jl978 Privacy Policy

1 About This Privacy Policy

jl978 is committed to protecting the privacy and personal data of all users of the jl978 platform, particularly our Filipino players in Manila, Cebu, Davao, Quezon City, Makati, and across the Philippines. This Policy has been prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission (NPC).

This Policy applies to all personal data collected by jl978 in connection with your use of the jl978 website, mobile platform, customer support channels, and any other jl978 service. It applies to registered account holders, individuals who browse the jl978 website without registering, and any person who communicates with jl978 via any channel.

This Policy should be read together with jl978's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any inconsistency between this Policy and those documents regarding data privacy, this Policy shall prevail.

2 Personal Data We Collect

jl978 collects personal data only to the extent necessary for the purposes described in this Policy. The categories of personal data we collect include:

2.1 Registration & Identity Data

When you create a jl978 account, we collect your full legal name, date of birth, gender, residential address, email address, and mobile phone number. During our mandatory KYC (Know Your Customer) identity verification process, we also collect copies of government-issued Philippine identification documents such as your PhilSys National ID, passport, driver's licence, SSS/GSIS ID, or other accepted documents, together with a facial photograph or selfie for biometric comparison purposes.

2.2 Financial Data

To process deposits and withdrawals in Philippine Peso (PHP), jl978 collects payment account identifiers such as your GCash mobile number, Maya account details, bank account information (BPI, BDO, Metrobank), or other payment method identifiers as applicable. jl978 does not store full card numbers or CVV codes. Payment data is processed through PCI-DSS compliant payment processors.

2.3 Transaction Data

jl978 maintains records of all financial transactions on your account, including deposits, withdrawals, bonus credits and forfeitures, game bets and results, and any adjustments made by jl978's operations team. This transaction history is retained for regulatory compliance purposes.

2.4 Technical & Usage Data

When you access jl978, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, unique device identifiers, session duration, pages visited, game sessions played, and referring URLs. This data helps jl978 detect fraud, improve platform performance, and personalise your experience.

2.5 Communications Data

When you contact jl978 via live chat, email, or any other support channel, we retain records of those communications including the content of messages, timestamps, and the identity of the support agent involved. This data is used for quality assurance, dispute resolution, and regulatory compliance purposes.

2.6 Marketing Preference Data

Where you have given consent, jl978 records your marketing preferences including whether you have opted in to receive promotional emails, SMS notifications, or push notifications about jl978 bonuses, new games, and platform updates.

3 How We Use Your Personal Data

jl978 uses the personal data we collect for the following specific purposes:

Purpose	Data Used
Account creation & management	Registration data, identity data
KYC identity verification	Identity documents, facial photograph
Processing deposits & withdrawals	Financial data, transaction data
Fraud detection & prevention	Technical data, transaction data, identity data
AML compliance & regulatory reporting	Identity data, transaction data, financial data
Customer support & dispute resolution	Communications data, transaction data
Platform improvement & analytics	Technical data, usage data
Responsible gaming monitoring	Transaction data, usage data, account data
Marketing communications (with consent)	Registration data, marketing preference data
Legal compliance & enforcement	All relevant data categories as required by law

jl978 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or being required to do so by applicable law.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, jl978 processes your personal data on the following legal grounds:

• Performance of a Contract: Processing is necessary to fulfil the Terms & Conditions agreed to when you created your jl978 account, including account management, payment processing, and game operation.
• Legal Obligation: jl978 is required by PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine legislation to collect, verify, and retain certain categories of personal data. This includes KYC verification and transaction monitoring.
• Legitimate Interests: jl978 processes certain technical and usage data based on our legitimate interests in operating a secure, fraud-free gaming platform, improving platform performance, and detecting prohibited conduct — provided those interests are not overridden by your rights and interests.
• Consent: Where we rely on consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5 Data Sharing & Disclosure

jl978 does not sell, rent, or trade your personal data to any third party. We may share your personal data only in the following limited circumstances:

