Privacy Policy

1 Introduction & Identity of the Data Controller

jewelph ("we", "us", "our") is the personal information controller responsible for your data collected through the Platform operated at jewelph.vip. jewelph operates within the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the relevant issuances of the National Privacy Commission (NPC) of the Philippines.

We have designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for the DPO are provided in Section 12 of this Policy.

This Policy should be read alongside our Terms & Conditions, which govern your use of the Platform, and our Responsible Gaming page. Together, these documents form the basis of the relationship between jewelph and every Filipino player who registers an Account.

2 Personal Data We Collect

jewelph collects personal information in the following categories. We collect only the minimum data necessary to provide the Services, comply with legal obligations, and maintain the security of the Platform.

3 How jewelph Uses Your Personal Data

We use your personal data for the following purposes:

• Account Management: Creating, maintaining, and managing your jewelph Account, including processing registration, KYC verification, and account security functions;
• Service Delivery: Enabling access to all Platform Services — casino games, bingo, slots, sports betting, and Playtech Live — and recording wagering activity accurately;
• Payment Processing: Processing deposits from and withdrawals to your registered GCash, Maya, or Philippine bank account, and maintaining transaction records for accounting and audit purposes;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, unauthorised account access, money laundering, and other illegal activity — including sharing data with PAGCOR and law enforcement where required;
• Legal Compliance: Meeting jewel ph's obligations under PAGCOR regulations, RA 10173, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators and administering self-exclusion requests, deposit limits, and other responsible gaming tools;
• Customer Support: Responding to your queries, complaints, and feedback submitted via support channels;
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have given consent or where permitted under applicable law. You may opt out at any time;
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game performance, page load times, and the overall Filipino player experience.

4 Legal Basis for Processing

jewelph processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform the contract between you and jewelph as set out in the Terms & Conditions — primarily Account management, game access, and payment processing;
• Legal Obligation: Processing necessary to comply with PAGCOR licensing requirements, AMLA obligations, NPC directives, and other applicable Philippine regulations;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics — where our interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications and non-essential cookies, where we have obtained your specific, informed consent. Consent may be withdrawn at any time without affecting prior processing.

5 Disclosure & Sharing of Personal Data

5.1 Authorised Third Parties

jewelph shares your personal data only with third parties who have a legitimate need to access it for the purposes described in this Policy. Recipients include:

• Game Software Providers (e.g. Pragmatic Play, Playtech, Evolution Gaming, NetEnt) — limited game session and RNG audit data necessary to deliver certified game outcomes;
• Payment Processors (GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet) — identity and transaction data necessary to process deposits and withdrawals;
• KYC & Identity Verification Providers — identity document data shared with certified verification partners to fulfil PAGCOR-mandated KYC obligations;
• Fraud Prevention & AML Service Providers — transaction and behavioural data shared with specialist compliance services to detect money laundering and fraud;
• Cloud Infrastructure Providers — data stored on secure, access-controlled cloud servers. jewel ph ensures all cloud providers maintain data security standards equivalent to or exceeding Philippine NPC requirements;
• Customer Support Platforms — communications data shared with our support software provider, used solely for managing support tickets.

5.2 Regulatory Authorities

jewelph may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), and other Philippine government agencies where required by law, regulation, court order, or as part of an investigation into illegal activity.

5.3 No Sale of Data

jewelph does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Period.

6 Cookies & Tracking Technologies

jewelph uses cookies and similar tracking technologies to operate the Platform effectively. Cookies are small text files stored on your device. We use the following categories:

• Strictly Necessary Cookies: Required for the Platform to function — session authentication, security tokens, load balancing. These cannot be disabled without breaking the Platform.
• Functional Cookies: Remember your preferences such as language, display settings, and responsible gaming limit configurations set in your Account.
• Analytics Cookies: Collect anonymised data about how players navigate the Platform to identify performance issues and improve the user experience. No personally identifiable information is included in analytics data shared with third parties.
• Marketing Cookies: Used only with your explicit consent to serve relevant promotional content. You may withdraw consent via your Account settings or browser settings at any time.

You can control cookie preferences through your browser settings. Blocking strictly necessary cookies will affect Platform functionality. For all other cookie categories, your consent can be managed at any time.

7 Data Retention

jewelph retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by law. Our standard retention schedule is as follows:

• Active Account Data: Retained for the duration of your Account and for five (5) years after Account closure, as required under AMLA and PAGCOR record-keeping obligations;
• Transaction Records: Retained for a minimum of five (5) years after the date of the transaction in compliance with AMLC reporting requirements;
• KYC Documents: Retained for five (5) years after Account closure or the last transaction, whichever is later;
• Support Communications: Retained for two (2) years after closure of the support ticket;
• Marketing Consent Records: Retained for the period of consent plus three (3) years to demonstrate compliance;
• Anonymised Analytics Data: May be retained indefinitely in aggregated, non-identifiable form.

After the applicable retention period expires, personal data is securely deleted or anonymised in a manner that prevents re-identification.

8 Data Security

jewelph implements technical and organisational security measures appropriate to the risk of processing, consistent with NPC-issued security guidelines and industry best practices for online gaming platforms. These measures include:

• TLS 1.3 encryption for all data in transit between your browser/device and jewelph servers;
• AES-256 encryption for sensitive personal data stored at rest;
• Multi-factor authentication requirements for Platform administrator and staff access;
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments by independent security specialists;
• Intrusion detection systems and real-time security monitoring;
• Annual data protection training for all jewel ph staff who process personal data.

9 Your Data Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in relation to your personal data held by jewelph. To exercise any of these rights, contact our Data Protection Officer using the details in Section 12.

10 Children & Minors

If you are a parent or guardian who believes your child under 21 years of age has registered on the Platform, please contact our Data Protection Officer immediately using the contact details in Section 12. We will investigate and take action within 48 hours of receiving your notification.

11 Updates to This Privacy Policy

jewelph may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. Where changes are material — for example, a new category of data collected or a new sharing arrangement — we will notify you by email to your registered address or via a prominent notice on the Platform at least seven (7) days before the changes take effect.

Minor updates that do not substantially affect your rights may be made without prior notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Platform after the effective date of any update constitutes acceptance of the revised Policy.

We recommend reviewing this Policy periodically, particularly if you are a regular jewel ph player. The current version is always accessible at jewelph.vip/privacy-policy.

12 Contact Our Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by jewelph, please contact our Data Protection Officer: