yyjl Privacy
Policy

1. Introduction

yyjl ("yyjl", "we", "us", or "our") operates the online gaming platform accessible at yyjl.org (the "Platform"). We are committed to protecting the privacy and personal data of every Filipino player who visits, registers on, or transacts through the Platform.

This Privacy Policy ("Policy") explains: what personal data we collect, why and how we collect it, how long we retain it, who we share it with, how we keep it secure, and what rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and its Implementing Rules and Regulations ("IRR").

By creating a yyjl account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please do not register or continue using the Platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act and its IRR, the data controller responsible for your personal data is yyjl, operating the Platform at yyjl.org and headquartered in Manila, Philippines.

yyjl has appointed a Data Protection Officer (DPO) to oversee compliance with RA 10173 and this Policy. The DPO can be contacted via the yyjl customer support team at [email protected] (plain text — not a clickable link) or via live chat, referencing "Data Privacy Request" in your message.

3. Personal Data We Collect

yyjl collects only the personal data that is necessary for the specific purposes outlined in Section 5 of this Policy. The categories of personal data we collect include:

3.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (required for mandatory 21+ age verification);
• Gender (optional, collected during registration);
• Registered email address;
• Philippine mobile number;
• Residential address (province, city, barangay, postal code).

3.2 Identity Verification (KYC) Data

• Government-issued photo ID (e.g., PhilSys ID, Passport, Driver's License, UMID, SSS/GSIS ID, Voter's ID);
• Proof of address document (e.g., utility bill, bank statement, barangay clearance);
• Selfie or liveness check image where required by our KYC process;
• Proof of payment method ownership where required.

3.3 Financial Data

• GCash or PayMaya mobile wallet number (last four digits stored for verification);
• Bank account details (BDO, BPI, Metrobank) provided for withdrawal processing;
• Transaction history: deposit amounts, withdrawal amounts, wager history, bonus claims, and account balance records.

3.4 Technical & Usage Data

• IP address and approximate geographic location at login;
• Device type, operating system, and browser version;
• Session logs: login timestamps, session duration, pages visited, and features used;
• Game activity logs: games played, bet amounts, results, and responsible gaming tool usage.

3.5 Communications Data

• Records of live chat conversations with yyjl support agents;
• Email correspondence with yyjl;
• Survey or feedback responses submitted voluntarily.

4. How We Collect Your Data

yyjl collects personal data through the following channels:

• Directly from you: when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically: via cookies, session tracking, and server logs when you browse or interact with the Platform (see Section 9 for full Cookie details);
• From third-party identity verification providers: yyjl may use licensed KYC/AML service providers to verify the authenticity of identity documents you submit. These providers process data on our behalf under strict data processing agreements;
• From payment processors: when you initiate a deposit or withdrawal, our payment processing partners confirm transaction status and provide relevant transaction reference data;
• From fraud detection services: yyjl works with licensed fraud and anti-money-laundering (AML) screening services that may cross-reference provided data against watchlists required by Philippine regulations.

5. Purpose & Legal Basis for Processing

yyjl processes your personal data only where there is a lawful basis to do so under RA 10173. The table below sets out our processing purposes and the corresponding legal basis for each:

Where yyjl processes your data on the basis of consent, you have the right to withdraw that consent at any time by contacting our support team or adjusting your account communication preferences. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing & Third Parties

yyjl does not sell, rent, or trade your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and under written data processing agreements that require them to process your data only for the purposes specified:

• Payment processors: GCash, PayMaya, BDO, BPI, and Metrobank — to facilitate deposits and withdrawals;
• KYC & identity verification providers: licensed third-party services that verify government-issued IDs and perform liveness checks;
• AML & fraud screening services: to screen transactions against regulatory watchlists as required under Philippine anti-money laundering laws;
• Game software providers: where a specific game title is provided by a licensed third-party studio, relevant session data may be shared with that provider for game integrity and dispute resolution purposes;
• IT infrastructure and cloud service providers: yyjl uses secure, enterprise-grade server infrastructure; access is restricted and governed by strict confidentiality obligations;
• Regulatory and law enforcement authorities: yyjl will disclose personal data to competent Philippine government authorities (including PAGCOR, the AMLC, the NPC, or law enforcement) where required by law or a valid legal order.

