Privacy Policy —
How juli7 Protects Your Data

1 Introduction and Scope

This Privacy Policy is issued by juli7 (referred to herein as "juli7," "we," "us," or "our"), the operator of the online gaming platform accessible at https://juli7.cam. It describes how juli7 collects, processes, stores, shares, and protects the personal information of individuals who register for or use the juli7 platform and related services (collectively, the "Services").

This Privacy Policy applies to all personal data processed by juli7 in connection with the operation of the platform, including data collected through the website, account registration, customer support interactions, payment processing, and promotional communications. It applies to all registered players and to visitors who access the platform without registering.

2 Legal Basis and Controller Identity

Juli7 is the Personal Information Controller (PIC) as defined under the Data Privacy Act of 2012 with respect to the personal data of registered players and platform users. As PIC, juli7 determines the purposes and means of processing personal data collected through the platform.

The platform operates under a PAGCOR-compliant regulatory framework. Certain data processing activities — including anti-money laundering record-keeping and age verification — are mandated by applicable Philippine law and cannot be waived or opted out of by individual players without affecting their ability to access real-money gaming features.

3 Personal Data We Collect

3.1 Registration Data

When you create a juli7 account, we collect the following information:

• Legal full name (as it appears on your government-issued ID);
• Date of birth (to verify that you are 21 years of age or older);
• Active Philippine mobile number;
• Email address (where provided during registration);
• Username and hashed password credentials.

3.2 KYC Identity Verification Data

To comply with PAGCOR requirements and the Anti-Money Laundering Act, we collect and verify:

• Copies of Philippine government-issued identification documents (e.g., PhilSys National ID, UMID, driver's license, passport);
• Proof of address (where required for enhanced due diligence);
• Selfie or biometric verification image (where required).

3.3 Financial and Transaction Data

In connection with deposits and withdrawals, we collect:

• GCash or PayMaya account reference details associated with your verified identity;
• Bank account details (BPI, BDO, Metrobank, UnionBank) registered in your legal name;
• Transaction history including deposit amounts, withdrawal amounts, dates, and references;
• Payment instrument type and partial identifiers where applicable.

3.4 Gaming Activity Data

We automatically record the following gaming activity data for all registered players:

• Games played, bet amounts, game outcomes, session durations;
• Active bonuses, wagering progress, and promotional participation history;
• Responsible gaming tool settings and self-exclusion status.

3.5 Technical and Device Data

We collect certain technical data automatically when you access the platform:

• IP address and approximate geographic location (region/city level);
• Device type, operating system, and browser type and version;
• Session identifiers and access timestamps;
• Referring URL and navigation path within the platform.

3.6 Communications Data

When you contact juli7 customer support via live chat or email, we retain records of those communications, including the content of your messages, the nature of your inquiry, and the resolution provided, for quality assurance and dispute resolution purposes.

3.7 Summary of Data Types and Purposes

4 How We Use Your Personal Data

Juli7 uses the personal data described in Section 3 for the following purposes:

• Account Management: To create, maintain, authenticate, and administer your juli7 account, including processing login requests and password resets;
• Service Delivery: To provide access to the full range of gaming services offered on the platform, including live casino, slots, sports betting, bingo, and fishing games;
• Payment Processing: To process your deposits and withdrawals in Philippine Peso through your chosen local payment method (GCash, PayMaya, BPI, BDO, Metrobank, and others);
• Compliance and AML: To fulfil obligations under Philippine law, including the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR regulatory requirements, and NPC data protection obligations;
• Responsible Gaming: To monitor gaming behaviour patterns for the purpose of identifying players who may be at risk and to enforce responsible gaming tools and self-exclusion requests;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeover attempts, collusion, and other prohibited conduct;
• Customer Support: To respond to your inquiries, complaints, and support requests, and to maintain records of support interactions;
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the platform's performance, stability, and user experience;
• Promotional Communications: Where you have provided consent or where permitted under applicable law, to send you information about promotions, bonuses, and platform updates. You may withdraw consent for marketing communications at any time.

5 Legal Bases for Processing

Under Republic Act No. 10173, juli7 processes your personal data on the following legal bases:

• Consent: Where you have given freely, specific, informed, and unambiguous consent, particularly in relation to marketing communications and certain cookie-based tracking activities;
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and juli7, including account registration, payment processing, and the delivery of gaming services;
• Legal Obligation: Where processing is required for juli7 to comply with a legal obligation under Philippine law, including AMLA record-keeping, PAGCOR reporting, and NPC data breach notification requirements;
• Legitimate Interest: Where processing is necessary for the purposes of the legitimate interests of juli7 or a third party, provided that such interests are not overridden by your interests or fundamental rights — applicable particularly to fraud prevention, platform security, and internal analytics.

6 Sharing of Personal Data

Juli7 does not sell, rent, or otherwise commercially exploit your personal data to third parties. We share personal data only in the following limited circumstances:

• Payment Processors: With Philippine payment service providers (including GCash/GXI Corp., PayMaya/Voyager Innovations, and banking partners) for the sole purpose of processing your deposits and withdrawals;
• Game Technology Providers: With certified game software providers who supply the games available on the platform. Such providers receive only the minimum data necessary to deliver game functionality and do not receive KYC or financial data;
• Identity Verification Providers: With accredited KYC and biometric verification service providers engaged by juli7 for the purpose of completing mandatory identity verification;
• Regulatory and Law Enforcement Authorities: With PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where we are required to do so by law, court order, or regulatory direction;
• Professional Advisers: With lawyers, auditors, and compliance consultants engaged by juli7, subject to applicable professional confidentiality obligations;
• Corporate Transactions: In the event of a merger, acquisition, or sale of substantially all assets of juli7, personal data may be transferred to the successor entity subject to equivalent privacy protections.

