Privacy Policy — wj1 Casino

01 Overview & Scope

wj1 Casino ("wj1", "we", "us", "our") takes data privacy seriously — not because we are required to, but because Filipino players deserve to know exactly how their personal information is handled when they use our platform. This Privacy Policy describes our practices in relation to personal data collected through the wj1.org website and all services offered under the wj1 brand.

wj1 Casino processes personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the circulars and advisories of the National Privacy Commission (NPC), and all applicable data handling requirements imposed on PAGCOR-licensed online gaming operators under Philippine gaming regulations.

This policy applies to all registered users, prospective applicants, visitors to the wj1.org website, and any individual whose personal data is processed by wj1 in connection with the delivery of our gaming services. It covers data collected online and, where applicable, through any customer support interaction conducted via live chat, email, or telephone.

02 Data Controller Identity

For purposes of the Philippine Data Privacy Act of 2012, wj1 Casino is the personal information controller in respect of all personal data processed through the wj1.org platform. wj1 Casino operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR).

wj1 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data privacy laws and for handling enquiries, access requests, and complaints from data subjects. Contact details for the DPO are provided in Section 14 of this Policy.

03 Personal Data We Collect

wj1 collects personal data from you in several ways: directly when you register or interact with our platform, automatically as you use our services, and in some cases from third-party sources for verification purposes. The categories of data we collect include:

04 Purpose & Legal Basis for Processing

wj1 processes personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The purposes for which we process your data and the corresponding legal bases are as follows:

• Account registration and management — Processing is necessary for the performance of the contract between you and wj1 Casino.
• Identity and age verification (KYC) — Processing is required for compliance with PAGCOR's licensing requirements and anti-money laundering obligations under Philippine law.
• Deposit and withdrawal processing — Processing is necessary for the performance of the contract and to comply with financial crime prevention regulations.
• Delivery of gaming services — Processing is necessary for the performance of the contract and to operate the wj1 platform in accordance with our PAGCOR license.
• Fraud detection and security monitoring — Processing is necessary for compliance with applicable law and to protect the legitimate interests of wj1 and its registered players.
• Regulatory reporting to PAGCOR — Processing is required by law. PAGCOR-licensed operators have mandatory reporting obligations under their licensing conditions.
• Responsible gaming monitoring — Processing is carried out to comply with PAGCOR's responsible gaming requirements and to protect the interests of vulnerable players.
• Customer support — Processing is necessary for the performance of the contract and to respond to queries and complaints in accordance with our legal obligations.
• Direct marketing communications — Processing is based on your freely given consent, which you may withdraw at any time by updating your communication preferences in your account settings.
• Platform analytics and improvement — Processing is carried out on the basis of wj1's legitimate interest in improving the quality and security of its services.

wj1 will not process your personal data for any purpose that is incompatible with the purposes set out above without first obtaining your explicit consent or establishing a new valid legal basis under applicable Philippine law.

05 Data Sharing & Disclosure

wj1 may share your personal data with the following categories of recipients:

• PAGCOR and Philippine regulatory authorities — wj1 is legally required to disclose player data to PAGCOR upon request and to submit periodic regulatory reports. We may also disclose data to the Anti-Money Laundering Council (AMLC), the National Bureau of Investigation, or other Philippine government authorities where required by law, court order, or regulatory directive.
• Payment service providers — GCash (GXchange Inc.), Maya (Paymaya Philippines Inc.), BPI, BDO, Metrobank, and card network processors receive payment data strictly to process your deposit and withdrawal instructions. These entities operate under their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.
• Game content providers — Certified game providers receive limited technical session data necessary to serve game content and record game outcomes. No payment or identity data is shared with game providers.
• KYC verification partners — Accredited identity verification service providers may receive copies of your submitted identification documents to conduct automated identity checks. These partners are bound by strict data processing agreements.
• IT infrastructure and cloud service providers — Technical data is processed by hosting and cloud service providers engaged by wj1. All such providers are contractually bound to process data only on wj1's instructions and to maintain appropriate security measures.
• Professional advisers — Legal counsel, auditors, and compliance consultants may access data on a confidential, need-to-know basis in connection with legal, regulatory, or financial matters.

06 Data Retention

wj1 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following standard retention periods apply:

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data. Anonymised or aggregated data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

07 Security Measures

wj1 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption across all pages and transactions on wj1.org — all data transmitted between your browser and our servers is encrypted in transit;
• Encryption at rest for all sensitive personal data stored in wj1's databases, including identity documents and financial account details;
• Role-based access controls restricting access to personal data to those staff members and contractors with a genuine operational need;
• Multi-factor authentication required for all administrative access to systems containing personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Continuous intrusion detection and security monitoring of all systems containing personal data;
• Staff training on data protection obligations, phishing awareness, and secure data handling practices.

