Privacy Policy

1. Introduction

jl22 Casino ("jl22," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our Platform. This Privacy Policy applies to all personal data collected through the jl22 website, mobile interface, customer support channels, and any other service we operate under the jl22 brand.

This Policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It is also consistent with the data protection requirements of the Philippine Amusement and Gaming Corporation (PAGCOR) under whose regulatory framework jl22 operates.

We encourage you to read this Policy in full. If you have questions about any section, our Data Protection Officer is available via the contact details provided in Section 16.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, jl22 Casino is the personal information controller responsible for the personal data collected through the Platform. All data processing activities described in this Policy are carried out by or on behalf of jl22 in accordance with applicable Philippine law.

jl22 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the DPO are provided in Section 16.

3. Data We Collect

jl22 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

jl22 does not collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required by law or PAGCOR regulation, and only with your explicit consent where applicable.

4. How We Collect Data

jl22 collects personal data through the following means:

• Direct interactions — data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated technologies — cookies, web beacons, server logs, and similar tracking technologies that collect technical and usage data as you interact with the Platform (see Section 7);
• Third-party sources — identity verification providers, payment processors (e.g., GCash, Maya, Philippine banks), fraud prevention services, and PAGCOR-mandated reporting systems, where permitted by law.

5. Legal Basis for Processing

jl22 processes your personal data on one or more of the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contract with you, including account management, game provision, and payment processing;
• Legal obligation — processing required to comply with Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), and tax reporting obligations;
• Legitimate interests — processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent — processing for marketing communications and non-essential cookies, where you have given freely given, specific, and informed consent that you may withdraw at any time.

6. How We Use Your Data

jl22 uses the personal data we collect for the following purposes:

• To create, verify, and manage your jl22 account;
• To process deposits and withdrawals through your chosen Philippine payment method;
• To verify your identity and age (21+) in compliance with PAGCOR requirements;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities;
• To monitor gameplay for responsible gaming purposes and to enforce deposit limits or self-exclusion where applicable;
• To provide customer support and resolve disputes;
• To send you transactional communications (account confirmations, security alerts, withdrawal notifications);
• To send you promotional communications about jl22 offers and new games, where you have consented to receive such communications;
• To comply with our legal and regulatory obligations under Philippine law;
• To improve the Platform through aggregated, anonymised analytics.

7. Cookies & Tracking Technologies

jl22 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and analyse how you use the Platform.

We use the following categories of cookies:

• Strictly necessary cookies — essential for the Platform to function (e.g., session authentication, security tokens). These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game display options.
• Analytics cookies — collect anonymised data about how players use the Platform to help us improve performance and user experience.
• Marketing cookies — used to deliver relevant promotional content. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the jl22 Platform.

8. Data Sharing & Disclosure

jl22 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors — GCash, Maya, and Philippine banking partners, for the purpose of processing your deposits and withdrawals;
• Identity verification providers — third-party KYC service providers engaged to verify your identity and age in compliance with PAGCOR requirements;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where required by law;
• Law enforcement — Philippine law enforcement agencies or courts of competent jurisdiction, where required by a valid legal order;
• IT and security service providers — cloud hosting, cybersecurity, and fraud detection vendors engaged by jl22 under strict data processing agreements;
• Professional advisers — lawyers, auditors, and accountants, where necessary for the conduct of jl22's business.

All third parties with whom jl22 shares personal data are required to process that data in accordance with the Data Privacy Act of 2012 and are bound by contractual data protection obligations.

9. International Data Transfers

Some of jl22's service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection, jl22 will implement appropriate safeguards — such as standard contractual clauses approved by the National Privacy Commission — to ensure that your data remains protected to the standard required by Philippine law.

By using the jl22 Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

10. Data Retention

jl22 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. Specific retention periods include:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLC requirements;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Support communications — retained for two (2) years from the date of the last interaction;
• Marketing consent records — retained until you withdraw consent, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jl22's data disposal procedures.

11. Data Security

Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jl22 Platform;
• Encrypted storage of sensitive personal and financial data at rest;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Real-time intrusion detection and suspicious activity monitoring;
• Regular third-party security audits and penetration testing;
• Two-factor authentication (2FA) available for all player accounts.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jl22 will notify the National Privacy Commission and affected players in accordance with the timeframes prescribed by the Data Privacy Act and its Implementing Rules.

12. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl22:

• Right to be informed — the right to know what personal data we collect and how we use it (fulfilled by this Policy);
• Right of access — the right to request a copy of the personal data we hold about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object — the right to object to the processing of your personal data for direct marketing or on grounds relating to your particular situation;
• Right to data portability — the right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 16. We will respond to all verified requests within thirty (30) days, as required by the Data Privacy Act.

13. Children & Minors

If jl22 becomes aware that personal data has been collected from an individual under the age of 21, that data will be immediately deleted and the associated account suspended. If you believe that a minor has registered on the jl22 Platform, please contact us immediately at the details provided in Section 16.

Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gambling platforms. jl22 supports the use of third-party parental control software as part of its commitment to responsible gaming.

14. Third-Party Links

The jl22 Platform may contain references to third-party services (such as payment processors). jl22 is not responsible for the privacy practices of any third-party service. We encourage you to review the privacy policies of any third-party service you use in connection with your jl22 account.

15. Policy Amendments

jl22 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The effective date at the top of this page will be updated accordingly.

Where changes are material, jl22 will notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.

16. Contact & Complaints

For any questions, requests to exercise your data subject rights, or complaints regarding this Privacy Policy or jl22's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 via the jl22 Platform
• Response Time: Within 30 days of receipt of a verified request

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through their official channels.