Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how no4jl Casino ("we," "our," or "the Company") collects, uses, stores, shares, and protects personal data relating to visitors and registered players of the no4jl Casino platform at https://no4jl.app ("Platform"). This Policy applies to all personal data processing activities carried out by no4jl Casino in connection with the Platform, regardless of the device or channel through which you access it.

This Policy is issued in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission of the Philippines ("NPC"). It should be read alongside our Terms and Conditions, which are available at no4jl.app/terms-conditions.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, no4jl Casino acts as the personal information controller ("PIC") with respect to personal data collected through the Platform. The Company is registered with the National Privacy Commission and has appointed a Data Protection Officer as required by law.

The Company operates the no4jl Casino Platform under a licence issued by the Philippine Amusement and Gaming Corporation ("PAGCOR"). All data processing activities are conducted in accordance with PAGCOR's licensing requirements and applicable Philippine data protection law.

Contact details for the no4jl Casino Data Protection Officer are provided in Section 16 of this Policy.

3 Personal Data We Collect

no4jl Casino collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Information

• Full legal name as it appears on your government-issued identification document
• Date of birth (used for age verification — players must be 21 years of age or older)
• Philippine residential address
• Email address
• Philippine mobile number
• Government-issued ID type and ID number (for KYC verification)
• Selfie and/or ID photograph submitted during identity verification

3.2 Financial & Payment Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details (BPI, BDO, Metrobank, or other supported banks)
• Deposit and withdrawal transaction records
• Wallet balance history and transaction logs

3.3 Gaming Activity Data

• Game session records, bet history, and win/loss data
• Bonus claim and wagering history
• Responsible gaming settings and limit configurations
• Self-exclusion requests and cooling-off period records

3.4 Technical & Usage Data

• IP address and approximate geographic location at the time of login
• Device type, operating system, and browser version
• Pages visited, features accessed, and session duration
• Cookies and similar tracking technologies (see Section 11)

3.5 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback, complaints, and dispute records
• Marketing preference settings and communication opt-in status

4 How We Collect Your Data

no4jl Casino collects personal data through the following means:

• Directly from you: when you register an account, complete identity verification, make deposits or withdrawals, participate in promotions, or contact customer support.
• Automatically through the Platform: via cookies, session tracking, and server logs that record technical information about how you interact with the Platform (see Section 11).
• From third-party verification providers: the Company may engage accredited KYC and identity verification service providers who process submitted identity documents on the Company's behalf.
• From payment processors: transaction confirmation data is received from GCash, PayMaya, and banking partners to verify and reconcile deposits and withdrawals.
• From PAGCOR and law enforcement: the Company may receive information from regulatory or law enforcement authorities in connection with its compliance obligations.

5 How We Use Your Personal Data

no4jl Casino processes your personal data for the following purposes:

6 Legal Basis for Processing

The Company processes personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Performance of a contract: Processing necessary to operate your no4jl Casino account, provide gaming services, and process financial transactions.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing for platform security, fraud prevention, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications, non-essential cookies, and any processing activities beyond the above bases — all of which require your prior, freely given, and informed consent, which you may withdraw at any time.

7 Data Sharing & Third Parties

no4jl Casino does not sell your personal data. We share personal data only in the following circumstances:

7.1 Regulatory and Legal Sharing

The Company is legally required to share certain personal and transactional data with PAGCOR as part of its licensing obligations and with the Anti-Money Laundering Council (AMLC) where transactions meet statutory reporting thresholds. These disclosures are mandatory and cannot be withheld by the player.

7.2 Service Providers (Personal Information Processors)

The Company engages trusted third-party service providers — personal information processors under the DPA — to support Platform operations. These include identity verification providers, payment processors, cloud infrastructure providers, and customer support platforms. All processors are bound by data processing agreements that require them to handle your data only on the Company's instructions, with appropriate security measures in place.

7.3 Law Enforcement

no4jl Casino may disclose personal data to Philippine law enforcement authorities, courts, or other government bodies where required to do so by law, court order, or lawful government direction.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of business assets, personal data may be transferred to the acquiring entity, subject to that entity assuming equivalent data protection obligations. You will be notified of any such transfer and of any changes to this Policy that result from it.

8 Cross-Border Data Transfers

Where personal data is transferred to service providers or infrastructure located outside the Republic of the Philippines, the Company ensures that such transfers comply with Section 21 of the Data Privacy Act and NPC implementing rules. This includes ensuring that the receiving country provides an adequate level of data protection, or that appropriate contractual safeguards are in place.

Players will be informed of any cross-border transfer of their sensitive personal information and may withdraw consent for such transfers where consent is the applicable legal basis, subject to the understanding that withdrawal may affect the Company's ability to provide certain services.

