Privacy Policy —
How ji7 Casino Handles Your Data

This Privacy Policy ("Policy") is issued by ji7 Casino ("ji7," "the Company," "we," "our," or "us") and applies to all personal data collected from individuals ("Data Subjects," "Players," "you," "your") who interact with the ji7 Casino platform, including but not limited to the website at ji7.club and all associated services, tools, customer support channels, and promotional communications.

This Policy governs all personal data processing activities conducted by ji7 in connection with the provision of online gaming services in the Philippines. It is designed to meet the requirements of Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

By registering an account on ji7, or by continuing to use the ji7 platform after being presented with this Policy, you acknowledge that you have read and understood how your personal data is handled. If you do not agree with any part of this Policy, you must discontinue use of the ji7 platform and may request closure of your account in accordance with the account termination provisions in the ji7 Terms & Conditions.

This Policy should be read together with the ji7 Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions on a data privacy matter, this Policy shall take precedence.

For the purposes of the Philippine Data Privacy Act of 2012, the Data Controller responsible for the personal data of ji7 Casino players is the legal entity holding the PAGCOR authorization under which ji7 Casino operates. Ji7 Casino operates under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR).

Ji7 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations and handling data subject requests. The DPO is the designated point of contact for all privacy-related inquiries, requests, and complaints. Contact details for the DPO are provided in Section 15 of this Policy.

Ji7 collects personal data across several categories depending on the nature of your interaction with the platform. The following sets out the categories of data collected and specific examples within each category.

Ji7 collects personal data through the following mechanisms:

• Direct Collection: Data you provide actively and voluntarily during account registration, KYC submission, deposit and withdrawal requests, support ticket submissions, feedback forms, and responsible gaming tool configuration.
• Automated Technical Collection: Data collected automatically when you access the ji7 platform, including IP address, device identifiers, session logs, and behavioral data via cookies and server-side logging. See Section 8 for the full cookie policy.
• Payment Provider Integration: When you initiate a deposit or withdrawal, your payment provider (e.g., GCash, Maya, BPI) shares transaction confirmation data with ji7 necessary to credit or debit your account. Ji7 does not have access to your full payment account credentials — only the transaction outcome and the last digits or identifier of the payment method used.
• KYC Verification Partners: Ji7 may use authorized third-party KYC verification services to validate identity documents. These partners process document images and return a verification outcome to ji7. The document images are handled by the KYC partner in accordance with their own privacy policy and applicable Philippine law.
• Gaming Data from Providers: Third-party game studios integrated into the ji7 platform may transmit gameplay outcome data (bet amounts, results, timestamps) to ji7 for wallet settlement, transaction logging, and responsible gaming monitoring purposes.

Ji7 processes your personal data for the following specific, declared purposes. We do not process personal data for any purpose not listed here without obtaining separate explicit consent or where another valid legal basis applies.

• Account Creation and Management: Creating, maintaining, verifying, and administering your ji7 player account including authentication, session management, and account security.
• Service Delivery: Enabling you to access and use the gaming services offered on the ji7 platform, including game play, live dealer access, sports betting, and promotional features.
• Payment Processing: Processing deposits, withdrawals, and wallet transactions; reconciling financial records; managing chargebacks or payment disputes.
• Identity Verification (KYC): Verifying your identity and eligibility to use the ji7 platform in compliance with PAGCOR licensing requirements and anti-money laundering obligations.
• Legal and Regulatory Compliance: Meeting obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act (RA 10173), and other applicable Philippine legislation, including reporting obligations to the AMLC where triggered.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, bonus abuse, collusion, money laundering, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming behavior for patterns consistent with problem gambling; administering player-set limits and self-exclusion; fulfilling responsible gaming obligations under PAGCOR's framework.
• Customer Support: Responding to your queries, complaints, and requests; maintaining records of support interactions for quality assurance and dispute resolution purposes.
• Platform Improvement: Analyzing aggregate and anonymized behavioral data to improve game selection, user interface design, and platform performance. This processing is conducted on anonymized or pseudonymized data where feasible.
• Marketing Communications (with consent only): Sending you information about promotions, bonuses, and new features where you have provided explicit opt-in consent. You may withdraw marketing consent at any time via your account notification preferences or by contacting support.

