ddjl Casino
Privacy Policy
At ddjl, the privacy and security of your personal information is something we take seriously — not just because the law requires it, but because you deserve to know exactly how your data is collected, used, and protected when you play on our platform. This Privacy Policy governs all personal data processing activities conducted by ddjl in connection with the use of our online gaming services by players across the Philippines.
How ddjl Protects Your Data
These six principles define how ddjl approaches every aspect of personal data handling — from the moment you register to every transaction you make on the platform.
Encrypted Data Storage
All personal data stored on ddjl servers is encrypted at rest using industry-standard AES-256 encryption. Your account credentials, payment details, and identity documents are never stored in plaintext form.
No Selling of Player Data
ddjl does not sell, rent, or trade your personal information to third-party marketers or advertisers under any circumstances. Your data is used solely to operate and improve the ddjl platform and to comply with our regulatory obligations.
PDPA-Compliant Processing
ddjl processes all personal data in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules, and the guidelines issued by the National Privacy Commission (NPC).
Your Rights, Always Respected
As a ddjl player, you have the right to access, correct, and request deletion of your personal data at any time. ddjl has established clear procedures for exercising these rights, detailed in the Data Subject Rights section of this policy.
Breach Notification
In the unlikely event of a personal data breach affecting your information, ddjl will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC guidelines.
Minimal Data Collection
ddjl collects only the personal data that is strictly necessary for the purposes stated in this policy. We apply the principle of data minimization to every data collection point across the platform, from registration forms to customer support interactions.
1 Introduction
ddjl Casino ("ddjl", "we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the ddjl online gaming platform accessible at ddjl.app (the "Platform"). This Privacy Policy explains in clear and plain terms what personal data we collect, why we collect it, how we use and protect it, with whom we may share it, and what rights you have over it as a data subject under Philippine law.
This Privacy Policy applies to all players, registered account holders, website visitors, and prospective registrants who interact with the ddjl Platform from any device, including desktop, mobile browser, and any ddjl-branded application. It covers all personal data processing activities conducted by ddjl in connection with account registration, identity verification, deposits and withdrawals, gaming activity, customer support, and marketing communications.
By registering for a ddjl account or by continuing to use the Platform after this Privacy Policy has been published or updated, you confirm that you have read and understood this policy and consent to the collection and processing of your personal data as described herein.
2 Data Controller
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, ddjl Casino is the personal information controller responsible for the personal data collected through the ddjl Platform.
ddjl operates under PAGCOR's regulatory framework for Philippine online gaming. All data processing activities described in this Privacy Policy are conducted in connection with the operation of a licensed online gaming platform for players physically located within the Republic of the Philippines.
ddjl has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and handling data subject requests. The DPO can be contacted through the customer support channels listed in Section 14 of this policy.
3 Personal Data We Collect
ddjl collects personal data only to the extent necessary for the specific purposes described in this policy. The categories of personal data we collect include:
3.1 Registration and Account Data
- Legal full name (as it appears on your government-issued Philippine ID);
- Date of birth (for 21+ age verification);
- Gender;
- Philippine residential address;
- Philippine mobile number;
- Email address;
- Username and hashed account password.
3.2 Identity Verification (KYC) Data
- Copies of government-issued Philippine identification documents (e.g., PhilSys National ID, Philippine passport, LTO driver's license, UMID, PRC ID, Voter's ID, Postal ID);
- Selfie or liveness check images submitted during the KYC verification process;
- Source-of-funds declarations where required for AML compliance.
3.3 Financial Transaction Data
- Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers;
- GCash mobile number, Maya account reference, or bank account details (BPI, BDO, Metrobank, UnionBank) used for transactions;
- Account balance history and transaction audit logs.
3.4 Gaming Activity Data
- Game session records, including games played, wager amounts, outcomes, and session duration;
- Bonus and promotional offer claims and wagering history;
- Responsible gaming tool settings (deposit limits, loss limits, self-exclusion records).
3.5 Technical and Device Data
- IP address and approximate geolocation (to verify Philippine jurisdiction);
- Device type, operating system, and browser information;
- Session logs, login timestamps, and platform interaction data;
- Cookie identifiers and similar tracking data (see Section 7).
3.6 Customer Support Data
- Records of live chat, email, and other support interactions;
- Complaint and dispute records;
- Any additional personal data you voluntarily provide when contacting ddjl support.
4 How We Use Your Personal Data
ddjl uses the personal data we collect for the following specific purposes:
- Account creation and management: To register and maintain your ddjl player account, authenticate your login sessions, and manage your account preferences and responsible gaming settings.
- Identity verification and KYC compliance: To verify your identity, confirm that you meet the 21+ age requirement, confirm your Philippine residency, and satisfy our obligations under PAGCOR's KYC requirements and the Anti-Money Laundering Act.
