Privacy Policy — 866lj Casino

1. Data Controller Identity

The data controller responsible for the personal information processed under this Privacy Policy is the operator of 866lj Casino, accessible at 866lj.vip ("866lj", "we", "us", "our"). 866lj operates as a PAGCOR-licensed online gaming platform serving players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and all Philippine regions.

For all privacy-related enquiries, our Data Protection Officer (DPO) can be contacted as set out in Section 15 of this Policy.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected by 866lj through:

• The 866lj website at 866lj.vip and all subdomains.
• The 866lj Android APK application and iOS Progressive Web App (PWA).
• Any interaction between you and 866lj customer support, including live chat, email, and SMS communications.
• Promotional activities, competitions, and surveys conducted by 866lj.

This Policy does not apply to third-party game studios, payment processors, or other external services linked to or integrated with the 866lj platform. Those parties operate under their own privacy policies.

3. Personal Data We Collect

Depending on how you use the 866lj platform, we may collect the following categories of personal data:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation, unless strictly required by law.

4. How We Collect Your Data

866lj collects personal data through the following means:

• Direct collection: Data you provide during account registration, KYC verification, payment transactions, support interactions, or participation in promotions.
• Automated collection: Technical and usage data collected automatically through server logs, cookies, and analytics tools when you access the 866lj platform.
• Third-party sources: Identity verification data from authorised KYC providers; fraud signals from payment processors (e.g., GCash, Maya); device reputation data from fraud detection services. All third-party data sources used by 866lj are PAGCOR-compliant and operate under equivalent data protection standards.

5. Purposes & Legal Basis for Processing

866lj processes your personal data for the following purposes, each supported by a lawful basis under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173):

6. Data Retention

866lj retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account and KYC data: Retained for a minimum of 5 years following account closure, as required by the Anti-Money Laundering Act (RA 9160, as amended by RA 10927).
• Transaction records: Retained for 5 years from the date of the transaction.
• Gaming activity data: Retained for 3 years following the last gaming session.
• Communications data: Retained for 2 years from the date of the interaction.
• Marketing consent records: Retained for as long as marketing communications are sent, plus 1 year thereafter.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with 866lj's data disposal procedures. You may request earlier deletion of certain data where no overriding legal obligation requires continued retention — see Section 11 for your rights.

7. Data Sharing & Disclosure

866lj does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share personal data with the following categories of recipients, strictly for the purposes described in this Policy:

• PAGCOR and regulatory authorities: As required by our operating licence and applicable Philippine law, including mandatory reporting obligations under the AMLA.
• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BPI, BDO, Metrobank, GrabPay, and other payment service providers as necessary to process your transactions. These providers process data under their own regulated privacy frameworks.
• KYC and identity verification providers: Third-party services engaged to verify the identity and age of registering players, as required by PAGCOR.
• Fraud prevention and security services: Third-party services that assist 866lj in detecting and preventing fraudulent account activity.
• Game studio providers: RNG data and betting records may be shared with licensed game studios for the limited purpose of resolving game disputes or verifying outcomes.
• Legal and law enforcement: Where required by court order, subpoena, or lawful directive from a Philippine government authority.
• Professional advisors: Lawyers, auditors, and other professional advisors bound by confidentiality obligations.

All third parties with whom 866lj shares personal data are required to implement appropriate data protection measures consistent with the Philippine Data Privacy Act.

8. International Data Transfers

Some of 866lj's service providers — including game studios, cloud infrastructure providers, and fraud detection services — may be located outside the Philippines. Where personal data is transferred internationally, 866lj ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses that meet the standards required by the National Privacy Commission of the Philippines.

866lj does not transfer your personal data to any jurisdiction that does not provide adequate data protection standards without implementing additional protective measures.

9. Cookies & Tracking Technologies

The 866lj platform uses cookies and similar tracking technologies to operate and improve the platform experience. Cookies are small text files stored on your device that help 866lj recognise returning users, maintain login sessions, and analyse platform usage patterns.

866lj uses the following categories of cookies:

• Strictly necessary cookies: Required for the platform to function — including maintaining your authenticated session after 866lj Login. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and game lobby filters.
• Analytics cookies: Collect aggregated, anonymised data about how players use the 866lj platform to help us improve features and performance.
• Security cookies: Assist in fraud detection and account security monitoring.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 866lj platform. 866lj does not use third-party advertising cookies or share browsing data with advertisers.

10. Security Measures

866lj implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• All data in transit between your device and 866lj servers is encrypted using 256-bit SSL/TLS protocols — the same standard used by Philippine banks such as BPI and BDO.
• Sensitive data at rest (including payment details and identity documents) is encrypted using AES-256 encryption.
• Access to personal data is restricted on a strict need-to-know basis within the 866lj team, enforced through role-based access controls.
• Regular security audits and penetration testing are conducted on the 866lj platform infrastructure.
• Two-factor authentication (2FA) is available to all players and mandatory for account-level administrative actions.

11. Your Data Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 866lj:

• Right to be informed: You have the right to know what personal data 866lj holds about you and how it is processed — which this Privacy Policy provides.
• Right of access: You may request a copy of the personal data 866lj holds about you. Requests will be fulfilled within 15 business days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Some data (such as your registered name) can be updated directly through your account settings; other corrections require identity verification and support assistance.
• Right to erasure: You may request deletion of personal data where it is no longer necessary for the purpose for which it was collected, subject to 866lj's legal retention obligations (see Section 6).
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, though 866lj may continue processing where there are compelling legitimate grounds that override your interests.
• Right to data portability: Where processing is based on consent or contract, you may request your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe your data rights have been violated.

To exercise any of the above rights, contact 866lj's Data Protection Officer as set out in Section 15. Identity verification may be required before your request is processed.

12. Children and Minors

The 866lj platform is strictly for adults aged 21 years and older, in accordance with PAGCOR regulations governing online gambling in the Philippines. 866lj does not knowingly collect personal data from individuals under the age of 21.

If 866lj becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all personal data associated with the account will be deleted (except where retention is required by law), and the matter will be reported to PAGCOR. Parents or guardians who believe their child's data may have been collected should contact [email protected] immediately.

13. Marketing Communications

Where you have provided consent during registration or through your account settings, 866lj may send you promotional communications via SMS, app push notification, or email. These communications may include bonus offers, new game announcements, VIP programme updates, and seasonal promotions relevant to the Philippine gaming calendar.

You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in your 866lj account settings.
• Replying "STOP" to any 866lj promotional SMS.
• Contacting 866lj support via live chat or email and requesting removal from marketing communications.

Withdrawal of marketing consent does not affect communications that are strictly necessary for account management, security alerts, or legally required notifications.

14. Changes to This Privacy Policy

866lj reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, or our data processing practices. Material changes will be communicated to registered players via SMS or platform notification at least 7 days before the updated Policy takes effect.

The effective date shown at the top of this document indicates when the current version came into force. Continued use of the 866lj platform after a policy update constitutes your acceptance of the revised Privacy Policy. We recommend reviewing this page periodically.

15. Contact & Data Protection Officer

For all privacy-related enquiries, data subject requests, or complaints regarding 866lj's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Privacy / DPO Email: [email protected] — please include "Privacy Request" in the subject line
• Live Chat: Available 24/7 on the 866lj platform — Filipino agents 8:00am–12:00mn PHT
• Postal address: Metro Manila, Philippines (specific address provided upon verified request)

866lj will acknowledge all privacy requests within 3 business days and provide a substantive response within 15 business days, or notify you if a longer period is required due to the complexity of the request. If you are not satisfied with 866lj's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).