Every processing activity carried out by ji7 is grounded in one or more of the following lawful bases recognized under the Philippine Data Privacy Act of 2012:

• Consent (Section 12(a), RA 10173): Processing based on your freely given, informed, and specific consent — principally for marketing communications and optional analytics features.
• Performance of a Contract (Section 12(b)): Processing necessary to deliver the gaming services you have contracted for by creating a ji7 account, including gameplay, wallet management, and support.
• Compliance with Legal Obligation (Section 12(c)): Processing required to fulfill mandatory obligations under PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine law — including KYC, transaction monitoring, and AMLC reporting.
• Legitimate Interests (Section 12(f)): Processing necessary for the legitimate interests of the Company, where those interests are not overridden by your rights and interests — specifically: fraud detection, platform security, responsible gaming monitoring, and aggregate service improvement analytics.

Where ji7 relies on consent as the legal basis for a specific processing activity, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Ji7 does not sell your personal data. Sharing of personal data with third parties occurs only in the following circumstances and is strictly limited to what is necessary for each stated purpose:

• Payment Service Providers: GCash (Mynt), Maya Philippines, BPI, BDO, UnionBank, and other approved payment processors receive only the minimum data necessary to process your transaction — typically your account reference and transaction amount. Ji7 does not transmit full identity data to payment providers beyond what the provider requires for its own regulatory obligations.
• KYC and Identity Verification Partners: Authorized identity verification service providers receive your submitted ID documents for the sole purpose of verifying your identity. These providers operate under binding data processing agreements and are prohibited from using your data for any other purpose.
• Game Content Providers: Third-party game studios (such as JILI Games, Pragmatic Play, PG Soft, Evolution Gaming) receive technical session data necessary to initialize, operate, and settle game results. Game providers do not receive your full identity information; they typically receive only a pseudonymous player identifier and session parameters.
• Regulatory and Government Authorities: Ji7 is required by Philippine law to share certain data with PAGCOR (for licensing and compliance purposes) and the AMLC (Anti-Money Laundering Council) where transaction monitoring thresholds are met or suspicious activity is identified. Such disclosures are mandatory and do not require your consent.
• Law Enforcement: Ji7 will disclose personal data to Philippine law enforcement authorities in response to valid legal process (court orders, subpoenas, or lawful requests) or where disclosure is necessary to prevent or detect a serious crime.
• Platform Service Providers: Cloud hosting providers, cybersecurity services, and technical infrastructure partners who process data on ji7's behalf under binding data processing agreements that require them to handle data only on ji7's instructions and to appropriate security standards.

Ji7 uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device by your browser when you visit a website. Ji7 uses cookies for the following purposes:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies (to keep you logged in during a session), security cookies (to prevent cross-site request forgery), and preference cookies (to remember your game lobby settings). These cookies cannot be disabled without impairing platform functionality.
• Functional Cookies: Enhance platform performance by remembering your preferences such as preferred game categories, language settings, and responsible gaming tool configurations. Disabling these cookies will not prevent access to the platform but may result in a reduced experience.
• Analytics Cookies: Used to collect aggregate, anonymized data on platform usage patterns — which game categories are most popular, where users exit the registration flow, etc. This data is used to improve the platform. Ji7 uses privacy-respecting analytics configurations and does not use this data for cross-site advertising profiles.
• Session Recording (limited scope): Ji7 may use pseudonymous session recording on select platform areas to identify usability issues. Individual recordings are not linked to personal identity data and are deleted after the improvement analysis is complete.

You may manage cookie preferences through your browser's cookie settings. Note that deleting or blocking strictly necessary cookies will prevent login and core platform functionality. Ji7 does not use third-party advertising cookies or behavioral retargeting pixels from social media or advertising networks.

Ji7 retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable Philippine law. The following retention schedule applies:

Upon expiration of the applicable retention period, personal data is securely deleted using methods that prevent reconstruction or recovery, or is anonymized such that it can no longer be linked to an identifiable individual. Data retained solely to fulfill a legal obligation is not used for any commercial purpose during that retention period.