Despite these measures, no system is completely immune to security threats. In the event of a personal data breach that poses a risk to your rights and freedoms, wj1 will notify the National Privacy Commission and, where required, affected data subjects, within the timeframes prescribed by the Data Privacy Act and NPC regulations.

08 Cookies & Tracking Technologies

wj1.org uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit wj1.org. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged into your wj1 account and security cookies that help detect fraudulent activity. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Enable personalisation features such as remembering your preferred language, game category, or lobby layout. These improve your experience but are not required for the platform to operate.
• Analytics Cookies: Help wj1 understand how the platform is used — which pages are visited most, where users encounter errors, and how game categories are navigated. Data from analytics cookies is used in aggregated form and is not linked to individual player profiles for marketing purposes.
• Security and Fraud Prevention Cookies: Support wj1's fraud detection systems by recording behavioural signals such as click patterns and navigation flow. These are used to identify bot activity and account takeover attempts.

You can manage cookie preferences through your browser settings. However, disabling strictly necessary cookies may prevent you from logging into your wj1 account or using core platform features. wj1 does not use third-party advertising or retargeting cookies.

09 Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights in relation to your personal data processed by wj1:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, retained, and shared — which this Policy provides.
• Right of Access: You may request a copy of the personal data wj1 holds about you. wj1 will respond to verified access requests within fifteen (15) business days.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you may request correction. Some corrections (e.g., name changes) require supporting documentation.
• Right to Erasure ("Right to be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to wj1's overriding legal obligations to retain certain data under PAGCOR regulations and Philippine AML law.
• Right to Object: You may object to wj1's processing of your personal data where that processing is based on legitimate interests. You may also withdraw consent to marketing communications at any time through your account settings.
• Right to Data Portability: Where processing is based on consent or contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Restrict Processing: In certain circumstances, you may request that wj1 restrict processing of your personal data — for example, while a rectification request is being assessed.
• Right to Damages: You are entitled to seek compensation for any damages suffered as a result of wj1's violation of the Data Privacy Act, subject to applicable legal proceedings.

To exercise any of these rights, please contact wj1's Data Protection Officer using the contact details in Section 14. wj1 may be required to verify your identity before processing rights requests to prevent unauthorised access to other people's data.

10 Minors — 21+ Platform

If wj1 becomes aware that personal data has been collected from an individual who is under 21 years of age, the relevant account will be suspended immediately, all associated data will be reviewed, and the data will be deleted or restricted in accordance with our KYC and AML obligations and applicable data protection law.

wj1 enforces age verification through mandatory KYC procedures requiring submission of a valid Philippine government-issued identification document. Parents or guardians who believe a minor may have registered a wj1 account should contact our Data Protection Officer immediately using the details in Section 14.

11 International Data Transfers

wj1 primarily processes and stores personal data on servers located within the Philippines or in jurisdictions that provide an adequate level of data protection as recognised under Philippine law. Where personal data is transferred to a third-party service provider in another jurisdiction — for example, a game content provider or cloud infrastructure partner with regional data centres — wj1 ensures that appropriate safeguards are in place.

Such safeguards may include: data processing agreements that impose obligations equivalent to those under Philippine data protection law; standard contractual clauses approved by the National Privacy Commission; or the transfer being made to a jurisdiction that the NPC has recognised as offering adequate protection.

You may request information about the safeguards wj1 has put in place for international data transfers by contacting our Data Protection Officer.

12 Privacy Complaints & NPC Recourse

If you believe that wj1 has not handled your personal data in accordance with this Policy or the Data Privacy Act of 2012, you are encouraged to contact wj1's Data Protection Officer in the first instance using the contact details in Section 14. wj1 will acknowledge your complaint within five (5) business days and endeavour to resolve it within thirty (30) days.

If you are not satisfied with wj1's response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for enforcement of the Data Privacy Act and is the appropriate authority for data protection complaints against Philippine-based personal information controllers.

13 Amendments to This Policy

wj1 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, regulatory guidance from the National Privacy Commission or PAGCOR, or changes to the wj1 platform. All amendments will be published at wj1.org/privacy-policy.

Material changes — those that affect your rights or the way we use your data in a significant way — will be communicated to registered users via email to the address on file or via a prominent notice displayed upon your next login to wj1. The effective date of the current version of this Policy is displayed at the top of the document.

Your continued use of the wj1 platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you do not accept the revised Policy, you should cease using the platform and contact our support team to arrange account closure.

This Privacy Policy was last reviewed and is effective as of January 1, 2026. Previous versions are available from the wj1 Data Protection Officer upon written request.

14 Contact — Data Protection Officer

For all data privacy matters — including access requests, rectification requests, objections, complaints, or general enquiries about how wj1 handles your personal data — please contact the wj1 Data Protection Officer:

wj1 Casino is committed to the responsible and transparent handling of every Filipino player's personal data. If you have questions about this Privacy Policy that are not answered here, please don't hesitate to reach out — we'd rather you ask than remain uncertain.