Privacy Policy

wj2w Casino ("wj2w," "we," "our," or "us") takes the privacy of its users seriously. We are aware that Filipino players entrust us with sensitive personal and financial information when they register an account, make deposits, and engage in real-money gaming. This Privacy Policy sets out in plain language exactly what we do with that information and the obligations we carry as the entity responsible for processing it.

This Policy is designed to be consistent with the requirements of the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC"). It is also consistent with wj2w's obligations under the Anti-Money Laundering Act of the Philippines ("AMLA") and PAGCOR-aligned compliance requirements that govern online gambling operations serving Philippine residents.

We encourage all wj2w users — whether you're a regular player in Manila, a bingo fan in Cebu, or a new account holder registering from Davao — to read this Policy in full. If anything is unclear, please contact our 24/7 support team before proceeding.

For the purposes of applicable Philippine data privacy law, wj2w Casino is the Data Controller responsible for the personal data collected through the wj2w platform. As Data Controller, wj2w determines the purposes and means of processing your personal data.

Our designated Data Protection Officer ("DPO") oversees wj2w's compliance with data privacy obligations. You may contact the DPO for any data-related concern through our 24/7 live chat support channel or via the support email address published in the footer of this page. Please mark your communication with the subject "Data Privacy Request" so it can be routed to the DPO promptly.

wj2w collects the following categories of personal data from users of the platform. We collect only the data that is necessary for the purposes described in Section 5 of this Policy.

wj2w collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when creating your wj2w Account (registration form), completing KYC verification (identity document upload and facial photograph), submitting payment details, or contacting support via live chat or email.
• Automated technical collection: Data collected automatically when you access and use the wj2w platform, including IP address, device identifiers, session cookies, browser type, and geolocation signals.
• Transaction records: Financial data generated when you initiate deposits, withdrawals, or wagers on the wj2w platform, recorded by both wj2w and the relevant payment provider (GCash, PayMaya, bank).
• Third-party verification providers: Identity verification and anti-fraud data received from licensed KYC and AML screening partners that wj2w engages as Data Processors.
• Game provider logs: Game play data transmitted by wj2w's certified game providers (such as JILI) as part of the platform integration — game outcome records, session data, and wager histories.

wj2w processes your personal data for the following specific purposes, each resting on a legal basis under the Data Privacy Act of 2012:

wj2w uses cookies and similar tracking technologies to operate the platform, maintain your login session, and improve the user experience. Below is a summary of cookie categories used on the wj2w platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens that keep you logged in during your wj2w session. These cookies cannot be disabled without impairing platform function.
• Functional Cookies: Remember your preferences such as preferred game categories, responsible gaming settings, and notification preferences. These improve your experience but are not critical to platform operation.
• Analytics Cookies: Collect anonymised data about how players navigate the wj2w platform — which game categories are most visited, how long sessions last, and which pages load slowly. This data is used exclusively to improve the platform and is not associated with individual player identities.
• Security Cookies: Assist in detecting suspicious login behaviour, multi-accounting, and fraud patterns by tracking session characteristics. These operate alongside wj2w's fraud prevention system.

wj2w does not use advertising or retargeting cookies that share your data with third-party advertising networks. You can manage browser cookie settings through your mobile browser settings. Disabling strictly necessary cookies will prevent access to the wj2w platform.

wj2w does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only in the following specific circumstances, and only to the extent necessary for each purpose:

• Game Providers (Data Processors): Certified game providers such as JILI, PG Soft, and Pragmatic Play receive session identifiers and wager data necessary to deliver game content and calculate outcomes. These providers act as Data Processors under wj2w's instruction and are contractually prohibited from using this data for any purpose other than service delivery.
• Payment Providers (Data Processors): GCash, PayMaya, BPI, BDO, and Metrobank receive the transaction data necessary to process deposits and withdrawals. These entities maintain their own privacy frameworks as regulated Philippine financial institutions.
• KYC and AML Service Providers (Data Processors): Licensed identity verification and anti-money laundering screening partners receive identity documents and personal data for verification purposes only, under strict data processing agreements.
• Regulatory Authorities (Legal Disclosure): wj2w may be legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission ("NPC"), and other competent Philippine government authorities. Such disclosures are made only as required by law and do not require your prior consent.
• Law Enforcement (Legal Obligation): wj2w will disclose personal data to Philippine law enforcement authorities when required by a valid court order, subpoena, or other lawful process.

