638jl does not sell, rent, or license your personal information to third-party advertisers, data brokers, or marketing platforms. Your data is used solely to operate your account, comply with Philippine regulatory obligations, and improve platform performance.
All data transmitted between your device and the 638jl Platform is protected by 256-bit TLS encryption. Passwords are stored using one-way salted cryptographic hashing — 638jl staff cannot read your password. Payment credentials are handled by certified payment processors and never stored on 638jl's servers.
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the right to access your data, correct inaccuracies, object to processing, and request erasure — subject to 638jl's legal retention obligations under PAGCOR and AML regulations. Requests are processed within 15 business days.
638jl only collects personal data that is necessary for a specific, legitimate purpose. This policy tells you exactly what data is collected, why it is collected, how long it is retained, and who may access it. There are no hidden data collection practices on the 638jl Platform.
In the event of a personal data breach that poses a risk to your rights and freedoms, 638jl will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required by Philippine law.
638jl has designated a Data Protection Officer (DPO) as required under RA 10173. The DPO oversees 638jl's data protection compliance program, handles privacy rights requests, and manages the relationship with the National Privacy Commission.
This Privacy Policy ("Policy") describes how 638jl ("638jl," "we," "us," "our"), operator of the online gaming platform accessible at https://638jl.vip, collects, uses, stores, discloses, and protects the personal data of individuals who access or use the 638jl Platform, including registered players, visitors, and prospective players.
This Policy is issued in compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC) of the Philippines. It should be read alongside 638jl's Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with the Platform.
By registering an account on 638jl, accessing the Platform, or providing any personal information to 638jl in any context, you acknowledge that you have read, understood, and consented to the data processing practices described in this Policy. If you do not accept this Policy, you must discontinue use of the 638jl Platform immediately.
This Policy applies to all personal data collected through the 638jl website, mobile interface, live chat support system, email correspondence, KYC submission portal, and any other point of interaction between you and 638jl.
Plain language note: This page explains what personal data 638jl collects from Filipino players, why, how it's protected, and what rights you have under Philippine law. It's a legal document — but we've written it to be as clear as possible. If anything is unclear, contact our Data Protection Officer.
For the purposes of the Philippine Data Privacy Act of 2012, the data controller in respect of personal data collected through the 638jl Platform is:
The DPO is the designated point of contact for all data privacy queries, rights requests, and complaints. All formal privacy correspondence should be directed to the DPO email address above with the subject line "Data Privacy Request — [Account Username or Email]."
638jl collects the following categories of personal data, depending on the nature of your interaction with the Platform:
| Data Category | Specific Data Points | Collection Trigger |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government ID number and type | KYC verification |
| Contact Data | Email address, mobile number, home address (for enhanced KYC) | Registration & KYC |
| Account Data | Username, password (hashed), account preferences, language settings | Registration |
| Financial Data | GCash/Maya account references (masked), transaction history, deposit and withdrawal records | Payment processing |
| Gaming Data | Game history, bet records, win/loss data, session duration, bonus usage | Platform use |
| Technical Data | IP address, device type, operating system, browser type, session tokens, login timestamps | Automatic (platform access) |
| KYC Documents | Scanned/photographed government ID, selfie with ID, proof of address, source of funds documentation | KYC verification |
| Communication Data | Live chat transcripts, email correspondence, support ticket content | Support interactions |
| Responsible Gaming Data | Self-exclusion status, deposit limits set, session limit configurations, cooling-off periods | Responsible gaming tools use |
638jl does not collect sensitive personal information (as defined under RA 10173 — including racial or ethnic origin, political opinions, religious beliefs, or health data) except where required by PAGCOR compliance obligations or responsible gaming monitoring.
638jl collects personal data through the following channels and methods:
When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or respond to a survey, you directly provide personal data to 638jl. This is the primary source of identity, contact, financial, and KYC data.
When you access the 638jl Platform, our systems automatically log technical data including your IP address, device identifiers, browser type and version, operating system, pages visited, session duration, and login events. This data is collected through server logs, session management systems, and analytics tools operated by or on behalf of 638jl.
638jl uses cookies, local storage, and similar browser-based technologies to maintain session continuity, remember your preferences, and monitor Platform performance. Refer to Section 10 of this Policy for a detailed description of cookies used by 638jl and how to manage your cookie preferences.
