ttjj Casino Privacy Policy

This Privacy Policy ("Policy") is issued by the operating entity behind the ttjj Casino platform, accessible at ttjj.cam ("ttjj," "we," "us," or "our"). It sets out how ttjj collects, uses, stores, discloses, and otherwise processes personal data relating to individuals who access or use the ttjj Platform, including registered Players, prospective Players who browse without registering, and individuals who contact ttjj's support team.

This Policy is issued in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines. It is also aligned with ttjj's obligations as a PAGCOR-licensed operator with respect to regulatory data handling and reporting.

By accessing the ttjj Platform, registering for an Account, or interacting with any ttjj service, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the ttjj Platform.

For the purposes of applicable Philippine data privacy law, ttjj acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes about Players and Platform users. This means ttjj determines the purposes and means of processing your personal data.

In respect of personal data processed on ttjj's behalf by third-party service providers (such as payment processors, game providers, and cloud infrastructure partners), those third parties act as Personal Information Processors (PIPs) and are contractually required to process data only on ttjj's documented instructions and in accordance with this Policy and applicable Philippine law.

ttjj has appointed a Data Protection Officer (DPO) who is responsible for overseeing the Platform's data protection compliance. Contact details for the DPO are provided in Section 16 of this Policy.

ttjj collects personal data in three primary ways: data you provide directly, data generated by your use of the Platform, and data received from third parties. The categories of data collected are set out below.

3.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, registered mobile number, and email address
• KYC documents: Government-issued photo ID (PhilSys, passport, UMID, driver's licence, voter's ID), selfie verification images, and proof of address documents
• Payment data: GCash account name/number, Maya wallet details, bank account name and number (BPI, BDO, UnionBank), or other payment method identifiers — note that full card numbers are never stored by ttjj; payment processing is handled by certified third-party payment processors
• Support communications: Content of messages, emails, and chat transcripts submitted to ttjj's Player Support team
• Responsible gaming data: Deposit limits, loss limits, session time caps, and self-exclusion requests submitted via your Account settings

3.2 Data Generated by Platform Use

• Gaming activity data: Game titles played, bet amounts, win/loss outcomes, session durations, and wagering history
• Transaction logs: Deposit timestamps and amounts, withdrawal requests and outcomes, bonus activations and wagering progress
• Technical data: IP address, device type and model, operating system, browser type and version, screen resolution, and unique device identifiers
• Session data: Login timestamps, session durations, pages visited within the Platform, and interaction patterns
• Location data: General location inferred from IP address (used for fraud detection and regulatory compliance; precise GPS location is not collected)

3.3 Data from Third Parties

• Identity verification services: Identity confirmation results from third-party KYC providers used to cross-reference submitted documents
• Payment processors: Transaction confirmation status and payment method verification signals from GCash, Maya, and banking partners
• Fraud and AML screening: Risk signals from fraud detection partners and PAGCOR-mandated anti-money laundering screening databases

ttjj processes personal data only where a lawful basis exists under the Data Privacy Act of 2012 and its IRR. The primary lawful bases relied upon are:

• Performance of a contract: Processing necessary to provide the Platform services you have registered for, including account management, game provision, and payment processing
• Compliance with a legal obligation: Processing required to satisfy ttjj's PAGCOR licensing obligations, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine statutory requirements
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where such interests are not overridden by your privacy rights
• Consent: Processing for marketing communications and non-essential analytics, where you have provided explicit, specific, and freely given consent that can be withdrawn at any time

Personal data collected by ttjj is used for the following purposes:

• Account creation and management: Registering your Account, verifying your identity and age (21+ requirement), and maintaining your Account in good standing
• Service delivery: Enabling access to games, processing deposits and withdrawals, calculating and crediting bonuses, and operating the Diamond Tycoon loyalty programme
• Regulatory compliance: Fulfilling PAGCOR reporting obligations, conducting AML/CFT screening under AMLA, submitting Suspicious Transaction Reports (STRs) where required, and maintaining records for regulatory audit
• Fraud prevention and security: Detecting and preventing unauthorised account access, fraudulent transactions, collusion, bonus abuse, and other prohibited conduct
• Responsible gaming: Monitoring gaming patterns for signs of problem gambling, enforcing self-exclusion requests, and administering deposit and loss limits
• Customer support: Investigating and resolving Player queries, complaints, and disputes
• Platform improvement: Analysing aggregated usage data to improve the Platform's user interface, game selection, and payment flows
• Marketing: Sending promotional offers, bonus notifications, and new game announcements — subject to your communication preferences and where consent has been given

The ttjj Platform uses cookies and similar tracking technologies to support Platform functionality, security, and analytics. A cookie is a small text file placed on your device when you visit the Platform. ttjj uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for core Platform functions including authentication, session management, and security. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and notification preferences to improve your experience on subsequent visits.
• Analytics Cookies: Collect anonymised or pseudonymised data about how users interact with the Platform (pages visited, game types accessed, session durations) to help ttjj improve the service. These are deployed only with your consent.
• Security and Fraud Detection Cookies: Support ttjj's device fingerprinting and anomaly detection systems, which protect your Account from unauthorised access. These operate under ttjj's legitimate interests basis.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect Platform functionality. For analytics and functional cookies, you may withdraw consent at any time through your Account settings.

ttjj does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Your personal data is shared only in the following limited circumstances:

• Game providers: Game session data (pseudonymised player ID, bet amounts, game outcomes) is shared with licensed third-party game providers (such as JILI, Evolution Gaming, and Pragmatic Play) solely for the purpose of providing the game service. These providers do not receive your full identity or payment data.
• Payment processors: Payment method identifiers and transaction amounts are shared with GCash, Maya, and banking partners as necessary to process deposits and withdrawals. These processors are bound by their own financial regulatory obligations and data security standards.
• KYC and fraud screening providers: Identity data submitted for KYC verification is shared with certified identity verification partners for the purpose of confirming identity and age. Fraud and AML screening data is shared with accredited screening service providers.
• Regulatory and law enforcement authorities: Personal data and transaction records are disclosed to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where required by law, court order, or regulatory direction.
• Cloud infrastructure and security providers: Infrastructure partners that host ttjj's servers and provide cybersecurity services may have access to data in the course of providing those services. All such partners are subject to data processing agreements requiring compliance with the DPA.
• Professional advisers: Legal counsel, auditors, and compliance advisers who need access to data in the provision of professional services to ttjj, under obligations of confidentiality.

Some of ttjj's service providers operate infrastructure or processing facilities outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, ttjj ensures that appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements that impose obligations equivalent to those under the Data Privacy Act of 2012
• Transfers to countries or organisations recognised by the NPC as providing adequate protection
• Technical and organisational measures (including encryption and access controls) that mitigate the risks associated with cross-border transfers

Live game streaming data processed in connection with Evolution Gaming and similar international providers may involve data routing through servers located outside the Philippines. In all such cases, contractual data protection obligations are in place.

ttjj retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention schedule applies:

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identified or identifiable individual.

ttjj implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it processes. These measures include:

• Encryption in transit: All data transmitted between your device and ttjj's servers is encrypted using 256-bit Transport Layer Security (TLS), the same standard used by Philippine banks for online banking services
• Encryption at rest: Sensitive personal data and payment-related information stored on ttjj's infrastructure is encrypted at rest using AES-256 encryption
• Access controls: Access to personal data is restricted on a need-to-know basis using role-based access controls. All internal access to Player data is logged and subject to periodic audit
• Pseudonymisation: Where technically feasible, personal data shared with third-party analytics or game providers is pseudonymised so that it cannot be directly linked to an individual without additional information held exclusively by ttjj
• Penetration testing and vulnerability assessments: The ttjj Platform undergoes regular third-party security assessments to identify and remediate vulnerabilities
• Incident response: ttjj maintains a documented data breach response procedure. In the event of a personal data breach that is likely to prejudice the rights and freedoms of data subjects, ttjj will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay where required under the DPA

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ttjj. To exercise any of these rights, please contact ttjj's Data Protection Officer using the details in Section 16.

