juan357 Privacy Policy
Your Data, Your Rights

juan357 ("juan357", "we", "us", "our") operates the online gaming platform accessible at juan357.co, providing casino games, sports betting, sabong livestream wagering, bingo, and related gaming services to players in the Philippines.

This Privacy Policy describes how juan357 collects, uses, discloses, stores, and protects the personal information of individuals who visit, register with, or use our Platform ("you", "your", "Player"). It is issued in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), and its Implementing Rules and Regulations.

By registering an Account or using the juan357 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you should not use the Platform.

For the purposes of the Data Privacy Act of 2012, juan357 is the Personal Information Controller (PIC) responsible for the personal data collected and processed through the Platform.

As PIC, juan357 determines the purposes and means by which personal data is processed and is responsible for ensuring that all processing activities comply with the DPA, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

juan357 has designated a Data Protection Officer (DPO) to oversee compliance with this Policy and data protection obligations generally. Contact details for the DPO are provided in Section 16 of this Policy.

juan357 collects the following categories of personal data from Players, depending on the nature of their interaction with the Platform:

juan357 does not intentionally collect sensitive personal information (as defined in Section 3(l) of the DPA) beyond what is strictly required for identity verification and regulatory compliance. Where collection of sensitive data is necessary, explicit consent will be sought in accordance with the DPA.

juan357 collects personal data through the following methods:

• Direct provision by you — when you complete the account registration form, submit KYC documents, make a deposit or withdrawal request, contact customer support, or interact with any form or feature on the Platform.
• Automated collection — when you access the Platform, our systems automatically record technical data including IP address, device identifiers, browser information, session duration, pages visited, and in-game activity data.
• Payment processors — when you transact via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, or Cebuana, those services provide transaction confirmation data to juan357 to enable credit of your Account.
• KYC verification providers — where juan357 uses third-party identity verification services, those services provide verification outcomes and, where necessary, identity document data for AML compliance.
• Cookies and tracking technologies — as described in Section 8 of this Policy.

juan357 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to fulfil our obligations under the account agreement with you, including account management, payment processing, and game access.
• Legal obligation — processing required to comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the DPA, and other applicable Philippine law.
• Consent — for processing activities where you have provided express, informed consent, including marketing communications and certain optional data collection activities. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate interests — for processing activities that serve juan357's legitimate business interests — such as fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your fundamental rights and freedoms.

juan357 uses personal data for the following purposes:

• Account creation and management — registering your Account, maintaining accurate account records, processing login credentials, and enabling access to the Platform.
• Identity verification (KYC) — confirming that you are who you say you are, verifying age eligibility (21+), and meeting AML obligations under Philippine law.
• Payment processing — processing deposits from GCash, PayMaya, BPI, BDO, and other supported payment methods, and processing withdrawal requests to verified accounts.
• Customer support — responding to queries, investigating complaints, resolving disputes, and providing account assistance via live chat and email.
• Responsible gaming compliance — monitoring gaming activity to identify patterns that may indicate problem gambling, enforcing account limits, and administering self-exclusion requests.
• Fraud prevention and security — detecting and preventing fraudulent activity, unauthorized account access, money laundering, bonus abuse, and other prohibited conduct.
• Regulatory compliance and reporting — meeting PAGCOR reporting requirements, AML obligations, and any other statutory reporting duties applicable to our operations.
• Platform improvement — analysing aggregated usage data to improve game selection, platform performance, user experience, and feature development.
• Marketing communications — sending promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications (see Section 13).

juan357 shares personal data only where necessary and with appropriate safeguards in place. We do not sell personal data. Data may be shared with the following categories of recipients:

• Payment service providers — GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, and Cebuana, for the purpose of processing deposits and withdrawals.
• Identity verification and KYC providers — authorised third-party services engaged to perform document verification and identity checks as required for AML compliance.
• Game software providers — licensed game studios and platforms whose titles are available in the juan357 lobby receive session data necessary to operate their games and maintain RNG certification.
• IT and hosting infrastructure providers — cloud hosting, database management, and cybersecurity service providers who process data on juan357's behalf as Personal Information Processors (PIPs) under written data processing agreements.
• PAGCOR and regulatory authorities — as required by our operating obligations, regulatory reporting requirements, or in response to lawful orders or investigations.
• Law enforcement and government agencies — where required by law, court order, or government authority with jurisdiction over juan357 or its Players.
• Fraud prevention and AML services — shared industry fraud prevention databases and AML screening services as required to meet legal obligations.