7 Cookies and Tracking Technologies

The juli7 platform uses cookies and similar tracking technologies to operate and improve the Services. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function correctly, including session management, authentication, and security features. These cannot be disabled without affecting core functionality;
• Functional Cookies: Used to remember your preferences, language settings, and other personalisation choices;
• Performance and Analytics Cookies: Used to collect anonymised data about how visitors use the platform, helping us identify and fix performance issues;
• Responsible Gaming Cookies: Used to enforce session time limits and other responsible gaming settings you have configured in your account.

You may manage or withdraw consent for non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect your experience on the platform.

8 Data Retention Periods

Juli7 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to any applicable legal retention requirements. The following retention periods apply:

• Account and Registration Data: Retained for the duration of your active Account relationship with juli7, and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping obligations;
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of verification, as required under the Anti-Money Laundering Act and PAGCOR regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under AMLA;
• Gaming Activity Logs: Retained for three (3) years from the date of each recorded activity, or longer where required for dispute resolution or regulatory purposes;
• Customer Support Records: Retained for three (3) years from the date of the last interaction;
• Marketing Consent Records: Retained for the duration of the consent and for a reasonable period thereafter as proof of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with procedures approved by the juli7 Data Protection Officer.

9 Data Security Measures

Juli7 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS) encryption for all data transmitted between user devices and juli7 servers;
• AES-256 encryption for stored sensitive personal data at rest;
• One-way cryptographic hashing of all account passwords — passwords are never stored in recoverable form;
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrated need;
• Multi-factor authentication for all internal administrative system access;
• Regular security vulnerability assessments and penetration testing;
• Audit logging of all access to personal data held in platform databases;
• Formal incident response and data breach notification procedures aligned with NPC requirements.

10 Your Rights as a Data Subject

Under Republic Act No. 10173, you have the following rights with respect to your personal data held by juli7:

• Right to Be Informed: You have the right to be informed of how your personal data is collected, processed, and used — which is the primary purpose of this Privacy Policy;
• Right of Access: You have the right to obtain confirmation of whether juli7 holds personal data about you, and to receive a copy of that data;
• Right to Correction: You have the right to request the correction of inaccurate or incomplete personal data held about you;
• Right to Erasure (Right to Be Forgotten): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to any overriding legal retention obligations;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to Data Portability: You have the right to receive a structured, commonly used, machine-readable copy of personal data you have provided to juli7, where processing is based on consent or contractual necessity and is carried out by automated means;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

11 Children and Persons Under 21

The juli7 platform is not directed at, and does not knowingly collect personal data from, individuals under the age of twenty-one (21) years. Registration on the platform is strictly prohibited for persons under 21, in accordance with PAGCOR regulations and Philippine gaming law.

If juli7 becomes aware that it has inadvertently collected personal data from an individual under the age of 21, such data will be immediately deleted and the associated account will be permanently closed. If you have reason to believe that a minor has registered on the juli7 platform, please contact our Data Protection Officer at [email protected] immediately.

12 Cross-Border Data Transfers

Where juli7 engages game technology providers or other third-party service providers whose infrastructure is located outside of the Philippines, personal data may be transferred to or processed in jurisdictions other than the Philippines. Juli7 ensures that any such cross-border transfer of personal data is conducted in compliance with Section 21 of the Data Privacy Act of 2012 and NPC Circular No. 16-01, by ensuring that appropriate safeguards are in place including contractual data protection clauses at least equivalent to the protections afforded under RA 10173.

13 Third-Party Links and Integrations

The juli7 platform may contain links or integrations with third-party services, including payment gateways and game provider interfaces. When you navigate to or interact with a third-party service from within the juli7 platform, your use of that third-party service is governed by that third party's own privacy policy, over which juli7 has no control and for which juli7 accepts no responsibility. We encourage you to review the privacy policies of all third-party services you interact with.

14 Changes to This Privacy Policy

Juli7 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, platform features, or our data processing practices. Material changes to this Privacy Policy will be communicated to registered players via the mobile number or email address associated with their Account, and by publication of the updated policy at https://juli7.cam/privacy-policy with a revised effective date.

Your continued use of the juli7 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. Where required by law, we will seek your renewed consent before applying material changes to the processing of your personal data.

15 Contact and Data Protection Officer

Juli7 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection law. If you have any questions, concerns, or complaints regarding the processing of your personal data by juli7, or if you wish to exercise any of your rights as a data subject, you may contact us through the following channels:

• Email (Privacy Inquiries): [email protected] — subject line: "Privacy Inquiry" or "Data Subject Rights Request"
• Live Chat: Available 24 hours a day, 7 days a week via https://juli7.cam. Support available in English and Filipino (Tagalog).
• Average Response Time: Within 15 business days for formal data subject rights requests; within 5 minutes for general privacy queries via live chat.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that the processing of your personal data by juli7 infringes your rights under RA 10173. For further information about your rights and how to contact the NPC, visit the NPC's official website.