- Payment processing: To process deposits and withdrawals through GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other approved Philippine payment channels, and to maintain accurate financial records.
- Gaming service delivery: To provide access to all ddjl games including slots, live casino, keno, bingo, roulette, sabong, and sports betting, and to calculate and pay out winnings accurately.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct on the Platform.
- Regulatory compliance: To comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Philippine Data Privacy Act (RA 10173), and any other applicable Philippine laws and regulations.
- Customer support: To respond to your inquiries, resolve disputes, and provide assistance through our 24/7 live chat and email support channels.
- Responsible gaming: To monitor gaming patterns, enforce deposit and loss limits you have set, and identify players who may require responsible gaming support or intervention.
- Platform improvement: To analyze aggregated usage data in order to improve the ddjl Platform's features, game offerings, user experience, and technical performance.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have provided your consent to receive such communications. You may withdraw your marketing consent at any time.
5 Legal Basis for Processing
ddjl processes your personal data on one or more of the following legal bases, as applicable to each processing activity:
- Contractual necessity: Processing is necessary for the performance of the contract between you and ddjl — specifically, to provide you with access to the online gaming services you have registered for and to process your financial transactions.
- Legal obligation: Processing is required for ddjl to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and tax reporting obligations.
- Legitimate interests: Processing is necessary for ddjl's legitimate interests in preventing fraud, ensuring platform security, detecting prohibited conduct, and improving our services — provided that these interests do not override your privacy rights.
- Consent: Processing is based on your freely given, specific, and informed consent — primarily applicable to marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6 Data Sharing and Disclosure
ddjl does not sell your personal data. We may share your personal data with the following categories of recipients only where strictly necessary and only for the purposes described in this policy:
6.1 Regulatory and Law Enforcement Authorities
ddjl is required by law to share certain player data with PAGCOR and the Anti-Money Laundering Council (AMLC) as part of our regulatory reporting obligations. We will also disclose personal data to law enforcement authorities where required by a valid legal order, court order, or subpoena issued under Philippine law.
6.2 Payment Service Providers
ddjl shares the minimum necessary financial data with licensed Philippine payment service providers — including GCash (G-Xchange Inc.), Maya (Voyager Innovations), and partner banks — solely for the purpose of processing your deposit and withdrawal transactions. These providers are bound by their own data privacy obligations under Philippine law.
6.3 KYC and Identity Verification Partners
ddjl may engage licensed third-party identity verification service providers to assist with the processing and validation of KYC documents. These providers operate under data processing agreements that require them to handle your data only as instructed by ddjl and in accordance with applicable privacy laws.
6.4 Technology and Infrastructure Providers
ddjl uses trusted third-party cloud infrastructure, cybersecurity, and game software providers to operate the Platform. These providers may have incidental access to personal data as part of their service delivery but are contractually prohibited from using that data for any purpose other than providing services to ddjl.
6.5 Professional Advisors
ddjl may share personal data with lawyers, auditors, and other professional advisors where necessary for the conduct of legal proceedings, regulatory audits, or the protection of ddjl's legal rights.
7 Cookies and Tracking Technologies
ddjl uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your login session, detect fraud, and analyze Platform usage. The following categories of cookies are used:
- Strictly Necessary Cookies: Essential for the Platform to function. These cookies enable login session management, security features, and core game functionality. They cannot be disabled without breaking the Platform.
- Functional Cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and display preferences. Disabling these cookies may affect your user experience.
- Analytical Cookies: Allow ddjl to measure Platform usage, identify popular games, and understand player navigation patterns in aggregate. This data is used to improve the Platform and is not used to identify individual players.
- Security and Fraud Prevention Cookies: Used to detect suspicious login activity, multi-accounting attempts, and other security threats. These are treated as strictly necessary and cannot be disabled.
You may manage non-essential cookie preferences through your browser settings. Note that blocking strictly necessary or security cookies may prevent you from accessing your ddjl account. ddjl does not use third-party advertising or retargeting cookies.
8 Data Retention
ddjl retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:
- Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR and AML regulations.
- Financial transaction records: Retained for a minimum of five (5) years from the transaction date, consistent with the Anti-Money Laundering Act's record-keeping requirements.
- Gaming activity records: Retained for three (3) years from the date of each gaming session for regulatory audit purposes.
- Customer support records: Retained for two (2) years from the date of each support interaction, unless the interaction relates to an ongoing dispute or legal matter.
- Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent history.
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ddjl's data disposal procedures. Anonymized data that can no longer be linked to an individual may be retained indefinitely for statistical and research purposes.
