p2jl Privacy Policy

p2jl operates as the personal information controller in respect of all personal data collected through the p2jl platform. As the data controller, p2jl determines the purposes and means of processing personal data collected from users of the platform.

p2jl operates under a PAGCOR license and is therefore subject to the data governance requirements set by both the National Privacy Commission (NPC) and the Philippine Amusement and Gaming Corporation. All data processing activities conducted by p2jl are registered with the NPC in accordance with the NPC Registration Regulations.

If you have any questions about how p2jl handles your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

p2jl collects the following categories of personal data in connection with operating the platform and complying with PAGCOR and AMLA regulatory requirements:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth and age verification confirmation
• Gender (optional, collected for responsible gaming analytics)
• Government-issued ID type and reference number (e.g., PhilSys, SSS, UMID, driver's license, passport)
• Selfie photograph submitted during KYC verification

2.2 Contact & Account Data

• Email address used for account registration and communications
• Philippine mobile number
• Home address or city of residence (Philippines)
• Username and encrypted password hash

2.3 Financial & Transaction Data

• GCash account name and registered mobile number
• Maya / PayMaya account reference
• Bank account name and number for BPI, BDO, or Metrobank withdrawals
• Deposit and withdrawal transaction history, including amounts, timestamps, and payment method references
• Partial card number (last 4 digits) for Visa or Mastercard deposits

2.4 Gaming & Behavioural Data

• Game session history, bet amounts, win/loss records, and bonus redemption activity
• Session durations, login timestamps, and platform activity logs
• Responsible gaming settings (deposit limits, cooling-off status, self-exclusion status)

2.5 Technical & Device Data

• IP address and approximate geographic location at time of login and transaction
• Device type, operating system, browser type and version
• Cookie identifiers and session tokens (see Section 7)

p2jl collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotional survey.
• Automatically via the platform: When you browse or interact with the p2jl website, our systems automatically collect technical and behavioural data such as your IP address, session duration, pages visited, and game activity logs.
• From payment providers: When you initiate a GCash, Maya, or bank transfer transaction, our payment processing partners may share transaction confirmation data with us to reconcile your account balance.
• From KYC verification providers: When you submit identity documents for account verification, our KYC service provider processes the documents and returns a verification status along with extracted identity data to p2jl.
• From PAGCOR and regulatory databases: In compliance with PAGCOR requirements, p2jl may check your details against PAGCOR-maintained exclusion registers or related databases to ensure you are legally permitted to participate in online gaming.

Under the Philippine Data Privacy Act of 2012, p2jl processes your personal data on the following legal bases:

p2jl uses the personal data we collect for the following specific purposes:

5.1 Platform Operation

To create and manage your account, verify your eligibility (including the 21+ age requirement and Philippines residency), process deposits and withdrawals in Philippine Peso via GCash, Maya, BPI, BDO, and other supported channels, and provide access to all gaming content on the p2jl platform including slots, live casino, bingo, and sports betting.

5.2 Regulatory Compliance

To comply with PAGCOR licensing requirements, including player identity verification, AML transaction monitoring, submission of required reports to PAGCOR, and maintaining transaction records for the minimum statutory retention period. p2jl is required to share certain player data with PAGCOR upon request — this is a non-negotiable legal obligation and is not within p2jl's discretion to refuse.

5.3 Responsible Gaming

To monitor player activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, send session time reminders, and comply with PAGCOR's responsible gaming requirements. Data processed for responsible gaming purposes is handled with heightened confidentiality.

5.4 Security & Fraud Prevention

To detect and prevent unauthorised account access, bonus abuse, money laundering, use of stolen payment methods, multi-accounting, and other fraudulent or prohibited conduct as defined in the p2jl Terms & Conditions. IP addresses and device fingerprints are used to identify suspicious patterns.

5.5 Marketing Communications

To send you promotional offers, bonus notifications, tournament announcements, and platform updates by email or SMS — but only if you have provided your consent during registration or at a subsequent point. You can withdraw this consent at any time by updating your communication preferences in your account settings or by contacting support.

p2jl does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following strictly limited circumstances:

• Payment processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), GrabPay, and bank partners (BPI, BDO, Metrobank) receive transaction data as required to process your deposits and withdrawals.
• KYC / identity verification providers: Your identity documents and biometric data may be shared with our accredited KYC verification provider solely for the purpose of verifying your identity and age.
• PAGCOR and regulatory authorities: p2jl shares player data with PAGCOR as required under our operating licence, including for AML reporting, player exclusion checks, and compliance audits.
• Philippine law enforcement: p2jl will disclose personal data to the NBI, PNP, AMLC, or other Philippine law enforcement bodies when required to do so by a valid legal order, court subpoena, or regulatory direction.
• Game software providers: Third-party game studios whose titles are hosted on the p2jl platform may receive limited session data (such as player ID, bet amounts, and game round results) as necessary to operate their games and calculate RTP. These providers are bound by data processing agreements with p2jl.
• IT and hosting infrastructure providers: Servers and infrastructure providers that host the p2jl platform may technically have access to stored data, but are contractually restricted from accessing or using that data for any purpose other than providing the agreed infrastructure services.

p2jl uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse platform usage. The following types of cookies are used:

p2jl does not use advertising or cross-site tracking cookies. We do not integrate Facebook Pixel, Google Ads, or any other third-party advertising tracking technology on the platform. Analytics cookies, where used, collect data in aggregated, anonymised form only.