638jl may receive personal data from third-party sources in limited circumstances, including: identity verification agencies used for KYC processing; payment providers (e.g., GCash, Maya) for transaction confirmation data; and fraud prevention databases where 638jl has a legitimate interest in verifying the integrity of player accounts.
Under the Philippine Data Privacy Act of 2012, all processing of personal data must have a lawful basis. 638jl relies on the following lawful bases for its data processing activities:
Note on consent withdrawal: Where 638jl relies on your consent as the lawful basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal. Withdrawal of consent will not affect processing conducted under other lawful bases (e.g., legal obligation).
638jl processes your personal data for the following specific, legitimate purposes:
638jl does not sell, rent, or trade your personal data to third parties for commercial purposes. Your personal data may be shared with third parties only in the following strictly limited circumstances:
638jl engages third-party service providers who process personal data on 638jl's behalf under written data processing agreements that require compliance with RA 10173 and 638jl's data protection standards. These include: identity verification services; payment processing providers (GCash, Maya, BPI, BDO, Metrobank); game studio operators for the purpose of game dispute resolution; cloud hosting and infrastructure providers; and fraud detection service providers.
638jl is required by law to disclose certain personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission (NPC), and other Philippine government authorities upon receipt of a lawful request, court order, or as part of mandated regulatory reporting.
638jl may disclose personal data to Philippine law enforcement agencies where required by a court order, subpoena, or where 638jl has a good-faith belief that disclosure is necessary to prevent an imminent criminal act or protect the rights, property, or safety of 638jl players.
In the event of a merger, acquisition, or sale of assets affecting 638jl, personal data may be transferred to the acquiring entity — subject to that entity agreeing to honour this Privacy Policy or providing an equivalent level of protection under Philippine law.
Reminder: 638jl will never share your personal data with third-party advertisers, social media platforms, or data analytics companies for commercial profiling without your explicit, separate consent.
638jl retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Philippine law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | PAGCOR / AML legal requirement |
| KYC Documents | Duration of account + 5 years post-closure | RA 10927 (AML Act) |
| Financial Transaction Records | 5 years from transaction date | BIR / AML statutory requirement |
| Gaming History | Duration of account + 2 years post-closure | PAGCOR compliance / dispute resolution |
| Support Communications | 3 years from last interaction | Quality assurance / dispute records |
| Technical / Log Data | 12 months | Security monitoring |
| Marketing Consent Records | Duration of consent + 3 years | Accountability obligation (RA 10173) |
At the expiry of applicable retention periods, personal data will be securely deleted or anonymised in accordance with NPC-approved data disposal procedures. Where data must be retained beyond these periods due to an ongoing legal dispute or regulatory investigation, retention will be extended for the duration of that proceeding only.
638jl implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include:
Notwithstanding these measures, no data transmission over the internet or electronic storage system is completely secure. 638jl cannot guarantee absolute security and encourages players to take personal security precautions, including enabling 2FA on their account and using strong, unique passwords.
638jl uses cookies and similar browser-based technologies on the Platform. The following categories of cookies are used:
Required for the Platform to function. These include session cookies that maintain your login state, security cookies that prevent cross-site request forgery, and cookies that store your language and display preferences. These cookies cannot be disabled without breaking core Platform functionality.
Used to collect anonymised data about how players use the 638jl Platform — which pages are visited most frequently, how long sessions last, and where technical errors occur. This data helps 638jl improve Platform performance. These cookies do not identify individual players.
Store your explicit preferences, such as remembered username and selected game category filters, to improve your experience on return visits. These cookies are set only after your first login and can be cleared by logging out and clearing your browser cache.
If you have consented to marketing communications from 638jl, limited tracking cookies may be used to assess the effectiveness of promotional campaigns. These are only set with your explicit consent, which you may withdraw at any time through your account settings or by contacting the DPO.
You can manage cookie preferences through your browser settings. Disabling cookies beyond the strictly necessary category may affect your experience on the 638jl Platform but will not prevent access to core gaming functions.
638jl will only send you marketing communications — including emails and SMS messages about promotions, new games, and events — where you have provided explicit consent to receive such communications during registration or subsequently through your account settings.
