yyyjl Privacy Policy — How We Handle Your Personal Data

This Privacy Policy applies to the yyyjl online gaming platform operated at yyyjl.cam ("Platform", "we", "us", "our") and to all personal data collected from registered players and website visitors ("you", "Data Subject") in connection with your use of the Platform.

yyyjl is committed to protecting the privacy of Filipino players in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and all relevant issuances of the National Privacy Commission ("NPC"). Where yyyjl's operations intersect with PAGCOR's regulatory oversight, data processing also complies with PAGCOR's applicable data governance requirements.

This Policy covers all personal data collected through the yyyjl website, account registration forms, payment processes, identity verification procedures, customer support interactions, live chat sessions, and any other means through which yyyjl may collect information about you. It does not cover third-party websites, payment processors, or game providers that operate independently — please review their respective privacy policies for information on their data practices.

yyyjl, operating at yyyjl.cam, is the Personal Information Controller ("PIC") for the personal data collected from players on the Platform, as defined under Section 3(h) of the Philippine Data Privacy Act. As PIC, yyyjl determines the purposes for which, and the means by which, personal data is processed.

yyyjl has appointed a Data Protection Officer ("DPO") responsible for overseeing data protection compliance and serving as the primary point of contact for data subject rights requests and privacy-related inquiries. Contact details for the DPO are provided in Section 15 of this Policy.

yyyjl collects and processes the following categories of personal data from Players:

yyyjl does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (such as health records, political opinions, or religious beliefs) unless specifically required for a regulatory purpose and with your explicit consent.

yyyjl collects personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make deposits or withdrawals, set responsible gaming preferences, or contact customer support;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access the yyyjl Platform (see Section 8 for details);
• From payment service providers — transaction confirmation data from GCash, Maya, BPI, BDO, Metrobank, and other authorized Philippine payment processors, necessary to reconcile deposit and withdrawal records;
• From identity verification services — third-party KYC service providers authorized to cross-reference government ID data in compliance with PAGCOR's identity verification requirements;
• From PAGCOR — in cases where PAGCOR shares information with licensed operators for the purposes of self-exclusion list enforcement, fraud prevention, or regulatory compliance.

yyyjl processes your personal data for the following specific, legitimate purposes:

• Account management — creating, maintaining, and administering your yyyjl player account;
• Age and identity verification — confirming that all players meet the mandatory 21+ age requirement under Philippine law and PAGCOR regulations;
• Payment processing — facilitating deposits and withdrawals via authorized Philippine payment methods;
• Fraud prevention and security — detecting and preventing unauthorized account access, fraudulent transactions, bonus abuse, and money laundering;
• PAGCOR regulatory compliance — maintaining records and responding to regulatory inquiries as required by yyyjl's PAGCOR operating license;
• Responsible gaming compliance — monitoring gaming activity to identify potential problem gambling patterns and enforcing self-exclusion and deposit limits as set by the player;
• Customer support — responding to player inquiries, resolving disputes, and maintaining support records;
• Platform improvement — analyzing aggregated, anonymized usage data to improve platform performance, game offerings, and user experience;
• Marketing communications — sending promotional offers and platform updates to players who have opted in to receive such communications. Players may opt out at any time through their account settings.

yyyjl will not use your personal data for any purpose other than those listed above without first providing you with notice and, where required by law, obtaining your consent.

Under the Philippine Data Privacy Act, yyyjl processes personal data on the following lawful bases:

• Contractual necessity — processing required to enter into and perform the player account agreement, including account creation, payment processing, and game service delivery;
• Legal obligation — processing required to comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, the Data Privacy Act's own requirements, and other applicable Philippine law;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights;
• Consent — processing for marketing communications and any other purpose for which your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

yyyjl may share your personal data with the following categories of authorized recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• PAGCOR — as required by yyyjl's operating license, including player verification records, transaction data, and regulatory compliance reports;
• Payment service providers — GCash, Maya, BPI, BDO, Metrobank, and other authorized Philippine payment processors, to the extent necessary to process deposits and withdrawals;
• KYC and identity verification providers — third-party providers authorized to verify government ID documents in accordance with PAGCOR's Know Your Customer requirements;
• Game software providers — game studios and live dealer platform providers who may process limited technical and usage data to deliver their games on the yyyjl Platform;
• IT and infrastructure providers — cloud hosting and server infrastructure providers who process data on yyyjl's behalf under strict data processing agreements;
• Law enforcement and government authorities — where yyyjl is required by law, court order, or lawful directive from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine government authorities to disclose information;
• Fraud prevention agencies — to the extent necessary to detect or prevent fraud, money laundering, or other criminal activity.

All third parties who receive personal data from yyyjl are required to maintain the confidentiality and security of that data and to use it solely for the specified purposes for which it was shared.

