30jil Privacy Policy

1 Who We Are

This Privacy Policy is issued by the company that owns and operates the 30jil online gaming platform, accessible at 30jil.net (hereinafter referred to as "30jil," "we," "us," or "the Company"). 30jil is a PAGCOR-regulated online gaming operator providing casino games, sports betting, sabong, bingo, slots, and related entertainment services to eligible Filipino players.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 30jil acts as the Personal Information Controller (PIC) in respect of the personal data you provide when registering, depositing, playing, or otherwise interacting with the platform.

Our designated Data Protection Officer (DPO) is responsible for overseeing 30jil's compliance with RA 10173 and can be contacted as described in Section 14 of this Policy.

2 Personal Data We Collect

30jil collects the following categories of personal data, depending on how you interact with the platform:

3 How We Collect Your Data

30jil collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide when creating your account, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technical collection: Data collected automatically when you access the platform, including IP addresses, device identifiers, browser fingerprints, and session activity logs. This data is collected via server logs, cookies, and similar tracking technologies (see Section 7).
• Payment processors: Financial data passed through our payment gateway integrations (GCash, PayMaya, BPI, BDO, Metrobank) to verify and process transactions. Payment processors operate under their own privacy policies in addition to our data sharing agreements.
• Third-party game providers: Game session data, RNG outcomes, and bet records generated by licensed third-party software providers integrated into the 30jil platform.
• Identity verification services: Confirmation signals returned by third-party KYC/AML verification vendors when processing your identity documents.
• Referral and affiliate tracking: If you arrive at 30jil via a referral or affiliate link, the referring source and your initial registration data may be logged for commission tracking purposes.

4 Why We Use Your Personal Data

30jil processes your personal data for the following specific purposes. Each purpose is matched to the legal basis set out in Section 5:

• Account creation and management: To register your player account, authenticate your identity on login, and manage your account settings and wallet balance.
• Payment processing: To process deposits and withdrawal requests to and from your registered GCash, PayMaya, bank, or crypto wallet account in PHP (Philippine Peso) or equivalent.
• KYC and AML compliance: To verify your identity, confirm your age (21+ as required by PAGCOR regulations), and meet obligations under the Anti-Money Laundering Act (RA 9160) as amended by RA 10365.
• Game operation and fairness: To log game sessions, store bet and win history, and ensure the integrity of all gaming activity on the platform.
• Fraud detection and platform security: To detect, investigate, and prevent fraudulent activity, multiple-account abuse, bonus exploitation, unauthorised access, and other prohibited conduct described in the Terms & Conditions.
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and maintain records of support interactions.
• Responsible gaming: To monitor gaming patterns, implement self-exclusion requests, enforce deposit limits, and fulfil our duty of care obligations under PAGCOR's responsible gaming framework.
• Marketing communications (with consent): To send you promotional offers, bonus announcements, and platform updates via email, SMS, or push notification — only where you have provided explicit opt-in consent.
• Legal and regulatory reporting: To comply with mandatory reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies.
• Platform improvement: To analyse usage patterns, improve game offerings, optimise user experience, and develop new features through aggregated and anonymised analytics.

5 Legal Basis for Processing

Under Section 12 and Section 13 of the Data Privacy Act of 2012, 30jil relies on the following lawful bases when processing your personal data:

• Performance of a contract: Processing necessary to provide the gaming services you have registered for — including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with Philippine law, including KYC/AML obligations under RA 9160, PAGCOR licensing requirements, and mandatory regulatory reporting.
• Legitimate interests: Processing necessary for 30jil's legitimate business interests in fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your data subject rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given clear, informed, and freely given opt-in consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

6 Data Sharing & Disclosure

30jil does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for each purpose:

• Payment service providers: GCash (G-Xchange, Inc.), PayMaya Philippines, Inc., BPI, BDO Unibank, Metrobank, and crypto payment processors — solely to process your financial transactions.
• KYC and identity verification vendors: Third-party service providers engaged to verify your identity documents and conduct AML screening. These vendors operate under strict data processing agreements.
• Game software providers: Licensed gaming software companies whose games are integrated into the 30jil platform receive session data necessary to operate those games. Game providers are contractually prohibited from using this data for their own marketing purposes.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies — where disclosure is required by law or regulatory mandate.
• Law enforcement: Philippine law enforcement agencies or courts where disclosure is required by a valid court order, subpoena, or legal process.
• Fraud prevention networks: Industry-wide fraud and problem gambling databases where your account has been flagged for prohibited conduct, in accordance with PAGCOR guidelines.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by 30jil, subject to confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of the 30jil business, your data may be transferred to the acquiring entity, subject to equivalent data protection obligations. You will be notified in advance of any such transfer.

