xbjl Privacy Policy

1. Introduction

xbjl is the Philippines' premier online casino and sports betting platform, trusted by over 850,000 Filipino players from Manila, Cebu, Davao, Quezon City, Makati, and communities across the archipelago. As a platform that handles sensitive personal and financial data, xbjl takes its data protection obligations with the utmost seriousness.

This Policy applies to all personal data collected through the xbjl website at xbjl.net, the xbjl mobile platform, customer support communications, and any other interaction you have with xbjl. It covers data collected from registered players, prospective players who browse the platform without registering, and individuals who contact xbjl for support or information.

This Policy is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, xbjl also observes internationally recognised data protection principles consistent with those frameworks.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, xbjl is the personal information controller responsible for the personal data collected through the xbjl platform. xbjl has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws.

If you have any questions, concerns, or requests relating to the processing of your personal data by xbjl, you may contact the xbjl Data Protection Officer at the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

xbjl collects personal data through several channels, including account registration, platform usage, payment transactions, customer support interactions, and automated technical means. The categories of personal data we collect include:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify the 21+ age requirement);
• Philippine mobile number and email address;
• Username and encrypted password;
• Residential address in the Philippines.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's licence, UMID);
• Proof of address documents (e.g., utility bills, bank statements);
• Proof of payment method ownership (e.g., GCash account screenshot, bank account details);
• Selfie or facial verification image where required for enhanced KYC.

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Philippine Peso (₱) and timestamps;
• Payment method details (GCash number, PayMaya account, BPI/BDO/Metrobank/UnionBank account reference);
• Betting history, game activity records, and account balance information.

3.4 Technical & Usage Data

• IP address and approximate geolocation data;
• Device type, operating system, and browser information;
• Session logs, login timestamps, and platform navigation data;
• Cookie identifiers and similar tracking technologies (see Section 7).

3.5 Communications Data

• Records of customer support interactions via email or live chat;
• Feedback, complaints, and dispute correspondence;
• Responses to surveys or promotional communications where you have opted in.

4. How We Use Your Personal Data

xbjl uses the personal data it collects for the following specific purposes:

• Account Management: To create, maintain, and manage your xbjl player account, including processing your registration, verifying your identity, and managing your account settings;
• Age Verification: To verify that you meet the mandatory 21+ age requirement under Philippine gaming regulations before allowing access to real-money gaming features;
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other supported payment methods;
• Regulatory Compliance: To comply with Philippine anti-money laundering (AML) obligations, PAGCOR regulatory requirements, and other applicable laws, including reporting obligations to the Anti-Money Laundering Council (AMLC);
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct on the xbjl platform;
• Customer Support: To respond to your enquiries, complaints, and support requests in a timely and effective manner;
• Responsible Gaming: To monitor gaming patterns and identify players who may be at risk of problem gambling, and to administer responsible gaming tools such as deposit limits and self-exclusion;
• Platform Improvement: To analyse usage patterns and technical performance data to improve the xbjl platform, fix bugs, and enhance the overall user experience for Filipino players;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates where you have provided your consent to receive such communications. You may withdraw this consent at any time.

xbjl will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

5. Legal Basis for Processing

xbjl processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and xbjl (i.e., the Terms & Conditions), including account management, payment processing, and delivery of gaming services;
• Legal Obligation: Processing is required to comply with xbjl's legal obligations under Philippine law, including AML reporting, KYC verification, and regulatory compliance with PAGCOR requirements;
• Legitimate Interests: Processing is necessary for xbjl's legitimate interests in fraud prevention, platform security, and improving the quality of services, provided those interests are not overridden by your data protection rights;
• Consent: For marketing communications and non-essential cookies, xbjl relies on your freely given, specific, and informed consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

xbjl does not sell, rent, or trade your personal data to third parties for their own commercial purposes. xbjl may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

6.1 Service Providers

xbjl engages trusted third-party service providers to assist in operating the platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), KYC verification providers, cloud hosting providers, customer support software providers, and fraud detection services. These providers are contractually bound to process your data only on xbjl's instructions and in accordance with applicable data protection laws.

6.2 Regulatory & Law Enforcement Authorities

xbjl may disclose your personal data to Philippine regulatory authorities (including PAGCOR and the AMLC), law enforcement agencies, or courts where required to do so by applicable law, court order, or regulatory direction. xbjl will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of xbjl's assets, your personal data may be transferred to the acquiring entity as part of that transaction. xbjl will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred.

6.4 With Your Consent

xbjl may share your personal data with other third parties where you have provided your explicit consent to such sharing. You may withdraw this consent at any time by contacting xbjl's Data Protection Officer.

7. Cookies & Tracking Technologies

xbjl uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help xbjl recognise you, remember your preferences, and analyse how you use the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the xbjl platform. For marketing cookies, xbjl will request your consent separately and you may withdraw that consent at any time.

8. Data Security

xbjl implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the xbjl platform;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Multi-factor authentication options for player accounts;
• Regular security audits and penetration testing of the xbjl platform;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Comprehensive staff training on data protection and information security practices;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, xbjl will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

9. Data Retention

xbjl retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your active account plus 5 years following account closure, in accordance with Philippine AML record-keeping requirements;
• KYC Documents: Retained for a minimum of 5 years from the date of verification, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments;
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction;
• Customer Support Records: Retained for 3 years from the date of the last interaction;
• Technical & Usage Data: Retained for up to 24 months for analytics and security purposes;
• Marketing Consent Records: Retained for the duration of your consent plus 3 years to demonstrate compliance.

Upon expiry of the applicable retention period, xbjl will securely delete or anonymise your personal data in accordance with its data disposal procedures.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by xbjl:

To exercise any of these rights, please submit a written request to xbjl's Data Protection Officer at the contact details in Section 14. xbjl will respond to all data subject requests within 15 business days of receipt. In complex cases, this period may be extended by a further 15 business days, and you will be notified of any such extension.

11. Children's Privacy

xbjl implements age verification measures during the registration process to prevent minors from accessing the platform. If xbjl becomes aware that it has inadvertently collected personal data from an individual under 21 years of age, it will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on the xbjl platform, please contact xbjl's Data Protection Officer immediately at the contact details provided in Section 14 so that appropriate action can be taken without delay.

12. Third-Party Links

The xbjl platform may contain links to third-party websites or services, including payment provider portals for GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank. These third-party sites operate under their own privacy policies, which are independent of this Policy. xbjl is not responsible for the privacy practices or content of any third-party website.

xbjl encourages you to review the privacy policies of any third-party sites you visit through links on the xbjl platform before providing any personal data to those sites.

13. Updates to This Privacy Policy

xbjl reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, xbjl will notify registered players via email or an in-platform notification prior to the changes taking effect.

The updated Policy will be posted on this page with a revised "Last Updated" date. Your continued use of the xbjl platform after the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not agree with the updated Policy, you should cease using the platform and may request account closure.

14. Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by xbjl, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that xbjl has not handled your personal data in accordance with the Data Privacy Act of 2012.