vjll Privacy Policy – How We Handle Your Personal Data

vjll operates as the Data Controller for personal information collected through the vjll platform at vjll.asia. As Data Controller, vjll determines the purposes and means of processing personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

vjll is a PAGCOR-licensed online gaming operator serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and surrounding regions. This Privacy Policy applies to all personal data collected from registered vjll players and platform visitors.

By creating a vjll account or accessing the vjll platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

vjll collects personal data from multiple sources in the course of providing its services. The categories of personal data we collect include, but are not limited to, the following:

2.1 Registration Data. When you create a vjll account, we collect: your full legal name; date of birth (to verify the 21-year age requirement); email address; registered Philippine mobile number; chosen username; and country of residence.

2.2 Identity Verification (KYC) Data. To comply with PAGCOR licensing requirements and Philippine anti-money laundering regulations, vjll collects copies of government-issued Philippine identification documents, which may include: Philippine passport; PhilSys National ID; driver's license; UMID; SSS ID; or PRC ID. Where required by law, we may also collect proof of address documentation.

2.3 Financial Data. vjll collects data necessary to process deposits and withdrawals, including: GCash account reference numbers; PayMaya account details; bank account information (BPI, BDO, Metrobank, or other linked banks); transaction history; deposit and withdrawal amounts; and payment method identifiers. Full payment card numbers are not stored by vjll — card payment processing is handled by PCI-DSS compliant payment processors.

2.4 Gaming Activity Data. We collect records of all games played on the vjll platform, including: games accessed; wagers placed; outcomes; session durations; bonus usage; and account balance history. This data is maintained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.

2.5 Technical and Device Data. vjll automatically collects certain technical data when you access the platform, including: IP address; device type and operating system; browser type and version; approximate geolocation data derived from IP; session timestamps; and referral URL data.

2.6 Communications Data. We retain records of communications between you and vjll customer support, including live chat transcripts, email correspondence, and any account-related notifications sent to your registered contact details.

vjll uses the personal data it collects for the following specific purposes:

• Account creation and management: To register, maintain, and manage your vjll player account, including account authentication and password recovery.
• Age and identity verification: To verify that you meet the minimum age requirement of 21 years as mandated by PAGCOR regulations and Philippine law, and to comply with KYC obligations.
• Payment processing: To process deposits, withdrawals, and refunds via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard.
• Regulatory compliance: To fulfill obligations under PAGCOR licensing, the Anti-Money Laundering Act (Republic Act No. 9160 as amended), and the Data Privacy Act of 2012.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, account compromise, multiple account creation, and other forms of platform abuse.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling, enforce deposit limits and self-exclusion requests, and comply with PAGCOR responsible gaming requirements.
• Customer support: To respond to your inquiries, resolve disputes, and provide account assistance via live chat and email.
• Platform improvement: To analyze aggregated, anonymized usage data for the purpose of improving the vjll platform, game selection, and user experience.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to your registered contact details, subject to your marketing preferences. You may opt out at any time.

vjll processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given explicit consent to the processing of your personal data for specific purposes, such as marketing communications.
• Contractual necessity: Processing that is necessary to perform the contract between you and vjll — specifically, the account registration agreement and the Terms & Conditions governing your use of the platform.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such processing does not override your fundamental rights and interests.

vjll does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. vjll may share your personal data in the following limited circumstances:

5.1 Licensed Game Providers. To the extent necessary to deliver game services, vjll shares relevant session and account data with licensed game providers including Evolution Gaming, Pragmatic Play, PG Soft, JILI, and other platform partners. These providers are bound by contractual data protection obligations.

5.2 Payment Processors. Financial transaction data is shared with payment service providers (GCash, PayMaya, BPI, BDO, Metrobank, and card networks) solely for the purpose of processing your transactions. These entities are independently regulated and maintain their own applicable data protection standards.

5.3 Regulatory Authorities. vjll is required by PAGCOR licensing and Philippine law to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement authorities upon lawful request or as required to fulfill compliance obligations.

5.4 Service Providers. vjll engages third-party service providers for platform hosting, fraud detection, KYC verification processing, and customer support infrastructure. These providers act as Data Processors and are contractually obligated to process personal data only on vjll's documented instructions and in compliance with applicable data protection law.

5.5 Business Transfers. In the event of a merger, acquisition, or transfer of the vjll business, personal data held by vjll may be transferred to the acquiring entity, subject to equivalent data protection obligations and advance notification to affected players.

vjll retains personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, and in compliance with applicable legal retention requirements:

• Active accounts: Personal data is retained for the duration of your active vjll account relationship.
• Closed accounts: Following account closure, vjll retains KYC documentation, transaction records, and gaming history for a minimum period of five (5) years in accordance with Anti-Money Laundering Act requirements and PAGCOR licensing conditions.
• Legal proceedings: Where personal data is relevant to an ongoing investigation, regulatory proceeding, or litigation, retention may be extended until the conclusion of such proceedings.
• Marketing data: Marketing preferences and associated contact data are retained until you withdraw consent or request deletion, whichever is earlier.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized.

The vjll platform uses cookies and similar tracking technologies to support platform functionality, user authentication, and analytical purposes. The categories of cookies used include:

• Strictly necessary cookies: Required for platform operation, including session management, login state maintenance, and security functions. These cannot be disabled without impairing core platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and previously visited game sections to improve your experience on subsequent visits.
• Analytical cookies: Collect aggregated, anonymized data on platform usage patterns — pages visited, game sections accessed, session duration — used to improve platform design and performance. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect suspicious login behavior and protect your vjll account from unauthorized access attempts.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to log in and use the vjll platform.

vjll implements technical and organizational security measures proportionate to the sensitivity of the personal data processed. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and vjll servers;
• Encryption of sensitive data fields at rest within vjll databases;
• Access controls limiting internal access to personal data on a strict need-to-know basis;
• Two-factor authentication availability for all player accounts;
• Automated monitoring for unusual access patterns and potential security incidents;
• Regular security assessments of platform infrastructure;
• PCI-DSS compliant payment processing — full card numbers are never stored on vjll systems.

Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. vjll cannot guarantee absolute security and encourages players to use strong, unique passwords and to enable two-factor authentication on their vjll accounts.

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, vjll will notify you and the National Privacy Commission in accordance with NPC Circular No. 16-03 and applicable breach notification requirements.

Under the Data Privacy Act of 2012, registered vjll players who are Philippine residents hold the following rights with respect to their personal data:

• Right to be informed: The right to know whether vjll holds personal data relating to you and how it is being processed — fulfilled by this Privacy Policy.
• Right of access: The right to request a copy of the personal data vjll holds about you.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to erasure: The right to request deletion of your personal data, subject to applicable legal retention requirements — particularly the mandatory 5-year retention period for AML compliance records.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. Marketing opt-outs take effect within 5 business days of receipt.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe vjll has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, contact vjll's Data Protection Officer via the support channels described in Section 14. vjll will respond to verifiable data subject requests within thirty (30) days in accordance with NPC guidelines.

21+The vjll platform is strictly for adults aged 21 years and older. vjll does not knowingly collect, process, or retain personal data from individuals under the age of 21. If vjll becomes aware that personal data has been collected from a minor, the associated account will be suspended immediately and all personal data collected from that individual will be securely deleted, subject to any mandatory legal retention obligations.

If you believe a minor may have registered or accessed the vjll platform, please notify vjll support immediately via live chat so the account can be investigated and appropriately actioned.

The vjll platform integrates with licensed third-party game providers and payment processors as described in Section 5. These third parties operate their own independent services and privacy practices. vjll is not responsible for the data practices of third-party game studios accessed through the vjll platform, or for the privacy practices of payment providers such as GCash or PayMaya. Players are encouraged to review the relevant third-party privacy policies applicable to services they use in connection with their vjll account.

Some of vjll's service providers and licensed game providers operate infrastructure located outside the Philippines. Where personal data is transferred to a country that the NPC has not determined provides an adequate level of data protection, vjll implements appropriate safeguards, including contractual data protection clauses that impose obligations on the recipient equivalent to those applicable under the Data Privacy Act of 2012. vjll will not transfer personal data to a jurisdiction that lacks appropriate safeguards without your prior consent, except where required by applicable law.

vjll may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR licensing requirements. Material changes will be communicated to registered players via their registered email address at least seven (7) days before the revised policy takes effect. The current version of this Privacy Policy is always available on this page and carries the effective date at the top of the document.

Continued use of the vjll platform following the effective date of any material amendment constitutes your acceptance of the updated Privacy Policy. If you do not accept a material amendment, you may close your account and request deletion of your personal data (subject to mandatory legal retention requirements) before the effective date.

This Privacy Policy was last updated and is effective as of 1 January 2026.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact vjll through the following channels:

• Live Chat: Available 24/7 via the in-platform live chat widget on the vjll platform — the fastest channel for most inquiries.
• Email: [email protected]

Data subject rights requests and privacy-specific inquiries are handled by vjll's designated Data Protection Officer (DPO). Please mark your email subject line with "Privacy Request – [your registered email]" to ensure prompt routing to the DPO team. vjll will acknowledge receipt of privacy requests within 72 hours and provide a substantive response within 30 days.

Complaints regarding vjll's data handling practices that cannot be resolved internally may be lodged with the National Privacy Commission of the Philippines at privacy.gov.ph.