25jl Privacy Policy

1. Who We Are

25jl operates as an online gaming and sports betting platform accessible at 25jl.win, serving registered players in the Philippines. For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), 25jl acts as the Personal Information Controller (PIC) in respect of the personal data collected through its platform, website, mobile interface, and customer communications.

By registering for and using the 25jl platform, you consent to the collection and processing of your personal information as described in this Privacy Policy. If you do not agree with any part of this policy, you should not register or continue using the platform.

2. Information We Collect

25jl collects personal information necessary for account management, identity verification, payment processing, legal compliance, and the delivery of gaming services. The categories of personal information we collect include:

2.1 Information You Provide Directly

• Identity information: Full legal name, date of birth, gender, nationality.
• Contact information: Mobile number, email address, city or province of residence (e.g., Manila, Cebu, Davao, Quezon City).
• Authentication credentials: Username and encrypted password (passwords are never stored in plain text).
• Government identification: Copies of valid Philippine government-issued IDs submitted for KYC verification, such as PhilSys National ID, UMID, driver's license, or passport.
• Financial information: Payment account identifiers (e.g., GCash mobile number, Maya account, BPI/BDO account numbers) used for deposit and withdrawal processing. Full payment card numbers are not stored by 25jl.
• Communications content: Messages sent to 25jl via live chat, email, or support tickets.

2.2 Information Collected Automatically

• Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage data: Pages visited, games played, session duration, betting history, deposit and withdrawal records, and navigation patterns on the platform.
• Location data: General geographic location derived from IP address, used to verify compliance with jurisdictional access requirements.
• Cookies and similar technologies: Session cookies, persistent cookies, and web analytics data as described further in Section 7.

2.3 Information from Third Parties

• Payment providers: Transaction status and confirmation data from GCash, Maya, BPI, BDO, and other supported payment channels, sufficient to confirm successful deposits and process withdrawals.
• Identity verification services: Where 25jl uses third-party KYC providers to assist in verifying government ID documents, those providers may share verification outcomes and flagged risk signals with 25jl.
• Fraud and AML screening: Information from anti-fraud and anti-money laundering databases used to screen account registrations and transactions.

3. How We Use Your Personal Information

25jl uses the personal information it collects for the following specific purposes:

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 25jl processes your personal information on the following legal bases:

• Consent: Where you have provided explicit consent during registration or when opting in to marketing communications. You may withdraw consent at any time by contacting our support team, though withdrawal of consent will not affect the lawfulness of prior processing.
• Contractual Necessity: Processing necessary to fulfil our obligations to you as an account holder under the 25jl Terms and Conditions — including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (RA 9160, as amended), the Data Privacy Act of 2012, and applicable PAGCOR regulations.
• Legitimate Interests: Processing carried out for 25jl's legitimate business interests where those interests are not overridden by your rights — such as fraud prevention, platform security, and improving our services.

5. Data Sharing & Disclosure

25jl does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your personal information only in the following limited circumstances:

5.1 Service Providers

25jl engages trusted third-party service providers who process personal data on our behalf and under our instructions. These include payment gateway operators (GCash, Maya, BPI, BDO), KYC and identity verification services, game development studios, cloud hosting providers, and fraud prevention platforms. All service providers are required to maintain appropriate data security standards.

5.2 Legal and Regulatory Authorities

25jl may disclose personal information to Philippine government authorities, law enforcement agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), or the National Privacy Commission (NPC) where required by law, court order, or valid regulatory demand. Such disclosures are limited to the minimum information necessary to comply with the legal obligation.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 25jl's business assets, personal information held by 25jl may be transferred to the acquiring entity as part of that transaction. Affected users will be notified prior to any such transfer taking effect, in accordance with applicable law.

5.4 With Your Consent

25jl may share your personal information with third parties in any other circumstance where you have given your explicit prior consent to such sharing.