9 Data Security
ddjl implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:
- AES-256 encryption for all personal data stored at rest on ddjl servers;
- TLS 1.3 encryption for all data transmitted between your device and the ddjl Platform;
- Multi-factor authentication requirements for player account access and all internal administrative systems;
- Role-based access controls ensuring that ddjl personnel can only access personal data to the extent necessary for their specific job function;
- Regular third-party penetration testing and vulnerability assessments of the ddjl Platform and infrastructure;
- 24/7 security monitoring and automated intrusion detection systems;
- Regular staff training on data privacy obligations and security best practices.
While ddjl takes all reasonable and industry-standard precautions to protect your data, no system is entirely immune to security risks. You also play an important role in keeping your account secure — please use a strong, unique password for your ddjl account and never share your login credentials or OTP codes with anyone.
10 Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ddjl:
| Right | What It Means | How to Exercise |
|---|---|---|
| Right to Be Informed | You have the right to know what personal data ddjl collects about you and how it is used — which is the purpose of this Privacy Policy. | This policy serves as fulfilment of this right. Contact DPO for clarifications. |
| Right of Access | You may request a copy of the personal data ddjl holds about you, including your account data, KYC records, and transaction history. | Submit a data access request via live chat or email to [email protected]. |
| Right to Rectification | You may request correction of inaccurate or incomplete personal data held in your ddjl account. | Minor corrections can be made via account settings. For KYC data corrections, contact support. |
| Right to Erasure | You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to ddjl's legal retention obligations. | Submit a deletion request via live chat. Note that regulatory retention periods may apply. |
| Right to Object | You may object to processing based on legitimate interests, including profiling for marketing purposes. | Contact the DPO or update your marketing preferences in your account settings. |
| Right to Data Portability | You may request a copy of your personal data in a structured, commonly used, machine-readable format. | Submit a portability request to the DPO via email at [email protected]. |
| Right to Lodge a Complaint | If you believe ddjl has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines. | Visit the NPC website or contact the NPC directly through their published channels. |
ddjl will respond to all data subject rights requests within fifteen (15) business days of receipt. In complex cases, we may extend this period by a further fifteen (15) days with prior notice to you. We may need to verify your identity before processing any data rights request to ensure we do not disclose your data to an unauthorized party.
11 Children's Privacy and Underage Access
The ddjl Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law and PAGCOR regulations governing online gaming. ddjl does not knowingly collect personal data from individuals under 21 years of age.
If ddjl discovers or is notified that personal data has been collected from a player who is under 21 years of age, we will immediately suspend the relevant account, void any wagers placed, and securely delete all personal data associated with the account. Any funds deposited by an underage player will be returned to the source payment method following verification.
Parents and guardians are encouraged to use parental control software and supervise their children's internet activity to prevent minors from accessing online gaming platforms. If you believe that a minor has registered for or accessed a ddjl account, please contact our support team immediately via live chat.
12 Cross-Border Data Transfers
ddjl's primary data processing operations are conducted within the Philippines. However, certain technology and infrastructure service providers engaged by ddjl may process or store data on servers located outside the Philippines — for example, in Singapore, Japan, or other jurisdictions with comparable data protection frameworks.
Where personal data is transferred outside the Philippines, ddjl ensures that such transfers are protected by appropriate safeguards, including:
- Data processing agreements incorporating the NPC's standard contractual clauses for cross-border data transfers;
- Transfers only to countries or organizations that the NPC has recognised as providing an adequate level of data protection;
- Binding corporate rules where transfers occur between entities within the same corporate group.
You may request further information about the specific safeguards in place for cross-border data transfers by contacting the ddjl DPO.
13 Updates to This Privacy Policy
ddjl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, or changes in our Platform's features and services. When material changes are made to this policy, ddjl will notify registered players by email to their registered address and by displaying a prominent notice on the Platform for at least fourteen (14) days before the changes take effect.
The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this policy periodically to stay informed about how ddjl protects your data. Your continued use of the Platform after the effective date of any revised policy constitutes your acknowledgment of the changes.
14 Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the way ddjl processes your personal data, please contact our Data Protection Officer through the following channels:
- 24/7 Live Chat: Available directly from the ddjl Platform — the fastest way to reach us for any account or privacy inquiry.
- Email: [email protected] — please include "Privacy Request" in your subject line so your inquiry is routed to the DPO team promptly.
ddjl aims to acknowledge all privacy-related inquiries within two (2) business days and to resolve them fully within fifteen (15) business days.
If you are not satisfied with ddjl's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.
Play With Confidence at ddjl Casino
Your personal data is protected under the Philippine Data Privacy Act and handled with the strictest security standards. Explore the ddjl Casino lobby — slots, live baccarat, keno, bingo, and more, all in Philippine Peso.