crabjl Privacy Policy

This Privacy Policy ("Policy") describes how crabjl ("crabjl," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("you," "Player," or "User") who access or use the crabjl online casino and sports betting platform at crabjl.app and any associated interfaces.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). By registering an account or using the crabjl platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

crabjl is the data controller responsible for the personal information collected through the crabjl platform. As data controller, crabjl determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012 and all applicable regulations issued by the National Privacy Commission.

crabjl has appointed a Data Protection Officer (DPO) who oversees compliance with this Policy and applicable data protection laws. You may contact the DPO directly for any privacy-related concern using the contact details provided in Section 13 of this Policy.

crabjl collects the following categories of personal data in connection with your use of the platform:

crabjl does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. We do not collect biometric data, health information, or political affiliations unless expressly required by law.

crabjl collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or update your account settings.
• Automatically: When you access and interact with the crabjl platform, we automatically collect technical data including your IP address, device information, browser type, and session activity through cookies and similar tracking technologies. See Section 9 for more detail on cookies.
• From third-party payment processors: When you initiate a deposit or withdrawal, crabjl receives transaction confirmation data from payment providers such as GCash, PayMaya, BPI, BDO, and Metrobank. This data is limited to what is necessary to reconcile the transaction.
• From identity verification providers: If you are required to complete enhanced KYC verification, crabjl may work with a third-party identity verification service that processes the documents you submit and returns a verification result to us.
• From publicly available sources: In the context of fraud prevention or regulatory compliance, crabjl may cross-reference publicly available information such as official government sanction lists.

crabjl processes your personal data for the following purposes:

• Account creation and management: To register your account, authenticate your login sessions, and maintain accurate account records.
• Transaction processing: To process deposits and withdrawals through your chosen payment method and to maintain accurate financial records for your account.
• Identity verification (KYC): To verify your identity and age (21+) as required by PAGCOR regulations and Philippine anti-money laundering laws.
• Game delivery and platform operation: To deliver the games and betting services you access on the crabjl platform, including slots, bingo, Tongits Go, Tower, live casino, and sports betting.
• Responsible gaming: To monitor gaming patterns for signs of problem gambling and to enable the effective operation of player protection tools such as deposit limits and self-exclusion.
• Fraud prevention and security: To detect and prevent unauthorized access, fraudulent transactions, money laundering, and other prohibited conduct as defined in our Terms and Conditions.
• Legal and regulatory compliance: To meet our obligations under the Data Privacy Act of 2012, PAGCOR's licensing conditions, the Anti-Money Laundering Act, and other applicable Philippine laws.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing communications (with consent): To send you promotional offers, bonuses, and platform updates where you have opted in to receive such communications.
• Platform improvement: To analyze aggregated usage data and improve the crabjl platform's features, performance, and user experience.

crabjl processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and crabjl — including account management, game delivery, and transaction processing — is necessary for the performance of that contract.
• Legal obligation: Processing required for crabjl to comply with applicable Philippine laws and PAGCOR regulations, including KYC verification, anti-money laundering checks, and age verification.
• Legitimate interests: Processing carried out for crabjl's legitimate business interests, including fraud prevention, platform security, and aggregated analytics, where such interests are not overridden by your rights and interests.
• Consent: Processing for marketing communications and optional platform features where you have provided explicit, freely given, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

crabjl does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other authorized payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and document verification services used to confirm your identity and age in compliance with PAGCOR requirements.
• Game technology providers: Software providers who supply the game engines, live dealer platforms, and random number generation technology used on the crabjl platform. These providers may receive aggregated gameplay data but do not receive your identity or financial data beyond what is technically required.
• Regulatory and government authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government bodies, where crabjl is legally required to disclose data.
• Law enforcement: Philippine law enforcement agencies where crabjl is compelled by a valid court order, subpoena, or other legal process.
• Fraud prevention services: Third-party fraud detection and risk management platforms used to identify and prevent unauthorized or fraudulent activity on the crabjl platform.

crabjl retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The general retention periods that apply are set out below:

Upon expiry of the applicable retention period, crabjl will securely delete or anonymize your personal data in accordance with its data disposal procedures. Anonymized data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

crabjl implements appropriate technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption of personal and financial data in transit (TLS/SSL) and at rest.
• Role-based access controls that limit internal access to personal data to authorized personnel only, strictly on a need-to-know basis.
• Regular security assessments and vulnerability testing of the crabjl platform and infrastructure.
• Incident response and breach notification procedures aligned with the NPC's mandatory breach reporting requirements under the Data Privacy Act of 2012.
• Staff training on data privacy obligations and secure data handling practices.

