Privacy Policy

1.1 This Privacy Policy ("Policy") describes how 18lj.cam ("18lj," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," or "Player") who access or use the 18lj online casino platform, including all games, account services, promotional programs, customer support channels, and payment processing functions available at 18lj.cam.

1.2 This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the relevant issuances of the National Privacy Commission (NPC). 18lj is committed to processing personal data lawfully, transparently, and with respect for the privacy rights of all Filipino players.

1.3 This Policy should be read together with 18lj's Terms & Conditions, which govern the overall agreement between you and 18lj with respect to use of the platform. The Terms & Conditions are available at 18lj.cam/terms-conditions.

1.4 By continuing to use the 18lj platform following the effective date of this Policy, or any updated version thereof, you confirm your acknowledgment of its contents. If you disagree with any part of this Policy, please discontinue use of the 18lj platform and contact the support team to exercise your data rights.

2.1 For the purposes of the Philippine Data Privacy Act of 2012, 18lj.cam is the personal information controller in respect of personal data collected through the 18lj platform. As controller, 18lj determines the purposes and means of processing personal information provided by players and users of the platform.

2.2 18lj has designated a Data Protection Officer (DPO) who is responsible for overseeing 18lj's data protection compliance and serving as the primary point of contact for players wishing to exercise their privacy rights. The DPO's contact details are provided in Section 14 of this Policy.

3.1 18lj collects the following categories of personal data from players and platform users. Data categories are tagged below for easy reference:

Full Legal Name Date of Birth Mobile Number Email Address Government ID Number ID Type & Issuing Authority

This data is collected at account registration and is used to verify your identity, confirm your age eligibility (21+), and maintain your account record. Government-issued Philippine ID is required as part of the identity verification process mandated by applicable AML regulations.

GCash Account Reference PayMaya Reference Bank Account Number (last 4 digits) Deposit History Withdrawal History Wallet Balance Snapshots

Financial data is collected to facilitate deposits and withdrawals, detect unauthorized transactions, comply with AML reporting obligations, and calculate applicable bonuses. 18lj does not store full bank account numbers or GCash PINs.

Game Session Logs Bet Amounts & Outcomes Game Preferences Bonus Usage History Sports Betting Selections

Gaming activity data is used to operate the platform, calculate payouts accurately, personalize game recommendations, detect irregular patterns that may indicate problem gambling, and fulfill regulatory reporting obligations.

IP Address Device Type & OS Browser Type & Version Session Timestamps Login Location Data Cookie Identifiers

Technical data is collected automatically when you access the 18lj platform. It is used to maintain platform security, detect unauthorized access, prevent fraud, comply with geographic restriction requirements, and optimize platform performance for Filipino players across different devices and network types.

Deposit Limit Settings Session Time Preferences Self-Exclusion Status Cooling-Off Period Records

Responsible gaming data is processed solely for the purpose of administering player-requested account controls and ensuring that self-exclusion and cooling-off restrictions are technically enforced across all 18lj platform access points. This category of data is treated with heightened protection and is not used for profiling or marketing purposes.

4.1 18lj collects personal data through the following channels:

• Direct provision by you: Data you enter when registering your 18lj account, completing identity verification, making deposits or withdrawal requests, setting responsible gaming preferences, or contacting customer support;
• Automated collection during platform use: Technical and device data collected automatically through cookies, server logs, and analytics tools when you access 18lj.cam;
• Third-party payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers when processing your deposits and withdrawals;
• Identity verification services: Confirmation data from identity verification service providers engaged by 18lj to validate government-issued Philippine IDs submitted during account registration or enhanced due diligence reviews;
• Game providers: Session and outcome data transmitted by third-party game providers (including Evolution Gaming, JILI, and Pragmatic Play) in connection with games played on the 18lj platform.

5.1 18lj processes personal data for the following purposes:

• Verifying your identity and age eligibility (21+ years) in accordance with PAGCOR-standard requirements and applicable Philippine law;
• Creating, maintaining, and administering your 18lj player account;
• Processing deposits and withdrawals via GCash, PayMaya, and Philippine bank channels;
• Operating, delivering, and improving the 18lj game platform and its technical infrastructure;
• Calculating and crediting bonuses, free spins, cashback, and loyalty rewards to eligible accounts;
• Detecting and preventing fraud, money laundering, collusion, bonus abuse, and other prohibited conduct as defined in the 18lj Terms & Conditions;
• Complying with AML reporting obligations and any other mandatory requirements under applicable Philippine law or regulatory direction;
• Administering responsible gaming tools including deposit limits, session controls, cooling-off periods, and self-exclusion;
• Providing customer support in Tagalog and English through live chat and email channels;
• Sending you service communications regarding your account, transactions, and material changes to 18lj's policies;
• Sending you promotional communications (only where you have given explicit consent, and subject to your right to withdraw consent at any time);
• Analyzing aggregated, anonymized usage data to improve platform performance and game library curation for Filipino players.

