Privacy Policy — 333ji Philippines

This Privacy Policy applies to all personal data collected and processed by 333ji ("we," "us," or "our") in connection with your use of the 333ji online casino and sports betting platform, accessible at https://333ji.net, including all associated mobile browser interfaces, games, customer support channels, and promotional communications.

333ji acts as the data controller with respect to the personal data of registered players and platform visitors located in the Philippines. As data controller, 333ji determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR).

333ji collects personal data through several channels, including direct registration inputs, platform activity, payment processing, and third-party verification services. The categories of personal data we collect are described in the table below.

The majority of personal data 333ji holds about you is information you provide directly — either during account registration, when completing KYC verification, when contacting our support team, or when updating your account profile. Providing accurate and up-to-date information is a condition of using the 333ji platform.

When you use the 333ji platform, we automatically collect certain technical and behavioural data through server logs, cookies, and similar technologies. This data is used to maintain platform security, prevent fraud, and improve the overall player experience. Please refer to Section 6 for our full Cookies Policy.

We may receive personal data about you from third parties in limited circumstances, including identity verification providers used for KYC compliance, payment processors such as GCash and Maya confirming transaction validity, and fraud prevention databases operated by regulated third-party services. In all cases, such third parties are contractually required to handle your data in accordance with applicable law.

333ji uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your 333ji player account, including authentication and profile updates.
• Service Delivery: Enabling you to access and enjoy all platform features including slots, live casino, football betting, bingo, and VIP services.
• Payment Processing: Facilitating deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, GrabPay, QR Ph, and 7-Eleven CLiQQ, and maintaining transaction records as required by law.
• KYC & AML Compliance: Verifying your identity and age (21+) and monitoring transactions for potential money laundering in compliance with the AMLA and PAGCOR requirements.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling indicators and to administer self-exclusion, deposit limit, and cooling-off tools.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, cheating, and unauthorised account access.
• Customer Support: Responding to your queries, complaints, and support requests in a timely and effective manner.
• Marketing & Promotions: Sending you promotional communications about 333ji offers, bonuses, and new games — but only where you have provided explicit consent to receive such communications.
• Platform Improvement: Analysing aggregated usage data to improve game selection, site performance, and overall user experience.
• Legal Obligations: Meeting regulatory reporting requirements imposed by PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities.

Under the Data Privacy Act of 2012, 333ji processes your personal data on one or more of the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and 333ji — i.e., to provide you with the platform services you have registered for.
• Legal Obligation: Processing is necessary for 333ji to comply with applicable Philippine laws and regulations, including KYC/AML obligations, PAGCOR licensing requirements, and tax reporting duties.
• Legitimate Interests: Processing is necessary for the legitimate interests of 333ji, such as fraud prevention, platform security, and service improvement, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and optional data collection activities, processing is based on your explicit consent, which you may withdraw at any time through your account settings or by contacting our Data Protection Officer.

333ji does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the limited circumstances described below:

We engage carefully selected third-party service providers to support platform operations. These include payment processors (GCash, Maya, etc.), identity verification services, game content studios, fraud detection platforms, and cloud infrastructure providers. All service providers are contractually bound to process your data only on our instructions and in accordance with RA 10173.

333ji is required by Philippine law to disclose certain personal and transactional data to regulatory authorities including PAGCOR, the AMLC, the Bureau of Internal Revenue (BIR), and Philippine law enforcement agencies when lawfully compelled to do so. Such disclosures are made without prior notice to the data subject where the law requires or permits this.

In the event of a merger, acquisition, or sale of all or part of 333ji's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material change to the processing of your data that results from it.

We may share your data with third parties in other circumstances where you have given explicit consent for a specific purpose — for example, if you participate in a co-branded promotion with a platform partner. Such consent is always obtained separately and in a clear, specific manner.

333ji uses cookies and similar tracking technologies to operate the platform effectively and to improve your experience. Cookies are small text files stored on your device when you visit the 333ji website.