Most web browsers allow you to refuse or delete cookies through your browser settings. Disabling essential or security cookies may impair your ability to log in or use the p2jl platform correctly.

p2jl implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, and destruction:

• Transport Layer Security (TLS): All data transmitted between your browser and p2jl's servers is encrypted using TLS 1.2 or higher. The connection is indicated by the padlock icon in your browser's address bar.
• Encryption at rest: Sensitive personal data stored on p2jl's servers — including identity documents, financial data, and KYC records — is encrypted using AES-256 encryption.
• Password hashing: User passwords are never stored in plain text. They are hashed using a modern, salted cryptographic algorithm before being stored.
• Access controls: Internal access to personal data is strictly limited to p2jl staff and systems that require it to perform their designated function. All internal access is logged and auditable.
• Multi-factor authentication: p2jl staff with access to personal data systems are required to use multi-factor authentication. We also encourage players to enable two-factor authentication (2FA) on their accounts.
• Regular security assessments: p2jl conducts periodic vulnerability assessments and penetration testing of its platform to identify and remediate security weaknesses before they can be exploited.

p2jl retains your personal data for the minimum period necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

Upon expiry of the applicable retention period, p2jl will securely delete or anonym ise your personal data in a manner that prevents reconstruction or identification of the individual. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by p2jl. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14.

• Right to be Informed: You have the right to know what personal data p2jl collects about you, the purposes for which it is processed, and how long it is retained — all of which are set out in this Policy.
• Right to Access: You may request a copy of the personal data p2jl holds about you. We will provide this within 15 business days of receiving a verified request. A nominal fee may apply for repeated or excessive requests.
• Right to Correction: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Account contact details can be updated directly in your account settings.
• Right to Erasure / Right to be Forgotten: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent, or where processing is unlawful. Note that data required to be retained under AMLA or PAGCOR regulations cannot be deleted prior to the statutory minimum retention period.
• Right to Data Portability: You may request that p2jl provide your personal data in a structured, commonly used, machine-readable format so that it can be transferred to another service provider.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though p2jl may continue processing where there are compelling legitimate grounds that override your interests.
• Right to Damages: If p2jl's processing of your personal data results in damages to you, you may be entitled to compensation under the DPA 2012.
• Right to File a Complaint: If you believe p2jl has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

p2jl will respond to all data subject rights requests within 15 business days. Where a request is complex or numerous, we may extend this period by a further 15 business days, in which case we will notify you of the extension and the reason for it within the initial 15-day window.

p2jl is an online gaming platform strictly intended for adults. In accordance with Philippine law and PAGCOR regulations, real-money gaming on the p2jl platform is restricted to individuals who are 21 years of age or older. This is a hard legal requirement — not a guideline.

p2jl does not knowingly collect, process, or retain personal data from individuals under the age of 21. During the registration and KYC verification process, we verify date of birth and require submission of a government-issued Philippine ID to confirm that all players meet the minimum age requirement.

If p2jl becomes aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the relevant account, forfeit any associated bonus balances, return legitimately deposited funds to the originating payment method (subject to verification), and delete the personal data of the underage individual from our systems as soon as practically possible.

p2jl primarily stores and processes personal data within the Philippines. Where the use of a third-party service provider (such as a KYC verification platform or cloud infrastructure provider) involves transferring personal data outside the Philippines, p2jl ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012 and the NPC's rules on cross-border data transfers.

Specifically, p2jl ensures that any recipient of personal data in a foreign jurisdiction provides a standard of data protection that is at least equivalent to that required under Philippine law, either through:

• A contractual data processing agreement containing data protection clauses approved or recognised by the NPC;
• The recipient country having been assessed as providing an adequate level of data protection by the NPC; or
• Binding corporate rules applicable to the recipient organisation.

Where you request information about specific cross-border transfer safeguards applicable to your data, please contact our Data Protection Officer using the details in Section 14.

p2jl may update this Privacy Policy from time to time to reflect changes in our data processing practices, new regulatory requirements, or updates to the platform. When material changes are made, we will notify registered players via their registered email address and display a prominent notice on the p2jl platform for a minimum of 14 days prior to the changes taking effect.

The "Effective" date displayed in the hero section of this page indicates the date of the most recent revision. We encourage you to review this Policy periodically. For significant changes affecting how we use your personal data, we will seek fresh consent where required by the DPA 2012.

Continued use of the p2jl platform following the effective date of any updated Policy constitutes your acknowledgement of the updated terms. If you disagree with any changes, you may request account closure and the return of your remaining balance in accordance with the p2jl Terms & Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by p2jl, please contact our Data Protection Officer (DPO):

If you are not satisfied with p2jl's response to your data privacy concern, or if you believe your rights under the Data Privacy Act of 2012 have been violated, you have the right to file a complaint with the National Privacy Commission of the Philippines:

This Privacy Policy was last reviewed and updated in 2026. It applies to all personal data collected by p2jl in connection with the operation of the p2jl online gaming platform at p2jl.net, serving Filipino players across the Philippines — including Manila, Cebu, Davao, Quezon City, Makati, and all other regions.