6.1 18lj processes personal data only where a valid legal basis exists under the Philippine Data Privacy Act. The following legal bases apply to 18lj's processing activities:

• Contract performance: Processing necessary to enter into and perform the contract between you and 18lj, including account registration, game delivery, and payment processing;
• Legal obligation: Processing required to comply with mandatory obligations under Philippine law, including AML regulations, age verification requirements, and tax reporting;
• Legitimate interests: Processing for purposes of fraud prevention, platform security, responsible gaming monitoring, and improving platform quality, where such interests are not overridden by your privacy rights;
• Consent: Processing for promotional communications and non-essential cookies, where your specific, informed, and freely given consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7.1 18lj does not sell, rent, or trade personal data. We share personal data with third parties only in the following circumstances and to the minimum extent necessary:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment service providers receive transaction data necessary to process your deposits and withdrawals. These providers are subject to their own privacy policies and applicable Philippine financial regulations;
• Game providers: Third-party game suppliers receive session data necessary to operate their games on the 18lj platform. This is limited to a pseudonymous player ID and session parameters — your full identity is not shared with game providers;
• Identity verification services: Engaged to verify government-issued Philippine IDs during account registration and enhanced due diligence reviews. These providers process ID data under data processing agreements with equivalent data protection obligations;
• IT infrastructure providers: Cloud hosting, cybersecurity, and platform technology providers who process data as data processors under the direction of 18lj and are contractually bound to process data only as instructed;
• Regulatory authorities: Philippine government agencies including the Bureau of Internal Revenue, Anti-Money Laundering Council (AMLC), and National Privacy Commission, where disclosure is required by law or valid regulatory order;
• Professional advisers: Legal counsel, auditors, and compliance consultants, under strict professional confidentiality obligations.

8.1 18lj uses cookies and similar tracking technologies on the 18lj.cam platform. Cookies are small text files stored on your device that help the platform function correctly, remember your preferences, and analyze usage patterns.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during your 18lj session. These cookies cannot be disabled without breaking core platform functions;
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limit configurations. Disable these to reset preferences on each visit;
• Analytics Cookies: Collect anonymized information about how players navigate the 18lj platform to help us improve performance and usability. 18lj uses only first-party analytics data — we do not share analytics data with third-party advertising networks;
• Security Cookies: Support fraud detection and login security monitoring, including recognizing trusted devices for two-factor authentication purposes.

8.3 You may control non-essential cookie preferences through your browser settings. Disabling all cookies may impair certain platform functions. Strictly necessary cookies cannot be disabled through browser settings while remaining logged in to your 18lj account.

9.1 18lj implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between player devices and the 18lj platform;
• AES-256 encryption for personal data stored in 18lj's systems;
• Role-based access controls limiting staff access to personal data to authorized personnel with a legitimate operational need;
• Multi-factor authentication for all 18lj staff accessing systems that store personal data;
• Regular security audits and penetration testing by qualified cybersecurity professionals;
• Login monitoring and anomaly detection systems to identify unauthorized account access attempts;
• Documented incident response procedures aligned with NPC breach notification requirements.

9.2 While 18lj employs industry-standard security measures, no internet-based platform can guarantee absolute security. Players are responsible for maintaining the security of their own account credentials and should enable two-factor authentication to add an additional layer of protection to their 18lj account.

10.1 18lj retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any mandatory retention requirements under Philippine law. The following retention schedule applies:

• Account identity data: Retained for the duration of your active 18lj account, plus ninety (90) days following account closure, to facilitate account recovery requests and finalize outstanding transactions;
• Transaction and financial records: Retained for five (5) years from the date of the transaction, in compliance with Philippine AML record-keeping requirements under Republic Act No. 9160, as amended;
• Gaming activity logs: Retained for three (3) years from the date of each session to support dispute resolution, responsible gaming monitoring, and regulatory compliance;
• Customer support communications: Retained for two (2) years from the date of the last interaction to support follow-up on unresolved matters;
• Security and login logs: Retained for twelve (12) months from the date of each event to support security investigations;
• Self-exclusion records: Retained indefinitely for permanent self-exclusion requests, to prevent re-registration in violation of the exclusion.

10.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that permanently prevents re-identification.

11.1 Under the Philippine Data Privacy Act of 2012, every 18lj player has the following rights with respect to their personal data:

11.2 To exercise any of the above rights, contact the 18lj Data Protection Officer at [email protected] with the subject line "Data Privacy Request." 18lj will acknowledge your request within three (3) business days and aim to fulfill it within the timeframes required by Philippine law. Identity verification may be required before certain requests can be processed.

12.1 The 18lj platform is strictly intended for individuals who are at least twenty-one (21) years of age. 18lj does not knowingly collect personal data from individuals under 21 years of age. Age verification is conducted at account registration as part of 18lj's standard onboarding process.

12.2 If 18lj becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately terminated, all associated data will be securely deleted, and any deposits will be returned to the payment source following identity verification of the account owner.

13.1 18lj reserves the right to update or revise this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or 18lj's data processing practices. The date of the most recent revision is always displayed at the top of this document.

13.2 Where a proposed change materially affects your privacy rights or the manner in which 18lj processes your personal data, 18lj will provide advance notice via a prominent notice on the 18lj platform and, where feasible, by email to your registered address before the change takes effect.

13.3 The current version of this Privacy Policy is always accessible at 18lj.cam/privacy-policy. We encourage you to review this Policy periodically. Continued use of the 18lj platform following notification of any revision constitutes your acknowledgment of the updated Policy.

14.1 For all privacy-related inquiries, data rights requests, questions about this Policy, or to report a suspected data breach affecting your 18lj account, please contact the 18lj Data Protection Officer using the details below:

• Role: Data Protection Officer, 18lj.cam
• Email: [email protected] — subject line: "Data Privacy Request"
• Live Chat: Available 24/7 in Tagalog and English via the 18lj.cam platform
• Response Time: Acknowledgment within 3 business days; substantive response within 15 business days for access requests, 30 business days for portability requests

14.2 If you are not satisfied with 18lj's response to your privacy inquiry, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about filing a complaint with the NPC is available on the NPC's official website.