jl80 Privacy Policy

1. Introduction

jl80 ("jl80", "we", "us", "our") operates the online gaming platform accessible at jl80.vip, providing casino games, sports betting, bingo, slots, color prediction, virtual sports, and related services to players in the Philippines under a PAGCOR licence.

This Privacy Policy describes the types of personal data we collect from users of the jl80 Platform ("you", "your", "Player"), the purposes for which we use that data, how we store and protect it, and the rights available to you as a data subject under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

This Policy applies to all personal data collected through the jl80 website, any mobile or browser-based application, live chat interactions, account registration, KYC verification processes, payment transactions, customer support communications, and any other touchpoint between you and jl80.

2. Data Controller

For the purposes of the Philippine Data Privacy Act, jl80 acts as the personal information controller in respect of the personal data of all registered Players and website visitors. jl80 determines the purposes and means of processing personal data collected through the Platform.

Where jl80 engages third-party service providers (such as payment processors, KYC verification providers, or game technology partners) to process personal data on its behalf, such parties act as personal information processors and are contractually bound to process data only in accordance with jl80's instructions and applicable data protection law.

jl80 has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection compliance and serving as the primary point of contact for data subjects wishing to exercise their rights or raise data protection concerns. Contact details for the DPO are provided in Section 16 of this Policy.

3. Personal Data We Collect

jl80 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on a valid Philippine government-issued identification document;
• Date of birth (for age verification — you must be at least 21 years old);
• Philippine mobile number (used for OTP verification and 2FA);
• Email address (optional, used for account communications and password recovery);
• Username chosen during registration;
• Encrypted password (jl80 stores passwords in hashed form and never in plaintext).

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (UMID, PhilSys ID, Passport, or Driver's License);
• Selfie photograph for facial verification against the ID document;
• Proof of address documentation, where required for enhanced due diligence;
• Source of funds documentation, where required under AMLA thresholds.

3.3 Financial & Transaction Data

• GCash registered mobile number, Maya account details, or bank account details (BPI, BDO, Metrobank) used for deposits and withdrawals;
• Transaction history including deposit amounts, withdrawal amounts, dates, payment method references, and status records;
• Wallet balance records and transaction logs maintained for audit and regulatory compliance purposes.

3.4 Gaming Activity Data

• Game session logs including games played, wager amounts, outcomes, and session duration;
• Bonus usage history including bonuses claimed, wagering progress, and bonus-derived winnings;
• Responsible gaming tool usage including limit settings and self-exclusion records.

3.5 Technical & Device Data

• IP address at time of registration and at each login session;
• Device type, operating system, and browser type;
• Geolocation data derived from IP address (country and approximate region level);
• Cookie identifiers and session tokens (see Section 6 for full cookie details);
• Login timestamps, session duration, and navigation data within the Platform.

3.6 Communications Data

• Content of live chat conversations with jl80 customer support;
• Email correspondence between you and jl80 support or compliance teams;
• Records of complaints and dispute correspondence.

4. How We Use Your Personal Data

jl80 uses the personal data it collects for the following specific, legitimate purposes:

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, jl80 relies on one or more of the following legal bases for each processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and jl80 — for example, registering your Account, processing your deposits, paying your withdrawals, and providing access to games.
• Legal Obligation: Processing is required to comply with PAGCOR licensing conditions, AMLA record-keeping requirements, and other applicable Philippine regulatory obligations.
• Legitimate Interest: Processing is necessary for jl80's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and analytics — provided those interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain non-essential processing activities — specifically, sending you marketing emails and SMS messages about promotions — jl80 relies on your freely given, specific, and informed consent. You may withdraw this consent at any time as described in Section 12.

6. Cookies & Tracking Technologies

The jl80 Platform uses cookies and similar tracking technologies to operate core platform functions, remember your preferences, analyse usage patterns, and improve your experience.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without breaking Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, last game played, and display preferences across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how Players navigate and use the Platform — used to improve user experience and identify technical issues. These do not identify you individually.
• Marketing Cookies: Used only where you have provided consent to receive personalised promotions. These track game engagement patterns to inform relevant bonus offers. They may be disabled from your account settings.

