Privacy Policy

1. Who We Are

This Privacy Policy is issued by ttjj Casino ("ttjj," "we," "us," or "our"), a PAGCOR-licensed online gaming and sports betting platform operating at ttjj.one and serving players across the Philippines. ttjj acts as the Data Controller for the personal information collected and processed through this platform, as defined under Republic Act No. 10173 (the "Data Privacy Act" or "DPA") and its Implementing Rules and Regulations.

Our designated Data Protection Officer (DPO) is responsible for overseeing ttjj's compliance with the DPA and may be contacted using the details in Section 12 of this Policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a ttjj account, we collect the following information:

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify minimum age of 21 years per PAGCOR requirements)
• Philippine mobile number (used as primary account identifier and OTP channel)
• Email address (optional but recommended for account recovery)
• Chosen username and encrypted password hash

2.2 Identity Verification (KYC) Data

To comply with PAGCOR licensing requirements and the Anti-Money Laundering Act (Republic Act No. 9160 as amended), ttjj performs Know Your Customer (KYC) verification. This requires you to submit:

• A copy of a valid Philippine government-issued identification document (PhilSys ID, driver's license, passport, UMID, SSS ID, or GSIS eCard)
• A recent selfie photograph for facial matching verification
• Proof of address (utility bill, bank statement, or similar document issued within the past 90 days) for enhanced verification tiers

2.3 Financial Transaction Data

ttjj records all financial transactions associated with your account, including deposit amounts and timestamps, payment method identifiers (e.g., GCash or PayMaya reference numbers, masked bank account details), withdrawal requests and processing history, and bonus credit and wagering activity.

2.4 Gaming Activity Data

We maintain records of all gameplay activity on the ttjj platform, including games played, bet amounts, game outcomes, session durations, and responsible gaming tool settings. This data is required by PAGCOR for audit purposes and is used by ttjj to detect problem gambling patterns.

2.5 Technical and Device Data

When you access the ttjj platform, we automatically collect certain technical data, including your IP address and approximate geographic location, device type, operating system, and browser version, session timestamps and login history, and referral URL (if applicable).

2.6 Communications Data

We retain records of communications between you and ttjj support, including live chat transcripts, support ticket content, and any written correspondence submitted through the platform.

3. How We Use Your Personal Data

Purpose	Data Used
Account creation and authentication	Mobile number, password hash, device data
Age verification and KYC compliance	Date of birth, government ID, selfie photo
Processing deposits and withdrawals	Payment method data, financial transaction records
PAGCOR regulatory reporting	Identity data, transaction history, gaming activity
Anti-money laundering monitoring	Transaction data, identity data, account behavior
Responsible gaming management	Gaming activity data, limit settings, session data
Fraud prevention and security	IP address, device data, login history, transaction data
Customer support delivery	Account data, communications data
Platform improvement and analytics	Aggregated, anonymized gaming and technical data
Promotional communications (with consent)	Mobile number, email address, gaming preferences

4. Legal Basis for Processing

ttjj processes your personal data on the following legal bases as provided under the Data Privacy Act of the Philippines:

• Contractual necessity: Processing required to perform the services described in the ttjj Terms and Conditions to which you are a party — including account management, payment processing, and gameplay delivery.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws and regulations.
• Legitimate interest: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, personalized promotions, and non-essential analytics — conducted only where you have provided explicit, informed, and freely given consent, which you may withdraw at any time.

5. Data Sharing & Third-Party Disclosure

5.1 Regulatory Authorities

ttjj is legally obligated to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities upon lawful request or as required by our operating license.

5.2 Service Providers

ttjj engages carefully vetted third-party service providers to support platform operations, including payment processors (GCash/Maya Bank, BPI, BDO, Metrobank), KYC and identity verification technology providers, cloud infrastructure and hosting services, and fraud detection and cybersecurity services. All service providers are bound by contractual data processing agreements consistent with the Data Privacy Act and are prohibited from using your data for any purpose other than providing services to ttjj.

5.3 No Data Sale

ttjj does not sell, rent, trade, or otherwise transfer your personal data to any third party for their own marketing or commercial purposes. Full stop.

5.4 Business Transfers

In the event of a merger, acquisition, or transfer of ttjj's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in accordance with the Data Privacy Act.

6. Cookies & Tracking Technologies

The ttjj platform uses cookies and similar tracking technologies to maintain your login session and authentication state, remember your language and display preferences, detect and prevent fraudulent activity, and analyze platform performance through aggregated, anonymized analytics.

ttjj does not use third-party advertising cookies or behavioral tracking technologies for cross-site advertising purposes. Session cookies are automatically deleted when you close your browser. Persistent cookies used for preference storage have a maximum lifetime of 12 months.

You may control cookie behavior through your browser settings. Disabling cookies may impair certain platform functions, including automatic login and session persistence.

7. Data Retention

ttjj retains your personal data for the period necessary to fulfill the purposes described in this Policy and to comply with applicable legal obligations:

• Active account data: Retained for the lifetime of your account plus five (5) years following closure, as required by PAGCOR and AMLC record-keeping obligations.
• Financial transaction records: Retained for ten (10) years from the date of the transaction in compliance with the Anti-Money Laundering Act.
• KYC documents: Retained for five (5) years following account closure or the end of the business relationship.
• Support communications: Retained for three (3) years following resolution of the relevant support interaction.
• Technical and device logs: Retained for ninety (90) days for security and fraud detection purposes.

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized using industry-standard methods.

8. Data Security

ttjj implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure:

• All data in transit is protected by TLS 1.3 encryption.
• All personal data at rest is encrypted using AES-256 encryption.
• Access to production systems containing personal data is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Regular penetration testing and security audits are conducted by independent third parties.
• Employee data handling training is mandatory for all ttjj staff with access to personal data.
• A documented incident response plan is in place for handling personal data breaches, including mandatory NPC notification within 72 hours for breaches likely to result in risk to individual rights and freedoms.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by ttjj:

• Right to be Informed: You have the right to know that your data is being collected and how it is being used, which this Policy fulfills.
• Right of Access: You may request a copy of the personal data ttjj holds about you, including the categories of data, the purposes for which it is processed, and any third parties with whom it has been shared.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data in your ttjj account.
• Right to Erasure: You may request deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, subject to ttjj's legal retention obligations.
• Right to Data Portability: You may request a copy of personal data you have provided to ttjj in a structured, commonly used, machine-readable format.
• Right to Object: You may object to processing of your personal data for direct marketing purposes at any time. Objection to processing on legitimate interest grounds is also available subject to assessment.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ttjj has processed your personal data in a manner inconsistent with the Data Privacy Act.

To exercise any of these rights, submit a written request to ttjj's Data Protection Officer using the contact information in Section 12. Requests will be processed within fifteen (15) business days in accordance with NPC guidelines.

10. Children & Minors

The ttjj platform is strictly intended for individuals who are at least 21 years of age — the minimum age prescribed by PAGCOR for participation in online casino gaming in the Philippines. ttjj does not knowingly collect personal data from persons under 21 years of age.

If ttjj becomes aware that a person under 21 has registered an account or provided personal data, that account will be immediately suspended, all associated balances will be held pending investigation, and the personal data will be deleted in accordance with applicable law. Parents or guardians who believe their child has registered a ttjj account should contact us immediately at the details provided in Section 12.

11. Changes to This Privacy Policy

ttjj may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Where changes are material, ttjj will notify you via SMS to your registered Philippine mobile number or through a prominent notice on the platform at least seven (7) days before the changes take effect.

The effective date at the top of this Policy indicates when the current version was last updated. Your continued use of the ttjj platform following the effective date of any revision constitutes your acknowledgment of the updated Policy. If you do not agree to any revision, you should close your account and cease using the platform before the revision takes effect.

12. Contact & Data Protection Officer

For questions about this Privacy Policy, to exercise your data subject rights, or to report a data security concern, please contact ttjj's Data Protection Officer:

• Email (plain text — not a link): [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 through the ttjj platform — select "Privacy / Data Request" from the support topic menu
• Registered Office: Philippines (full registered address available on PAGCOR public registry and upon written request)

For concerns about ttjj's compliance with the Data Privacy Act that cannot be resolved through our internal channels, you may file a complaint directly with the National Privacy Commission of the Philippines.

For responsible gaming concerns, please visit our Responsible Gaming page.