30jil Privacy Policy

This Privacy Policy ("Policy") is issued by 30jil ("30jil," "we," "us," or "our") and applies to all personal data we collect and process in connection with the 30jil online gaming platform, accessible at https://30jil.cam, including all games, services, promotions, customer support interactions, and related activities.

30jil is committed to protecting your personal data and respecting your privacy. We operate in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission (NPC) of the Philippines. We also comply with all data-related obligations imposed on licensed operators under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR).

By accessing or using the 30jil platform, creating an account, depositing funds, or interacting with any part of our service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the platform and contact us to request account closure.

For the purposes of the Data Privacy Act of 2012 and its IRR, 30jil is the personal information controller ("PIC") responsible for the personal data of players and visitors processed through the 30jil platform. As the PIC, 30jil determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

Where 30jil engages third-party service providers — such as payment processors, game providers, fraud detection services, or cloud hosting providers — to process data on our behalf, such parties act as personal information processors ("PIPs") under our instruction and are bound by contractual data processing agreements that impose obligations equivalent to those in this Policy.

Questions relating to this Policy or to our data processing practices may be directed to 30jil's Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

The categories of personal data that 30jil collects and processes about you include, but are not limited to, the following:

30jil collects personal data through several distinct channels, depending on how you interact with the platform:

• Direct collection: Data you actively provide during account registration, KYC verification, deposit and withdrawal requests, support interactions, and promotional form submissions.
• Automated collection: Technical and behavioral data collected automatically as you navigate and use the platform, including via cookies, session tracking, and server logs. See Section 7 for full cookie details.
• Third-party sources: Identity verification data obtained from third-party KYC and AML screening providers; fraud signals obtained from payment processors; geolocation data from IP intelligence services.
• Public sources: Publicly available records including PAGCOR self-exclusion registers, government sanctions lists, and published court or regulatory orders where relevant to AML and compliance obligations.

30jil only collects personal data that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy. We do not collect data we do not need, and we do not retain it longer than required.

Every processing activity at 30jil is carried out for a specific, legitimate purpose and is underpinned by one of the lawful bases recognized under the Data Privacy Act of 2012:

30jil will not process your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or establishing a new lawful basis.

30jil does not sell, rent, or trade your personal data to unrelated third parties for their own commercial purposes. We share your data only in the following circumstances:

• Game providers and technology partners: Licensed game studios (including JILI and other providers) and platform software vendors receive game session data and account identifiers strictly necessary to operate their games within the 30jil environment.
• Payment processors: GCash, Maya, BPI, BDO, UnionBank, and other payment partners receive the minimum financial and identity data required to process your deposit or withdrawal instructions.
• KYC and AML service providers: Third-party identity verification and screening providers process identity documents and watchlist data on our behalf for compliance purposes.
• Fraud prevention and cybersecurity services: Providers of device fingerprinting, IP intelligence, and risk scoring tools receive technical data to help protect the integrity of the platform.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other Philippine regulatory body or law enforcement agency with a lawful mandate to require disclosure.
• Legal and professional advisors: Attorneys, auditors, and compliance consultants engaged by 30jil who are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of all or part of 30jil's business, player data may be transferred to the acquiring entity, subject to that entity providing equivalent data protection commitments.

30jil uses cookies and similar tracking technologies (including web beacons, pixel tags, and local storage) to ensure the platform functions correctly, to remember your preferences, and to analyze how the platform is used so we can improve it.

You can manage cookie preferences through your browser settings. Note that disabling certain categories of cookies may impair your experience on the platform or prevent certain features from working correctly. 30jil's analytics cookies use anonymized or pseudonymized identifiers wherever possible and do not directly identify you to third parties.

30jil retains personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. Retention periods are determined based on the nature of the data and the purpose of its processing:

• Account and KYC data: Retained for the duration of your active account, and for a minimum of five (5) years following account closure, in accordance with PAGCOR's record-keeping requirements and the Anti-Money Laundering Act's mandated retention period.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by RA 9160 and PAGCOR directives.
• Gaming activity logs: Retained for a minimum of two (2) years for operational purposes, and up to five (5) years where the data is relevant to a dispute, regulatory inquiry, or AML review.
• Customer support communications: Retained for two (2) years from the date of the last interaction, or longer where a dispute or legal claim is pending.
• Marketing preferences and consent records: Retained for the duration of your account and for one (1) year following withdrawal of consent, as evidence of the consent or withdrawal event.
• Technical and security logs: Retained for twelve (12) months in rolling cycles, except where retained longer as part of a security investigation.

At the end of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where data cannot be fully deleted due to technical constraints (e.g., backup archives), it will be isolated and protected until the next scheduled deletion cycle.

