Privacy Policy

1.Overview

This Privacy Policy ("Policy") is issued by 18ji ("we", "us", "our") and applies to all personal data collected through the 18ji website at https://18ji.org (the "Platform") and any related services, communications, or interactions you have with us.

We are committed to protecting the privacy and security of your personal information. This Policy is designed to be transparent about our data practices so that you can make informed decisions about sharing your information with 18ji.

By registering an account or using the 18ji Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

2.Data We Collect

18ji collects the following categories of personal data from players and visitors:

2.1 Identity & Contact Data

• Full legal name, date of birth, and gender.
• Email address, mobile number, and residential address.
• Government-issued ID details (ID type, ID number, expiry date) submitted during KYC verification.
• Selfie photographs submitted for identity verification purposes.

2.2 Financial Data

• Payment method details (e.g., GCash account name and number, Maya account details, bank account name and number).
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment references.
• Account balance information.

2.3 Gaming & Behavioural Data

• Game history, including games played, wager amounts, win/loss records, and session durations.
• Bonus and promotion usage history.
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

2.4 Technical & Usage Data

• IP address, device type, operating system, and browser type.
• Login timestamps, session duration, and pages visited on the Platform.
• Geolocation data (country/region level) derived from your IP address.
• Cookie identifiers and similar tracking technologies (see Section 9).

2.5 Communications Data

• Records of your communications with 18ji support, including live chat transcripts and email correspondence.
• Survey responses and feedback submitted voluntarily.

3.How We Collect Data

18ji collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, through cookies, web beacons, server logs, and similar technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk signals from payment processors; geolocation data from IP intelligence services. All third-party data processors engaged by 18ji are contractually bound to handle your data in accordance with applicable privacy laws.

4.Purpose of Processing

18ji processes your personal data for the following purposes:

5.Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), 18ji processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (i.e., to provide the gaming services you have registered for), including account management, payment processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6.Sharing Your Data

18ji does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash, Maya, and Philippine banking partners, to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist in verifying your identity and age in compliance with PAGCOR requirements.
• Game software providers: Third-party game developers whose games are hosted on the 18ji Platform may receive limited gameplay data necessary to operate their games.
• Fraud prevention and security services: Providers that help us detect and prevent fraudulent activity, money laundering, and unauthorized access.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal compliance or dispute resolution, subject to professional confidentiality obligations.

7.Data Retention

18ji retains your personal data for as long as necessary to fulfil the purposes set out in this Policy, subject to the following minimum retention periods required by Philippine law:

• Account and KYC records: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session.
• Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures.

8.Data Security

18ji implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS encryption: All data transmitted between your browser and the 18ji Platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
• AES-256 encryption: Sensitive personal data stored in our databases is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized 18ji personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication.
• Regular security assessments: 18ji conducts periodic vulnerability assessments and penetration testing to identify and remediate security risks.
• Staff training: All 18ji personnel who handle personal data receive regular data privacy and security training.
• Incident response: We maintain a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission (NPC) within the timeframes prescribed by RA 10173.

While 18ji takes all reasonable steps to protect your data, no system is completely immune to security risks. You are also responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

9.Cookies & Tracking Technologies

18ji uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The following types of cookies may be placed on your device:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players use the Platform — which pages are visited most, where players encounter errors, and how navigation flows are used. This data is aggregated and anonymized.
• Performance cookies: Monitor Platform performance and load times to help us identify and resolve technical issues.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 18ji Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.

18ji does not use cookies to serve third-party advertising or to track your activity across other websites.

10.Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 18ji:

• Right to be informed: You have the right to know what personal data 18ji collects about you, how it is used, and with whom it is shared. This Policy fulfils that obligation.
• Right of access: You may request a copy of the personal data 18ji holds about you, along with information about how it is processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You may update basic account information directly from your account dashboard.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR regulations and the AMLA.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our overriding legal obligations.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within fifteen (15) business days, as required by the Data Privacy Act.

11.Minors

The 18ji Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step in the 18ji registration and KYC process. Any account found to belong to a person under 21 years of age will be immediately suspended, all funds will be frozen pending investigation, and the matter may be referred to the relevant authorities.

If you are a parent or guardian and believe that a minor has registered on the 18ji Platform or provided us with personal data, please contact us immediately at the details provided in Section 14 so that we can take appropriate action.

12.Cross-Border Data Transfers

Some of the third-party service providers engaged by 18ji — including game software providers and certain technical infrastructure providers — may be located outside the Philippines. Where personal data is transferred to recipients in other countries, 18ji ensures that appropriate safeguards are in place, including:

• Contractual data processing agreements that impose data protection obligations equivalent to those required under Philippine law.
• Transfer only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission.
• Implementation of additional technical and organizational safeguards where required by the nature of the data being transferred.

By using the 18ji Platform, you acknowledge and consent to the transfer of your personal data to third-party service providers outside the Philippines, subject to the safeguards described above.

13.Changes to This Policy

18ji reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered players via email or an in-platform notification where the changes are significant.
• Where required by law, seek fresh consent from affected data subjects before implementing the changes.

We encourage you to review this Policy periodically to stay informed about how 18ji protects your personal data. Your continued use of the Platform following the posting of any revised Policy constitutes your acceptance of the updated terms.

14.Contact & Data Protection Officer

18ji has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels:

We aim to respond to all data privacy requests within fifteen (15) business days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.