vjl Casino Privacy Policy

This Privacy Policy ("Policy") describes how vjl Casino ("vjl", "we", "us", "our"), the operator of the online gaming platform accessible at vjl.bio, collects, uses, stores, shares, protects, and disposes of personal data relating to registered players, prospective players, and visitors to the platform ("you", "your", "Data Subject").

vjl Casino is committed to protecting the privacy and personal data of all individuals who interact with the platform, in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Republic of the Philippines.

vjl also operates as a PAGCOR-licensed online gaming platform, which means certain data processing activities — particularly those related to identity verification, age verification, anti-money-laundering compliance, and responsible gaming — are legally mandated by the terms of our PAGCOR operating licence and by applicable Philippine law. These mandatory processing activities exist independently of and in addition to our voluntary data processing practices.

For the purposes of the Data Privacy Act of 2012, vjl Casino is the personal information controller ("PIC") in respect of the personal data collected and processed through the vjl.bio platform and its associated services.

vjl Casino has designated a Data Protection Officer ("DPO") as required under Section 21 of the DPA and its IRR. The DPO is responsible for overseeing vjl's data protection compliance programme, handling data subject rights requests, and serving as the primary point of contact for the National Privacy Commission.

Contact details for vjl's Data Protection Officer are provided in Section 14 of this Policy. Players wishing to exercise their rights under the DPA or raise a privacy-related concern should contact the DPO directly using the contact information provided.

vjl Casino collects personal data across the following categories, depending on the nature of your interaction with the platform:

vjl does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (such as racial or ethnic origin, political opinions, or health data) unless it is directly and necessarily relevant to a specific processing purpose — for example, health-related information provided voluntarily in the context of a responsible gaming self-assessment.

vjl Casino collects personal data through the following methods:

4.1 Direct Collection

Information you provide directly when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, participating in promotions, or updating your account profile. This is the primary source of identity, contact, and financial data.

4.2 Automated Technical Collection

Information collected automatically as you use the vjl platform, including technical and behavioural data. This is collected through server logs, cookies, and similar tracking technologies. Please see Section 8 of this Policy for a detailed explanation of vjl's use of cookies and tracking technologies.

4.3 Third-Party Sources

Information received from third-party service providers engaged by vjl to deliver platform services, including:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank) — for transaction verification and fraud detection;
• Identity verification service providers — for KYC document validation;
• Geolocation service providers — for confirming player location within the Philippines;
• PAGCOR's self-exclusion register — to check whether a prospective player is subject to a regulatory exclusion order.

vjl processes personal data only for specific, legitimate purposes. The primary purposes for which your data is used are:

• Account registration and management: Creating, maintaining, and administering your vjl player account, including authentication and access control.
• Age and identity verification: Verifying that all registered players meet the 21-year minimum age requirement mandated by PAGCOR, and confirming the identity of players as required for KYC compliance.
• Payment processing: Processing deposits, withdrawals, and refunds through Philippine payment methods; reconciling transactions; and detecting and preventing payment fraud.
• Gaming service delivery: Delivering the games and features available on the vjl platform, maintaining game session records, and calculating winnings and losses accurately.
• Regulatory compliance: Meeting vjl's obligations under PAGCOR's operating licence, Republic Act No. 9160 (Anti-Money Laundering Act), the Data Privacy Act of 2012, and other applicable Philippine legislation.
• Anti-money-laundering monitoring: Monitoring transactions for indicators of money laundering, structuring, or other financial crimes, and filing reports with the Anti-Money Laundering Council (AMLC) where legally required.
• Responsible gaming: Implementing and managing deposit limits, loss limits, self-exclusion orders, and session reminders; identifying players who may be at risk of gambling-related harm.
• Customer support: Responding to player queries, complaints, and disputes; maintaining records of support interactions for quality assurance and dispute resolution.
• Platform security: Detecting, preventing, and investigating fraudulent activity, multi-accounting, bot usage, and other security threats to the platform.
• Marketing communications: Sending promotional communications to players who have consented to receive them. Marketing communications can be opted out of at any time through your account settings.
• Platform analytics and improvement: Analysing aggregated and anonymised usage data to improve platform performance, user experience, and game offerings.

Under the Data Privacy Act of 2012, vjl's processing of personal data is based on one or more of the following legal grounds as applicable to each processing activity:

• Consent (Section 12(a), DPA): Where you have given clear and informed consent for a specific processing purpose, such as receiving marketing communications.
• Contractual necessity (Section 12(b), DPA): Where processing is necessary to perform our contractual obligations to you as a registered player, including account management, game delivery, and payment processing.
• Legal obligation (Section 12(c), DPA): Where processing is required to comply with vjl's obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests (Section 12(f), DPA): Where processing is necessary for vjl's legitimate interests — such as platform security, fraud prevention, and business analytics — provided those interests are not overridden by your rights and interests as a Data Subject.

Where vjl relies on consent as the legal basis for processing, you have the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

vjl Casino does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared with third parties only in the following circumstances:

7.1 Service Providers (Personal Information Processors)

vjl engages third-party service providers — classified as personal information processors (PIPs) under the DPA — to deliver specific operational services on vjl's behalf. These providers process personal data only as instructed by vjl, under binding data processing agreements that require them to maintain appropriate security and privacy standards. Categories of PIPs engaged by vjl include:

• Payment processing providers (GCash, PayMaya, and partner banking institutions);
• Identity verification and KYC service providers;
• Game software providers (who receive technical gaming data for game delivery and integrity monitoring);
• Cloud infrastructure and hosting providers;
• Customer support platform providers;
• Email and SMS communication service providers.

7.2 Regulatory and Law Enforcement Disclosure

vjl discloses personal data to regulatory authorities and law enforcement agencies where required by Philippine law, including:

• PAGCOR — in connection with licensing audits, player complaint investigations, and regulatory reporting;
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting and covered transaction reporting as required under RA 9160;
• National Privacy Commission (NPC) — in response to official NPC investigations, inquiries, or breach notifications;
• Other Philippine law enforcement or judicial authorities — in response to valid court orders, subpoenas, or lawful requests.

7.3 Business Transfers

In the event of a merger, acquisition, or transfer of vjl's business or assets, personal data held by vjl may be transferred to the acquiring entity as part of that transaction. Affected players will be notified in advance of such a transfer where required by Philippine law.

vjl Casino uses cookies and similar tracking technologies to operate the platform, improve user experience, maintain session security, and gather analytics data. A cookie is a small text file placed on your device by a website you visit. Cookies used on the vjl platform fall into the following categories:

• Strictly Necessary Cookies: Required for the platform to function correctly. These cookies maintain your login session, remember your preferences during a session, and support security features such as CSRF protection. They cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players use the vjl platform — including pages visited, time spent on pages, and navigation paths. This data is used to improve the platform and does not identify individual users.
• Functional Cookies: Enable the platform to remember choices you have made — such as preferred language or last visited game category — to provide a more personalised experience.
• Security Cookies: Support fraud detection, bot prevention, and anomalous login detection by storing session integrity tokens and device fingerprint references.

You may control non-essential cookies through your browser settings. Disabling analytics or functional cookies will not prevent you from accessing core vjl features but may reduce the quality of your experience. Most modern mobile and desktop browsers provide controls to manage cookie preferences. Because vjl is a browser-based platform with no downloadable app, standard browser cookie management tools are effective for managing your preferences.

vjl retains personal data for as long as it is necessary to fulfil the purpose for which it was collected, subject to any minimum retention periods required by applicable Philippine law. The following general retention guidelines apply:

• Active Account Data: Retained for the duration of your active account relationship with vjl.
• KYC and Identity Verification Records: Retained for a minimum of five (5) years following account closure, as required by PAGCOR and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, consistent with AMLC record-keeping requirements.
• Gaming History Records: Retained for a minimum of three (3) years following account closure for dispute resolution, PAGCOR audit, and responsible gaming review purposes.
• Support Interaction Records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing Consent Records: Retained for the duration of the consent and for a reasonable period thereafter to demonstrate compliance with consent management obligations.