6. Data Retention

25jl retains personal information for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law — whichever is longer. The following general retention periods apply:

• Active account data (identity, contact, financial, gaming history): Retained for the duration of account activity and for a minimum of five (5) years after account closure, in compliance with anti-money laundering record-keeping requirements under Philippine law.
• KYC documents (government IDs, verification records): Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Transaction records (deposits, withdrawals, wager history): Retained for a minimum of five (5) years to support financial reconciliation and regulatory reporting obligations.
• Support communications (live chat transcripts, emails): Retained for three (3) years for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for three (3) years from the date of last consent interaction.

Upon expiry of the applicable retention period, personal information is securely deleted or anonymised in accordance with 25jl's data disposal procedures. Data subject to an ongoing regulatory investigation or legal proceeding will be retained until the matter is resolved.

7. Cookies & Tracking Technologies

25jl uses cookies and similar tracking technologies on its platform to enhance functionality, personalise user experience, and support analytics. The categories of cookies used include:

• Essential cookies: Required for the platform to function correctly — including session management, authentication state, and security tokens. These cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings, display preferences, and last-visited game categories.
• Analytics cookies: Used to collect aggregate, anonymised data about how players navigate the platform — including pages visited, time spent, and game preferences. This data helps 25jl improve the platform experience.
• Security and fraud prevention cookies: Used to detect suspicious login patterns, multiple account creation attempts, and other indicators of fraudulent or prohibited conduct.

8. Data Security

25jl implements a range of technical and organisational security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your browser and 25jl servers.
• Encryption of sensitive stored data including passwords (stored as salted cryptographic hashes) and financial identifiers.
• Role-based access controls ensuring that 25jl staff can only access the personal data necessary for their specific job function.
• Regular security audits and penetration testing of the platform infrastructure.
• Automated monitoring for anomalous login activity, suspicious transaction patterns, and other indicators of unauthorised access.
• Secure data centre infrastructure with physical access controls and redundant backup systems.

Notwithstanding these measures, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that poses a real risk of harm to affected individuals, 25jl will notify the National Privacy Commission (NPC) and affected data subjects within the timeframes prescribed by Philippine law.

9. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by 25jl:

• Right to be Informed: The right to know whether 25jl processes personal information about you and to receive information about how it is used — as described in this Privacy Policy.
• Right of Access: The right to request a copy of the personal information 25jl holds about you, including details of how it is processed and to whom it has been disclosed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal information held about you. You may update basic account information directly from your account settings page.
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to 25jl's legal retention obligations under anti-money laundering and gaming regulations.
• Right to Object: The right to object to the processing of your personal information for direct marketing purposes. You may opt out of marketing communications by contacting our support team at any time.
• Right to Data Portability: The right to receive your personal information in a structured, commonly used format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Privacy Officer via the 25jl live chat support channel or by email at [email protected]. We will acknowledge your request within 72 hours and provide a substantive response within thirty (30) calendar days.

10. Children's and Minors' Privacy

The 25jl platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. 25jl does not knowingly collect personal information from individuals under the age of 21. All account registrations require confirmation of legal age, and KYC verification includes age verification against a valid government-issued ID.

If 25jl becomes aware that personal information has been collected from a person below the age of 21, the account will be suspended immediately, all associated funds returned to the deposit source, and the personal information of the minor deleted from 25jl's systems as soon as practicable.

If you believe that a minor has registered an account on 25jl, please contact us immediately via live chat so the matter can be investigated and resolved promptly.

11. Changes to This Privacy Policy

25jl reserves the right to update or amend this Privacy Policy at any time. When material changes are made — such as changes to the categories of data collected, new data-sharing arrangements, or changes to your rights — 25jl will notify registered members by posting a clear notice on the platform and, where possible, by sending a notification to your registered mobile number or email address.

The "Last updated" date at the top of this policy indicates when the most recent revision was made. Continued use of the 25jl platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this policy periodically to stay informed about how your data is being protected.

12. Contact Our Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or the personal information 25jl holds about you, please contact our Data Privacy Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week, directly on the 25jl platform. This is the fastest channel for urgent privacy matters.
• Email: [email protected] — for non-urgent privacy enquiries, data access requests, and erasure requests. Include "Privacy Request" in your subject line.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with 25jl's handling of your personal data or your rights request.