No2jl is committed to protecting the personal data of every Filipino player who uses our platform. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
Our Privacy Commitments
These highlights summarise our key privacy commitments. They do not replace the full Privacy Policy below, which all players should read in its entirety.
All personal data transmitted to and from the no2jl platform is encrypted using TLS 1.3 protocols. Data stored on our servers — including identity documents, payment information, and transaction history — is encrypted at rest using AES-256. We follow the same encryption standards used by Philippine banks and financial institutions.
No2jl does not sell, rent, lease, or trade your personal data to third parties for marketing or commercial purposes. Your mobile number, email address, identity documents, and transaction history belong to you. We share data only where required by PAGCOR, the NPC, AML law, or a valid court order — and only to the minimum extent necessary.
No2jl operates in full compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). We have a designated Data Protection Officer and maintain a data processing register as required by law.
No2jl only collects personal data that is necessary for delivering the platform's services, complying with PAGCOR and AML obligations, and protecting player accounts. We tell you exactly what we collect, why we need it, and how long we keep it — in plain language, not buried in legal footnotes.
Under RA 10173, you have the right to access, correct, delete, and port your personal data, and to object to certain types of processing. No2jl provides a straightforward mechanism to exercise all of these rights through your Account Settings or by contacting our Data Protection Officer directly.
In the unlikely event of a personal data breach that poses a real risk to your rights, no2jl will notify affected players and report the incident to the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.
1.1 No2jl ("the Platform", "we", "us", "our") takes the privacy and security of your personal data seriously. As a PAGCOR-regulated online casino and sports betting platform operating in the Philippines, no2jl is subject to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and all relevant issuances of the National Privacy Commission ("NPC").
1.2 This Privacy Policy describes: (a) what personal data no2jl collects from players and prospective players; (b) the purposes for which that data is collected and processed; (c) the legal bases for processing; (d) how data is stored, protected, and shared; (e) how long data is retained; and (f) the rights available to data subjects under Philippine law and how to exercise them.
1.3 This Privacy Policy should be read alongside no2jl's Terms & Conditions, which govern the contractual relationship between no2jl and its players, and no2jl's Responsible Gaming Policy. In the event of any conflict between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy prevails.
2.1 For the purposes of the DPA 2012 and its IRR, the personal data controller responsible for the data described in this Privacy Policy is no2jl, operating the platform at no2jl.club, and licensed by PAGCOR to provide online casino and sports betting services in the Philippines.
2.2 No2jl has appointed a Data Protection Officer ("DPO") as required under Section 21 of the DPA 2012. The DPO is responsible for overseeing no2jl's data protection compliance programme, handling data subject requests, and serving as the primary point of contact with the NPC.
2.3 Players may contact the DPO by emailing [email protected] with the subject line "Data Protection Officer — Privacy Request". Requests are acknowledged within three (3) business days and resolved within thirty (30) calendar days in accordance with NPC guidelines.
3.1 No2jl collects the following categories of personal data:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, ID document images, selfie photograph | Required (KYC) |
| Contact Data | Philippine mobile number, email address | Required |
| Account Data | Username, hashed password, account creation date, login history, session timestamps | Required |
| Financial Data | GCash account name, Maya account reference, bank account name and last four digits, transaction history, deposit and withdrawal amounts | Required |
| Gaming Data | Game history, bet amounts, win/loss records, bonus usage, responsible gaming limit settings | Automatically generated |
| Technical Data | IP address, device type, operating system, browser type, screen resolution, geolocation (country/region level) | Automatically collected |
| Communications Data | Live chat transcripts, support email exchanges, feedback submissions | Where applicable |
| Marketing Data | Communication preferences, promotional opt-in/opt-out status, campaign response history | Optional |
3.2 No2jl does not collect sensitive personal information (as defined under Section 3(l) of the DPA 2012) such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or biometric data for identification purposes, except where a government-issued ID submitted for KYC incidentally contains such information, in which case that information is not extracted, processed, or stored beyond the KYC document itself.
4.1 No2jl collects personal data through the following means:
5.1 No2jl processes personal data for the following purposes and on the following legal bases under the DPA 2012:
| Purpose | Data Categories Used | Legal Basis (DPA 2012) |
|---|---|---|
| Account registration and management | Identity, Contact, Account | Performance of contract (Sec. 12(b)) |
| Identity verification (KYC) and age verification | Identity | Legal obligation — PAGCOR & AMLA (Sec. 12(c)) |
| Payment processing and financial reconciliation | Financial, Identity | Performance of contract; Legal obligation (Sec. 12(b)(c)) |
| Anti-money laundering compliance and fraud prevention | Identity, Financial, Technical, Gaming | Legal obligation — RA 9160 AMLA (Sec. 12(c)) |
| Game delivery, fairness monitoring, and dispute resolution | Gaming, Technical, Account | Performance of contract (Sec. 12(b)) |
| Responsible gaming monitoring and intervention | Gaming, Account | Legal obligation — PAGCOR; Legitimate interest (Sec. 12(f)) |
| Customer support and complaint handling | Communications, Identity, Account | Performance of contract (Sec. 12(b)) |
| Platform security and abuse prevention | Technical, Account | Legitimate interest (Sec. 12(f)) |
| Marketing and promotional communications | Contact, Marketing | Consent (Sec. 12(a)) — opt-in only |
| Platform analytics and product improvement | Technical, Gaming (aggregated/anonymised) | Legitimate interest (Sec. 12(f)) |
6.1 No2jl does not sell, rent, or commercially share your personal data with third parties. No2jl discloses personal data only in the following limited circumstances:
6.2 All third parties with whom no2jl shares personal data are required to process that data only for the specified purpose, to maintain adequate security measures, and to comply with applicable Philippine data protection law. No2jl does not transfer personal data to third parties located outside the Philippines without the safeguards described in Section 12.