When personal data is no longer required for its processing purpose and no legal retention obligation applies, vjl securely disposes of the data through deletion, anonymisation, or destruction of physical records, as appropriate to the storage medium and data type.

vjl Casino implements a layered security framework to protect personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• Encryption in Transit: All data transmitted between your device and vjl's servers is encrypted using Transport Layer Security (TLS) 1.3 protocol. The vjl.bio domain maintains an active HTTPS certificate at all times.
• Encryption at Rest: Sensitive personal data — including identity documents, financial account references, and authentication credentials — is encrypted when stored on vjl's servers using AES-256 encryption.
• Password Security: User passwords are never stored in plaintext. They are hashed using a strong cryptographic hashing algorithm with unique salts per account. vjl staff cannot retrieve your password — only a password reset process is available.
• Access Controls: Access to personal data is restricted to vjl staff and service providers who require it for their specific job functions. Role-based access control (RBAC) is applied to all internal systems containing personal data.
• Two-Factor Authentication: OTP-based two-factor authentication is available for all vjl player accounts and is required for all vjl staff accessing internal systems containing personal data.
• Security Monitoring: vjl maintains automated monitoring systems that detect anomalous access patterns, failed authentication attempts, and other security indicators that may signal unauthorised access attempts.
• Breach Response: vjl maintains a documented personal data breach response procedure. In the event of a breach that is likely to result in harm to affected data subjects, vjl will notify the NPC and affected players within the timeframes required by NPC Circular 16-03.

As a Data Subject under Republic Act No. 10173, you have the following rights in respect of your personal data held by vjl Casino. These rights are exercisable by contacting vjl's Data Protection Officer using the contact details in Section 14:

vjl will respond to data subject rights requests within thirty (30) calendar days of receipt, as required under the DPA's IRR. Complex requests may require additional time, in which case vjl will notify you of the extended timeframe.

vjl Casino does not knowingly collect personal data from any person under the age of 21. Access to the vjl platform is strictly restricted to players who are 21 years of age or older, as required by PAGCOR's licensing conditions for online gaming operators in the Philippines.

All vjl accounts are subject to mandatory age verification as part of the KYC process. Any account where age verification reveals the account holder is under 21 years of age will be immediately closed, all associated personal data will be securely deleted (subject to any minimum legal retention periods applicable to the circumstances), and the case may be referred to PAGCOR or relevant law enforcement.

If you believe that a minor has registered for or is using a vjl account, please contact our Data Protection Officer or support team immediately so the matter can be investigated and the account closed without delay.

vjl Casino reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, changes in applicable Philippine law, updates to PAGCOR's regulatory requirements, and improvements to our privacy governance framework.

When material changes are made to this Policy — that is, changes that significantly affect how we process your personal data or your rights as a Data Subject — vjl will notify registered players through one or more of the following channels: email notification to the registered email address, a prominent notice on the vjl platform upon login, or direct communication through the platform's notification system.

For non-material changes (such as clarifications, corrections of typographical errors, or minor restructuring that does not change the substance of processing practices), vjl will update the "Last Updated" date at the top of this page without a separate notification. Your continued use of the vjl platform after an updated Privacy Policy comes into effect constitutes your acknowledgement of the updated Policy.

Previous versions of this Privacy Policy are retained by vjl and can be requested from the Data Protection Officer for reference purposes.

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by vjl Casino — including requests to exercise your rights as a Data Subject — please contact vjl's Data Protection Officer through any of the following channels:

If you are not satisfied with vjl's response to your privacy inquiry or rights request, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. The NPC's complaint process and contact details are available through the official NPC website. vjl cooperates fully with all NPC investigations and inquiries.