The yyyjl Platform uses cookies and similar tracking technologies to operate core platform functions and improve your user experience. Cookies are small text files stored on your device when you visit yyyjl.cam.

yyyjl uses the following categories of cookies:

• Strictly necessary cookies — required for the Platform to function, including maintaining your login session, remembering your account settings, and processing transactions. These cannot be disabled without affecting core functionality.
• Functional cookies — remember your preferences such as language settings, game filters, and responsible gaming limit configurations.
• Analytics cookies — collect anonymized data about how players use the Platform (pages visited, session durations, navigation paths) to help yyyjl improve platform performance. This data is processed in aggregate form and does not identify individual players.
• Security cookies — support fraud detection and account security functions, including detection of unusual login patterns and protection against session hijacking.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. yyyjl does not use third-party advertising cookies or cross-site tracking cookies for commercial advertising purposes.

yyyjl retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by law or PAGCOR regulations. The following general retention periods apply:

• Active account data — retained for the duration of the player account relationship;
• Transaction and financial records — retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and PAGCOR's record-keeping requirements;
• KYC and identity verification documents — retained for the duration of the account relationship plus five (5) years following account closure;
• Customer support records — retained for three (3) years from the date of the last support interaction;
• Marketing consent records — retained for the duration of the consent plus one (1) year after withdrawal of consent, for compliance documentation purposes.

Following the expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents reconstruction. Where anonymization is not technically feasible, data will be destroyed in a manner consistent with the NPC's guidelines on data disposal.

yyyjl implements organizational, technical, and physical security measures appropriate to the nature of the personal data processed and the risks associated with online gaming platform operations. These measures include:

• SSL/TLS encryption for all data transmitted between player devices and yyyjl servers;
• Encryption of sensitive data at rest, including financial account details and KYC documents;
• Role-based access controls restricting internal access to personal data to authorized personnel with a specific operational need;
• Multi-factor authentication requirements for administrative system access;
• Regular security assessments and penetration testing of Platform infrastructure;
• Secure, access-controlled data centers with physical security controls;
• Staff training on data protection obligations and information security best practices.

In the event of a personal data breach that is likely to result in harm to affected players, yyyjl will notify the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with the DPA's breach notification requirements. Affected players will be informed without undue delay where the breach poses a high risk to their rights and freedoms.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by yyyjl:

To exercise any of the above rights, please contact yyyjl's Data Protection Officer using the contact details in Section 15. yyyjl will respond to all data subject rights requests within fifteen (15) business days of receipt. Complex requests may require additional time, in which case you will be informed of the extended timeline.

If you believe yyyjl has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

yyyjl does not knowingly collect personal data from individuals under 21 years of age. Age verification is performed at registration and, where required, at the point of first withdrawal. If yyyjl discovers that personal data has been collected from a player who is under 21, the account will be suspended immediately, the data will be deleted to the extent permitted by law, and the matter will be reported to PAGCOR as required.

If you are a parent or guardian and believe that a minor in your household has registered on the yyyjl Platform, please contact our support team immediately via live chat or at [email protected] (plain text — not a link). yyyjl will investigate and take prompt action.

Some of yyyjl's service providers — including cloud infrastructure providers and certain game software providers — may be located or operate data centers outside the Philippines. Where personal data is transferred to recipients in other countries, yyyjl ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the Philippine Data Privacy Act.

Such safeguards include contractual data processing agreements incorporating standard data protection clauses, and yyyjl's assessment that the recipient country or organization provides an adequate level of data protection. yyyjl will not transfer personal data to third countries where adequate protection cannot be assured, except where required by applicable law or with your explicit consent.

yyyjl may update this Privacy Policy periodically to reflect changes in our data processing practices, legal requirements, or PAGCOR regulatory guidance. The effective date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, yyyjl will notify registered Players via in-platform notification. For minor clarifications or non-material updates, the revised Policy will be published at yyyjl.cam/privacy-policy without separate notification. We encourage you to review this Policy periodically to stay informed of how yyyjl handles your personal data.

Your continued use of the yyyjl Platform following publication of a revised Privacy Policy constitutes your acknowledgment of, and where required, your consent to, the updated data practices described therein.

For any questions, concerns, or requests related to this Privacy Policy or your personal data held by yyyjl, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week directly from any page on the yyyjl Platform. Filipino-speaking agents available.
• Email (plain text — not a clickable link): [email protected]

Please include "Privacy Request" in the subject line of any email inquiry and provide sufficient detail about your request to allow the DPO to process it efficiently. yyyjl may require you to verify your identity before acting on a data subject rights request to protect against unauthorized disclosure.

For complaints that cannot be resolved directly with yyyjl, you may contact the National Privacy Commission of the Philippines, the independent government body responsible for enforcing the Data Privacy Act of 2012.