1Overview and Scope
This Privacy Policy applies to all personal data processed by 27JL in connection with the operation of the online gaming platform at https://27jl.best. It covers data collected during account registration, while you use the 27JL platform, when you contact our customer support team, and through any other interaction you have with 27JL as a member or visitor.
27JL is committed to handling personal information responsibly and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and any related issuances from the National Privacy Commission (NPC). Our operations are also subject to data governance requirements imposed by PAGCOR as part of our online gaming license conditions.
When we say "personal data" in this policy, we mean any information that can be used to identify you directly or indirectly — such as your name, contact details, payment information, device data, and account activity. "Processing" includes collecting, storing, using, sharing, and deleting that data.
Plain version: 27JL collects the personal data we need to run a safe, legal online casino for Philippine players. We do not sell your data to advertisers. We protect it with encryption. You have real rights over it, and you can exercise them by contacting us.
2Personal Data We Collect
27JL collects only the personal data that is necessary for the purposes described in this policy. The categories of data we may collect include:
Identity and Contact Data
- Full legal name as shown on your government-issued identification
- Date of birth (used for age verification as required by PAGCOR)
- Nationality and country of residence
- Residential address
- Mobile phone number registered in the Philippines
- Email address
Identity Verification Documents
- Copy of government-issued ID (PSA ID, passport, LTO driver's licence, UMID, Voter's ID)
- Proof of address where required
- Selfie or liveness check image where required for verification
Financial and Transaction Data
- GCash or Maya account number or linked mobile number
- Bank account details (BDO, BPI, UnionBank, or other Philippine bank) used for deposits or withdrawals
- Visa or Mastercard payment details (card number is masked after verification)
- Transaction amounts, dates, reference numbers, and currency
Account and Gaming Activity Data
- Username and hashed password
- Login history, session times, and activity logs
- Game history including wager amounts, outcomes, and balances
- Bonus and promotion usage history
- Responsible gaming settings including deposit limits and exclusion requests
Technical and Device Data
- IP address at time of login and during active sessions
- Device type, operating system, and browser version
- Mobile network operator where applicable
- Cookie identifiers and similar tracking data
Communications Data
- Content of messages sent to 27JL customer support
- Records of complaints and dispute outcomes
- Preferences for marketing communications where you have given consent
3How We Collect Your Data
27JL collects personal data through the following channels:
- Account registration: Information you provide directly when creating a 27JL account
- Identity verification: Documents you submit during KYC (Know Your Customer) verification
- Deposits and withdrawals: Payment details submitted when using the 27JL cashier
- Gameplay: Automatically generated activity logs from your gaming sessions
- Customer support interactions: Information you provide when contacting the 27JL team
- Website and app usage: Technical data collected automatically via cookies and similar technologies
- Third-party providers: Data received from identity verification services, payment processors, and fraud detection partners where required for regulatory compliance
Note: 27JL does not purchase contact lists or collect data about you from social media platforms. All personal data held by 27JL has been provided directly by you or generated through your use of the platform.
4How 27JL Uses Your Personal Data
27JL uses the personal data we hold about you for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Create and manage your 27JL account | Identity, contact, and verification data |
| Verify your age and identity (PAGCOR requirement) | ID documents, date of birth, selfie |
| Process deposits and withdrawals in PHP | Payment and transaction data |
| Deliver and record gameplay | Account activity, session, and gaming data |
| Provide customer support and resolve disputes | Communications and account data |
| Administer responsible gaming tools | Gaming history, deposit limits, exclusion status |
| Detect and prevent fraud and money laundering | Technical, financial, and identity data |
| Send relevant communications (with consent) | Contact and marketing preference data |
| Improve the 27JL platform through analytics | Anonymised or aggregated usage data |
| Meet legal and regulatory obligations | All categories where required by law |
27JL does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required by fraud prevention or regulatory compliance systems — in which case you have the right to request human review.
5Legal Basis for Processing
Under the Philippine Data Privacy Act, 27JL processes your personal data on the following legal grounds:
- Performance of a contract: Processing necessary to operate your 27JL account, process transactions, and deliver gaming services you have requested
- Legal obligation: Processing required to comply with PAGCOR licensing conditions, anti-money laundering laws, tax regulations, and court orders
- Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests do not override your rights
- Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent that you may withdraw at any time
7How Long We Keep Your Data
27JL retains personal data for as long as it is needed for the purpose for which it was collected, or as required by law. The retention periods below reflect legal requirements under Philippine gaming and anti-money laundering law:
After the applicable retention period, 27JL securely deletes or anonymises personal data unless it is subject to an ongoing legal dispute, regulatory inquiry, or a member request that requires the data to be held for longer. Anonymised data that can no longer be linked to an individual may be retained indefinitely for aggregate analytics.
