juan635 Casino — Privacy Policy

This Privacy Policy ("Policy") is issued by juan635 ("juan635", "we", "us", "our"), the operator of the online gaming platform at juan635.one. It applies to all personal data collected from players, visitors, and other individuals who interact with the juan635 platform, whether through the website, customer support channels, or any other point of contact.

This Policy is issued in compliance with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines. By registering an account or continuing to use juan635, you acknowledge that you have read and understood this Policy.

juan635 operates as a PAGCOR-regulated online gaming platform serving adult Filipino players aged 21 and above. In the course of providing our services — account registration, game play, financial transactions, customer support, bonus programmes, and responsible gaming tools — juan635 necessarily processes certain categories of personal data about players and visitors.

This Policy applies to all personal data processing activities carried out by juan635 in connection with the operation of the Platform, regardless of whether the processing is automated or manual. It covers data collected through the juan635 website, through direct communications with our support team, through third-party payment processors operating on our behalf, and through any other channel through which you interact with juan635.

This Policy does not apply to third-party websites, services, or platforms that may be linked from the juan635 website. juan635 is not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party services you access.

For the purposes of the Data Privacy Act of 2012, juan635 is the Personal Information Controller (PIC) in respect of the personal data of players and visitors processed through the Platform. juan635 determines the purposes and means of the personal data processing described in this Policy.

juan635 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Policy, and for serving as the point of contact for data subject rights requests, privacy complaints, and communications from the National Privacy Commission.

Contact details for the juan635 Data Protection Officer are provided in Section 14 of this Policy. All data subject rights requests, privacy queries, and complaints should be directed to the DPO through the channels specified in that section.

juan635 collects and processes the following categories of personal data, depending on the nature of your interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued Philippine identification document
• Date of birth (collected to verify the 21+ age requirement mandated by PAGCOR)
• Registered mobile number (Philippine format)
• Email address (where provided during registration)
• Username and hashed password credential
• Government-issued ID details (ID type, ID number, issuing authority) — collected during KYC verification

3.2 Financial & Transaction Data

• GCash account identifier and transaction reference numbers
• PayMaya account identifier and transaction reference numbers
• Bank account name, account number, and bank name (for BPI, BDO, Metrobank transfers) — stored for withdrawal processing and AML compliance
• Deposit history, withdrawal history, and current account balance
• Bonus and promotional fund history

3.3 Gaming & Behavioural Data

• Game session logs including game type, start time, end time, wagers placed, and outcomes
• Sports betting records including markets selected, odds accepted, and settlement results
• Responsible gaming settings configured by the player (deposit limits, session limits, self-exclusion status)
• Login timestamps, session duration, and logout records

3.4 Technical & Device Data

• IP address at time of access and at login events
• Device type and model (mobile, tablet, desktop)
• Operating system and browser type and version
• Network carrier (Globe, Smart, DITO, or other)
• Geolocation data derived from IP address (country and region level only — not precise GPS location)
• Session cookies and browser local storage identifiers

3.5 Communications Data

• Content of customer support interactions via live chat, including chat transcripts
• Content of email communications sent to juan635 support channels
• Feedback, complaints, and dispute records

juan635 collects personal data through the following channels and mechanisms:

• Directly from you — through account registration forms, KYC verification document uploads, customer support interactions, promotional opt-in forms, and any other direct communication with juan635.
• Automatically through Platform use — through server logs, session cookies, browser storage APIs, and analytics tools that record how you interact with the juan635 website and games. This collection occurs from the moment you visit juan635.one.
• From payment service providers — GCash, PayMaya, and bank payment processors transmit transaction confirmation data to juan635 when you make a deposit or withdrawal. This data is limited to what is necessary to process and verify the transaction.
• From identity verification services — where juan635 uses third-party KYC service providers to assist in identity verification, those providers may share verification results and document authenticity assessments with juan635 in connection with your account.
• From PAGCOR and regulatory bodies — where required by law, juan635 may receive exclusion or restriction data from PAGCOR's responsible gaming register, which juan635 is obligated to act upon.

The table below sets out the primary purposes for which juan635 processes your personal data and the corresponding legal basis under the Data Privacy Act of 2012:

juan635 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following strictly defined circumstances:

6.1 Service Providers (Personal Information Processors)

juan635 engages third-party service providers who process personal data strictly on our instructions and for the purposes outlined in this Policy. These include payment processors (GCash/Maya/bank partners), KYC verification providers, cloud infrastructure providers, customer support platform operators, and analytics tools. All such providers are contractually bound to data protection obligations consistent with the DPA.

6.2 Regulatory and Legal Disclosure

• PAGCOR: juan635 is obligated to share player data with PAGCOR as required by its licensing conditions, including for compliance audits, responsible gaming registers, and investigation of irregularities.
• Anti-Money Laundering Council (AMLC): Transaction data and identity records may be reported to the AMLC where required by the Anti-Money Laundering Act of 2001, as amended.
• National Privacy Commission (NPC): juan635 will cooperate with NPC investigations and comply with NPC orders as required under the DPA.
• Courts and law enforcement: Where compelled by a valid court order, subpoena, or lawful demand from a Philippine government authority, juan635 will disclose personal data to the extent legally required.

