3jlr Privacy Policy

1. Introduction & Scope

1.1 This Privacy Policy ("Policy") describes how 3jlr ("we," "us," "the Operator") collects, uses, processes, stores, and discloses personal data about registered users ("Players," "you") and visitors to the 3jlr platform at https://3jlr.vip and all associated subdomains and interfaces.

1.2 This Policy is issued in compliance with the Data Privacy Act of 2012 of the Republic of the Philippines (Republic Act No. 10173), its Implementing Rules and Regulations, the guidelines issued by the National Privacy Commission (NPC), and the applicable data handling requirements of the Philippine Amusement and Gaming Corporation (PAGCOR).

1.3 This Policy applies to all personal data processed by 3jlr in connection with your account registration, use of gaming and betting services, financial transactions, customer support interactions, and any other activity undertaken through the platform.

1.4 This Policy should be read in conjunction with the Terms & Conditions and the Responsible Gaming Policy, both of which are incorporated by reference.

2. Data Controller Identity

2.1 For the purposes of the Data Privacy Act of 2012, 3jlr is the personal information controller in respect of all personal data collected through the platform. We determine the purposes and means of processing your personal data.

2.2 3jlr operates as a PAGCOR-licensed online gaming platform serving Filipino players. Our designated Data Protection Officer (DPO) may be contacted at the email address set out in Section 15 of this Policy.

2.3 Where 3jlr engages third-party service providers who process personal data on our behalf — such as payment processors, KYC verification services, or cloud infrastructure providers — those parties act as personal information processors and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable Philippine law.

3. Personal Data We Collect

The following categories of personal data may be collected by 3jlr in the course of providing its services:

3.1 3jlr does not intentionally collect sensitive personal information as defined under the Data Privacy Act — such as health data, political opinions, or biometric data — except where government ID documents submitted for KYC incidentally contain such information. Such data is handled with enhanced security and used solely for the purpose of identity verification.

4. How We Collect Your Data

3jlr collects personal data through the following means:

• Direct provision: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your account profile;
• Automated collection: Technical data collected automatically when you access the platform, including IP addresses, device identifiers, cookies, and session logs generated by our servers and analytics infrastructure;
• Third-party sources: Identity verification data returned by KYC and AML screening service providers; payment confirmation data from GCash, PayMaya, and banking partners; fraud detection signals from security vendors operating on our behalf;
• Regulatory sources: Where required by PAGCOR or AMLC (Anti-Money Laundering Council), we may receive or be required to provide data through official regulatory channels.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 3jlr processes your personal data on the following legal grounds:

• Contractual necessity: Processing necessary to perform the agreement between you and 3jlr — including account management, payment processing, game delivery, and withdrawal of winnings;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLC reporting obligations, tax regulations, and other applicable Philippine laws;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improvement of the platform — where such interests are not overridden by your rights;
• Consent: For optional communications such as promotional emails or marketing messages, where you have provided explicit consent. You may withdraw consent at any time by updating your account notification preferences or contacting support.

6. How We Use Your Personal Data

3jlr uses the personal data it collects for the following specific purposes:

• To create, verify, and maintain your 3jlr account, including identity and age verification (21+ requirement under PAGCOR regulations);
• To process deposits, withdrawals, and maintain your PHP wallet balance, including complying with KYC requirements before releasing funds;
• To deliver gaming and sports betting services, record game outcomes, settle bets, and calculate winnings accurately;
• To detect and prevent fraud, money laundering, account takeovers, and other prohibited activities on the platform;
• To comply with PAGCOR regulatory reporting requirements, AMLC transaction monitoring obligations, and court orders or lawful government requests;
• To administer and enforce responsible gaming tools including deposit limits, loss limits, session timers, and self-exclusion;
• To provide customer support and respond to complaints, disputes, or account-related queries;
• To send transactional communications including deposit confirmations, withdrawal notifications, account security alerts, and policy update notices;
• To send promotional communications (bonuses, offers, new game announcements) where you have consented to receive them;
• To analyze platform usage patterns in aggregated, anonymized form for the purpose of improving platform performance and user experience;
• To enforce the 3jlr Terms & Conditions and take action in the event of account violations.

7. Data Sharing & Disclosure

7.1 3jlr does not sell, rent, or trade your personal data to any third party for their own commercial use or marketing purposes.

7.2 We may share personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection agreements:

• Payment processors: GCash (GXI), PayMaya (FINTQ), BPI, BDO, and Metrobank — to process deposits and withdrawals to/from your verified accounts;
• KYC and identity verification providers: Third-party services that assist in verifying the authenticity of government-issued Philippine IDs submitted during account registration;
• AML screening providers: Services that screen transactions and account holders against sanctions lists and politically exposed persons (PEP) databases as required by Philippine AMLC regulations;
• Cloud infrastructure and hosting providers: Infrastructure providers that host the 3jlr platform servers and databases, operating under data processing agreements that prohibit independent use of your data;
• PAGCOR: As the regulatory authority that licenses 3jlr, PAGCOR may require access to specific player data as part of compliance audits, dispute investigations, or regulatory reporting requirements. 3jlr is legally obligated to cooperate with such requests;
• AMLC and law enforcement: Where required by law, court order, or lawful government directive, 3jlr may disclose personal data to the Anti-Money Laundering Council, the National Bureau of Investigation, or other authorized Philippine government agencies;
• Game software providers: Limited technical identifiers (not full identity data) may be shared with game studios whose certified game software is integrated into the 3jlr platform, for the purpose of game session management and outcome verification.