wj2w retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention schedule applies:

Upon expiry of the applicable retention period, personal data is either securely deleted or anonymised so that it can no longer be associated with any individual player.

wj2w implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include but are not limited to:

• Encryption in transit: All data transmitted between your browser and the wj2w platform is encrypted using TLS 1.3 / SSL protocols. The padlock icon in your browser confirms this protection is active.
• Encryption at rest: Sensitive personal data fields, including passwords (stored as one-way hashed values, never in plaintext), identity document data, and financial account references, are encrypted in wj2w's database infrastructure.
• Access controls: wj2w internal systems operate on a strict need-to-know access model. Only personnel with a specific operational need are granted access to player personal data, and all access is logged and audited.
• Two-factor authentication: Available on all wj2w player accounts to add an SMS OTP layer of protection beyond the password, and mandatory for internal system access by wj2w operational staff.
• Fraud and anomaly detection: wj2w employs automated and human-reviewed systems to detect unusual login patterns, multi-accounting, and suspicious financial transaction activity that may indicate account compromise or fraud.
• Penetration testing: The wj2w platform undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), Filipino players on the wj2w platform have the following rights with respect to their personal data. These rights may be exercised by contacting wj2w's Data Protection Officer through our 24/7 support channel.

To exercise any of these rights, contact wj2w through our 24/7 live chat support or the support email in the footer, clearly identifying the right you wish to exercise and your registered Account details. wj2w will respond to valid requests within 30 calendar days of receipt. We may request proof of identity before processing a data rights request to prevent unauthorised access to another player's information.

If you believe wj2w has not addressed your data rights concern adequately, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

The wj2w platform is strictly intended for persons aged 21 years and older. wj2w does not knowingly collect personal data from any person under 21 years of age. Age verification through the KYC process is a mandatory step before full account access is granted.

If wj2w becomes aware that a minor has registered an account or provided personal data on the platform, all such data will be immediately deleted, the account will be suspended, and any associated funds will be forfeited in accordance with wj2w's Terms and Conditions and applicable PAGCOR regulations. wj2w may refer the matter to relevant Philippine authorities.

Some of wj2w's technical infrastructure and game provider partners are located outside the Philippines, which means that certain personal data processed by wj2w may be transferred to and processed in jurisdictions outside the country. Where such transfers occur, wj2w ensures that appropriate safeguards are in place in accordance with the Data Privacy Act of 2012 and NPC guidelines on cross-border data flows.

Safeguards for cross-border transfers include:

• Binding Data Processing Agreements ("DPAs") with all third-party Data Processors that impose obligations at least equivalent to the protections required under Philippine law
• Limiting transfers to only the data fields strictly necessary for the Data Processor to provide their contracted service
• Selecting partner providers that maintain recognised data security certifications (e.g., ISO 27001) or operate in jurisdictions with equivalent data protection regimes

Financial data relating to GCash, PayMaya, BPI, BDO, and Metrobank transactions is processed within the Philippines by BSP-regulated entities and is not subject to cross-border transfer.

wj2w reviews and updates this Privacy Policy periodically to reflect changes in our data practices, new legal requirements, or improvements to platform features that affect how data is processed. Material updates will be communicated to registered account holders through in-platform notifications upon next login and/or by email to their registered address.

The effective date at the top of this Privacy Policy indicates when the current version came into force. Minor editorial corrections that do not affect the substance of how your data is processed may be made without specific notification. Continued use of the wj2w platform following the effective date of an updated Policy constitutes your acknowledgment of the updated version.

The current version of this Privacy Policy is always accessible at wj2w.org/privacy-policy. Previous versions can be requested from the Data Protection Officer.

For all privacy-related queries, data access requests, requests to exercise your rights under the Data Privacy Act of 2012, or concerns about how wj2w handles your personal data, you may contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through the wj2w platform. Select "Privacy / Data Request" as the query type when initiating the chat.
• Email: The support email address is displayed in plain text in the footer of this page (see below). Please use the subject line "Data Privacy Request — [Your Username]" to ensure prompt routing to the Data Protection Officer.

wj2w aims to acknowledge all privacy-related enquiries within 72 hours and to resolve substantive requests within 30 calendar days. Complex requests requiring additional verification or legal review may take longer, in which case we will notify you of the expected resolution timeline.