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all assets of juan635, personal data held by juan635 may be transferred to the relevant successor entity. Players will be notified of any such transfer through the Platform or via their registered contact details.

juan635 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the account relationship plus a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AML obligations.
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AML Act record-keeping requirements.
• Gaming and behavioural data: Active gaming records retained for the duration of the account relationship plus two (2) years after closure. Aggregated anonymised data may be retained indefinitely for statistical purposes.
• KYC documents: Retained for the duration of the account relationship plus five (5) years, or as required by applicable regulations.
• Customer support communications: Retained for a period of two (2) years from the date of the interaction, or longer where the communication is relevant to an ongoing dispute or legal matter.
• Technical and device logs: Retained for twelve (12) months from the date of collection, unless relevant to an ongoing security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

juan635 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, disclosure, and destruction. Key security measures include:

• 256-bit TLS/SSL encryption on all data transmitted between players' browsers and the juan635 platform, including login sessions, game sessions, and financial transactions.
• Hashed and salted password storage — plaintext passwords are never stored by juan635. All credentials are protected using industry-standard one-way hashing algorithms.
• Two-factor authentication (2FA) available to all players via SMS OTP, adding a second layer of protection to the juan635 login process.
• Access controls — internal access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular privacy and security training.
• Infrastructure security — juan635's servers and databases are hosted in secure, access-controlled environments. Regular penetration testing and vulnerability assessments are conducted by qualified third-party security specialists.
• Incident response procedures — juan635 maintains documented data breach response procedures. In the event of a personal data breach affecting player data, juan635 will notify the National Privacy Commission and affected individuals in accordance with the timelines and requirements of the DPA.

juan635 uses cookies and similar browser-based tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your juan635 account during an active session, and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Store your preferences such as preferred language, display settings, and whether you have acknowledged certain notices on juan635. These improve your experience but are not strictly required for basic functionality.
• Analytics cookies: Used to collect anonymised or pseudonymised data about how visitors interact with the juan635 website — pages visited, time spent, navigation paths, and error occurrences. This data helps juan635 identify and fix usability issues and improve the Platform.
• Session security cookies: Short-lived cookies that bind your authenticated session to your device to prevent session hijacking. These expire when you close your browser or when your session times out.

Most web browsers allow you to manage cookie preferences through your browser settings. Blocking strictly necessary cookies will impair your ability to use the juan635 platform, including logging in and playing games. Blocking functional or analytics cookies will reduce Platform personalisation and our ability to improve the Platform but will not prevent basic use.

Under the Data Privacy Act of 2012, you — as a data subject — hold the following rights in relation to the personal data juan635 holds about you. To exercise any of these rights, please contact the juan635 Data Protection Officer as described in Section 14.

The juan635 platform is exclusively available to adults aged 21 years and above, as required by PAGCOR's regulations governing online gaming in the Philippines. juan635 does not knowingly collect personal data from individuals below the age of 21.

Age verification is a mandatory step in the juan635 registration process. Where juan635 discovers or has reasonable grounds to believe that personal data has been collected from an individual below 21 years of age, juan635 will immediately suspend the relevant account, delete the collected personal data to the extent legally permissible, and report the matter to PAGCOR in accordance with its regulatory obligations.

Some of the third-party service providers engaged by juan635 — including cloud infrastructure providers, analytics platforms, and certain payment technology partners — may process or store data on servers located outside the Philippines. Where such transfers occur, juan635 ensures that appropriate safeguards are in place consistent with the requirements of the Data Privacy Act of 2012 and NPC regulations on cross-border data flows.

Safeguards for cross-border transfers include contractual data protection clauses in agreements with offshore processors, requirements that offshore processors implement security standards at least equivalent to those required under the DPA, and limiting the categories of data transferred to offshore processors to the minimum necessary for the specific processing purpose.

Where NPC notification or approval for a cross-border transfer is required by applicable NPC regulations, juan635 will comply with those requirements before the transfer takes place.

juan635 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, changes in Philippine privacy law, or changes in PAGCOR regulatory requirements. The effective date at the top of this Policy will be updated to reflect the date of the most recent revision.

Material changes to this Policy — those that significantly affect how we process your personal data or reduce your rights as a data subject — will be communicated to registered players by in-account notification or by message to your registered mobile number or email address at least fourteen (14) days before the revised Policy takes effect. Your continued use of juan635 following the effective date of a revised Policy constitutes acceptance of the updated terms.

The current version of this Privacy Policy is always available at juan635.one/privacy-policy. Previous versions are available upon request from the Data Protection Officer.

For all privacy-related enquiries, data subject rights requests, complaints, or questions about this Policy, please contact the juan635 Data Protection Officer through the following official channels:

• Live Chat: Available 24/7 at juan635.one — reference "Privacy / DPO Request" in your opening message for priority routing to the privacy team.
• Email: [email protected] — subject line: "Privacy Policy / Data Subject Request". (Plain text — not a clickable link.)
• Response Commitment: juan635 will acknowledge receipt of all DPO requests within two (2) business days and provide a substantive response within fifteen (15) calendar days.

If you are not satisfied with juan635's response to your privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority for data protection matters under the Data Privacy Act of 2012.