• Payment Processors: We share necessary financial data with our payment processing partners (GCash, Maya, GrabPay, BPI, BDO, Metrobank, and others) to process your deposits and withdrawals. These partners are contractually required to handle your data securely and use it only for payment processing purposes.
• KYC Verification Providers: We use third-party identity verification service providers to assist with document authentication and biometric comparison during the KYC process. These providers process your data solely on jl978's behalf.
• Regulatory Authorities: jl978 is legally obligated to share data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies when required by law, court order, or regulatory directive.
• IT & Security Service Providers: We engage trusted technology partners for hosting, cybersecurity, analytics, and fraud detection. These partners operate as data processors under binding data processing agreements and may not use your data for their own purposes.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of jl978's assets, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and the applicable privacy terms.
• With Your Consent: We may share your data with third parties where you have given explicit consent for a specific sharing purpose.

6 Cookies & Tracking Technologies

jl978 uses cookies and similar tracking technologies on the jl978 website to provide a functional, personalised, and secure gaming experience. The types of cookies we use include:

• Strictly Necessary Cookies: These are essential for the jl978 platform to function. They enable your login session, maintain your account authentication state, and protect against cross-site request forgery. These cookies cannot be disabled without breaking core platform functionality.
• Performance & Analytics Cookies: These cookies help jl978 understand how players use the platform — which pages are most visited, where users encounter errors, and how game sessions progress. This data is aggregated and anonymised where possible. It is used to improve jl978's platform and user experience.
• Functionality Cookies: These remember your preferences such as language settings, display options, and responsible gaming tool configurations so you do not have to re-enter them on each visit.
• Marketing & Targeting Cookies: Where you have provided consent, jl978 may use cookies to deliver relevant promotional content within the jl978 platform. These cookies help ensure you see jl978 bonus offers and promotions that are relevant to your play history and preferences.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the jl978 platform. Strictly necessary cookies cannot be disabled via browser settings without disrupting your jl978 experience.

7 Data Retention

jl978 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with our legal and regulatory obligations, resolve disputes, and enforce our agreements. The following general retention principles apply:

• Active Account Data: Personal data associated with your active jl978 account is retained for the duration of your account and for a minimum of five (5) years following permanent account closure, as required by PAGCOR regulations and Philippine AML law.
• KYC & Identity Documents: Identity verification documents are retained for a minimum of five (5) years following the end of the business relationship, consistent with AMLC requirements.
• Transaction Records: Complete transaction records are retained for a minimum of five (5) years from the date of the transaction for AML compliance purposes.
• Communications Data: Customer support communications are typically retained for two (2) years from the date of the last interaction, unless longer retention is required for an ongoing dispute or legal proceeding.
• Marketing Data: Marketing preference data and related communications records are retained until you withdraw consent or request deletion, plus a reasonable period to demonstrate compliance.

Upon expiry of the applicable retention period, jl978 will securely delete or anonymise your personal data in accordance with our data destruction procedures.

8 Data Security

jl978 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include:

• Encryption: Personal data is encrypted at rest using AES-256 encryption. All data transmitted between your device and jl978 servers is encrypted using TLS 1.3.
• Access Controls: Access to personal data is strictly limited to jl978 personnel and authorised processors who have a legitimate need to access that data. All access is governed by role-based access controls and is logged and audited.
• Two-Factor Authentication: jl978 supports and encourages the use of two-factor authentication (2FA) on all player accounts to provide an additional layer of account security.
• Penetration Testing: jl978's platform and infrastructure undergoes regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Incident Response: jl978 maintains a documented data breach response plan. In the event of a data breach that is likely to affect your rights and freedoms, jl978 will notify the National Privacy Commission and affected individuals within the timeframes required by Philippine law.
• Staff Training: All jl978 personnel who handle personal data receive mandatory data privacy and security training at induction and at regular intervals thereafter.

9 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data held by jl978. To exercise any of these rights, contact our support team via live chat or email at [email protected].