Ji7 implements a layered information security framework to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss. The key security measures in place include:

• Transport Encryption: All data transmitted between your device and ji7 servers is encrypted using TLS 1.2 or higher (256-bit SSL). HTTPS is enforced across all platform endpoints.
• Data-at-Rest Encryption: Sensitive personal data stored in ji7's databases — including identity data and financial records — is encrypted at rest using AES-256 encryption.
• Password Security: Player account passwords are stored exclusively as bcrypt hashes. The actual password is never stored or transmitted in plain text. Ji7 employees cannot read your password.
• Access Controls: Access to production systems containing personal data is restricted on a strict need-to-know basis, protected by multi-factor authentication and role-based access controls. All staff access to personal data is logged and auditable.
• Network Security: Ji7's platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and DDoS mitigation. Regular vulnerability assessments and penetration testing are conducted by independent security professionals.
• Incident Response: Ji7 maintains a formal data breach response plan. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ji7 will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by RA 10173 and NPC regulations.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ji7. Ji7 will respond to all valid rights requests within thirty (30) days of receipt, or within the extended period of up to sixty (60) days where the complexity of the request requires it, in which case you will be informed of the extension and the reason for it.

To exercise any of these rights, submit a written request to ji7's Data Protection Officer via the support channels described in Section 15, clearly stating the right you wish to exercise and providing sufficient information to verify your identity. Ji7 will not charge a fee for standard rights requests. Requests that are manifestly unfounded or excessive may be refused with a written explanation, and the basis for refusal may be challenged with the National Privacy Commission.

Note that certain rights are subject to limitations where retention or continued processing is required by applicable Philippine law (for example, AMLC-mandated transaction records cannot be deleted at a player's request during the mandatory retention period).

Ji7 Casino is strictly restricted to individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. Ji7 does not intentionally collect or process personal data from any person under the age of 21.

Age verification is conducted during the account registration process and is confirmed via KYC document verification. Where ji7 becomes aware or reasonably suspects that personal data has been collected from an individual under the age of 21, that data will be immediately deleted and the associated account will be closed without prejudice to any applicable legal reporting obligations.

If you are a parent or guardian and believe that a minor under your care has registered an account on ji7, please contact the DPO immediately using the contact information in Section 15 with the subject line "Minor Account — Urgent." Ji7 will investigate and respond within 24 hours.

Ji7 Casino primarily processes data within the Philippines. However, certain service providers — particularly cloud infrastructure providers, cybersecurity services, and some game studio technical integrations — may involve data transfer to or processing in servers located outside the Philippines.

Where such cross-border transfers occur, ji7 ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers, including:

• Binding contractual clauses that require the recipient to maintain data protection standards equivalent to those required by RA 10173.
• Transfers limited to countries or organizations that have been recognized by the NPC as providing adequate data protection standards.
• Data minimization practices to ensure that only pseudonymized or the minimum necessary data is transferred cross-border where a Philippine alternative is not available.

Ji7 does not transfer full identity or KYC documents outside of Philippines-based or NPC-approved data processors without explicit basis under RA 10173 and corresponding NPC approvals where required.

Ji7 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in data processing practices, applicable law, regulatory guidance from the NPC, or the services offered on the platform.

When changes are made, the "Last Updated" date at the top of this Policy will be revised. Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — ji7 will provide notice to registered players via the email address on file at least fourteen (14) days before the changes take effect. The notification will summarize the key changes and direct you to the updated Policy.

For non-material changes (corrections of typographical errors, clarifications that do not affect the substance of data processing, or minor structural reorganizations), the Policy will be updated without individual notice. The current version of the Privacy Policy is always available on this page.

Your continued use of the ji7 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with material changes to this Policy, you may close your account by contacting ji7 support before the effective date, and any Real Money Funds balance will be returned to you in accordance with the withdrawal procedures.

For any privacy-related queries, data subject rights requests, or complaints regarding ji7 Casino's data processing practices, you may contact the ji7 Data Protection Officer through the following channels. Please clearly identify your request type in your initial message to ensure it is routed to the DPO team promptly.

• Email: [email protected] — please use the subject line "Data Privacy Request — [Your Username]" or "DPO Complaint — [Your Username]" to ensure priority routing to the DPO. Response time: within 72 hours of receipt.
• Live Chat: Available on the ji7 platform. For formal DPO requests, Live Chat agents will escalate to the DPO team and provide you with a written reference number. Not recommended for submitting sensitive document copies.
• Formal Written Request: For formal data subject rights requests that require documentation (access requests, portability requests, erasure requests), submit your request in writing to the support email above with the subject line "Formal Data Subject Rights Request" along with a copy of a valid Philippine government-issued ID for identity verification purposes.

If you are not satisfied with ji7's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Republic of the Philippines. The NPC is the independent regulatory authority responsible for administering and enforcing RA 10173. Information about filing a complaint with the NPC is available through Philippine government channels.