30jill Privacy Policy – Your Data, Handled With Respect

1 About This Policy

This Privacy Policy applies to all personal data collected and processed by 30jill in connection with the operation of the platform at 30jill.com and any associated mobile interfaces or services. It applies to all registered players and visitors to the site, regardless of whether they have created an account.

30jill operates as both the data controller and data processor for most personal data described in this policy. Where third-party processors are involved — for example, payment providers or game suppliers — those relationships are governed by data processing agreements that require those third parties to handle your data in accordance with applicable Philippine law and the standards described here.

By registering a 30jill account or using the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how 30jill processes personal data, you should not use the platform. You can also request account closure at any time by contacting support, which will trigger data handling as described in the retention section below.

2 Data We Collect

30jill collects personal data through several channels: data you provide directly during registration and account use, data generated automatically by your use of the platform, and in limited cases, data received from third-party services.

2.1 Data You Provide Directly

• Registration data: full legal name, date of birth, email address, mobile number, and account username and password.
• Identity verification (KYC): copies of government-issued ID documents, selfie or liveness check images, and proof of address where required.
• Payment information: GCash or Maya mobile number, bank account details, or card information used for deposits and withdrawals. Card data is not stored directly by 30jill — it is handled by our PCI-DSS-compliant payment processor.
• Support communications: any messages, chat logs, or call records from interactions with the 30jill support team.
• Responsible gaming inputs: deposit limits, session limits, self-exclusion requests, and any associated documentation.

2.2 Data Collected Automatically

• Device and browser data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Session and usage data: pages visited, game sessions started and completed, bet history, session duration, login timestamps, and navigation paths through the platform.
• Transaction data: deposit and withdrawal records, bonus activity, wager history, and account balance history.
• Cookies and tracking technologies: as described in Section 6 below.

2.3 Data from Third Parties

In limited circumstances, 30jill may receive data from third parties, including identity verification services used to cross-check KYC documents, fraud detection services that flag accounts against known risk databases, and payment processors that confirm transaction completion. In all cases, 30jill uses this third-party data only for the specific purpose for which it was received and does not sell or share it beyond what is described in this policy.

3 How We Use Your Data

30jill processes personal data for the following purposes. Each purpose is linked to a specific legal basis, which is described in Section 4.

4 Legal Basis for Processing

30jill processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given clear, informed, and freely given consent — for example, opting in to promotional emails or SMS notifications. Consent can be withdrawn at any time without affecting your account access.
• Contract performance: Processing necessary to operate your account, process payments, and deliver the services you've signed up for.
• Legal obligation: Processing required to comply with Philippine law, including AMLA obligations, BSP financial regulations, and the Data Privacy Act itself.
• Legitimate interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and product improvement, where our legitimate operational interests do not override your rights and freedoms.

5 Data Sharing and Third Parties

30jill does not sell your personal data to third parties. Data is shared only in the circumstances described below, and only to the extent necessary for the stated purpose.

5.1 Service Providers

30jill works with third-party service providers who process personal data on our behalf, including payment processors (GCash, Maya, bank transfer services, card payment gateways), KYC and identity verification providers, fraud detection and risk assessment services, cloud hosting and infrastructure providers, and customer support platform operators. All service providers are bound by data processing agreements that require them to process your data only on 30jill's instructions and in accordance with applicable law.

5.2 Game Suppliers

Game providers whose titles are available on the 30jill platform may receive game session data necessary to operate the games. This typically includes your player ID and session token but not your full identity information. Game suppliers are required to comply with their own applicable privacy regulations and are contractually prohibited from using player data for purposes other than delivering their games.

5.3 Regulatory and Law Enforcement Authorities

30jill will disclose personal data to regulatory bodies, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or law enforcement authorities where required by law, a valid court order, or a legitimate regulatory investigation. Where permitted by law, 30jill will notify affected players of such disclosures.

6 Cookies and Tracking Technologies

30jill uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you access the site. They help us remember your session, personalise your experience, and understand how the platform is used.

6.1 Types of Cookies Used

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming configurations.
• Analytics cookies: Collect aggregate, anonymised data about how players use the platform — pages visited, features used, error rates — to help us improve the product. No personally identifiable data is included in analytics reports.
• Marketing cookies: Used only with your consent to deliver promotions relevant to your gaming activity. These are not activated by default and require opt-in.

You can manage cookie preferences through your browser settings. Disabling all cookies will not prevent you from using 30jill but may affect certain features such as session persistence and personalised promotions.

