866lj Privacy Policy

1 Who We Are

866lj is an online gaming and sports betting platform operating under the domain 866lj.net, serving players across the Philippines including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. For the purposes of this Privacy Policy, "866lj," "we," "us," and "our" refer to the operator of the 866lj platform.

866lj acts as the data controller in respect of the personal data you provide when registering and using the platform. As data controller, 866lj determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable law.

If you have any questions about how 866lj handles your personal data, you may contact our Data Protection Officer at the email address provided in Section 14 of this policy.

2 Data We Collect

866lj collects the following categories of personal data from users of the platform:

866lj does not collect sensitive personal information (as defined under the Data Privacy Act of 2012) unless strictly necessary for regulatory compliance, such as government ID numbers required for KYC verification.

3 How We Collect Data

866lj collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated technologies: Technical and usage data collected automatically when you access the platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity and financial verification data received from payment processors (GCash, PayMaya, BPI, BDO, Metrobank) and identity verification service providers in connection with KYC and AML compliance;
• Publicly available sources: Information from public databases used to verify identity or comply with regulatory obligations.

4 How We Use Your Data

866lj uses your personal data for the following purposes:

• To create and manage your 866lj account and verify your identity and age (21+ requirement);
• To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank;
• To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Philippine law;
• To detect, investigate, and prevent fraud, cheating, and other prohibited conduct on the platform;
• To provide customer support and respond to your enquiries;
• To send you transactional communications, including deposit confirmations, withdrawal notifications, and security alerts;
• To send you promotional communications about 866lj offers and bonuses, where you have consented to receive such communications;
• To monitor your gaming activity for responsible gaming purposes and to enforce self-exclusion or account restriction measures where applicable;
• To improve the 866lj platform, personalise your experience, and conduct internal analytics;
• To comply with applicable legal and regulatory obligations, including reporting requirements.

5 Legal Basis for Processing

866lj processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Contractual necessity: Processing required to perform the contract between you and 866lj, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML/CTF obligations, KYC requirements, and regulatory reporting;
• Legitimate interests: Processing necessary for 866lj's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent, including for marketing communications and certain cookie-based tracking.

6 Data Sharing & Disclosure

866lj does not sell your personal data to third parties. 866lj may share your personal data with the following categories of recipients in the circumstances described:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, to process your deposits and withdrawals. These providers process your data as independent data controllers subject to their own privacy policies;
• Identity verification providers: Third-party KYC and AML compliance service providers engaged by 866lj to verify your identity and comply with regulatory obligations;
• Game software providers: Third-party game developers and live casino operators whose games are made available on the 866lj platform, to the extent necessary to provide those games;
• Regulatory authorities: Philippine government agencies and regulatory bodies, including PAGCOR and the Anti-Money Laundering Council (AMLC), where disclosure is required by law;
• Law enforcement: Philippine law enforcement authorities, where disclosure is required by court order or applicable law;
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by 866lj, subject to confidentiality obligations.

Where 866lj shares your data with third-party service providers acting as data processors on its behalf, 866lj ensures that appropriate data processing agreements are in place requiring those providers to handle your data securely and only for the purposes specified by 866lj.

7 Data Retention

866lj retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In general, 866lj applies the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial regulations;
• Technical and usage data: Generally retained for up to two (2) years from collection, unless required for longer periods for security or legal purposes;
• Communications data: Retained for up to three (3) years from the date of the communication, or longer if relevant to an ongoing dispute or investigation.

Upon expiry of the applicable retention period, 866lj will securely delete or anonymise your personal data in accordance with its data disposal procedures.

8 Security Measures

866lj implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 866lj platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Two-factor authentication (2FA) available for all registered accounts;
• Role-based access controls limiting internal access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments of the platform;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While 866lj takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 866lj will notify you and the relevant regulatory authority in accordance with applicable law.

9 Cookies & Tracking Technologies

866lj uses cookies and similar tracking technologies on the platform to enhance your experience, maintain session security, and collect usage analytics. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function, including session management and security cookies. These cannot be disabled;
• Functional cookies: Remember your preferences and settings to personalise your experience on the platform;
• Analytics cookies: Collect anonymised data about how users interact with the platform to help 866lj improve its services;
• Security cookies: Used to detect and prevent fraudulent activity and protect the integrity of the platform.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 866lj platform. 866lj does not use third-party advertising or behavioural tracking cookies.

10 Your Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights in respect of your personal data held by 866lj:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy;
• Right of access: The right to request a copy of the personal data 866lj holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 866lj's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability: The right to receive your personal data in a structured, commonly used format where processing is based on consent or contract;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

11 Children's Privacy

The 866lj platform is strictly intended for persons aged 21 years and older. 866lj does not knowingly collect personal data from individuals under the age of 21. If 866lj becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed and all associated personal data will be deleted, with any deposited funds returned to the payment source following verification.

If you believe that a minor has registered an account on the 866lj platform, please contact our support team immediately at the contact details provided in Section 14.

12 Third-Party Links

The 866lj platform may contain references to third-party payment providers and service partners. 866lj is not responsible for the privacy practices of any third-party services. We encourage you to review the privacy policies of any third-party providers you interact with in connection with your use of the 866lj platform, including GCash, PayMaya, BPI, BDO, and Metrobank.

13 Changes to This Policy

866lj reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, 866lj will notify registered users via the email address associated with their account and by posting a prominent notice on the platform.

The updated Privacy Policy will take effect on the date specified in the notice. Your continued use of the 866lj platform after the effective date constitutes your acknowledgement of the revised policy. We encourage you to review this page periodically to stay informed about how 866lj protects your data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 866lj handles your personal data, please contact our Data Protection Officer:

Email: [email protected]

Our support team is available 24/7. We aim to respond to all data privacy enquiries within one (1) business day. For formal data subject requests, please allow up to fifteen (15) business days for a full response.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with our response to your data privacy concern.