• Right to be informed: The right to be informed whether ttjj holds personal data about you, and to receive this Privacy Policy at the time of data collection
• Right to access: The right to obtain a copy of the personal data ttjj holds about you, including information about how it is being processed
• Right to rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data ttjj holds about you
• Right to erasure / right to be forgotten: The right to request deletion of your personal data in certain circumstances, subject to ttjj's legal retention obligations under PAGCOR and AMLA requirements
• Right to object: The right to object to the processing of your personal data for direct marketing purposes, or where ttjj relies on legitimate interests as the lawful basis for processing
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that ttjj has processed your personal data in a manner that violates the Data Privacy Act of 2012

ttjj will respond to all rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly. ttjj does not charge a fee for exercising your rights unless a request is manifestly unfounded or excessive.

The ttjj Platform is strictly intended for persons aged 21 years and above, consistent with Philippine gaming regulations enforced by PAGCOR. ttjj does not knowingly collect personal data from any person under the age of 21.

If ttjj becomes aware that it has collected personal data from an individual under 21 years of age, that Account will be immediately suspended, all associated transactions will be reviewed, and the personal data of the underage individual will be securely deleted from ttjj's active systems (subject to any mandatory regulatory reporting obligations). The matter will be reported to PAGCOR as required under ttjj's licensing conditions.

If you believe that ttjj may have inadvertently collected data from an individual under 21, please contact ttjj's Data Protection Officer immediately using the contact details in Section 16.

The ttjj Platform may display references to or facilitates access to third-party services, including game providers' own interfaces, payment processor portals, and customer support tools. Where you interact with these third-party services, their own privacy policies govern the collection and processing of your personal data by those services.

ttjj is not responsible for the privacy practices of any third-party service provider, and the inclusion of any third-party service on the ttjj Platform does not constitute an endorsement of that service provider's data handling practices. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the ttjj Platform.

With your consent, ttjj may send you promotional communications including information about new games, deposit bonus offers, tournament announcements, and platform updates. These communications may be delivered via SMS to your registered Philippine mobile number, via email, and via in-app notifications.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in the ttjj Account settings dashboard
• Clicking the "Unsubscribe" link included in any marketing email
• Contacting ttjj's Player Support team and requesting to be removed from marketing lists

Withdrawal of marketing consent does not affect ttjj's right to send you transactional or service-related communications (such as deposit confirmations, withdrawal status updates, KYC verification notices, and account security alerts), which are sent on the basis of contract performance rather than consent and cannot be opted out of while your Account remains active.

ttjj reserves the right to update and amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the National Privacy Commission or PAGCOR, or changes in ttjj's data processing activities.

When material changes are made to this Policy, ttjj will provide notice to registered Players via the registered email address and/or via a prominent notice on the Platform, at least fourteen (14) calendar days before the amended Policy takes effect. For non-material changes (such as clarifications, typographical corrections, or contact detail updates), ttjj may update the Policy immediately without advance notice.

The most current version of this Privacy Policy is always available on this page. The "Last Updated" date at the top of this document reflects the date of the most recent revision. Your continued use of the ttjj Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a potential data privacy concern, please contact ttjj's Data Protection Officer through the following official channels:

• Email (DPO): [email protected] — please include "Privacy / DPO Request" in your subject line for priority handling
• In-App Live Chat: Available 24/7 via the support chat on the ttjj Platform; for DPO matters, request escalation to the Privacy team
• Response Time: All privacy-related inquiries are acknowledged within 48 hours; rights requests are responded to within 30 calendar days

If you are not satisfied with ttjj's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for data privacy enforcement in the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official government website.