Notwithstanding the above, no data transmission over the internet or electronic storage system is completely secure. While crabjl takes reasonable steps to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, crabjl will notify you and the NPC in accordance with applicable law.

crabjl uses cookies and similar tracking technologies on the platform to provide core functionality, enhance your user experience, and analyze how the platform is used. The types of cookies we use are described below:

• Strictly necessary cookies: These are essential for the operation of the crabjl platform, enabling functions such as maintaining your login session, remembering your preferences, and securing your account. These cookies cannot be disabled without significantly impairing platform functionality.
• Analytics cookies: These cookies collect aggregated, anonymized data about how players interact with the crabjl platform — for example, which games are most frequently accessed and how long sessions last. This data helps crabjl improve platform performance and user experience. No personally identifiable information is collected through analytics cookies.
• Functional cookies: These cookies remember your preferences — such as your preferred language or display settings — so that you do not have to re-enter them on each visit.
• Marketing cookies (with consent): Where you have opted in to marketing communications, crabjl may use cookies to help tailor promotional content shown to you on the platform. These cookies are only placed with your explicit consent, which you can withdraw at any time through your account settings.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may affect your ability to use certain features of the crabjl platform. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

Under the Data Privacy Act of 2012 and NPC regulations, you have the following rights with respect to the personal data crabjl holds about you:

• Right to be informed: The right to be told how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data crabjl holds about you and information about how that data is being used.
• Right to rectification: The right to request that inaccurate or incomplete personal data be corrected or updated. You can update most of your account information directly through your account settings.
• Right to erasure: The right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to crabjl's legal retention obligations. Note that data subject to regulatory retention requirements cannot be deleted until the applicable retention period has elapsed.
• Right to object: The right to object to the processing of your personal data for marketing purposes. You can exercise this right at any time by updating your communication preferences in your account settings or by contacting support.
• Right to data portability: The right to receive a copy of the personal data you have provided to crabjl in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe crabjl has processed your personal data in violation of the Data Privacy Act of 2012. The NPC's official website provides guidance on filing a complaint.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided in Section 13. crabjl will respond to all data subject requests within a reasonable timeframe and in accordance with NPC guidelines. We may need to verify your identity before processing certain requests.

The crabjl platform is strictly intended for adults aged 21 years and older, consistent with the minimum age requirement for real-money gaming under PAGCOR regulations. crabjl does not knowingly collect personal data from individuals under the age of 21.

If you are under 21 years of age, you are not permitted to register an account, make a deposit, or participate in any real-money gaming activity on the crabjl platform. Any attempt to do so constitutes a violation of our Terms and Conditions and applicable Philippine law.

If crabjl becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the crabjl platform, please contact our support team immediately through the platform's messaging channel.

crabjl reserves the right to update, modify, or replace any part of this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When changes are made, crabjl will update the "Last Updated" date at the top of this page.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — crabjl will provide reasonable advance notice to registered players via the email address on file or through an in-platform notification. Your continued use of the crabjl platform following the effective date of any updated Policy constitutes your acknowledgment of the revised terms.

We encourage you to review this Privacy Policy periodically so that you remain informed about how crabjl protects your personal information. If you have any questions about a change to this Policy, please contact our Data Protection Officer as described in Section 13.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way crabjl handles your personal data, you may contact our Data Protection Officer (DPO) or the general support team through the following details:

If you are not satisfied with crabjl's response to your privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines. The NPC is the government authority responsible for enforcing the Data Privacy Act of 2012 and protecting the data privacy rights of Filipino citizens and residents.