7.3 In the event of a merger, acquisition, or sale of assets involving 3jlr, player data may be transferred to a successor entity. Such a transfer would be notified to players with reasonable advance notice and subject to equivalent data protection obligations.

8. Data Retention

8.1 3jlr retains personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

8.2 The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship and for a minimum of 5 years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements;
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction, in accordance with the Anti-Money Laundering Act of 2001 (as amended) and PAGCOR financial reporting obligations;
• Gaming and betting records: Retained for a minimum of 2 years from the date of each game session or bet, for the purposes of dispute resolution and regulatory audit;
• Customer support records: Retained for a minimum of 2 years from the date of the last interaction, for the purpose of complaint resolution and service improvement;
• Technical and access logs: Retained for a maximum of 12 months unless retention is required for an ongoing security investigation or regulatory inquiry;
• Marketing consent records: Retained for the duration of the active account relationship and for 3 years thereafter, as evidence of consent.

8.3 At the expiry of applicable retention periods, personal data is securely deleted or anonymized using industry-standard data destruction methods. Anonymized, aggregated data may be retained indefinitely for analytical purposes as it can no longer be attributed to an individual.

9. Data Security Measures

9.1 3jlr implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 3jlr platform;
• AES-256 encryption at rest for sensitive data stored in 3jlr databases;
• Multi-factor authentication requirements for internal administrative access to player data systems;
• Role-based access controls that limit employee access to personal data strictly to what is required for their specific job function;
• Regular internal and external penetration testing and security audits;
• Firewall protection, intrusion detection systems, and continuous monitoring of platform infrastructure;
• Employee data privacy training and confidentiality obligations for all staff with access to personal data.

9.2 In the event of a personal data breach that is likely to affect your rights and interests, 3jlr will notify the National Privacy Commission (NPC) within 72 hours of discovery, as required under the Data Privacy Act, and will notify affected players as soon as practicable thereafter.

9.3 Notwithstanding the security measures described above, no online platform can guarantee absolute security. You acknowledge that you transmit data to 3jlr at your own risk and are encouraged to use strong, unique passwords and enable two-factor authentication on your account.

10. Cookies & Tracking Technologies

10.1 3jlr uses cookies and similar technologies to operate the platform and improve your experience. Cookies are small text files stored on your device by your browser when you access the platform.

10.2 The following types of cookies are used on the 3jlr platform:

• Strictly necessary cookies: Required for core platform functions such as maintaining your login session, remembering your language and display preferences, and managing your active game session. These cookies cannot be disabled without affecting platform functionality;
• Analytical cookies: Used to collect anonymized, aggregated data about how players navigate the platform — such as which game categories are most visited and where players encounter errors. This data is used to improve the platform and does not identify individual players;
• Security cookies: Used to detect and prevent fraudulent access, cross-site request forgery (CSRF), and session hijacking.

10.3 3jlr does not use advertising cookies, social media tracking pixels, or any tracking technologies that monitor your behavior across third-party websites or applications.

10.4 You may configure your browser to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to use the 3jlr platform, including logging in and maintaining a game session.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 3jlr:

To exercise any of the above rights, submit your request in writing to the 3jlr Data Protection Officer at the contact email in Section 15. We will acknowledge your request within 5 business days and respond substantively within 30 days, or within a shorter period where required by law.

12. Children & Minors

12.1 The 3jlr platform is not directed at, and does not knowingly collect personal data from, any person under the age of 21. Access is restricted to persons 21 years of age or older in compliance with PAGCOR regulations governing online gambling in the Philippines.

12.2 Age verification is conducted as part of the account registration process. If 3jlr discovers or is notified that it has collected personal data from a person under 21, the account will be immediately suspended, the personal data deleted (subject to any reporting obligations arising from the discovery), and the matter may be reported to PAGCOR.

12.3 Parents and legal guardians are encouraged to monitor the online activities of their children and to use parental control software to prevent access to online gambling platforms.

13. Cross-Border Data Transfers

13.1 Where 3jlr uses cloud infrastructure providers, game software platforms, or other third-party services whose servers are located outside the Philippines, personal data may be transferred to, stored in, and processed in jurisdictions outside the Philippines.

13.2 3jlr ensures that any cross-border transfer of personal data is carried out in accordance with Section 21 of the Data Privacy Act of 2012, specifically by ensuring that the recipient country or organization provides a comparable level of protection to that afforded under Philippine law, through appropriate contractual safeguards, standard contractual clauses, or other approved transfer mechanisms.

13.3 By using the 3jlr platform, you acknowledge that your personal data may be transferred internationally for the purposes described in this Policy.

14. Changes to This Privacy Policy

14.1 3jlr may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered Players via email or in-platform notification at least 7 days before the revised Policy takes effect.

14.2 The most current version of this Privacy Policy will always be available at https://3jlr.vip/privacy-policy, with the effective date clearly stated. Continued use of the 3jlr platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

14.3 Where changes to the Policy require your fresh consent — for example, new uses of personal data not covered by existing consent — 3jlr will seek that consent separately before implementing the new processing activity.

15. Contact & Data Protection Officer

For any questions, requests, or concerns regarding this Privacy Policy, your personal data held by 3jlr, or to exercise your data subject rights, please contact our Data Protection Officer at:

This Privacy Policy is effective as of January 1, 2026 and supersedes all prior versions. The use of the 3jlr platform on or after this date constitutes acknowledgment of this Policy.