Privacy Policy – 18club

This Privacy Policy is issued by the operator of the 18club platform, accessible at 18club.app (hereinafter referred to as "18club," "we," "us," or "our"). 18club operates as an online gaming platform serving players in the Philippines and is subject to the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR).

18club acts as the data controller in respect of all personal data collected from players and visitors through the 18club Platform. As data controller, 18club determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing complies with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Privacy Policy applies to all personal data collected through the 18club website at 18club.app, including all games, features, promotions, customer support interactions, and any other services offered through the Platform. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

18club collects the following categories of personal data from players and Platform visitors. We collect only the data that is necessary for the purposes described in this Policy – we do not collect data for the sake of it.

18club collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Platform, through cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for full details on cookies.
• Third-party sources: Identity verification data from government ID databases or third-party KYC (Know Your Customer) service providers; fraud and risk data from payment processors and fraud prevention services; and, where applicable, data from PAGCOR or other regulatory bodies as required by law.
• Payment processors: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners when you make deposits or withdrawals through the Platform.

18club does not purchase personal data from data brokers or marketing list providers. All data collected by 18club is obtained directly from you, from your use of the Platform, or from regulated third-party service providers with a legitimate basis for sharing such data.

18club uses your personal data for the following purposes. We process your data only where we have a lawful basis to do so, as described in Section 5.

• Account creation and management: To register your account, verify your identity and age (21+ requirement), maintain your account settings, and manage your Wallet balance.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods; to verify that payment accounts are registered in your name; and to maintain accurate financial records.
• Regulatory compliance: To comply with PAGCOR licensing requirements, Anti-Money Laundering Council (AMLC) reporting obligations, and the Data Privacy Act of 2012. This includes conducting Know Your Customer (KYC) checks and filing suspicious transaction reports where required.
• Platform security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct as defined in the 18club Terms and Conditions.
• Customer support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance through live chat and email support.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling behavior, to enforce deposit and loss limits you have set, and to process self-exclusion requests in accordance with our Responsible Gaming policy.
• Platform improvement: To analyze usage patterns, identify technical issues, test new features, and improve the overall 18club player experience.
• Marketing and promotions: To send you information about 18club promotions, bonuses, and new games – but only where you have opted in to receive such communications. You may opt out at any time.
• Legal proceedings: To establish, exercise, or defend legal claims in the event of a dispute between you and 18club.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 18club processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and 18club – including account registration, payment processing, game delivery, and customer support.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AMLC reporting requirements, and the Data Privacy Act of 2012.
• Legitimate interests: Processing necessary for 18club's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and platform improvement – provided that such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent – primarily for marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

18club does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment partners, for the purpose of processing your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity verification providers: Third-party KYC service providers engaged by 18club to verify player identity and age in compliance with PAGCOR requirements.
• Fraud prevention services: Third-party fraud detection and risk management providers who assist 18club in identifying and preventing fraudulent activity on the Platform.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or regulatory obligation.
• Legal and professional advisors: Lawyers, accountants, and other professional advisors engaged by 18club in connection with legal proceedings or compliance matters, subject to professional confidentiality obligations.
• Technology service providers: Cloud hosting providers, cybersecurity firms, and software vendors who provide infrastructure and technical services to 18club, subject to data processing agreements that require them to protect your data.

18club uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and maintain session security. A cookie is a small text file placed on your device when you visit the Platform. Cookies do not contain viruses or malware and cannot access other files on your device.

18club uses the following categories of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your gaming session. These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and game lobby filters. These improve your experience but are not essential.
• Analytics cookies: Collect anonymized data about how players use the Platform – which pages are visited most, where players encounter errors, and how long sessions last. This data helps 18club improve the Platform. Analytics data is aggregated and does not identify individual players.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the Platform.

You may control cookie settings through your browser preferences. Most browsers allow you to block or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in and using the Platform. For instructions on managing cookies in your specific browser, refer to your browser's help documentation.

18club retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing requirements and AMLC anti-money laundering obligations.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine financial regulations and AMLC reporting rules.
• Gaming activity data: Retained for a minimum of three (3) years from the date of each gaming session, for regulatory compliance and dispute resolution purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, to support dispute resolution and service improvement.
• Technical and usage data: Retained for twelve (12) months from collection, after which it is anonymized or deleted.
• Marketing consent records: Retained for the duration of your account and for one (1) year after you withdraw consent, to demonstrate compliance with consent requirements.

