2jlorg Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 2jlorg ("we", "us", "our", "the Company") collects, uses, stores, shares , and protects the personal information of players and visitors ("you", "your") who access and use the 2jlorg website, mobile platform, and all associated services (collectively, the "Platform").

2jlorg is committed to handling your personal data responsibly and transparently, in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and all other applicable data protection legislation in the Philippines.

By registering an account on 2jlorg or continuing to use the Platform, you acknowledge that you have read, understood, and agree to the collection and use of your personal data as described in this Policy. If you do not agree with any part of this Policy, please discontinue use of the Platform and contact our support team to close your account.

2 Personal Data We Collect

Depending on how you interact with the 2jlorg Platform, we may collect the following categories of personal data:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Gender (optional, collected during registration)
• Username and account credentials (password stored in hashed form only)
• Nationality and country of residence

2.2 Contact Data

• Email address
• Philippine mobile phone number
• Residential address (city, province, postal code — e.g., Manila, Cebu, Davao, Quezon City, Makati)

2.3 Identity Verification (KYC) Data

• Copies of government-issued Philippine IDs (Passport, Driver's License, UMID, SSS, PhilHealth ID, or Postal ID)
• Proof of address documents (e.g., utility bill, bank statement dated within 90 days)
• Selfie or liveness verification photo where required
• Source of funds declaration where required by AMLA obligations

2.4 Financial & Transaction Data

• GCash or Maya mobile wallet number (masked after verification)
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks) used for withdrawals
• Transaction history including deposits, withdrawals, bet amounts, and game outcomes
• Payment method type and associated reference numbers

2.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Pages visited, session duration, and click-path data
• Game history, wager amounts, session timestamps
• Referral source and marketing attribution data

2.6 Communications Data

• Records of live chat, email, and support ticket interactions with 2jlorg's customer service team
• Survey responses and feedback you voluntarily submit
• Records of any complaints or dispute communications

3 How We Collect Your Data

2jlorg collects personal data through the following channels and methods:

• Direct Submission: Information you provide when registering your account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, pixel tags, and similar tracking technologies as you navigate the Platform. See Section 7 for full details on our cookie practices.
• Third-Party KYC Providers: Identity verification data obtained through our accredited KYC verification partners when you submit identity documents for account verification.
• Payment Processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, and other payment service providers when you initiate deposits or withdrawals.
• Fraud & Compliance Databases: We may cross-reference your data against commercially available fraud prevention databases and regulatory watchlists as required by our AMLA compliance obligations.
• Public Sources: Where permitted by law, we may supplement your profile with publicly available information to fulfill our regulatory due diligence obligations.

4 How We Use Your Personal Data

2jlorg uses your personal data only for specific, legitimate purposes directly related to the operation of the Platform and the fulfillment of our legal obligations. We do not use your data for purposes that are incompatible with the reasons for which it was originally collected.

Where we wish to use your data for a new purpose not covered by this Policy, we will notify you in advance and, where required, seek your explicit consent before proceeding.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 2jlorg processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and 2jlorg — specifically, to create and manage your account, process transactions, and provide gaming services. Without this processing, 2jlorg cannot provide the Platform to you.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC verification obligations, AMLA transaction monitoring and reporting requirements, and PAGCOR regulatory compliance.
• Legitimate Interests: Processing is necessary for 2jlorg's legitimate business interests, including fraud prevention, network and information security, responsible gaming monitoring, and Platform improvement — provided those interests are not overridden by your data protection rights.
• Consent: Where processing is not covered by the above bases — for example, sending you marketing communications about new promotions or games — we rely on your freely given, specific, and informed consent. You may withdraw consent for marketing communications at any time via your account settings or by contacting support.

6 Data Sharing & Third-Party Disclosure

2jlorg does not sell, rent, or trade your personal data. We share your data only with trusted third parties where it is necessary for the purposes described in this Policy, and only under strict contractual data protection obligations. Categories of recipients include:

• KYC & Identity Verification Providers: Accredited third-party providers who assist in verifying the identity and age of 2jlorg account holders as required by our regulatory obligations.
• Payment Processors: GCash, Maya, BPI, BDO, and other payment service providers who process your deposit and withdrawal transactions. These providers receive only the data necessary to execute and confirm the transaction.
• Fraud Prevention Services: Providers of fraud detection, risk scoring, and AML screening tools who help 2jlorg identify and prevent fraudulent activity on the Platform.
• Technology & Infrastructure Providers: Cloud hosting, content delivery, and platform infrastructure partners who store and process data on 2jlorg's behalf under binding data processing agreements.
• Regulatory & Law Enforcement Authorities: The Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission (NPC), and other Philippine government authorities where disclosure is required by law, court order, or regulatory direction.
• Professional Advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations.

