Privacy Policy

This Privacy Policy ("Policy") explains how 18jil ("18jil," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the 18jil online casino and sports betting platform, including the website accessible at 18jil.club and any associated mobile applications or services (collectively, the "Platform").

This Policy applies to all personal data processed in connection with your registration, account management, gameplay, transactions, customer support interactions, and any other use of the Platform, regardless of the device or channel through which you access our services.

By creating an account or using the 18jil Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 18jil acts as the Personal Information Controller in respect of the personal data collected through the Platform.

As the Personal Information Controller, 18jil determines the purposes and means by which personal data is processed, and bears primary responsibility for ensuring that such processing complies with applicable data protection law.

Where 18jil engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification services, or technology infrastructure providers — those parties act as Personal Information Processors and are contractually bound to process data only in accordance with 18jil's documented instructions and applicable legal requirements.

For all data protection enquiries, requests, or complaints, please contact us at: [email protected] — clearly marking your communication "Data Privacy Request" in the subject line.

The categories of personal data collected by 18jil vary depending on your level of interaction with the Platform. The following table summarises the main categories:

We do not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance purposes. Where sensitive data is collected — such as government ID numbers — it is handled with enhanced security controls and access restrictions.

18jil collects personal data through the following channels and methods:

• Directly from you: Information you provide when completing the registration form, submitting KYC documents, making a deposit or withdrawal request, contacting our support team, or responding to a promotion.
• Automatically through the Platform: Technical data such as IP addresses, device identifiers, browser characteristics, and session activity is collected automatically as you navigate and use the 18jil Platform. This data is collected via server logs, cookies, and similar tracking technologies (see Section 7).
• From payment service providers: When you deposit via GCash, PayMaya, BPI, BDO, or Metrobank, those providers may share transaction confirmation data with 18jil to verify and process your payment.
• From identity verification providers: For KYC purposes, 18jil may engage third-party identity verification services. These providers may cross-reference the documents you submit against official Philippine government data sources to confirm identity authenticity.
• From fraud prevention and compliance services: Data may be received from third-party fraud screening and anti-money laundering tools used to protect the integrity of the Platform and comply with regulatory obligations.

18jil processes personal data only for specific, legitimate purposes. The following table sets out the primary processing purposes and their corresponding legal bases under the Data Privacy Act of 2012:

18jil will not use your personal data for any purpose that is incompatible with the purposes disclosed in this Policy without first obtaining your explicit consent or notifying you of the new purpose, as required by applicable law.

18jil does not sell, rent, or trade personal data to third parties. Data may be shared with or disclosed to third parties only in the following circumstances:

• Contracted service providers: Third parties engaged by 18jil to perform specific operational functions, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, cloud infrastructure and hosting providers, customer communication platforms, and fraud detection services. All such providers are contractually bound to process data solely on 18jil's documented instructions and to maintain appropriate security standards.
• Regulatory and law enforcement authorities: Where required by applicable Philippine law, court order, or regulatory directive, 18jil may disclose personal data to government bodies, law enforcement agencies, or supervisory authorities. 18jil will, where legally permitted, notify affected Players of such disclosures.
• Anti-money laundering compliance: Where required under Philippine Anti-Money Laundering Act (AMLA) obligations, certain transaction and identity data may be reported to the Anti-Money Laundering Council (AMLC) or similar competent authorities.
• Corporate transactions: In the event of a merger, acquisition, restructuring, or sale of all or a portion of 18jil's business assets, personal data may be transferred as part of such a transaction, subject to equivalent privacy protections applying to the transferred data.
• With your consent: In any other circumstance not covered above, 18jil will seek your explicit consent before disclosing your personal data to any third party.

The 18jil Platform uses cookies and similar tracking technologies to support the operation and improvement of our services. A cookie is a small text file placed on your device when you access a website. The following categories of cookies are used on the Platform:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting core functionality.
• Functional cookies: Used to remember your preferences, such as language settings, display preferences, and responsible gaming configurations you have set in your account.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how Players navigate and use the Platform, enabling 18jil to identify performance issues and improve the user experience.
• Security cookies: Used to detect and prevent fraudulent login attempts, bot activity, and other security threats.

18jil does not deploy advertising or cross-site tracking cookies for third-party commercial purposes. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect Platform functionality including session management.

18jil implements a layered information security programme designed to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• Encryption in transit: All communications between your device and 18jil servers are protected by 256-bit SSL/TLS encryption — the same standard applied by major Philippine banks and regulated financial institutions.
• Encryption at rest: Sensitive personal data, including identity documents and financial details, is encrypted in storage using AES-256 or equivalent algorithms.
• Access controls: Access to personal data within 18jil is strictly limited to authorised personnel who require it for specific operational or compliance functions. Role-based access controls and multi-factor authentication are applied to all internal systems holding personal data.
• Intrusion detection and monitoring: 18jil's security infrastructure includes real-time anomaly detection, intrusion prevention systems, and audit logging to identify and respond to potential security incidents promptly.
• Data breach response: In the event of a confirmed personal data breach that poses a real risk of harm to affected Players, 18jil will notify the National Privacy Commission and affected individuals within the timeframes required by the Data Privacy Act of 2012 and its Implementing Rules.