6.2 Cookie Management

You may manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may prevent you from accessing or using the Platform correctly. Disabling functional or analytics cookies will not prevent access but may degrade your experience. For marketing cookies, you may withdraw consent by updating your communication preferences in your jl80 account settings.

7. Data Sharing & Disclosure

jl80 does not sell, rent, or trade personal data. We share personal data only in the following circumstances:

7.1 PAGCOR and Regulatory Authorities

jl80 is required by its PAGCOR licence and by Philippine law to disclose player data, transaction records, and KYC documents to PAGCOR on request. Additionally, jl80 is required to report covered and suspicious transactions to the Anti-Money Laundering Council (AMLC) under Republic Act No. 9160 as amended. Such disclosures are mandatory and not subject to your consent.

7.2 Payment Processing Partners

To process your GCash, Maya, BPI, BDO, Metrobank, and other payment method transactions, jl80 shares the minimum necessary financial data with its payment processing partners. These partners are bound by applicable data protection and financial services regulations and are contractually prohibited from using your data for any purpose other than processing the relevant transaction.

7.3 KYC Verification Providers

jl80 uses licensed third-party identity verification services to assist with KYC document verification and facial recognition matching. Personal data shared for this purpose is processed solely for identity verification and is not retained by these providers beyond the verification process.

7.4 Technology and Infrastructure Providers

jl80 uses cloud hosting and technology infrastructure providers to operate the Platform. These providers may process personal data as part of hosting and infrastructure services and are bound by strict data processing agreements that limit their use of personal data to infrastructure provision only.

7.5 Legal and Law Enforcement Disclosure

jl80 may disclose personal data to law enforcement, courts, or other government authorities where required to do so by applicable Philippine law, court order, or regulatory directive, or where disclosure is necessary to protect the rights, property, or safety of jl80, its players, or the public.

8. International Data Transfers

jl80's primary data processing infrastructure is located within the Philippines and Southeast Asia. Where personal data is transferred to or processed in a country outside the Philippines — for example, to cloud infrastructure providers operating data centres outside the Philippines — jl80 ensures that such transfers are conducted in compliance with the DPA and its Implementing Rules.

Specifically, international transfers are protected by one or more of the following safeguards: contractual data transfer agreements incorporating the National Privacy Commission's standard contractual clauses, processing in countries recognised by the NPC as providing adequate levels of data protection, or binding corporate rules where applicable.

9. Data Retention

jl80 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to applicable minimum retention periods mandated by law:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements under RA 9160 as amended.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, consistent with AMLA obligations and PAGCOR licence conditions.
• Game session logs: Retained for three (3) years from the date of the session, used for dispute resolution and regulatory reporting purposes.
• Customer support communications: Retained for two (2) years from the date of the communication, used for quality assurance and dispute resolution.
• Marketing consent records: Retained for the duration of the marketing relationship plus two (2) years following withdrawal of consent, to evidence the lawfulness of past marketing activities.

Upon expiry of the relevant retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to any identifiable individual.

10. Security Measures

jl80 implements a comprehensive set of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:

• Transport Security: All data transmitted between your device and jl80 is encrypted using TLS 1.2 or higher (256-bit SSL), preventing interception in transit.
• Password Security: User passwords are stored using industry-standard one-way hashing algorithms with salting. jl80 employees cannot read your password.
• Access Controls: Access to personal data within jl80's systems is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and comprehensive audit logging.
• Two-Factor Authentication: SMS OTP-based 2FA is available for all accounts and is strongly recommended to protect against unauthorised account access.
• Penetration Testing: jl80 conducts regular security assessments and penetration testing of its Platform and data infrastructure.
• Data Segregation: Player funds and financial records are stored in segregated systems with heightened access controls separate from general operational systems.
• Breach Response Plan: jl80 maintains a documented personal data breach response procedure, including notification to the NPC within 72 hours of breach detection as required by NPC Circular 16-03.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal data held by jl80:

11.1 Right to Be Informed

You have the right to be informed of how your personal data is collected, used, stored, and shared. This Privacy Policy fulfils that obligation. We will notify you of any material changes to this Policy before they take effect.

