250jl Privacy Policy

1 Introduction

250jl operates the online casino and sports betting platform accessible at 250jl.net, serving Filipino players under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). As a regulated operator, 250jl is required to collect, process, and retain certain categories of personal data in order to verify player identities, process financial transactions, prevent fraud and money laundering, and comply with PAGCOR's ongoing regulatory obligations.

This Privacy Policy describes in full detail how 250jl collects, uses, stores, shares, and protects your personal data. It also explains the rights you hold under the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and related issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on 250jl, accessing the platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please do not use the 250jl platform and contact our Data Privacy Officer to request account closure and data subject access or erasure as appropriate.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, the data controller responsible for your personal data is the operator of the 250jl platform (referred to throughout this Policy as "250jl", "we", "us", or "our").

250jl has appointed a dedicated Data Privacy Officer (DPO) responsible for overseeing compliance with all applicable data protection legislation, handling data subject rights requests, managing the register of processing activities, and coordinating with the National Privacy Commission where required. You may contact the 250jl DPO using the contact details set out in Section 13 of this Policy.

3 Personal Data We Collect

250jl collects personal data across several categories depending on how you interact with the platform. The specific data points collected within each category are listed below:

250jl does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Where sensitive personal information (as defined under RA 10173) is collected — such as government ID numbers — it is processed under the explicit lawful basis of compliance with a legal obligation and is subject to enhanced security controls.

4 How We Use Your Personal Data

250jl uses personal data for the following specific purposes. Each purpose is tied to a lawful basis as described in Section 5 of this Policy:

• Account registration and KYC verification: To create your 250jl player account, verify your identity, confirm you meet the PAGCOR-mandated 21+ age requirement, and ensure you are not on any self-exclusion or exclusion register.
• Service delivery: To allow you to access games, place bets, use live dealer tables, participate in sabong and bingo, and interact with all features of the 250jl platform.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank; to verify payment methods; and to comply with source-of-funds requirements under Philippine AML law.
• Fraud prevention and security: To detect and investigate suspicious activity, protect the integrity of the platform, prevent multi-accounting, and respond to security incidents including unauthorised access attempts.
• Responsible gaming: To monitor gameplay patterns for indicators of problem gambling, enforce deposit and loss limits set by the player, process cooling-off and self-exclusion requests, and meet PAGCOR responsible gaming reporting requirements.
• Regulatory compliance: To fulfil obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and any other applicable Philippine law or regulatory directive.
• Customer support: To respond to your queries, resolve disputes, process complaints, and maintain records of our support interactions for quality assurance purposes.
• Platform improvement: To analyse aggregated, anonymised usage data to improve game selection, site performance, and user experience. This does not involve profiling individual players for marketing purposes.
• Marketing communications: To send you promotional offers, bonus alerts, and event notifications where you have opted in to receive such communications. You may withdraw consent to marketing at any time via your account settings or by contacting support.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 250jl processes personal data on one or more of the following lawful bases:

• Contractual necessity: Processing is necessary to fulfil the Terms & Conditions you agreed to when creating your 250jl account, including account management, game access, and payment processing.
• Legal obligation: Processing is required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, PAGCOR KYC rules, the Cybercrime Prevention Act, and other applicable Philippine legislation. 250jl cannot operate as a licensed casino without collecting and processing identity and financial data.
• Legitimate interests: Processing is necessary for 250jl's legitimate interests in fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Where processing is not required by contract or law — specifically for marketing communications and non-essential analytics cookies — 250jl relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing and Disclosure

250jl does not sell, rent, or trade your personal data. We disclose personal data only in the following limited circumstances:

• PAGCOR and regulatory authorities: 250jl is required by its PAGCOR license to submit player data, transaction records, and gameplay logs to PAGCOR upon request or as part of scheduled regulatory reporting. We may also be required to disclose data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or law enforcement agencies pursuant to a lawful order.
• Payment service providers: Player financial data is shared with GCash, PayMaya, BPI, BDO, and Metrobank solely for the purpose of processing deposits and withdrawals. Each of these providers operates under its own privacy policy and is bound by the same data protection obligations under Philippine law.
• Game software providers: Certain gameplay data (bet amounts, game session identifiers) may be processed by 250jl's licensed game software suppliers for the purpose of delivering RNG-certified game outcomes and maintaining audit trails. These suppliers are contractually bound to process data only on 250jl's instructions.
• Identity verification and fraud prevention services: 250jl uses third-party KYC and fraud screening services to assist with document verification and AML screening. These services process identity data under binding data processing agreements and are prohibited from using your data for any purpose other than the service contracted by 250jl.
• Professional advisers: 250jl may share data with its legal counsel, auditors, or other professional advisers where necessary and subject to professional duties of confidentiality.
• Business transfers: In the event of a merger, acquisition, or transfer of all or part of 250jl's business operations, player data may be transferred as part of that transaction. You will be notified of any such transfer via email and via a prominent notice on the platform before it takes effect, and your rights under this Policy will continue to be respected by the successor entity.

7 Cookies and Similar Technologies

250jl uses cookies and similar local storage technologies on the 250jl.net platform. Cookies are small text files stored on your device that help the platform function correctly and help us understand how players interact with the site.