7 Cookies & Tracking Technologies

2jlorg uses cookies and similar tracking technologies on its Platform to improve functionality, remember your preferences, and analyze how the Platform is used. Here is a summary of the cookie types we use:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These cookies enable secure login sessions, maintain your authenticated state across pages, and support core security features. They cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and last-visited game categories to personalize your experience on return visits.
• Analytics Cookies: Collect anonymized data about how players navigate the Platform — which pages are visited most, how long sessions last, and where players encounter issues. This data helps us improve the Platform experience for all Filipino users.
• Marketing & Attribution Cookies: Used only where you have consented, to track which promotional campaign or channel led you to 2jlorg, so we can measure campaign effectiveness and personalize offers relevant to you.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will affect Platform functionality, including your ability to remain logged in.

8 Data Retention

2jlorg retains your personal data for as long as your account is active and for such additional periods as required by applicable law or our legitimate business interests. Specific retention guidelines are as follows:

• Active Account Data: Retained for the full duration of your account's existence on the Platform.
• KYC & Identity Documents: Retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by PAGCOR regulations and AMLA obligations.
• Customer Support Communications: Retained for three (3) years from the date of the interaction for dispute resolution and compliance purposes.
• Marketing Consent Records: Retained for the duration of the consent and for a reasonable period afterward to demonstrate that consent was obtained.
• Anonymized Analytics Data: May be retained indefinitely as it no longer constitutes personal data once anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard data destruction procedures. Where data must be retained beyond our standard periods due to an ongoing legal investigation, regulatory inquiry, or dispute, it will be retained until the relevant matter is fully resolved.

9 Data Security

2jlorg implements a multi-layered security framework to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• Encryption: All data in transit is protected using TLS 1.2 or higher. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is strictly limited to 2jlorg personnel and authorized third parties on a need-to-know basis. All access is logged and subject to regular review.
• Two-Factor Authentication: Available to all 2jlorg account holders and required for all internal staff who handle personal data.
• Regular Security Audits: 2jlorg's Platform and infrastructure undergo regular penetration testing and security audits conducted by qualified third-party security professionals.
• Secure Password Storage: Passwords are never stored in plain text. We use industry-standard hashing algorithms with salting to protect account credentials.
• Incident Response: 2jlorg maintains a documented data breach response procedure. In the event of a breach affecting your data, we will notify you and the NPC within 72 hours of confirming the breach, as required by Philippine law.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 2jlorg:

• Right to be Informed: The right to know what personal data 2jlorg collects about you, the purposes for which it is processed, and who it is shared with — as described in this Policy.
• Right to Access: The right to request a copy of the personal data 2jlorg holds about you, along with information about how it is processed. Access requests will be fulfilled within 15 business days of receipt.
• Right to Rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data in your 2jlorg account. You may update most information directly through your account settings, or contact support for data that requires manual correction.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations. Note that we cannot delete data we are required to retain by law (e.g., KYC and transaction records subject to AMLA retention requirements).
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time via your account settings or by contacting our support team.
• Right to Data Portability: The right to receive a structured, machine-readable copy of the personal data you have provided to 2jlorg, where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated. Information about how to file a complaint with the NPC is available on the NPC's official website.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified data rights requests within the timeframes prescribed by the Philippine Data Privacy Act.

11 Children's Privacy

The 2jlorg Platform is strictly intended for individuals who are 21 years of age or older, in compliance with Philippine gaming regulations. 2jlorg does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step in the 2jlorg registration and KYC process. If 2jlorg becomes aware that a person under 21 has created an account or submitted personal data on the Platform, we will immediately suspend that account, delete the associated personal data to the extent permitted by law, and report the matter as required by applicable regulations.

If you are a parent or guardian and believe that a minor has accessed the 2jlorg Platform or submitted personal information, please contact us immediately at [email protected] so we can take prompt action.

12 Third-Party Links

The 2jlorg Platform may from time to time contain references to or links from third-party services, including payment providers and game software developers. This Privacy Policy applies solely to data collected by 2jlorg directly through the Platform.

When you interact with a third-party service — for example, initiating a GCash or Maya payment — you are subject to that provider's own privacy policy and data handling practices. 2jlorg is not responsible for the privacy practices or content of any third-party service, and we encourage you to review the privacy policies of any third-party providers you interact with.

13 Changes to This Privacy Policy

2jlorg reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform functionality. When material changes are made, we will notify you through one or more of the following methods:

• A prominent notice displayed on the 2jlorg Platform upon your next login
• An email notification sent to your registered email address
• An in-app or on-site banner highlighting the nature of the changes

The "Effective" date at the top of this Policy will always reflect the date of the most recent revision. Your continued use of the 2jlorg Platform following the effective date of any updated Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request account closure.

We recommend bookmarking this page and reviewing it periodically, particularly before making deposits or engaging in significant gaming activity.

14 Contact Us & Data Protection Officer

2jlorg has appointed a Data Protection Officer (DPO) in compliance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us through the following channels:

• Data Protection Officer: [email protected] — please include "Data Privacy Request" in the subject line of your email.
• Live Chat Support: Available 24/7 directly within the 2jlorg Platform for general privacy questions and assistance.
• Postal Address: For formal written requests, please contact us via email first to obtain our current registered correspondence address.

If you are not satisfied with our response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.