9 Data Retention

no4jl Casino retains personal data for the periods set out below, after which data is securely deleted or anonymised:

• Account and identity data: For the duration of the account relationship and for a period of five (5) years following account closure, as required by the Anti-Money Laundering Act.
• Transaction records: Minimum of five (5) years from the date of the transaction, per AMLA requirements.
• Gaming activity logs: Three (3) years from the date of each session, unless required longer for regulatory or legal purposes.
• Customer support communications: Three (3) years from the date of the last communication, for dispute resolution purposes.
• Marketing data: Until you withdraw consent or request deletion, whichever occurs first.
• Technical logs: Twelve (12) months from collection, unless extended for active fraud or security investigations.

Following the expiry of the applicable retention period, personal data is permanently and securely deleted from all no4jl Casino systems unless a legal obligation requires further retention.

10 Security Measures

no4jl Casino implements a comprehensive set of technical, organisational, and administrative security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and Platform servers
• AES-256 encryption for sensitive data stored in database systems
• Multi-factor authentication options for account access
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by accredited third-party security firms
• Intrusion detection and prevention systems monitoring Platform infrastructure 24/7
• Data backup and disaster recovery procedures ensuring business continuity and data integrity
• Staff training on data protection obligations and security practices

While the Company employs industry-standard security measures, no method of electronic transmission or storage is one hundred percent secure. Players are responsible for maintaining the security of their own account credentials and should report any suspected unauthorised access to our support team immediately.

11 Cookies & Tracking Technologies

no4jl Casino uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help the Platform function correctly and improve your experience.

11.1 Essential Cookies

These cookies are strictly necessary for the Platform to operate. They manage your login session, maintain your account security, and enable core functionality. Essential cookies cannot be disabled without significantly impairing your ability to use the Platform.

11.2 Analytics Cookies

With your consent, the Company uses analytics cookies to understand how players interact with the Platform — which pages are visited most, where players encounter difficulties, and how the overall user experience can be improved. Analytics data is aggregated and anonymised before analysis.

11.3 Marketing and Preference Cookies

With your consent, preference cookies remember your settings (such as language and display preferences) and marketing cookies allow the Company to deliver relevant promotional communications. You may withdraw consent for non-essential cookies at any time through your browser settings or Platform cookie preferences.

12 Minors and Age Verification

no4jl Casino is strictly prohibited from providing services to persons under 21 years of age, as required by PAGCOR regulations. The Company does not knowingly collect personal data from individuals under 21. Age verification is conducted as part of the KYC process for all registered accounts.

If the Company discovers that it has inadvertently collected personal data from a person under 21 years of age, that data will be deleted immediately and the account permanently closed. If you believe that a minor has registered on the Platform, please notify our Data Protection Officer immediately at the contact details provided in Section 16.

13 Exercising Your Data Subject Rights

To exercise any of the data subject rights described in the "Your Data Subject Rights" section above, you may submit a formal request to no4jl Casino's Data Protection Officer. All requests must be submitted in writing (email is acceptable) and must include sufficient information to verify your identity before the request can be actioned.

The Company will acknowledge receipt of your request within seventy-two (72) hours and will respond substantively within fifteen (15) business days. Complex requests may require an extension of up to thirty (30) business days; you will be informed of any extension and the reason for it.

There is no fee for submitting a data subject rights request. However, the Company reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded, excessive, or repetitive.

If you are dissatisfied with the Company's response to your request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

14 Personal Data Breach Procedures

In the event of a personal data breach that is likely to result in harm to affected data subjects, no4jl Casino will comply with the mandatory breach notification requirements under the Data Privacy Act and NPC Circular No. 16-03:

• The Company will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of a qualifying breach.
• Affected data subjects will be notified without undue delay where the breach is likely to result in a real risk of serious harm, using the most effective means of communication available.
• Breach notifications to data subjects will include: a description of the nature of the breach, the personal data involved, the likely consequences, the measures taken or proposed to address the breach, and contact details for further information.

The Company maintains an internal breach response plan and conducts regular drills to ensure readiness. All suspected breaches are reported immediately to the Data Protection Officer for investigation and assessment.

15 Changes to This Privacy Policy

no4jl Casino reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players by email notification and/or a prominent notice on the Platform at least seven (7) days before the changes take effect.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy. The "Last updated" date at the top of this document reflects the most recent revision. We encourage you to review this Policy periodically.

Where a change requires your consent as a legal basis for new processing activities, the Company will seek that consent separately before commencing the new processing.

16 Contact the Data Protection Officer

For any questions, concerns, or formal requests relating to this Privacy Policy or the processing of your personal data by no4jl Casino, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (mark the subject line: "Data Privacy Request — [Your Full Name]")
• Live Chat: Available 24 hours a day, 7 days a week via the Platform website — request to speak with the Data Protection Officer team.
• Operating Hours: The DPO team reviews formal written requests during Philippine business hours, Monday to Friday, 9:00 AM to 6:00 PM (PST). Acknowledgement of receipt is sent within 72 hours of submission.

For escalated complaints or if you are not satisfied with the Company's response, you may contact the National Privacy Commission of the Philippines directly. Additional information about the Company's PAGCOR licence and regulatory standing is available on our About Us page.