250jl does not use advertising cookies, retargeting pixels, or third-party tracking cookies. You may manage or delete cookies at any time through your browser's settings. Please note that disabling strictly necessary cookies will prevent you from logging in or using core platform features.

8 Data Retention

250jl retains personal data for as long as is necessary to fulfil the purposes for which it was collected or as required by applicable law. The following retention periods apply:

• Active account data: Retained for the full duration of your account's existence on the 250jl platform plus a minimum of five years following permanent account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act's five-year retention mandate.
• KYC documents: Retained for a minimum of five years from the date of submission or from the date of the last transaction associated with your account, whichever is later, as required under PAGCOR KYC rules and AMLC regulations.
• Financial transaction records: Retained for a minimum of five years from the transaction date, consistent with the retention requirements of the Anti-Money Laundering Act.
• Support and communication records: Retained for three years from the date of last interaction or resolution of the relevant matter, whichever is later.
• Marketing consent records: Retained for the duration of your consent plus a sufficient period thereafter to demonstrate compliance in the event of a regulatory inquiry, typically two years post-withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised in accordance with 250jl's data disposal procedures. Where anonymisation is not technically feasible for specific data formats, the data is rendered unreadable through cryptographic key destruction.

9 Data Security

250jl implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your device and the 250jl platform. All connections are forced to HTTPS.
• AES-256 encryption at rest for sensitive data fields including government ID numbers, financial account details, and KYC document files stored on 250jl infrastructure.
• Role-based access controls: Access to player personal data within 250jl is restricted to staff whose job function requires it. All internal access is logged and auditable.
• Multi-factor authentication required for all 250jl internal staff accounts that have access to player data systems.
• Regular security audits: 250jl conducts periodic internal security reviews and engages independent third-party security assessors to perform penetration testing on its platform infrastructure.
• Incident response protocol: In the event of a data breach that poses a risk to the rights and freedoms of affected players, 250jl will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required under NPC Circular 16-03, and will notify affected players without undue delay.

10 Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by 250jl:

• Right to be Informed: You have the right to be informed that your personal data is being or has been collected, used, and processed. This Privacy Policy fulfils that obligation.
• Right of Access: You may request a copy of the personal data 250jl holds about you, including information on how it has been processed, who it has been shared with, and how long it will be retained.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data held about you. For account profile data, many fields may be updated directly within your account settings.
• Right to Erasure: In certain circumstances, you may request deletion of your personal data. Note that where 250jl is required to retain data under PAGCOR or AMLC regulations, erasure requests may be declined to the extent necessary to meet those legal obligations. Where erasure is not possible in full, 250jl will restrict processing of the data to the minimum required by law.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing carried out on the basis of legitimate interests, though 250jl may be able to demonstrate compelling legitimate grounds that override your objection.
• Right to Data Portability: Where technically feasible and permitted under applicable law, you may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: If you believe 250jl has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, contact the 250jl Data Privacy Officer as described in Section 13. 250jl will acknowledge your request within five business days and provide a substantive response within the timeframe prescribed by the Data Privacy Act — generally 15 business days, extendable in complex cases with prior notice to you.

11 Children's Privacy and Age Restriction

The 250jl platform is strictly intended for adults aged 21 years and above, as mandated by PAGCOR regulations. 250jl does not knowingly collect personal data from individuals under the age of 21. The collection of personal data from minors is a serious violation of both these Terms and applicable Philippine law.

All players are required to verify their age as part of the KYC process before making a deposit or placing any wager. If 250jl discovers that a player account belongs to a person under 21 years of age, the account will be immediately suspended, all pending withdrawals will be cancelled, and any balance attributable to gameplay while underage will be reviewed in accordance with PAGCOR guidelines.

12 Updates to This Privacy Policy

250jl may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements imposed by PAGCOR or the National Privacy Commission, or changes to our platform's technical infrastructure.

When a material change is made to this Policy — meaning a change that significantly affects how your personal data is processed or your rights as a data subject — 250jl will provide advance notice via email to your registered address and/or through a prominent notice on the platform, with a minimum of 14 days' notice before the change takes effect.

For minor updates such as typographical corrections, clarifications that do not change the substance of the Policy, or changes required by NPC regulatory guidance, the Policy may be updated without prior notice. The effective date at the top of this page will be updated to reflect the date of the most recent revision. We recommend bookmarking this page and reviewing it periodically.

Continued use of the 250jl platform after a revised Privacy Policy has taken effect constitutes your acknowledgment of the updated terms. If you do not agree with a material update, you may request account closure and data erasure (subject to legal retention obligations) by contacting the 250jl Data Privacy Officer.

13 Contact the Data Privacy Officer

For any questions about this Privacy Policy, to exercise your data subject rights, to withdraw consent to marketing communications, or to report a privacy concern, please contact the 250jl Data Privacy Officer through the following channels:

• Email: [email protected] — please include "DPO Request" in the subject line along with your registered username and a clear description of your request.
• Live Chat: Available 24/7 directly on the 250jl platform. For formal data subject rights requests, the live chat team will escalate your query to the Data Privacy Officer and provide you with a reference number.

If you are not satisfied with 250jl's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which can be reached through the NPC's official website and public assistance channels.