While 18jil applies robust security controls, no information security system can guarantee absolute protection. Players are strongly advised to use a strong, unique password for their 18jil account, enable two-factor authentication, and safeguard their login credentials from disclosure to third parties.

18jil retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, after which it is securely deleted or anonymised in accordance with our data retention schedule. The following general retention guidelines apply:

• Account and KYC data: Retained for the duration of the active account and for a minimum of five (5) years following account closure, in compliance with applicable anti-money laundering and gaming regulatory retention requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of transaction, consistent with AMLA obligations and tax record-keeping requirements.
• Customer support records: Retained for a period of three (3) years from the date of the interaction, or longer where the record relates to an unresolved dispute or regulatory matter.
• Gaming history: Retained for the duration of account activity and five (5) years following account closure, for responsible gaming monitoring, dispute resolution, and regulatory audit purposes.
• Marketing preferences and consent records: Retained for as long as the account is active and for one (1) year following account closure, or until consent is withdrawn, whichever is earlier.
• Technical and device data: Typically retained for a rolling period of twelve (12) months, unless retained longer for security investigation purposes.

Where data is retained solely for compliance or legal reasons, access to it is restricted to authorised personnel, and the data is not used for any other operational purpose during the retention period.

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by 18jil. To exercise any of these rights, contact us at [email protected] with the subject "Data Privacy Request."

18jil will respond to all verified data rights requests within thirty (30) calendar days of receipt. Where a request is complex or voluminous, we may extend this period by a further thirty (30) days with prior notice to you. Requests will be processed free of charge unless they are manifestly unfounded, excessive, or repetitive.

The 18jil Platform is strictly intended for use by adults. In accordance with Philippine gaming regulations, persons under the age of twenty-one (21) years are prohibited from registering for or using any service on the Platform.

18jil does not knowingly collect or process personal data from individuals under the age of 21. During account registration, all applicants are required to confirm their date of birth and are subject to age verification as part of the KYC process.

If 18jil becomes aware that personal data has been collected from a person under 21 years of age — whether through a misrepresentation during registration or otherwise — the following steps will be taken immediately:

• The Account will be suspended pending investigation.
• Any deposits or winnings associated with the underage account will be subject to review and handled in accordance with applicable regulatory guidance.
• The personal data of the underage individual will be securely deleted, except to the extent retention is required by law or regulatory authority.

If you are a parent or guardian and believe that a person under 21 in your care has registered on the 18jil Platform, please contact us immediately at [email protected] with the subject line "Underage Account Report."

The 18jil Platform primarily serves Filipino users and operates infrastructure within or closely associated with the Philippines. However, certain third-party service providers engaged by 18jil — including cloud infrastructure, fraud prevention, and identity verification providers — may process data on servers located in other countries.

Where personal data is transferred outside the Philippines, 18jil ensures that appropriate safeguards are in place to protect the data, in compliance with the cross-border data transfer provisions of the Data Privacy Act of 2012 and applicable National Privacy Commission regulations. These safeguards may include:

• Contractual data transfer agreements incorporating standard data protection clauses recognised under Philippine law.
• Engaging only providers whose countries of operation have been assessed as providing an adequate level of data protection.
• Binding corporate rules or equivalent intra-group transfer mechanisms where applicable.

Players may request information about specific cross-border transfer arrangements applicable to their personal data by contacting us at the address provided in Section 14.

18jil reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, applicable law, regulatory guidance, or the services offered on the Platform. Material changes — meaning those that significantly affect how your personal data is processed or that alter your rights as a data subject — will be communicated to you in advance by:

• A prominent notice on the 18jil Platform homepage and account dashboard.
• A direct notification sent to your registered mobile number or email address on record, no less than fourteen (14) days prior to the effective date of the change.

Non-material changes — such as minor corrections, clarifications, or formatting updates that do not affect the substance of your rights or our data practices — may be published without prior individual notice, though the updated Policy will always be accessible at 18jil.club/privacy-policy.

The effective date stated at the top of this document reflects the date of the most recent material revision. Your continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy. If you disagree with material changes, you may close your Account before the changes take effect.

For any questions, concerns, or requests relating to this Privacy Policy or 18jil's handling of your personal data, please contact us through the following channels:

• Email: [email protected] — use the subject line "Data Privacy Request" or "Privacy Complaint" as applicable.
• Live Chat: Available 24/7 directly on the 18jil Platform for general privacy enquiries. For formal data rights requests or complaints, email is the preferred channel to ensure a documented and traceable record.

18jil is committed to resolving all privacy-related concerns in a fair, transparent, and timely manner. We aim to acknowledge all privacy enquiries within three (3) business days and to provide a substantive response within thirty (30) calendar days.