Privacy Policy – a2jl Casino Data Protection Notice

1. Data Controller Identity

The data controller responsible for the personal information of a2jl Casino players is the operating entity of the a2jl platform, accessible at a2jl.club. References to "a2jl," "we," "us," or "our" in this Privacy Policy refer to this entity. References to "you," "player," or "user" refer to any individual who registers for or accesses the a2jl platform.

For all data protection inquiries, including requests to exercise the rights described in Section 9, players may contact a2jl's Data Protection Officer at: [email protected]. Please include "Privacy / DPO Request" in the subject line of your communication.

2. Personal Data We Collect

A2jl collects personal data about you through the following means: information you provide directly during registration and KYC verification, information generated through your use of the platform, and information received from third-party service providers integrated with the a2jl platform. The categories of personal data we collect include:

A2jl does not collect sensitive personal information as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) unless strictly necessary for identity verification or responsible gaming compliance, and only with your explicit consent where required.

3. How We Use Your Personal Data

A2jl uses the personal data described above for the following purposes:

• Account administration: To create, verify, maintain, and manage your a2jl player account, including processing your a2jl login credentials and authentication.
• Payment processing: To process deposits, withdrawals, and refunds through your nominated payment method, and to verify that withdrawal accounts are registered in your name.
• Identity verification (KYC): To verify your identity and age before processing withdrawals, and to comply with anti-money laundering obligations under Philippine law.
• Platform operation: To deliver the games, sports betting, bingo, and other services available on the a2jl platform, and to maintain the technical infrastructure that supports those services.
• Fraud prevention and security: To detect, investigate, and prevent fraud, money laundering, account takeover, and other prohibited activity on the a2jl platform.
• Responsible gaming: To monitor gaming patterns that may indicate problematic gambling behavior and to implement deposit limits, cooling-off periods, or self-exclusion measures where appropriate or requested.
• Customer support: To respond to your inquiries, complaints, and support requests through a2jl's 24/7 live chat and email support channels.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have given consent or where permitted by applicable law. You may opt out of marketing communications at any time through your account notification settings.
• Legal compliance: To fulfill a2jl's obligations under applicable Philippine law, including regulatory reporting requirements and cooperation with authorized investigations by PAGCOR or other competent authorities.

4. Legal Bases for Processing

A2jl processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 and its implementing rules:

• Contract performance: Processing necessary to register your account, operate the platform services you have subscribed to, and process your financial transactions.
• Legal obligation: Processing required to comply with KYC obligations under the Anti-Money Laundering Act, PAGCOR regulatory requirements, and applicable tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and service improvement, where a2jl's legitimate business interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and certain cookie-based tracking, where your consent has been obtained and may be withdrawn at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

A2jl does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other payment service providers, solely to process your deposit and withdrawal transactions.
• Game providers: Third-party game developers such as JILI, PG Soft, Pragmatic Play, and Evolution Gaming, who receive the minimum data necessary to operate their games within the a2jl platform.
• KYC and identity verification services: Third-party identity verification providers used to authenticate government-issued ID documents submitted by players.
• Regulatory and government authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where disclosure is required by law or court order.
• IT infrastructure and security providers: Cloud hosting, content delivery, and cybersecurity service providers operating the technical infrastructure of the a2jl platform, subject to strict data processing agreements.

All third parties with whom a2jl shares personal data are contractually required to handle such data in accordance with the Philippine Data Privacy Act and to use it only for the specific purpose for which it was disclosed.

6. Cookies and Tracking Technologies

The a2jl platform uses cookies and similar tracking technologies to operate and improve the platform experience. The types of cookies used include:

• Strictly necessary cookies: Required for the a2jl platform to function, including session management, a2jl login authentication, and security features. These cannot be disabled without affecting platform functionality.
• Performance cookies: Used to collect anonymous analytics data about how players interact with the a2jl platform, including which games are most accessed and where players encounter technical issues.
• Functional cookies: Remember your preferences such as language settings, preferred payment method, and game lobby view settings to personalize your a2jl experience.
• Marketing cookies: Used to track whether a player arrived at a2jl via a specific promotional campaign, for accurate attribution of marketing spend. These are subject to your consent.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may impair your ability to use the a2jl platform, including the a2jl login function. Disabling other categories of cookies will not prevent access to the platform but may affect certain personalization features.

7. Data Retention

A2jl retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required by anti-money laundering regulations applicable to Philippine gaming operators.
• Financial transaction records are retained for a minimum of five (5) years following the transaction date.
• Support communications are retained for three (3) years from the date of the interaction.
• Gaming activity logs are retained for three (3) years unless a longer retention period is required for an ongoing investigation or regulatory inquiry.

Following the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual.

8. Security Measures

A2jl implements technical and organizational measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the a2jl platform
• Encryption of sensitive data fields at rest within a2jl's database infrastructure
• Two-factor authentication (2FA) available for all player accounts via SMS OTP
• Access controls restricting internal employee access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments of the a2jl platform infrastructure
• Incident response procedures for detecting and responding to data security breaches

In the event of a personal data breach that poses a risk to your rights and freedoms, a2jl will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay in accordance with the requirements of the Philippine Data Privacy Act.

9. Your Data Protection Rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by a2jl:

• Right to be informed: The right to receive clear information about how a2jl collects and uses your personal data, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data a2jl holds about you, and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data a2jl holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to a2jl's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on a2jl's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe a2jl has mishandled your personal data.

To exercise any of the above rights, please contact a2jl's Data Protection Officer at [email protected]. A2jl will respond to all data rights requests within thirty (30) days of receipt. Complex requests may require additional time, and a2jl will notify you of any extension within the initial 30-day period.

10. Minors and Age Verification

The a2jl platform is strictly restricted to individuals who are 21 years of age or older. A2jl does not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted as part of the KYC process before withdrawal privileges are activated.

If a2jl becomes aware that personal data has been collected from an individual under 21 years of age, the associated account will be immediately suspended, all relevant personal data will be deleted as soon as practicable, and any funds in the account will be returned to the original deposit source following identity verification of the deposit origin.

If you believe that a minor has registered an a2jl account, please contact a2jl's support team immediately at [email protected].

11. Changes to This Privacy Policy

A2jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, or a2jl's data processing practices. Material changes will be communicated to registered players via the mobile number or email address on file, or through a prominent notice on the a2jl platform, at least seven (7) days prior to taking effect.

The effective date at the top of this document indicates when the current version took effect. Your continued use of the a2jl platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the changes.

12. Contact and Complaints

For questions, concerns, or requests related to this Privacy Policy or a2jl's data handling practices, please contact:

a2jl Casino – Data Protection Officer
Email: [email protected]
Subject line: "Privacy / DPO Request"

If you are not satisfied with a2jl's response to your privacy inquiry, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through official Philippine government channels.