18ji Casino Privacy Policy

1. Who We Are

This Privacy Policy is issued by 18ji Casino ("18ji", "we", "us", "our"), the operator of the online gaming platform accessible at 18ji.one. 18ji acts as the Data Controller for personal information collected through its website, mobile-optimised platform, and customer support channels.

18ji operates in the Philippines and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and relevant circulars and advisories issued by the National Privacy Commission of the Philippines. For purposes of this Policy, "personal data" or "personal information" has the meaning ascribed to it under the Data Privacy Act of 2012.

2. Personal Data We Collect

18ji collects the following categories of personal data in connection with the registration and operation of player accounts:

Identity Data:

• Full legal name as it appears on a valid Philippine government-issued identification document
• Date of birth (to verify compliance with the 21+ age requirement)
• Gender (optional, for account personalisation)
• Photograph or copy of government-issued ID submitted for KYC verification (e.g., PhilSys National ID, Driver's License, Passport, SSS card)

Contact Data:

• Philippine mobile telephone number
• Email address
• City or region of residence (e.g., Manila, Cebu, Davao, Quezon City, Makati)

Financial Data:

• GCash account number or registered mobile number linked to GCash
• PayMaya, BPI, BDO, or Metrobank account details provided for deposit or withdrawal
• Transaction records including deposit amounts, withdrawal requests, dates, and statuses

Technical and Usage Data:

• IP address and approximate geographic location at login
• Device type, operating system, and browser information
• Session duration, pages visited, games played, and betting history
• Login timestamps and connected device identifiers

Communications Data:

• Records of customer support interactions, including chat transcripts and email correspondence
• Responses to surveys, feedback submissions, and promotional communications you have opted into

3. How We Collect Your Data

18ji collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing the 18ji Login form, submitting KYC documents, making deposits or withdrawal requests, or contacting our support team.
• Automated collection: Technical and usage data gathered automatically when you access the 18ji platform, including through cookies, log files, and analytics tools.
• Third-party sources: Identity verification data obtained from KYC/AML compliance service providers; payment transaction data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank; fraud detection data from security service partners.

4. How and Why We Use Your Data

18ji processes personal data for the following specific purposes:

• Account creation and management: To register your 18ji account, authenticate your identity, and manage your account settings and preferences.
• Age verification: To confirm that you are 21 years of age or older before permitting access to real-money gaming features, in compliance with Philippine gaming regulations.
• Payment processing: To process deposits, execute withdrawal requests to your GCash or bank account, and maintain accurate transaction records.
• KYC and AML compliance: To verify your identity and source of funds as required under anti-money laundering obligations applicable to Philippine online gaming operators.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised access, and other security threats to the 18ji platform and its players.
• Customer support: To respond to your queries, resolve complaints, and provide technical assistance.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling and to administer self-exclusion, deposit limits, and cooling-off requests where activated.
• Platform improvement: To analyse usage data and improve the performance, functionality, and user experience of the 18ji platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided your explicit consent to receive such communications.
• Legal and regulatory compliance: To fulfil reporting obligations to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 18ji relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and 18ji — i.e., to provide the gaming services you have registered to use.
• Legal obligation: Processing required to comply with Philippine legal and regulatory requirements, including PAGCOR licensing conditions, AML obligations, and tax reporting.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential analytics, where you have given clear, freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Data Sharing and Disclosure

18ji does not sell your personal data to third parties. We may share your information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (G-Xchange, Inc.), PayMaya, BPI, BDO, and Metrobank — to facilitate deposit and withdrawal transactions.
• KYC/AML service providers: Identity verification and fraud screening partners engaged to assist with regulatory compliance.
• Game content providers: Third-party game software providers whose titles are hosted on the 18ji platform may receive anonymised session data for RNG certification and audit purposes.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on 18ji's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the NPC, the AMLC, the Bureau of Internal Revenue (BIR), or other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory directive.

7. International Data Transfers

18ji primarily processes and stores data within or in connection with the Philippines. Where personal data is transferred to service providers or infrastructure partners located outside the Philippines, 18ji ensures that such transfers are protected by appropriate safeguards — including standard contractual clauses, data processing agreements with equivalent data protection standards, or transfer to countries recognised as providing adequate data protection — in accordance with Section 21 of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

8. Data Retention

18ji retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the duration of your active account relationship with 18ji and for such periods thereafter as may be required by law.

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine AML and tax regulations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.
• Customer support records: Retained for three (3) years from the date of resolution of each support interaction.

Upon expiration of the applicable retention period, personal data is securely deleted or anonymised.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 18ji:

To exercise any of the above rights, contact the 18ji Data Protection Officer at the email address provided in Section 15 of this Policy. 18ji will respond to data subject requests within fifteen (15) business days of receipt.

10. Cookies and Tracking Technologies

18ji uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies may be placed on your device:

• Strictly necessary cookies: Required for the 18ji platform to function — including maintaining your authenticated session after the 18ji Login process and processing payments. These cannot be disabled.
• Functional cookies: Store your preferences such as language settings and game lobby filters to improve your experience.
• Analytics cookies: Collect anonymised data about how players navigate and use the 18ji platform, used solely to improve platform performance. Deployed only with your consent.
• Security cookies: Assist in detecting fraudulent login attempts, unusual session behaviour, and other security threats.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the 18ji platform. Non-essential cookies are only placed with your prior consent.

11. Security Measures

18ji implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks involved, including:

• SSL/TLS encryption for all data transmitted between your device and 18ji's servers, including during the 18ji Login process and all financial transactions.
• Encryption of sensitive data at rest, including KYC documents, financial account details, and password hashes.
• OTP-based two-factor authentication for account access.
• Access controls restricting 18ji staff access to personal data on a strict need-to-know basis.
• Regular security audits and penetration testing of the 18ji platform and infrastructure.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC Circular 16-03 (Personal Data Breach Management).

12. Children's Privacy (Under 21)

18ji Casino is strictly prohibited to individuals under the age of 21 years. 18ji does not knowingly collect personal data from individuals under 21. Age verification is a mandatory step in the 18ji account registration process.

If 18ji becomes aware that personal data has been collected from an individual under 21 years of age, it will immediately deactivate the associated account, delete the personal data in question, and return any deposited funds in accordance with applicable regulations. If you believe a minor has registered on 18ji, please contact us immediately at the email provided in Section 15.

13. Third-Party Platforms and Links

The 18ji platform may reference or interact with third-party payment service providers (such as GCash and PayMaya) and game software providers. These third parties operate under their own privacy policies, which are independent of this Policy. 18ji is not responsible for the privacy practices of third-party platforms and recommends that you review their respective privacy policies before providing personal data directly to them.

14. Updates to This Privacy Policy

18ji reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via email notification or a prominent notice on the 18ji platform prior to taking effect. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Continued use of the 18ji platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy. If you disagree with any amendment, you must cease using the platform and may request account closure.

15. Contact and Data Protection Officer

18ji has designated a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. If you wish to exercise your data subject rights, submit a privacy-related query or complaint, or report a suspected data breach, please contact:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe 18ji has not complied with its obligations under the Data Privacy Act of 2012. The NPC's contact details are publicly available on the official NPC website.