trjl Privacy Policy

trjl is a PAGCOR-licensed online casino platform operating under applicable Philippine gaming and data privacy regulations, serving Filipino players across the Philippines through the website at trjl.net. trjl acts as the data controller in respect of all personal data collected through the Platform, and is registered with the National Privacy Commission (NPC) as required under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA").

This Privacy Policy applies to all personal data collected from players, prospective players, and visitors to the trjl Platform, including data collected through the website, any associated mobile application, customer support interactions, and promotional or marketing communications.

trjl collects personal data across several categories. The table below sets out each category, specific data points, and the primary reason for collection:

trjl does not collect biometric data, religious or political affiliations, or any sensitive personal information beyond what is strictly required for regulatory KYC compliance.

trjl collects personal data through the following channels and methods:

• Direct Submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser fingerprint, session duration, and pages visited — collected through server logs, cookies, and similar tracking technologies.
• Payment Providers: Transaction confirmation data shared by GCash, PayMaya, BPI, BDO, and Metrobank when processing your deposits and withdrawals. trjl never receives or stores your full payment credentials — only masked references and transaction statuses.
• Identity Verification Partners: Where trjl uses a third-party KYC verification service to validate government-issued IDs, that service may provide trjl with a verification result and risk score. The identity documents themselves are handled in accordance with the third party's data processing agreement with trjl.
• Responsible Gaming Monitoring: trjl's internal systems automatically analyse gaming patterns for responsible gaming indicators. This analysis generates derived data points that inform any responsible gaming interventions applied to your account.

Under the Philippine Data Privacy Act of 2012, trjl must have a lawful basis for processing each category of your personal data. The following table sets out the purposes for which trjl processes your personal data and the corresponding legal basis under the DPA:

trjl does not sell, rent, or trade your personal data to any third party. trjl may share your personal data only in the following limited circumstances, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data required to execute your deposits and withdrawals. All payment processors engaged by trjl are required to maintain data security standards equivalent to those imposed by trjl.
• KYC & Identity Verification Providers: Where trjl engages a third-party KYC service, your identity data is shared solely for verification purposes under a formal data processing agreement that binds the provider to the requirements of the Philippine DPA.
• PAGCOR and AMLC: trjl is legally required to submit player data, transaction records, and suspicious activity reports to the Philippine Amusement and Gaming Corporation and the Anti-Money Laundering Council in accordance with applicable regulations. This is a mandatory legal obligation and cannot be refused.
• Law Enforcement and Regulatory Authorities: trjl will disclose personal data to Philippine law enforcement agencies or courts of competent jurisdiction where required by a valid legal order, warrant, or regulatory directive. trjl will notify affected players of such disclosure where legally permitted to do so.
• IT Infrastructure and Security Providers: Service providers supporting trjl's technical infrastructure (hosting, CDN, security monitoring) may have limited, controlled access to system data as part of their contracted services. All such providers operate under strict data processing agreements and are prohibited from using trjl data for any other purpose.
• Business Transfers: In the event of a merger, acquisition, or sale of trjl or substantially all of its assets, player data may be transferred to the acquiring entity, subject to the same protections described in this Privacy Policy. Affected players will be notified of any such transfer.

trjl retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with applicable legal, regulatory, and audit obligations. The following retention periods apply:

• Active account data: Retained for the duration of your account relationship with trjl, plus a minimum of five (5) years following account closure — consistent with PAGCOR record-keeping requirements and AMLA record retention obligations.
• KYC and identity verification documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLA and PAGCOR requirements.
• Support and dispute communications: Retained for three (3) years from the date of the last interaction, or longer if the communication relates to an ongoing dispute or regulatory inquiry.
• Gaming activity logs: Retained for five (5) years, for fairness auditing, responsible gaming review, and regulatory compliance purposes.
• Marketing consent records: Retained for the duration of the consent, plus two (2) years from withdrawal of consent, to demonstrate compliance.
• Technical and usage data (cookies, logs): Retained for up to thirteen (13) months from collection, unless a longer period is required for security incident investigation.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where data cannot be immediately deleted due to technical constraints, it will be isolated and restricted until secure deletion is possible.

trjl implements a layered information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our technical and organisational security measures include:

