jl01 Casino Privacy Policy

1. Introduction

jl01 ("jl01," "we," "us," or "the Company") is committed to protecting the privacy and personal data of every player who accesses the jl01 platform at jl01.club ("the Platform"). This Privacy Policy ("Policy") describes how jl01 collects, uses, discloses, retains, and protects personal data relating to individuals who use or interact with the Platform, including registered account holders, prospective players who browse without registering, and individuals who contact jl01 support.

This Policy is issued in compliance with Republic Act 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the applicable issuances of the National Privacy Commission ("NPC"). To the extent that the Platform is accessed by individuals located in other jurisdictions, jl01 observes the applicable data protection standards of those jurisdictions to the extent practicable.

By registering an account with jl01, by accessing the Platform, or by otherwise providing personal data to jl01, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, jl01.club is the personal information controller ("PIC") with respect to all personal data collected from users of the Platform. As PIC, jl01 determines the purposes and means of the processing of personal data described in this Policy.

jl01 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with data privacy obligations, handling data subject requests, managing data breach response procedures, and serving as the primary point of contact for the National Privacy Commission. Contact details for the DPO are provided in Section 15 of this Policy.

3. Personal Data We Collect

jl01 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data collected are as follows:

3.1 Identity and Contact Data

• Full legal name
• Date of birth
• Residential address (barangay, city/municipality, province, region)
• Philippine mobile number
• Email address
• Government-issued identification document type and number (for KYC verification)
• Selfie or facial photograph (for identity verification purposes)

3.2 Account Data

• Username and encrypted password
• Account registration date and time
• Account tier and VIP status
• Communication and notification preferences
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and methods
• GCash or PayMaya account details (mobile number associated with e-wallet)
• Bank account details where bank transfer methods are used
• Cryptocurrency wallet addresses where applicable
• Transaction history and balance records

3.4 Gaming Activity Data

• Games played, bet amounts, game outcomes, and session durations
• Bonus claims, wagering progress, and promotion participation history
• Sports betting selections, odds accepted, and bet results
• VIP point accumulation and redemption records

3.5 Technical and Device Data

• IP address at time of registration and each login
• Device type, operating system, and browser version
• Geographic location data derived from IP address
• Session log data including login timestamps and duration
• Cookie and local storage identifiers

3.6 Communications Data

• Content of live chat, email, and Viber/Messenger support interactions
• Complaints, feedback, and survey responses submitted to jl01
• Communications related to disputes, account issues, or regulatory inquiries

4. How We Collect Personal Data

jl01 collects personal data through the following means:

• Direct collection: Data you provide when creating a jl01 account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys and promotions.
• Automated technical collection: Data collected automatically when you access and interact with the Platform, including IP addresses, device identifiers, session logs, and behavioral analytics generated through cookies and similar tracking technologies.
• Third-party sources: Data received from KYC verification service providers (identity confirmation data), payment processors (transaction confirmation data), and fraud prevention services (risk scoring data). jl01 verifies the legal basis for any third-party data transfer before processing such data.
• Public sources: Publicly available information used for fraud prevention or legal compliance purposes, such as publicly listed sanctions or adverse media databases relevant to anti-money-laundering obligations.

5. Purposes of Processing and Legal Basis

jl01 processes personal data only for specific, explicit, and legitimate purposes. The table below summarizes the primary processing activities, their purposes, and the applicable legal basis under the Data Privacy Act of 2012:

6. Data Sharing and Disclosure

jl01 does not sell or rent your personal data to third parties. Personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

6.1 Service Providers (Personal Information Processors)

jl01 engages third-party service providers who process personal data on jl01's behalf under written data processing agreements that require them to maintain equivalent data protection standards. These include: payment processors (GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency service providers); KYC and identity verification providers; fraud detection and anti-money-laundering screening services; cloud infrastructure and data hosting providers; certified game providers (including JILI, PG Soft, and others); and customer support platform providers.