30jil implements comprehensive technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in transit: All data transmitted between your browser or device and 30jil's servers is encrypted using TLS 1.2 or higher. Connection security is enforced via HTTPS across all platform pages.
• Encryption at rest: Sensitive data fields including passwords (hashed with bcrypt), payment credentials, and government ID numbers are encrypted in the database using industry-standard algorithms.
• Access controls: Internal access to personal data is governed by role-based access control (RBAC). Only authorized personnel with a demonstrated operational need may access identifiable player data, and all such access is logged and audited.
• Infrastructure security: 30jil's servers and databases are hosted in data centers with physical security controls. Network-level security includes firewalls, DDoS mitigation, and intrusion detection systems.
• Vulnerability management: The platform undergoes regular security assessments, penetration testing, and patch management cycles.
• Incident response: 30jil maintains a documented data breach response plan. In the event of a personal data breach that is likely to cause harm to data subjects, we will notify affected players and the National Privacy Commission (NPC) within the timeframes prescribed by the Data Privacy Act.

While 30jil takes every reasonable precaution to protect your data, no transmission over the internet and no data storage system can be guaranteed to be 100% secure. You are responsible for keeping your login credentials confidential and for immediately notifying us of any suspected unauthorized access to your account.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 30jil:

To exercise any of these rights, please contact 30jil's Data Protection Officer using the details in Section 15. We will respond to verified requests within fifteen (15) business days for standard requests, or within the shorter period required by law where applicable. We may need to verify your identity before fulfilling a request to protect against unauthorized access to another person's data.

The 30jil platform is strictly intended for use by adults aged 21 years and above, in accordance with the minimum gambling age mandated by PAGCOR for online gaming operations in the Philippines. 30jil does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted at the point of registration through our KYC process. If 30jil discovers or has reasonable grounds to believe that an account has been created by or on behalf of a person under 21 years of age, we will immediately suspend the account, reverse any deposits to the originating payment source, void all gameplay activity, and permanently delete all personal data associated with that account from our active systems.

Parents or guardians who have reason to believe that a minor has created a 30jil account should contact our DPO immediately. We treat such reports with urgency and will take all necessary steps to address the situation promptly.

Subject to your consent, 30jil may send you marketing communications via email, SMS, or in-platform notifications about new games, promotions, bonuses, tournaments, and platform updates. We use your contact details and gaming history to personalize these communications so they are relevant to your interests as a Filipino player on the platform.

Marketing consent is opt-in — you will be given a clear opportunity to indicate your preferences during registration and may update them at any time through your account settings or by contacting our support team. Opting out of marketing communications does not affect your ability to use the platform or receive transactional communications such as deposit confirmations, withdrawal notifications, and security alerts.

• You may unsubscribe from email marketing by clicking the "Unsubscribe" link included in every marketing email.
• SMS opt-out can be managed through your account notification settings or by contacting support.
• 30jil does not send marketing messages to players who have activated a self-exclusion arrangement or a responsible gaming cooling-off period.

Some of 30jil's technology service providers — including game providers, cloud infrastructure partners, and specialist KYC/AML vendors — are based outside the Philippines. Where your personal data is transferred to, or accessible from, jurisdictions outside the Philippines, 30jil ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012, which requires that the receiving country or organization provides a level of protection comparable to the standards required under Philippine law.

Measures used to ensure adequate protection for cross-border transfers include:

• Contractual data protection clauses in agreements with all third-party processors located outside the Philippines.
• Transfer impact assessments where required by the nature or volume of data transferred.
• Preference for vendors that hold internationally recognized security certifications (e.g., ISO 27001) or operate under equivalent data protection regimes.

You may request more information about the specific safeguards in place for any particular transfer by contacting our Data Protection Officer.

30jil reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or technological developments. When material changes are made, we will provide notice through one or more of the following channels:

• A prominent notice on the 30jil platform homepage or player dashboard visible upon login.
• An email notification sent to your registered email address.
• An in-platform pop-up or banner requiring your acknowledgment before continued use of the platform.

The "Last Reviewed" date at the top of this Policy will always indicate when the most recent changes took effect. Where changes materially affect your rights or the way we use your data, we will seek fresh consent where required by the Data Privacy Act. Continued use of the 30jil platform after a revised Policy takes effect constitutes your acceptance of the changes.

If you have any questions, concerns, or requests relating to this Privacy Policy or to 30jil's data processing practices, or if you wish to exercise any of your rights as a data subject, please contact our designated Data Protection Officer (DPO):

If you are not satisfied with 30jil's response to a privacy complaint or rights request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available on the NPC's official website.

For urgent security concerns such as suspected unauthorized access to your account or a suspected data breach, please contact our 24/7 live support team immediately through the platform's live chat function for the fastest response.