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for all data in transit between your browser and our servers;
• Access Controls: Role-based access control (RBAC) limiting staff access to personal data strictly to those whose job functions require it; all access is logged and audited;
• Multi-Factor Authentication: Required for all trjl staff with administrative access to systems holding personal data;
• Intrusion Detection: 24/7 automated monitoring systems with real-time alerting for anomalous access patterns or potential security incidents;
• Penetration Testing: Regular third-party security assessments and penetration tests conducted on trjl's infrastructure and applications;
• Data Breach Response: A documented incident response plan including notification procedures to the NPC within 72 hours of becoming aware of a personal data breach that poses a real risk of serious harm to affected players, as required under NPC Circular 16-03.

trjl uses cookies and similar tracking technologies to operate the Platform, improve your experience, and fulfil certain regulatory obligations. The following categories of cookies are used on trjl.net:

• Strictly Necessary Cookies: Required for the Platform to function correctly — these include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations. These improve your experience but are not essential.
• Analytics Cookies: Help trjl understand how players navigate the Platform — which features are most used, where users encounter difficulty, and how overall platform performance can be improved. Analytics data is aggregated and does not identify individual players by name.
• Security and Fraud Detection Cookies: Used to identify and mitigate automated bot activity, multi-account abuse, and other fraudulent behaviour patterns. These are essential for Platform integrity.

trjl does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in or using core Platform features. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of your personal data held by trjl. All requests should be submitted to trjl support at [email protected] and will be acknowledged within five (5) business days:

The trjl Platform is strictly intended for persons aged 21 years and older, consistent with Philippine law and PAGCOR licensing regulations governing real-money gaming. trjl does not knowingly collect personal data from individuals under the age of 21.

If trjl becomes aware, through KYC verification or any other means, that a person under the age of 21 has registered an account or provided personal data, trjl will:

• Immediately suspend the account pending investigation;
• Return any unplayed deposit balance to the depositing payment method after appropriate identity checks;
• Permanently close the account and delete the personal data of the minor, subject to any mandatory regulatory retention requirements;
• Report the incident to PAGCOR in accordance with applicable regulatory requirements.

The trjl Platform does not contain outbound links to third-party websites as a matter of policy. However, where any reference to a third-party service or resource appears on the Platform (for example, references to PAGCOR, NPC, or payment providers), please be aware that trjl has no control over the data practices of those third-party websites and is not responsible for their privacy policies or content.

This Privacy Policy applies solely to personal data collected and processed by trjl through the trjl.net Platform. If you follow any link that takes you to a website operated by a third party, you should review that website's own privacy policy before providing any personal information.

trjl is a Philippines-focused platform and, wherever practicable, stores and processes player data within data centres located in the Philippines or within jurisdictions that provide an adequate level of data protection as assessed under the Philippine DPA and applicable NPC standards.

Where it is necessary to transfer personal data outside the Philippines — for example, to a global KYC verification provider or cloud infrastructure partner — trjl will ensure that such transfers are protected by appropriate safeguards, including:

• Contractual clauses that require the receiving entity to process the data in a manner consistent with the Philippine DPA;
• Verification that the destination country's data protection framework provides protections substantially equivalent to those afforded under Philippine law;
• NPC notification and approval where required for certain categories of cross-border data transfer.

By registering an account with trjl and accepting this Privacy Policy, you consent to the transfer of your personal data to other jurisdictions under the safeguards described above.

trjl reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or trjl's data processing practices. When material changes are made, trjl will notify registered players by email to their registered address and by displaying a prominent notice on the Platform for a minimum of fourteen (14) days prior to the changes taking effect.

The "Last updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the trjl Platform after the effective date of any revision constitutes your acceptance of the revised Privacy Policy. If you do not accept the revised terms, you should cease using the Platform and contact trjl support to close your account.

Previous versions of this Privacy Policy are available upon request by contacting trjl support at [email protected].

trjl has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012 and NPC Circular 17-01. The DPO is responsible for overseeing trjl's data protection programme, handling player data rights requests, and serving as the primary point of contact with the National Privacy Commission.

If you have any questions, concerns, or requests relating to this Privacy Policy or trjl's handling of your personal data, you may contact the trjl Data Protection Officer through the following channel:

All data rights requests will be handled in accordance with the timelines and procedures set out in Section 09 of this Privacy Policy and applicable NPC guidelines. trjl will never charge a fee for legitimate data rights requests submitted in good faith.