8How We Protect Your Personal Data
27JL implements a layered approach to data security that includes technical, administrative, and physical safeguards. Key measures in place include:
- SSL/TLS encryption: All data transmitted between your device and the 27JL platform is encrypted in transit
- Hashed passwords: Account passwords are never stored in readable form — only a secure one-way hash is retained
- Access controls: Only authorised 27JL team members with a legitimate business need can access personal data, and all access is logged
- Payment data masking: Card numbers and sensitive payment identifiers are masked after initial processing
- Fraud and anomaly detection: Automated systems monitor account activity for unusual patterns that may indicate unauthorised access
- Two-factor authentication: Where available, 27JL encourages members to enable 2FA to add a second layer of protection to their account
- Regular security reviews: 27JL conducts periodic reviews of its data handling systems and processes
While 27JL takes all reasonable steps to protect your data, no online platform can guarantee complete security. If you suspect unauthorised access to your 27JL account, contact our support team immediately via live chat or email.
Your part matters too: Use a strong, unique password for your 27JL account, keep your login credentials private, and log out of shared devices. Never give your password or OTP to anyone, including people claiming to be 27JL staff.
10Your Rights as a Data Subject
Under the Philippine Data Privacy Act, you have the following rights regarding the personal data 27JL holds about you. You can exercise any of these rights by contacting our Data Privacy Officer at the address in Section 14.
Right to Access
Request a copy of the personal data 27JL holds about you and information on how it is being processed.
Right to Correction
Request that inaccurate or incomplete personal data held by 27JL be corrected or updated without delay.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention requirements.
Right to Object
Object to processing of your personal data for direct marketing or processing based on legitimate interests where your rights override those interests.
Right to Data Portability
Receive your personal data in a structured, commonly used format and transmit it to another controller where technically feasible.
Right to Restriction
Request that 27JL restrict processing of your personal data in certain circumstances, such as while the accuracy of data is being verified.
27JL will respond to rights requests within 15 business days of receipt. Certain requests may be declined where processing is required by law or to defend a legal claim. In such cases, 27JL will explain the reason for the refusal. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
11Protection of Minors
The 27JL platform is strictly intended for adults aged 21 years and above. 27JL does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration process and is carried out in compliance with PAGCOR requirements.
If 27JL discovers that personal data has been collected from a person under the age of 21 — whether through a misrepresentation during registration or any other means — the account will be closed immediately, any balance will be returned to the payment source, and the personal data will be securely deleted to the extent permitted by law.
If you are a parent or guardian and believe your child has registered on 27JL, please contact us immediately at support@27jl.best so the situation can be resolved promptly.
12International Data Transfers
The 27JL platform is operated primarily for and within the Philippines. However, some of the third-party service providers 27JL uses — such as cloud infrastructure providers or game software platforms — may process data in servers located outside the Philippines.
Where personal data is transferred internationally, 27JL ensures that appropriate safeguards are in place to protect that data to a standard equivalent to Philippine law. These safeguards include contractual clauses that require the recipient to maintain appropriate data protection standards, or use of service providers that operate under frameworks recognised as offering adequate protection.
If you would like more information about the international transfers affecting your personal data and the safeguards in place, contact the 27JL Data Privacy Officer at the address in Section 14.
13Changes to This Privacy Policy
27JL may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. When we make material changes, we will notify active 27JL members by email or via an in-platform notice before the changes take effect, giving you an opportunity to review the updated policy.
The effective date shown at the top of this page indicates when the current version was last updated. We encourage you to review this page periodically, especially after receiving a change notification. Continued use of 27JL after the updated policy takes effect constitutes acceptance of the revised terms.
14Contact 27JL About Privacy
If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a concern about how your personal data has been handled, please contact the 27JL Data Privacy Officer:
- Email: support@27jl.best (use subject line: "Privacy Request")
- Live Chat: Available 24/7 through the 27JL platform after logging in
We aim to acknowledge all privacy-related inquiries within 3 business days and to resolve them within 15 business days. If you are unsatisfied with our response, you may escalate your concern to the National Privacy Commission of the Philippines, which accepts complaints through its official channels.
For general account or gaming queries unrelated to data privacy, please use the standard 27JL customer support live chat.