11.2 Right of Access

You have the right to request a copy of the personal data jl80 holds about you. jl80 will respond to access requests within 30 days of receiving a verified request submitted to the Data Protection Officer.

11.3 Right to Correction

You have the right to have inaccurate or incomplete personal data corrected. For registration data, you may update most information directly through your jl80 account settings. For KYC data corrections, contact the DPO.

11.4 Right to Object

You have the right to object to the processing of your personal data where that processing is based on jl80's legitimate interests or where processing is for direct marketing purposes. Where you object to marketing processing, jl80 will cease that processing immediately. Where you object to legitimate interest processing, jl80 will assess whether compelling grounds override your objection.

11.5 Right to Erasure

You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where consent has been withdrawn, or where processing is unlawful. This right is subject to jl80's legal obligations under PAGCOR and AMLA to retain certain records for minimum retention periods as described in Section 9.

11.6 Right to Data Portability

You have the right to receive a copy of personal data you have provided to jl80 in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.

11.7 Right to Lodge a Complaint

If you believe jl80 has not handled your personal data in accordance with the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact details for the NPC are available on the NPC's official website.

12. Marketing Communications

With your consent, jl80 may send you promotional communications about new games, bonuses, reload offers, VIP programme updates, and other platform news via SMS to your registered Philippine mobile number and, if provided, via email.

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in the Account Settings section of your jl80 account;
• Clicking the unsubscribe link included in any marketing email sent by jl80;
• Contacting jl80 live chat and requesting removal from marketing communications.

Withdrawal of marketing consent does not affect the lawfulness of any marketing communications sent before your withdrawal. It also does not affect service communications that are necessary for the management of your Account, such as transaction confirmations, OTP codes, security alerts, and KYC verification notices — these will continue regardless of marketing preferences.

13. Children & Minors

The jl80 Platform is strictly intended for adults aged 21 years and above in accordance with PAGCOR's minimum age requirements for real-money gaming in the Philippines. jl80 does not knowingly collect personal data from individuals under 21 years of age.

If jl80 becomes aware that an Account has been registered by a person under 21 years of age, the Account will be immediately suspended, all associated data will be reviewed, and appropriate action will be taken in accordance with jl80's Terms and Conditions and applicable regulatory requirements.

If you believe that a minor has accessed the jl80 Platform using your account or device, please contact jl80 live chat immediately and change your account password. jl80 recommends using device-level parental controls and browser password protection to prevent minors from accessing gambling platforms.

14. Third-Party Links

The jl80 Platform does not contain links to external third-party websites operated by entities unrelated to jl80 in its main navigation or content areas. Where references to third-party services (such as GCash or Maya) appear in informational content, jl80 is not responsible for the privacy practices of those third-party services.

If you access third-party services linked from any jl80 promotional or informational content, the privacy policy of that third party governs the handling of any data you provide to that third party. jl80 encourages you to review the privacy policies of any third-party services you use in connection with your gaming activities.

15. Changes to This Privacy Policy

jl80 reserves the right to amend or update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, jl80 will notify active account holders by SMS to their registered mobile number or by prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the most recent version. Your continued use of the jl80 Platform after any changes to this Policy constitutes your acceptance of the amended Policy. If you do not agree with any changes, you should cease using the Platform and may request account closure.

16. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or jl80's data processing activities, please contact our Data Protection Officer:

• Live Chat: 24/7 via the chat widget on jl80.vip (quickest method — average response under 3 minutes)
• Email: [email protected] — mark your subject line "Privacy / DPO Request"

jl80 will respond to all data subject requests and privacy enquiries within thirty (30) days of receipt. For complex requests, jl80 may extend this period by a further two months, in which case we will inform you of the extension within the initial 30-day period.