6.2 Regulatory and Law Enforcement Authorities

jl01 may disclose personal data to Philippine gaming regulatory authorities, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or law enforcement agencies when required by law, regulation, court order, or valid legal process. jl01 will notify affected data subjects of such disclosures where permitted by law and where doing so would not undermine the purpose of the disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring involving jl01, personal data held by jl01 may be transferred to the acquiring or successor entity as part of that transaction. jl01 will notify affected Account Holders of any such transfer and of any material change to the processing of their data that results from it.

6.4 With Your Consent

jl01 may share your personal data with additional third parties for purposes not described above where you have provided explicit, informed, and freely given consent for that specific disclosure.

7. International Data Transfers

Some of the third-party service providers engaged by jl01 — including certain game providers and cloud infrastructure partners — may process or store data outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to that offered by Philippine law, jl01 implements appropriate safeguards prior to the transfer, including:

• Contractual clauses requiring the recipient to process data to a standard equivalent to the DPA
• Transfer impact assessments where required
• Recipient certification or binding corporate rules where applicable

jl01 maintains a register of international data transfers and the safeguards in place for each, available to data subjects on request submitted to the DPO.

8. Data Retention Periods

jl01 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes. The following retention guidelines apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, in compliance with Philippine gaming regulatory requirements and AMLC obligations.
• Transaction and financial records: Retained for a minimum of five (5) years following each transaction, in compliance with BIR and AMLC recordkeeping requirements.
• Gaming activity logs: Retained for a minimum of three (3) years following each gaming session, for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years following the resolution of each support interaction, for quality assurance and dispute evidence purposes.
• Marketing consent records: Retained for the duration of the consent and for two (2) years following withdrawal, as evidence of compliance.
• Technical and device logs: Retained for twelve (12) months from collection, unless required for ongoing security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of identifiable information.

9. Security Measures

jl01 implements a layered information security program designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. Security measures include:

• Encryption: All data in transit is protected by TLS 1.2 or higher. Sensitive data at rest (including passwords, which are stored as salted hashes) is encrypted using industry-standard algorithms.
• Access controls: Personal data access is restricted to jl01 personnel and service providers on a need-to-know basis, enforced through role-based access control and multi-factor authentication for system access.
• Intrusion detection and monitoring: jl01's infrastructure is monitored continuously for anomalous access patterns and security events.
• Penetration testing: Regular third-party security assessments and penetration tests are conducted to identify and remediate vulnerabilities.
• Incident response: jl01 maintains a documented data breach response plan. In the event of a personal data breach, affected data subjects and the National Privacy Commission will be notified within the timeframes required by the DPA.

10. Cookies and Tracking Technologies

jl01 uses cookies and similar tracking technologies (including local storage and session tokens) to operate and improve the Platform. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences (such as language settings, notification preferences, and last-visited game categories) to personalize your jl01 experience.
• Analytics cookies: Used in aggregated, pseudonymized form to understand how users interact with the Platform — which pages are visited most frequently, where users encounter difficulties, and how the platform can be improved. No individual-level profiling is conducted for analytics purposes.
• Marketing cookies: Used only with your consent to track whether you arrived at jl01 through a particular campaign or affiliate source, for internal attribution purposes. jl01 does not serve third-party advertising or retargeting cookies.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from using the Platform. Your cookie preferences may be reset each time you clear your browser data.

11. Privacy of Minors

The jl01 Platform is strictly prohibited for individuals under 21 years of age. jl01 does not knowingly collect, process, or retain personal data of individuals under 21. jl01 implements age verification as part of the account registration process and requires KYC identity document verification before any withdrawal is processed.

If jl01 discovers that personal data of an individual under 21 has been collected — whether through deception during registration or any other means — jl01 will immediately close the associated account, delete all personal data related to that individual, and where applicable report the matter to the relevant Philippine authorities. Any funds deposited to such an account will be returned to the originating payment source after deduction of applicable transaction costs.

Parents, guardians, or other concerned parties who have reason to believe that a minor has registered a jl01 account are encouraged to contact jl01 support immediately via Live Chat or at [email protected] (plain text).

12. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, every data subject whose personal data is processed by jl01 has the following rights, all of which jl01 is committed to honoring within the timeframes specified: