

200jl operates in the Philippines and serves Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and beyond. We are committed to handling your personal data responsibly and in compliance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. If you have any questions about how we handle your data, please contact us using the details in Section 14.

2. Personal Data We Collect

200jl collects the following categories of personal data from users of the Platform:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used for age verification — you must be 21 or older)
• Email address
• Mobile phone number
• Residential address (province, city, barangay)
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, PhilHealth ID, driver's license)
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate)
• Selfie or live photo for identity matching purposes

2.3 Financial Data

• GCash mobile number or PayMaya account details
• Bank account details (BPI, BDO, Metrobank) for withdrawal processing
• Transaction history including deposits, withdrawals, and wager amounts
• Source of funds information where required for compliance purposes

2.4 Gaming & Behavioral Data

• Game history, wager amounts, wins, and losses
• Session duration and frequency of play
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Bonus and promotion participation history

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Mobile network operator
• Platform access logs and session timestamps
• Cookie identifiers and similar tracking technologies (see Section 9)

2.6 Communications Data

• Records of your communications with 200jl customer support
• Live chat transcripts
• Email correspondence with 200jl
• Feedback and survey responses

3. How We Collect Your Data

200jl collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and behavioral data collected automatically when you access and use the Platform, including through cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment confirmation data from GCash, PayMaya, and banking partners.

4. Purpose of Processing Your Data

200jl processes your personal data for the following purposes:

5. Legal Basis for Processing

200jl processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to perform our contract with you — including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including KYC, AML, and gaming regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time.

6. Data Sharing & Disclosure

200jl does not sell your personal data to third parties. We may share your data with the following categories of recipients only where necessary and in accordance with this Policy:

6.1 Service Providers

We share data with trusted third-party service providers who assist in operating the 200jl Platform, including KYC verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, and customer support platform providers. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

6.2 Regulatory & Law Enforcement Authorities

200jl may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or other government authorities where required by law, court order, or regulatory requirement.

6.3 Fraud Prevention Partners

We may share data with fraud prevention and identity verification partners to detect and prevent fraudulent activity on the Platform. This sharing is conducted under strict data processing agreements.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 200jl's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7. Data Retention

200jl retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, regulatory, accounting, and reporting requirements.

• Active accounts: Data is retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML and gaming regulatory requirements.
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by AMLC regulations.
• Transaction records: Retained for a minimum of five (5) years for financial compliance purposes.
• Marketing data: Retained until you withdraw consent or request deletion, whichever is earlier.
• Support communications: Retained for three (3) years from the date of the last communication.

When personal data is no longer required, 200jl will securely delete or anonymize it in accordance with our internal data retention and disposal procedures.

8. Data Security

200jl implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 200jl Platform
• Encryption of sensitive data at rest, including financial and identity information
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and vulnerability testing of Platform infrastructure
• Two-factor authentication options for player accounts
• Secure, access-controlled data centers for Platform hosting

While 200jl takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 200jl will notify the National Privacy Commission (NPC) and affected users in accordance with the requirements of the Data Privacy Act of 2012.

9. Cookies & Tracking Technologies

200jl uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following types of cookies:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies that keep you logged in and security cookies that protect against cross-site request forgery. No consent is required for these cookies.

9.2 Performance & Analytics Cookies

These cookies collect anonymized information about how players use the Platform — such as which pages are visited most frequently and how long sessions last. This data helps us improve the 200jl experience. These cookies require your consent.

9.3 Functional Cookies

These cookies remember your preferences, such as your preferred language and display settings, to provide a more personalized experience on the Platform.

9.4 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 200jl Platform. Strictly necessary cookies cannot be disabled without impacting your ability to use the Platform.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 200jl:

• Right to be Informed: You have the right to know what personal data 200jl collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data 200jl holds about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within thirty (30) days in accordance with the Data Privacy Act of 2012.

11. Minors & Age Restriction

Age verification is conducted as part of the KYC process for all new accounts. If 200jl discovers that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be deleted, and any funds will be returned to the source payment method after verification.

If you are a parent or guardian and believe that a minor has registered on the 200jl Platform, please contact us immediately at [email protected] so we can take prompt action.

12. Third-Party Services & Links

The 200jl Platform may integrate with third-party services such as payment gateways (GCash, PayMaya, BPI, BDO, Metrobank) and identity verification providers. These third-party services operate under their own privacy policies, which are independent of this Policy. 200jl is not responsible for the privacy practices of third-party service providers, though we do require all providers to maintain appropriate data protection standards through contractual agreements.

200jl does not embed third-party advertising networks or social media tracking pixels on the Platform that would share your gaming activity with external parties without your knowledge.

13. Changes to This Privacy Policy

200jl reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. Material changes will be communicated to registered users via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the 200jl Platform after the effective date of any update constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

14. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the 200jl Data Protection Officer:

Our support team includes Filipino-speaking agents available around the clock to assist players across Manila, Cebu, Davao, Quezon City, Makati, and all regions of the Philippines. For complaints that cannot be resolved directly with 200jl, you may contact the National Privacy Commission (NPC) of the Philippines.