7. Data Retention

yyjl retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The general retention periods we apply are as follows:

• Active account data: retained for the duration of your account registration plus 5 years following account closure, in line with Philippine AML record-keeping requirements;
• KYC documents: retained for a minimum of 5 years from the date of the last transaction, as required under RA 9160 (as amended by RA 10365);
• Transaction records: retained for 5 years in accordance with AML regulations;
• Customer support communications: retained for 3 years from the date of the last interaction;
• Marketing consent records: retained for as long as your consent remains active, plus 1 year following withdrawal;
• Technical and usage logs: retained for 12 months on a rolling basis, unless required for an active investigation or dispute.

When personal data is no longer required, yyjl will securely delete or anonymise it in accordance with our internal data destruction procedures.

8. Data Security

yyjl implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and yyjl's servers;
• Encryption at rest for all sensitive data stored in yyjl's databases, including financial records and KYC documents;
• Role-based access control (RBAC) — only authorised personnel with a legitimate need may access player personal data, and all access is logged and audited;
• Multi-factor authentication for all internal administrative access to systems containing player data;
• Regular security audits and vulnerability assessments conducted by qualified third-party security professionals;
• Intrusion detection systems and 24/7 security monitoring of yyjl's infrastructure;
• Secure data destruction procedures for physical and digital media containing personal data that is no longer required.

In the event of a personal data breach that is likely to result in serious harm to affected players, yyjl will notify the National Privacy Commission (NPC) and the affected data subjects within the timeframes prescribed under RA 10173 and its IRR.

9. Cookies & Tracking Technologies

yyjl uses cookies and similar tracking technologies to operate, secure, and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The categories of cookies we use are as follows:

yyjl does not use third-party advertising or cross-site tracking cookies. You can manage your cookie preferences at any time through your browser settings. Note that disabling functional or analytics cookies may affect certain non-essential features of the Platform.

10. Your Privacy Rights

Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal data held by yyjl:

To exercise any of the above rights, please contact yyjl's Data Protection Officer via live chat or by emailing [email protected] with the subject line "Data Privacy Request". yyjl will respond to all valid requests within 15 business days in accordance with NPC guidelines. We may need to verify your identity before processing your request.

11. Minors & Age Gating

yyjl is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the yyjl registration and KYC process.

If yyjl becomes aware that personal data has been collected from an individual under the age of 21 — whether through a parent's report, our own detection, or any other means — we will immediately suspend the relevant account, delete all associated personal data, and return any real-money balance to the originating payment source.

If you are a parent or guardian and believe that a minor may have registered on yyjl, please contact us immediately via live chat or at [email protected] so we can take swift action.

12. International Data Transfers

yyjl's primary servers and data storage facilities are located within or in jurisdictions that provide adequate data protection standards comparable to those required under RA 10173. In limited circumstances — for example, where a game software provider or KYC partner operates from outside the Philippines — your data may be transferred to and processed in another country.

Where such transfers occur, yyjl ensures that appropriate safeguards are in place, including:

• Standard contractual clauses or data processing agreements that impose obligations on the recipient equivalent to those under RA 10173;
• Transfer only to jurisdictions determined by the NPC to offer an adequate level of data protection, or where specific derogations apply under the IRR;
• Where required, notifying the NPC of cross-border data transfers in accordance with NPC Circular No. 16-01.

13. Changes to This Privacy Policy

yyjl reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or Platform features. When we make material changes, we will notify registered players via email to their registered address and/or via a prominent notice on the Platform at least 7 days before the changes take effect.

The "Effective Date" at the top of this Policy will always reflect the date of the most recent revision. Minor changes — such as formatting corrections or clarifications that do not alter the substance of the Policy — may be updated without prior notice. We encourage you to review this page regularly to stay informed about how yyjl protects your data.

14. Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or yyjl's data processing practices, please reach out to our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the yyjl Platform — reference "Data Privacy Request" in your opening message (Tagalog and English supported);
• Email: [email protected] — subject line: "Data Privacy Request" (plain text only — not a clickable link);
• Office Address: Manila, Philippines.

If you are not satisfied with yyjl's response to a privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing RA 10173. Information on how to file a complaint is available on the NPC's official website.