7.1 No2jl retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account legal, regulatory, and business requirements. The following retention periods apply:
7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. No2jl maintains a data retention schedule reviewed annually by the DPO.
8.1 No2jl implements technical, organisational, and administrative security measures appropriate to the nature of the personal data processed and the risks involved. These measures include but are not limited to:
8.2 Notwithstanding the above, no security system is impenetrable. No2jl cannot guarantee absolute security of data transmitted over the internet. Players are advised to use strong, unique passwords for their no2jl accounts and to enable multi-factor authentication where available.
8.3 Data Breach Response. No2jl maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to the rights and freedoms of affected players, no2jl will: (a) notify the NPC within seventy-two (72) hours of discovery, as required by NPC Circular No. 16-03; (b) notify affected players without undue delay where the breach is likely to result in a high risk to their rights; (c) take immediate remediation steps to contain the breach and prevent recurrence.
9.1 No2jl uses cookies and similar tracking technologies to support the operation of the Platform and to improve the player experience. The following types of cookies are used:
9.2 You may control cookies through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly. Disabling other cookies may limit certain features but will not affect your ability to play games or process transactions.
10.1 Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by no2jl:
You have the right to be informed of how your data is collected, processed, used, retained, and shared — which is the purpose of this Privacy Policy.
You may request a copy of the personal data no2jl holds about you, including a summary of how it has been used. Requests are fulfilled within thirty (30) days.
If any personal data no2jl holds about you is inaccurate or incomplete, you have the right to request correction. Name and contact updates may require re-verification.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to no2jl's legal retention obligations under PAGCOR and AMLA regulations.
You may object to the processing of your data for direct marketing purposes or where processing is based on legitimate interest. Objections to marketing are processed within 48 hours.
You may request a copy of your personal data in a structured, machine-readable format for transfer to another service provider, to the extent technically feasible.
10.2 To exercise any of these rights, contact no2jl's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request — [Right Type]". Please include your registered mobile number and a description of your request. No2jl may request proof of identity before fulfilling any data subject rights request.
10.3 If you are unsatisfied with no2jl's response to a data subject rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) through its official channels.
11.1 No2jl is strictly prohibited from processing the personal data of individuals under 21 years of age for gambling purposes, consistent with PAGCOR regulations and the age restriction set out in no2jl's Terms & Conditions. No2jl does not knowingly collect or process personal data from minors.
11.2 If no2jl becomes aware that it has collected personal data from an individual under the age of 21, the relevant account will be immediately suspended, the data will be deleted in a secure manner (subject only to any mandatory reporting obligations triggered by the circumstances), and any funds deposited will be returned to the originating payment account after deduction of any applicable processing costs.
11.3 Parents or guardians who believe that a person under 21 has created a no2jl account should contact the support team immediately via live chat or at [email protected].
12.1 No2jl's primary data processing infrastructure is located in the Philippines. Certain service providers engaged by no2jl — including cloud infrastructure providers and game software providers — may process data in servers located outside the Philippines.
12.2 Where personal data is transferred outside the Philippines, no2jl ensures that such transfers are conducted in compliance with Section 21 of the DPA 2012 and NPC guidelines on cross-border data flows. Specifically, no2jl requires that: (a) the recipient country or organisation provides an adequate level of protection for personal data; or (b) appropriate safeguards are in place, such as contractual data processing agreements incorporating the NPC's standard data transfer clauses.
12.3 Players may request information about the specific cross-border transfers applicable to their data by contacting no2jl's DPO.
13.1 No2jl reviews this Privacy Policy at least annually and updates it whenever there are material changes to how we collect or process personal data, changes in applicable law, or changes in the services we offer.
13.2 Where changes are material, no2jl will notify players via their registered mobile number or email address at least fourteen (14) days before the updated Privacy Policy takes effect. The effective date of the current version is displayed at the top of this page.
13.3 Continued use of the Platform following the effective date of any updated Privacy Policy constitutes acceptance of the updated terms. The current Privacy Policy is always accessible at no2jl.club/privacy-policy.
14.1 For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by no2jl, please contact:
Data Protection Officer, no2jl
Email: [email protected]
Subject Line: "Data Protection Officer — [Your Request Type]"
Response Time: Within three (3) business days of receipt
14.2 Players may also reach no2jl's support team via the 24/7 live chat facility on the Platform for general privacy queries. Complex data subject rights requests should be directed to the DPO email above for formal handling.
14.3 For complaints that remain unresolved after no2jl's internal process, players may contact the National Privacy Commission of the Philippines through its official website and complaint handling procedures.
Your personal data stays protected under Philippine law. No2jl is PAGCOR-regulated, DPA 2012 compliant, and built for Filipino players who value both security and great gaming. 21+ only. Play responsibly.