7 Data Retention

30jill retains personal data only for as long as necessary to fulfil the purpose for which it was collected, subject to any longer retention requirements imposed by law. The following general retention periods apply:

• Account data: Retained for the duration of the account and for five years after account closure, in line with Philippine AMLA record-keeping requirements.
• Transaction and KYC data: Retained for a minimum of five years from the date of the transaction or the date of account closure, whichever is later, as required by the Anti-Money Laundering Act.
• Support communications: Retained for two years from the date of the interaction unless the communication relates to an ongoing dispute.
• Marketing preferences: Retained until you withdraw consent or close your account.
• Cookie and analytics data: Typically retained for up to 13 months from the date of collection, after which it is aggregated or deleted.

When retention periods expire, data is securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

8 Data Security

30jill implements technical and organisational security measures appropriate to the sensitivity of the data processed and the risks involved in online gaming and financial transactions. These include:

• SSL/TLS encryption for all data transmitted between your device and the 30jill platform.
• Encryption at rest for sensitive data fields including payment information and identity documents.
• PCI-DSS-compliant payment processing — card data is tokenised and never stored in plain text on 30jill systems.
• Multi-factor authentication options for player accounts and mandatory internal MFA for all 30jill staff with access to personal data.
• Role-based access controls that limit employee access to personal data to only what is necessary for their job function.
• Regular security testing, vulnerability assessments, and penetration testing by qualified third parties.
• A documented data breach response procedure aligned with NPC notification requirements under the Data Privacy Act.

9 Children's Privacy

30jill is strictly an 18+ platform. We do not knowingly collect or process personal data from individuals under the age of 18. If a player is found to be under 18, their account will be suspended immediately, any balance will be held pending investigation, and their personal data will be handled in accordance with applicable law regarding data collected from minors.

If you believe a minor has created a 30jill account, please contact support immediately at support@30jill.com so the account can be reviewed and closed promptly.

10 Marketing Communications

30jill sends promotional communications — including bonus offers, new game announcements, VIP event invitations, and seasonal promotions — by email and SMS. These communications are sent only to players who have opted in during registration or at a later point through their account settings.

You can opt out of marketing communications at any time by: clicking the unsubscribe link in any promotional email, updating your preferences in the account settings page, or contacting support to request removal from all marketing lists. Opting out of marketing does not affect your ability to receive transactional communications such as deposit confirmations, withdrawal notifications, and security alerts — these are sent as part of operating your account and cannot be disabled.

30jill does not use personal data to send marketing for third-party products or services. All promotional communications from 30jill relate exclusively to 30jill's own games, features, and offers.

11 Exercising Your Rights

To exercise any of your rights under the Data Privacy Act of 2012 — including access, rectification, erasure, objection, or data portability — submit a request to the 30jill Data Protection Officer using the contact details in Section 14. Include your registered email address and a clear description of the right you wish to exercise.

30jill will respond to verified requests within 30 days. For complex requests, we may extend this by an additional 30 days with prior notification. Identity verification will be required before any data access or deletion request is processed to protect against unauthorised requests.

There is no charge for making a rights request. If a request is manifestly unfounded or excessive, 30jill may decline to action it or charge a reasonable administrative fee, with written explanation provided to you.

12 International Data Transfers

Some of 30jill's service providers and game suppliers operate infrastructure located outside the Philippines. Where personal data is transferred outside the country, 30jill ensures appropriate safeguards are in place, including contractual clauses that require the recipient to protect your data to the same standard required by Philippine law. Data is never transferred to countries without adequate data protection frameworks without appropriate safeguards in place.

Transfers for payment processing via GCash and Maya remain within the Philippine financial system and are subject to BSP oversight. International card payments are processed through a PCI-DSS-certified gateway operating under its own applicable data protection obligations.

13 Changes to This Privacy Policy

30jill may update this Privacy Policy from time to time to reflect changes in the platform, legal requirements, or our data processing practices. When material changes are made, the updated policy will be published on this page with a revised "last updated" date, and registered players will be notified by email or in-platform notification before the changes take effect.

Continuing to use the 30jill platform after a Privacy Policy update is published constitutes acknowledgement of the revised policy. If you do not agree with any material change, you may request account closure before the effective date of the change, and your data will be handled as described in the retention section.

14 Contact Us and Data Protection Officer

30jill has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. You can contact the 30jill DPO for any privacy-related query, rights request, or concern:

• Email: support@30jill.com (subject line: Privacy / DPO)
• Response time: Within 5 business days for initial acknowledgement; full response within 30 days for substantive requests.

If you are not satisfied with 30jill's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC accepts complaints through its official website and accepts written submissions through its regional offices.

For general account queries unrelated to privacy, please use the standard support channel accessible from your 30jill account dashboard. The support team is available 24/7 and can direct you to the DPO if your query has a data protection component.