When personal data is no longer required for any lawful purpose, 18club will securely delete or anonymize it in accordance with industry-standard data destruction practices. Anonymized data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

18club implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 18club Platform – the same standard used by Philippine banks and financial institutions.
• Encryption at rest for all sensitive personal data stored in 18club's databases, including identity documents, financial account details, and government ID numbers.
• Multi-factor authentication (MFA) for all 18club staff who have access to player data systems, with role-based access controls that limit data access to personnel with a legitimate need.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms to identify and remediate security weaknesses before they can be exploited.
• Intrusion detection systems that monitor the Platform infrastructure around the clock for signs of unauthorized access or anomalous activity.
• Secure data centers with physical access controls, CCTV monitoring, and environmental protections against fire, flood, and power failure.

While 18club takes all reasonable steps to protect your data, no electronic system is completely immune to security risks. You are responsible for maintaining the security of your own account credentials. Never share your 18club password or OTP with anyone – including persons claiming to be 18club staff. 18club will never ask for your password.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 18club. To exercise any of these rights, contact our Data Protection Officer as described in Section 15.

• Right to be informed: The right to know what personal data 18club collects about you, how it is used, and with whom it is shared – as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data 18club holds about you, along with information about how it is processed. 18club will respond to access requests within fifteen (15) business days.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by 18club. You may update basic account information directly through your account settings, or contact support for assistance with identity data corrections.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 18club's legal retention obligations under PAGCOR and AMLC regulations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time through your account settings or by contacting support.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 18club has processed your personal data in violation of the Data Privacy Act of 2012. The NPC can be reached through its official website at privacy.gov.ph.

The 18club Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations and PAGCOR licensing requirements. 18club does not knowingly collect personal data from persons under the age of 21.

If 18club discovers or has reason to believe that a registered account belongs to a person under 21 years of age, the account will be immediately suspended, all balances will be frozen pending investigation, and the matter will be referred to the appropriate regulatory authorities. Any personal data collected from an underage individual will be deleted as soon as the underage status is confirmed, subject to any legal retention obligations.

Parents and guardians who believe that their child may have registered an account on the 18club Platform are encouraged to contact 18club customer support immediately via live chat at 18club.app. 18club takes underage access extremely seriously and will act promptly on all such reports.

18club's primary data processing infrastructure is located within the Philippines. However, certain third-party service providers engaged by 18club – including cloud hosting providers, cybersecurity firms, and KYC verification services – may process data in other jurisdictions.

Where personal data is transferred outside the Philippines, 18club ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. Such safeguards include contractual data processing agreements that impose data protection obligations on the recipient, and transfers only to jurisdictions that the National Privacy Commission has recognized as providing an adequate level of data protection.

18club will not transfer your personal data to any jurisdiction or recipient that cannot provide adequate data protection guarantees. If you have questions about specific cross-border transfers, please contact our Data Protection Officer as described in Section 15.

The 18club Platform may contain references to third-party payment providers and regulatory bodies. This Privacy Policy applies solely to data collected and processed by 18club through the 18club Platform at 18club.app. It does not apply to any third-party websites, applications, or services that you may access in connection with using the Platform.

18club is not responsible for the privacy practices of third-party payment processors such as GCash or PayMaya, or any other external service. When you interact with a third-party payment interface, you are subject to that provider's own privacy policy and terms of service. 18club encourages you to review the privacy policies of any third-party services you use in connection with your 18club account.

18club reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Privacy Policy, 18club will notify registered players via the mobile number or email address associated with their account, or by displaying a prominent notice on the Platform, at least seven (7) days before the changes take effect. For minor or non-material changes, the updated Policy will be posted on this page without individual notification.

Your continued use of the 18club Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you should cease using the Platform and may close your account in accordance with the 18club Terms and Conditions.

18club has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations. The DPO is responsible for overseeing 18club's compliance with data protection law and serving as the primary point of contact for player data rights requests and privacy-related inquiries.

To exercise your data rights, submit a privacy complaint, or ask any question about this Privacy Policy or 18club's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the Platform at 18club.app. Select "Privacy / Data Request" from the support menu for priority routing to our DPO team.
• Email: [email protected] (plain text – not a clickable link). Please include "Data Privacy Request" in the subject line and your registered account username in the message body. Responses within five (5) business days.

If you are not satisfied with 18club's response to your privacy inquiry or data rights request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.

18club is committed to resolving all privacy concerns promptly and transparently. Our support team includes Filipino-speaking agents based in Manila, Cebu, and Davao who are available around the clock to assist players from all parts of the Philippines.