All third-party service providers who act as Personal Information Processors are bound by data processing agreements that require them to implement appropriate technical and organisational security measures and to process data only on juan357's documented instructions.

juan357 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies — required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without preventing Platform access.
• Functional cookies — remember your preferences, language settings, and responsible gaming configurations between sessions.
• Analytics cookies — collect anonymised data on Platform usage patterns (pages visited, session length, navigation paths) to support platform improvement. Data is aggregated and does not identify individual Players.
• Security cookies — used to detect fraudulent login attempts, unusual access patterns, and potential account compromise activities.

juan357 does not use third-party advertising cookies or cross-site tracking technologies that share your browsing behaviour with external advertising networks.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform, but may affect the availability of certain personalisation features.

juan357 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any longer retention periods required by applicable law. The following retention guidelines apply:

• Active Account data — retained for the duration of the account relationship and for a period of five (5) years after Account closure, in line with AML record-keeping requirements.
• KYC and identity documents — retained for a minimum of five (5) years from the date of collection or Account closure (whichever is later), as required under the Anti-Money Laundering Act.
• Financial transaction records — retained for a minimum of five (5) years from the date of transaction, in compliance with AML and tax record-keeping requirements.
• Gaming activity logs — retained for a period of three (3) years from the date of the relevant session, for responsible gaming monitoring and dispute resolution purposes.
• Customer support communications — retained for two (2) years from the date of closure of the relevant support case.
• Marketing consent records — retained for the duration of the consent and for one (1) year after consent is withdrawn, as evidence of the withdrawal.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be attributed to an identified or identifiable individual.

juan357 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data we process. These include but are not limited to:

• SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data fields (including payment method details and identity document data) at rest.
• Role-based access controls ensuring that personal data is accessible only to personnel with a verified operational need.
• Multi-factor authentication for internal systems that access personal data.
• Regular penetration testing and vulnerability assessments conducted by independent security specialists.
• Incident response procedures with defined timelines for breach detection, containment, assessment, and notification.
• Staff training on data protection obligations and information security best practices.

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by juan357:

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 16. juan357 will respond to verified rights requests within thirty (30) days of receipt. We may require identity verification before processing a rights request to prevent unauthorised disclosure.

Where a rights request conflicts with juan357's legal obligations — for example, a deletion request relating to data that must be retained under AML law — we will inform you of the conflict and the applicable legal basis for continued retention.

The juan357 Platform is strictly for individuals aged 21 years and above. juan357 does not knowingly collect personal data from individuals under the age of 21.

If juan357 becomes aware that personal data has been collected from an individual below the minimum age, that Account will be immediately closed and all personal data deleted or returned to a verified parent or guardian in accordance with the DPA and applicable minor protection regulations.

If you believe that a minor has registered an Account on juan357 or that their personal data has been collected without appropriate authorization, please contact us immediately at the details in Section 16.

juan357 may send promotional communications — including bonus offers, game announcements, and platform updates — to Players who have opted in to receive such communications at registration or subsequently through their Account settings.

• Marketing communications are sent by SMS to your registered Philippine mobile number and/or by email to your registered email address, where provided.
• You may withdraw your consent to receive marketing communications at any time by updating your communication preferences in your Account settings or by contacting our support team.
• Withdrawal of marketing consent does not affect your ability to use the Platform or access your Account. Transactional messages (account security alerts, deposit confirmations, withdrawal notifications) will continue regardless of marketing preference settings.
• juan357 does not share your contact information with third-party marketers for the purpose of direct marketing.

The juan357 Platform integrates with third-party services — including game providers, payment processors, and identity verification services — that are necessary to deliver our products to Players in the Philippines.

Each third-party service operates under its own privacy policy and data processing terms. Where juan357 acts as a Personal Information Controller with respect to data processed by these services on our behalf, we maintain data processing agreements that require those services to comply with the DPA and apply appropriate security measures.

juan357 is not responsible for the privacy practices of third-party services to the extent that they act as independent Personal Information Controllers with their own direct relationships with you. We recommend reviewing the privacy policies of GCash, PayMaya, and any other payment services you use independently of the juan357 Platform.

juan357 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered Players via SMS or email prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates the date of the most recent revision. Continuing to use the juan357 Platform after an updated Privacy Policy takes effect constitutes your acceptance of the revised Policy.

Previous versions of this Privacy Policy are available on request by contacting our Data Protection Officer using the details in Section 16.

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights under Republic Act No. 10173 have been violated. juan357 will co-operate fully with any NPC investigation relating to our data processing activities.

The NPC can be reached through its official channels as published on the National Privacy Commission's official government website. juan357 recommends contacting us directly first to resolve any concern before escalating to the NPC, as most issues can be resolved promptly by our DPO team.