Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 21jilipark Casino ("21jilipark," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "Player") who access or use the 21jilipark platform, including our website at 21jilipark.club, mobile applications, and any related services (collectively, the "Platform").

21jilipark is committed to protecting the privacy and personal data of all Filipino players and users. This Policy is designed to be transparent, plain-language, and fully compliant with the Data Privacy Act of 2012 (RA 10173), the National Privacy Commission (NPC) regulations, and PAGCOR's data governance requirements. By registering on or using 21jilipark, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions, which govern your overall use of the 21jilipark platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable NPC regulations, 21jilipark Casino is the personal information controller responsible for your personal data collected through the Platform. Our designated Data Protection Officer (DPO) can be contacted at the details provided in Section 15 of this Policy.

21jilipark operates under the regulatory oversight of PAGCOR (Philippine Amusement and Gaming Corporation) and is subject to all applicable Philippine laws governing the collection and processing of personal data in the context of online gaming operations.

3. Personal Data We Collect

21jilipark collects the following categories of personal data:

3.1 Identity & Contact Data

Full legal name as it appears on your government-issued ID;
Date of birth (to verify the 21+ age requirement);
Nationality and country of residence;
Email address and mobile phone number;
Residential address (barangay, city/municipality, province, ZIP code).

3.2 Identity Verification (KYC) Data

Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, PhilHealth ID, UMID, driver's license, or Voter's ID);
Proof of address documents (e.g., utility bill, bank statement);
Selfie or liveness verification image where required;
Source of funds documentation where required by PAGCOR or AMLC regulations.

3.3 Financial Data

GCash or PayMaya account reference numbers;
Bank account details (bank name, account number) for withdrawal processing;
Transaction history including deposits, withdrawals, and wager amounts in Philippine Peso (₱);
Debit card details (card number is tokenized and never stored in plain text).

3.4 Gaming & Behavioural Data

Game history, wager amounts, win/loss records, and session durations;
Bonus and promotion usage history;
Responsible gaming tool settings (deposit limits, session timers, self-exclusion status);
Customer support interaction records.

3.5 Technical Data

IP address and approximate geolocation;
Device type, operating system, and browser information;
Login timestamps and session activity logs;
Cookie identifiers and similar tracking data (see Section 8).

4. How We Collect Your Data

21jilipark collects personal data through the following means:

Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs;
Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance databases; payment confirmation data from GCash, PayMaya, and partner banks.

5. Legal Basis for Processing

21jilipark processes your personal data on the following legal bases under the Data Privacy Act of 2012:

Processing Purpose	Legal Basis
Account registration and management	Performance of contract (Terms & Conditions)
KYC identity verification	Legal obligation (PAGCOR, AMLC regulations)
Processing deposits and withdrawals	Performance of contract
Anti-money laundering compliance	Legal obligation (RA 9160, as amended)
Fraud prevention and security	Legitimate interest / Legal obligation
Responsible gaming monitoring	Legal obligation (PAGCOR RG framework)
Marketing and promotional communications	Consent (opt-in only)
Analytics and platform improvement	Legitimate interest

6. How We Use Your Personal Data

21jilipark uses your personal data for the following purposes:

To create, verify, and manage your 21jilipark account;
To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers;
To verify your identity and age (21+) in compliance with PAGCOR requirements;
To detect, investigate, and prevent fraud, money laundering, and other illegal activity;
To comply with our obligations under Philippine law, including reporting to PAGCOR and the Anti-Money Laundering Council (AMLC);
To provide customer support and resolve disputes;
To administer bonuses, promotions, and loyalty programs;
To monitor gaming activity for responsible gaming purposes and enforce self-exclusion or limit settings;
To send you transactional communications (account confirmations, security alerts, withdrawal notifications);
To send you marketing communications about 21jilipark promotions, where you have provided consent;
To improve the Platform through analytics and user experience research.

21jilipark will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

7. Data Sharing & Disclosure

21jilipark does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

PAGCOR and Philippine regulatory authorities: As required by our operating licence and applicable law;
Anti-Money Laundering Council (AMLC): For mandatory suspicious transaction reporting under RA 9160;
KYC and identity verification providers: To verify your identity documents and age in compliance with PAGCOR requirements;
Payment processors: GCash, PayMaya, and partner Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) solely to process your financial transactions;
Fraud prevention and security services: To screen for fraudulent activity, account takeover attempts, and AML red flags;
IT infrastructure and cloud service providers: Who host and maintain the 21jilipark Platform under strict data processing agreements;
Legal and professional advisors: Where necessary to obtain legal advice or to establish, exercise, or defend legal claims;
Law enforcement and courts: Where required by a valid court order, subpoena, or applicable Philippine law.

All third-party service providers who process personal data on behalf of 21jilipark are bound by data processing agreements that require them to handle your data securely, confidentially, and only for the specific purposes authorised by 21jilipark.

8. Cookies & Tracking Technologies

21jilipark uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, and analyse usage patterns. The types of cookies we use are:

Strictly necessary cookies: Required for the Platform to function. These cannot be disabled. They include session authentication tokens and security cookies;
Functional cookies: Remember your language preference, display settings, and responsible gaming limit configurations;
Analytics cookies: Collect anonymised data about how players use the Platform to help us improve performance and user experience;
Marketing cookies: Used only where you have provided consent, to deliver relevant promotional content about 21jilipark.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the 21jilipark Platform. 21jilipark does not use third-party advertising networks or cross-site tracking cookies.

9. Data Retention

21jilipark retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

Data Category	Retention Period
Account registration and KYC documents	5 years from account closure
Financial transaction records	5 years from transaction date (AMLC requirement)
Gaming activity logs	3 years from account closure
Customer support records	3 years from last interaction
Marketing consent records	Until consent is withdrawn, plus 1 year
Self-exclusion records	Permanently, as required by PAGCOR

After the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be linked to you as an individual.

10. Data Security

21jilipark implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

Transport Layer Security (TLS) encryption for all data transmitted between your device and the 21jilipark Platform;
AES-256 encryption for sensitive data stored at rest, including financial account details and KYC documents;
Multi-factor authentication (MFA) options for player accounts;
Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
Regular security audits, vulnerability assessments, and penetration testing;
Incident response procedures aligned with NPC breach notification requirements.

Security Reminder: While 21jilipark takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your 21jilipark login credentials confidential. Never share your password or one-time PIN with anyone, including 21jilipark staff — we will never ask for your password.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173) and NPC regulations, you have the following rights with respect to your personal data held by 21jilipark:

Right to be Informed: You have the right to know what personal data 21jilipark collects about you and how it is used — which is the purpose of this Policy;
Right of Access: You may request a copy of the personal data 21jilipark holds about you at any time;
Right to Rectification: You may request correction of inaccurate or incomplete personal data in your account;
Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations under PAGCOR and AMLC regulations;
Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time by contacting our DPO;
Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format;
Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer at the details provided in Section 15. We will respond to all verified requests within fifteen (15) business days, as required by NPC regulations. We may need to verify your identity before processing your request.

12. Children's Privacy & Age Restriction

21+ Only: 21jilipark Casino is strictly for individuals aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If we discover that a minor has registered on the Platform, we will immediately suspend the account, delete all associated personal data, and report the incident to PAGCOR as required.

Parents and guardians who believe their child may have accessed 21jilipark should contact us immediately at the email address in Section 15. We take underage access extremely seriously and will act promptly on all such reports.

13. Cross-Border Data Transfers

In some cases, your personal data may be transferred to and processed in countries outside the Philippines — for example, where our KYC verification providers or cloud infrastructure partners operate servers in other jurisdictions. When such transfers occur, 21jilipark ensures that appropriate safeguards are in place, including:

Data processing agreements incorporating NPC-approved standard contractual clauses;
Transfers only to countries or organisations that provide an adequate level of data protection as determined by the NPC;
Your explicit consent where required by applicable law.

21jilipark will not transfer your personal data to any jurisdiction that does not provide adequate protections equivalent to those afforded under Philippine law.

14. Changes to This Privacy Policy

21jilipark may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When we make material changes, we will notify registered players by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Your continued use of 21jilipark after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you may request account closure by contacting our support team.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 21jilipark, please contact our Data Protection Officer:

Data Protection Officer: 21jilipark Privacy Office
Email: [email protected]
General Support: [email protected]
Response Time: Within 15 business days of receiving a verified request
Languages: English and Filipino

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at [email protected] or through the NPC's official website.

Contents