• Strictly Necessary Cookies: Essential for the platform to function. These enable session authentication, security features, and basic navigation. They cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the platform, helping us identify popular features and improve site performance.
• Security Cookies: Support fraud detection and prevention by tracking login patterns and flagging anomalous access attempts.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 333ji platform. Strictly necessary cookies cannot be disabled as they are essential to platform security and session management. Your cookie preferences can be updated at any time from within the platform's account settings panel.

333ji retains personal data for only as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with AMLC record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of ten (10) years as required under the AMLA and BIR regulations.
• KYC Documents: Retained for five (5) years from the date of account closure or the completion of the relevant transaction, whichever is later.
• Support Communications: Retained for three (3) years from the date of the last interaction, unless a longer period is required by ongoing dispute or legal proceedings.
• Marketing Consent Records: Retained for the duration of your account, plus two (2) years, as evidence of your consent or withdrawal of consent.
• Analytics Data: Retained in anonymised or aggregated form indefinitely for service improvement purposes; individual-level analytics data is deleted within twelve (12) months of collection.

Upon expiry of the applicable retention period, personal data is securely deleted from 333ji systems or irreversibly anonymised so that it can no longer be attributed to an identifiable individual.

333ji implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and 333ji servers.
• AES-256 encryption for sensitive data stored in 333ji databases, including payment reference data and identity documents.
• Multi-factor authentication requirements for platform administrative access.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Role-based access controls ensuring that 333ji staff can only access personal data strictly necessary for their job function.
• Continuous monitoring for anomalous login activity and automated account lockout procedures on detection of suspicious access attempts.
• Secure data centre infrastructure with physical access controls and environmental protections.

While 333ji takes all reasonable precautions to protect your data, no security system is completely impenetrable. You also play a role in protecting your account by using a strong, unique password and enabling any available two-factor authentication features. If you suspect unauthorised access to your 333ji account, contact us immediately at [email protected].

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 333ji. You may exercise any of these rights by contacting our Data Protection Officer (see Section 13).

333ji will respond to all data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days, notifying you of the extension and the reason for it within the initial thirty-day period.

The 333ji platform is strictly intended for individuals aged 21 years and above, in accordance with the minimum age requirement for online casino gaming under PAGCOR guidelines applicable in the Philippines. 333ji does not knowingly collect personal data from individuals under the age of 21.

If 333ji becomes aware that it has inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any deposits made and winnings accumulated by an underage player will be handled in accordance with our Terms & Conditions and applicable Philippine law.

Parents and guardians are encouraged to use parental control software and device-level safeguards to prevent minors from accessing online gambling platforms. If you believe a minor under your care has registered on 333ji, please contact us immediately at [email protected].

333ji is operated with a primary focus on the Philippines market. However, some of our third-party service providers — including cloud infrastructure providers, game content studios, and fraud detection services — may be located outside the Philippines and may process your personal data in other jurisdictions.

Where personal data is transferred outside the Philippines, 333ji ensures that appropriate safeguards are in place, consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines on cross-border transfers. Such safeguards include contractual clauses that require the receiving party to protect your data to a standard equivalent to Philippine law, and, where applicable, reliance on adequacy determinations made by the NPC.

333ji does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual and technical safeguards. If you have concerns about specific cross-border transfers, you may contact our Data Protection Officer for further information.

333ji reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, platform features, or our data processing practices. The "Last Updated" date at the top of this page will be revised whenever material changes are made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered address and/or by a prominent notice on the 333ji platform at least fourteen (14) days before the changes take effect. Your continued use of the platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how 333ji protects your personal data. Previous versions of this Privacy Policy are available upon request from our Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 333ji handles your personal data, please contact our designated Data Protection Officer (DPO) through the following channels:

• Email: [email protected] — please use the subject line "Data Privacy Request" for all data subject rights requests.
• In-Platform Support: Use the live chat or support ticket system available within your 333ji account dashboard.
• Response Time: Our DPO will acknowledge receipt of your request within three (3) business days and provide a substantive response within thirty (30) calendar days.

If you are not satisfied with our response, or believe that 333ji has not handled your personal data in compliance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about the NPC and how to file a complaint is available through official Philippine government channels.