7 Cookies & Tracking Technologies

30jil uses cookies and similar tracking technologies to operate the platform, improve user experience, and analyse site performance. The following categories of cookies are used:

You can manage your cookie preferences at any time via the cookie settings panel accessible in the platform footer. Disabling non-essential cookies will not affect your ability to access core gaming services. Note that blocking strictly necessary cookies may impair platform functionality.

Cookies set by 30jil are first-party cookies hosted on 30jil.net. We do not permit third-party advertising networks to set cookies on the 30jil platform without your prior consent.

8 Data Retention

30jil retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by Philippine law. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and AMLC obligations under RA 9160.
• KYC documents: Retained for five (5) years from the date of submission, or longer where required by a specific regulatory investigation or legal hold.
• Transaction and financial records: Retained for five (5) years from the date of the transaction, consistent with the Anti-Money Laundering Act retention requirements.
• Game session logs: Retained for two (2) years from the date of the session for dispute resolution purposes, then anonymised or deleted.
• Support communications: Retained for two (2) years from the date of the last interaction in a support thread.
• Marketing consent records: Retained for three (3) years from the date consent was last given or withdrawn, as evidence of lawful processing.
• Technical and usage data (logs): Retained for ninety (90) days in identifiable form, then aggregated and anonymised for statistical purposes.

When your data is no longer required for any lawful purpose, 30jil will securely delete or anonymise it in accordance with our internal data destruction procedures.

9 Data Security

30jil implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your browser or mobile device and 30jil servers is protected by TLS 1.2 or higher (HTTPS). Unencrypted HTTP connections are rejected.
• Encryption at rest: Personal data stored in our databases is encrypted using AES-256 encryption. KYC document files are stored in an encrypted document vault with strict access controls.
• Password security: User passwords are hashed using bcrypt with a per-user salt before storage. Plain-text passwords are never retained at any point in the system.
• Access controls: Access to production systems and personal data is restricted to authorised personnel on a need-to-know basis, enforced through role-based access control (RBAC) and multi-factor authentication (MFA) for all administrative accounts.
• Intrusion detection: 30jil operates continuous server-side monitoring, anomaly detection, and web application firewall (WAF) protection to identify and respond to security incidents in real time.
• Third-party security audits: Our platform and data handling practices undergo periodic security assessments by qualified third-party auditors.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, 30jil will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, as required by RA 10173.

10 Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 30jil:

To exercise any of the above rights, contact our Data Protection Officer as described in Section 14. We will respond to all verified data subject requests within fifteen (15) business days of receipt. Where a request is complex or numerous, we may extend this period by a further fifteen (15) business days with prior notice.

We may need to verify your identity before processing a data subject request to ensure we do not disclose your personal data to an unauthorised third party. There is no fee for making a request unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.

11 Children's Privacy

The 30jil platform is strictly intended for adults. In compliance with PAGCOR regulations, the minimum age to register and play on 30jil is 21 years old. We do not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and you believe that a minor has provided personal data to 30jil without your consent, please contact our Data Protection Officer immediately at the contact details provided in Section 14. Upon verification, we will promptly delete the minor's account and all associated personal data.

12 Cross-Border Data Transfers

30jil's primary data processing infrastructure is hosted within the Philippines or in jurisdictions with data protection standards recognised by the National Privacy Commission. Where personal data is transferred outside the Philippines — for example, to international game software providers or global payment processors — 30jil ensures that such transfers are protected by one or more of the following safeguards:

• Standard contractual clauses approved by the National Privacy Commission or equivalent data protection authority
• Data processing agreements that require the recipient to implement security standards equivalent to those required under RA 10173
• Binding corporate rules where the recipient is part of the same corporate group as 30jil
• Your explicit consent to the specific transfer where no other safeguard is available

A list of the countries to which your data may be transferred is available upon request from our Data Protection Officer. In all cases, your data will receive no less protection in the destination country than it receives under this Privacy Policy.

13 Changes to This Privacy Policy

30jil reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. When we make material changes to this Policy, we will:

• Post the updated Privacy Policy on this page with a revised effective date
• Send a notification to your registered email address at least fourteen (14) days before the changes take effect for significant amendments
• Display a prominent notice on the 30jil platform during the transition period

Your continued use of the 30jil platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must cease using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how 30jil protects your personal data. The current version is always available at 30jil.net/privacy-policy.

14 Contact & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please contact 30jil's Data Protection Officer using the following details:

If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the competent supervisory authority for data protection matters in the Philippines.

This Privacy Policy was last reviewed and approved by the 30jil Data Protection Officer on 1 January 2026.