Your privacy matters to 38jl. This Privacy Policy explains what personal data we collect when you use the 38jl platform, why we collect it, how we use and protect it, who we share it with, and what rights you have as a data subject under Philippine law. Please read this document carefully before registering or using any 38jl service.
These cards summarise the key privacy principles that guide data handling at 38jl. They do not replace the full policy text — please read each section below in full to understand your rights and our obligations.
38jl collects registration details, identity documents for KYC, transaction records, gameplay activity, device and browser information, and communication logs. We collect only what is necessary to provide services and comply with PAGCOR and Philippine law.
Your data is used to operate your account, process transactions, verify identity, detect fraud, fulfil PAGCOR regulatory requirements, personalise your gaming experience, and provide customer support. We do not sell your personal data to third parties.
38jl uses SSL/TLS encryption for all data in transit, restricted access controls for data at rest, and regular security assessments. Passwords are stored as one-way cryptographic hashes and are never accessible in readable form by any 38jl staff member.
Data is shared only with PAGCOR, payment processors (GCash, Maya, BDO, BPI, etc.), KYC verification partners, game software providers, and fraud detection services — all under strict data processing agreements. No data is sold to advertisers.
As a Philippine data subject, you have the right to be informed, access your data, correct inaccuracies, object to processing, request erasure, and data portability. You may also file a complaint with the National Privacy Commission (NPC) of the Philippines.
38jl retains personal data for as long as your account is active and for a minimum of five (5) years after account closure, as required by PAGCOR and Philippine anti-money laundering regulations. Anonymised analytics data may be retained indefinitely.
This Privacy Policy ("Policy") is issued by 38jl ("38jl," "we," "us," or "our"), the operator of the online gaming platform accessible at 38jl.org. 38jl operates under the oversight of PAGCOR (Philippine Amusement and Gaming Corporation) and is subject to the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, along with its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).
This Policy applies to all personal data collected by 38jl in connection with your registration, use of the platform, financial transactions, customer support interactions, and any other engagement with 38jl's services — whether accessed via web browser, mobile device, or any other means of access.
By registering an account with 38jl or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy, and you consent to the collection, processing, and use of your personal data as described herein. If you do not agree with any part of this Policy, you should not register or continue to use the 38jl platform.
Data Controller: 38jl is the Data Controller for personal data collected through the 38jl.org platform. For the purposes of the Data Privacy Act of 2012, 38jl determines the purpose and means of processing personal information submitted by players and site visitors.
38jl collects personal data across several categories depending on your level of engagement with the platform. We collect only the minimum data necessary for the specified purpose.
38jl processes personal data for the following purposes:
No Data Sales: 38jl does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Data is shared with service providers only as necessary for the operation of the platform and under strict contractual obligations.
Under the Data Privacy Act of 2012 (RA 10173), 38jl processes your personal data on the following legal grounds:
38jl uses cookies and similar tracking technologies to operate the platform, maintain session state, prevent fraud, and analyse usage patterns. The following categories of cookies are used:
You may configure your browser to refuse all cookies or to notify you when a cookie is being set. However, disabling strictly necessary cookies will prevent you from using the 38jl platform. For all other cookie categories, you may adjust your preferences via your browser settings.
38jl does not sell your personal data. We disclose personal data to the following categories of recipients only as necessary and under contractual data protection obligations:
Some of 38jl's service providers — particularly game software providers and cloud infrastructure operators — may be located outside the Philippines. Where personal data is transferred internationally, 38jl ensures that adequate safeguards are in place in accordance with NPC guidelines on cross-border data transfers under the Data Privacy Act of 2012.
Such safeguards may include contractual clauses requiring the recipient to maintain data protection standards equivalent to those under Philippine law, or transfers to jurisdictions that the NPC has assessed as providing an adequate level of protection. No international transfer is made for the purpose of circumventing the protections of Philippine data privacy law.
38jl implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:
Security Incident Notification: In the event of a personal data breach that is reasonably likely to give rise to a real risk to your rights and freedoms, 38jl will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.
38jl retains personal data for as long as your account is active and for a minimum retention period following account closure, as set out below:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 38jl's data disposal procedures.
Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 38jl. To exercise any of these rights, please contact 38jl's Data Protection Officer as described in Section 14.
| Right | Description | How to Exercise | Status |
|---|---|---|---|
| Right to be Informed | Know what data is collected and how it is used | This Privacy Policy fulfils this obligation | Available |
| Right of Access | Request a copy of personal data 38jl holds about you | Contact DPO by email — response within 30 days | Available |
| Right to Rectification | Correct inaccurate or incomplete personal data | Update via Account Settings or contact support | Available |
| Right to Erasure | Request deletion of data no longer needed | Contact DPO — subject to legal retention requirements | Available |
| Right to Object | Object to processing based on legitimate interest | Contact DPO with grounds for objection | Available |
| Right to Data Portability | Receive your data in a structured, machine-readable format | Contact DPO — export provided within 30 days | Available |
| Right to Withdraw Consent | Withdraw consent for marketing and optional processing | Unsubscribe link in emails or contact support | Available |
| Right to Complain | Lodge a complaint with the NPC of the Philippines | File directly with the National Privacy Commission | Available |
38jl will respond to verified data subject requests within thirty (30) calendar days. For complex requests, this period may be extended by a further thirty (30) days, with notice provided to the requesting data subject. Note that certain rights may be limited where 38jl's legal retention obligations or PAGCOR regulatory requirements take precedence.
The 38jl platform is strictly restricted to individuals who are twenty-one (21) years of age or older, as mandated by PAGCOR for casino-style gaming in the Philippines. 38jl does not knowingly collect personal data from individuals under the age of 21.
If 38jl becomes aware that personal data has been collected from an individual under 21 — whether through a fraudulent registration, misrepresentation of age, or any other means — the relevant account will be immediately suspended, all personal data associated with the account will be deleted or securely anonymised, and the incident will be reported to PAGCOR in accordance with regulatory obligations.
If you are a parent or guardian and have reason to believe that a person under 21 under your care has registered with or is using the 38jl platform, please contact 38jl's support team or Data Protection Officer immediately via the contact information provided in Section 14.
The 38jl platform may contain references to or integrations with third-party services — including payment gateways (GCash, Maya), game software providers, and customer communication tools. Each of these third parties operates under its own privacy policy and data protection practices.
38jl is not responsible for the privacy practices of third-party service providers beyond the scope of the data processing agreements in place with them. 38jl does not control how those providers collect, store, or use data within their own systems. Players are encouraged to review the privacy policies of any third-party service they interact with directly — for example, the GCash or Maya app — to understand how their data is handled by those platforms.
38jl reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect your rights as a data subject or the manner in which 38jl processes your personal data — will be communicated to registered players by email or in-platform notification at least fourteen (14) days before the amended Policy takes effect.
Minor amendments, such as corrections, clarifications, or updates required by changes in regulatory guidance, may be published immediately. The current effective date is always displayed at the top of this document. The most up-to-date version of this Policy is permanently accessible at 38jl.org/privacy-policy.
Your continued use of the 38jl platform following the effective date of any amended Policy constitutes your acceptance of the revised terms. If you object to any amendment, you may request account closure by contacting 38jl support.
38jl has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. If you wish to exercise any of your data subject rights, raise a privacy concern, or request clarification on any part of this Privacy Policy, you may contact the 38jl DPO through the following channels:
38jl will acknowledge receipt of all privacy requests within five (5) business days and will provide a substantive response within thirty (30) calendar days.
National Privacy Commission: If you are not satisfied with 38jl's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for enforcing the Data Privacy Act and handling data privacy complaints from Filipino data subjects.
38jl keeps your personal data secure, complies with the Philippine Data Privacy Act, and gives you full control over your information. Sign in to your account or explore the full 38jl casino experience — PAGCOR regulated, GCash-ready, for Filipino players aged 21 and above.
21+ only. PAGCOR regulated. Data handled under RA 10173. Please gamble responsibly.
🔞 21+ Only. 38jl is available exclusively to players 21 years of age or older as required by PAGCOR. Please gamble responsibly. Visit our Responsible Gaming page for tools and support.