You may withdraw your consent to receive marketing communications at any time by:
Withdrawal of marketing consent will not affect the delivery of transactional communications — including deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are sent regardless of marketing preferences as they relate to the performance of your account contract.
638jl does not share your contact details with third-party marketers and does not sell its player contact list to any external party for marketing purposes.
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by 638jl:
You have the right to request a copy of the personal data 638jl holds about you, along with information about how it is being processed. Access requests will be fulfilled within fifteen (15) business days of receipt of a verified request.
You have the right to request correction of inaccurate or incomplete personal data. Minor corrections (such as contact details) can be updated directly through your account settings. Corrections to KYC-verified identity data require documentation and will be processed by the 638jl compliance team.
You have the right to request deletion of your personal data. This right is subject to 638jl's legal retention obligations — data required to be retained under PAGCOR licensing conditions, AML legislation, or other Philippine laws cannot be deleted before the statutory retention period expires. Where erasure is not possible due to a legal obligation, 638jl will restrict further processing of the data to that legal obligation only.
You have the right to object to or request restriction of processing where 638jl relies on legitimate interests as its lawful basis, or where you contest the accuracy of the data. Objections to processing will be assessed case by case against 638jl's legal and regulatory obligations.
All data rights requests should be submitted to the 638jl Data Protection Officer at [email protected] (plain text — not a clickable link) with the subject line "Data Rights Request" and your account username. 638jl will acknowledge receipt within 3 business days and provide a substantive response within 15 business days. Where requests are complex, an extension of up to 30 business days may apply, with written notification of the extension.
If you are unsatisfied with 638jl's response to a data privacy rights request, you may escalate the matter to the National Privacy Commission (NPC) of the Philippines, which accepts complaints from data subjects under RA 10173.
The 638jl Platform is strictly prohibited for use by individuals under 21 years of age, in compliance with Philippine gaming regulations. 638jl does not knowingly collect personal data from individuals under 21.
If 638jl becomes aware that personal data has been collected from an individual under the age of 21, the following steps will be taken immediately:
If you believe that an individual under 21 has registered or is using a 638jl account, please contact support immediately at [email protected] (plain text — not a clickable link).
Some of 638jl's third-party service providers — including cloud infrastructure providers, game studios, and fraud prevention services — may be located outside the Republic of the Philippines. Where personal data is transferred outside the Philippines, 638jl ensures that such transfers are conducted in compliance with Section 21 of RA 10173, which requires that the recipient country provides an adequate level of protection for personal data or that appropriate contractual safeguards are in place.
638jl does not transfer personal data to jurisdictions that do not provide adequate data protection standards without first implementing contractual data protection clauses approved by the National Privacy Commission or equivalent safeguards.
638jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data processing practices, changes in Philippine privacy law, or changes required by PAGCOR. Where amendments are material — meaning they significantly affect how your data is processed or the rights available to you — 638jl will notify registered players via the email address on record and display a prominent notice on the Platform prior to the changes taking effect.
Non-material amendments, such as clarifications of existing terms or corrections of typographical errors, may be made without prior notice. The version number and effective date displayed at the top of this Policy will be updated to reflect any revision.
Continued use of the 638jl Platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not accept the revised Policy, please discontinue use of the Platform and contact 638jl to close your account.
For all data privacy-related inquiries, rights requests, complaints, or to contact the 638jl Data Protection Officer, please use the following contact details:
The DPO will acknowledge receipt of all privacy correspondence within three (3) business days and provide a substantive response within fifteen (15) business days. For complex requests, a written extension of up to thirty (30) business days may apply.
NPC Escalation: If you are not satisfied with 638jl's response to a privacy complaint, you may submit a complaint to the National Privacy Commission of the Philippines (NPC), which is the authority responsible for enforcing RA 10173. Information about the NPC complaint process is available via the NPC's official channels.
For additional information about how 638jl handles your gaming data and financial transactions, please refer to our Terms & Conditions. For responsible gaming tools and resources, visit our Responsible Gaming page.
PAGCOR-regulated, Data Privacy Act compliant, and built for Filipino players.
Register in 2 minutes, deposit from ₱100 via GCash, and play with a platform that takes your privacy seriously.
21+ only. Gambling can be addictive. Please play responsibly. PAGCOR-regulated platform.