jl97 Casino Privacy Policy

1. Introduction

jl97 takes the privacy of its players seriously. As a PAGCOR-regulated online gaming platform serving Filipino players across Manila, Cebu, Davao, Quezon City, and the wider Philippines, jl97 handles personal data in the normal course of providing gaming, payment, and customer support services. This Policy explains exactly what data jl97 collects, why it is collected, how long it is retained, with whom it may be shared, and what rights you have over your own information.

The processing of personal data by jl97 is subject to Philippine jurisdiction. Where jl97 engages third-party service providers outside the Philippines, appropriate contractual safeguards are in place to ensure your data receives equivalent protection, as further described in Section 12 of this Policy.

2. Data Controller

jl97 is the data controller responsible for personal information collected through jl97.vip. As data controller, jl97 determines the purposes and means of processing your personal information and is accountable for ensuring that processing complies with the Data Privacy Act of 2012. jl97 has designated a Data Protection Officer (DPO) whose contact details are set out in Section 14 of this Policy. The DPO is responsible for overseeing data protection compliance, handling data subject requests, and liaising with the National Privacy Commission.

3. Personal Data We Collect

jl97 collects personal information across several categories depending on how you interact with the platform:

jl97 does not collect full payment card numbers. Card-based transactions, if applicable, are processed by certified PCI-DSS compliant payment processors who do not share full card data with jl97.

4. How jl97 Uses Your Personal Data

jl97 uses the personal information it collects for the following purposes:

• Account administration: Creating, maintaining, and managing your jl97 account, including processing login authentication and OTP verification;
• Service delivery: Processing deposits and withdrawals, crediting winnings, awarding bonuses, and providing access to games;
• Identity verification (KYC): Confirming your identity and age (21+) as required by PAGCOR and anti-money laundering regulations;
• Regulatory compliance: Meeting jl97's obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160), and other applicable Philippine laws;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, collusion, multi-accounting, and other prohibited conduct;
• Responsible gaming: Monitoring for signs of problem gambling, enforcing self-exclusion requests, and applying deposit or loss limits set by the player;
• Customer support: Responding to queries, resolving disputes, and managing complaints;
• Platform improvement: Analysing usage patterns to improve the jl97 platform, game lobby, and user experience;
• Marketing communications: Sending promotional offers, bonus notifications, and tournament invitations — only where you have consented to receive such communications. You may opt out at any time through your account settings.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, jl97 relies on the following legal bases for processing personal information:

• Contractual necessity: Processing required to perform the contract between jl97 and the Player, including account management, payments, and game delivery;
• Legal obligation: Processing required to comply with PAGCOR regulations, AML obligations, and NPC requirements;
• Legitimate interests: Processing for fraud prevention, security, and platform improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications, where you have given explicit consent. Consent may be withdrawn at any time.

6. Data Sharing & Disclosure

jl97 does not sell your personal data to any third party. jl97 shares personal information only in the following circumstances:

• Payment processors: GCash, PayMaya, and partner banks receive the minimum data necessary to process your transactions (mobile number, account reference, transaction amount);
• Game providers: Certified game software providers may receive anonymised session identifiers to deliver game content and validate results; they do not receive your name or contact details;
• Regulatory authorities: PAGCOR, the AMLC, and the NPC may receive data as required by applicable Philippine law or regulatory reporting obligations;
• KYC service providers: Third-party identity verification providers process KYC documents on jl97's behalf under strict data processing agreements;
• Law enforcement: Philippine law enforcement agencies in response to a valid legal order, court order, or lawful request;
• Business transfers: In the event of a merger, acquisition, or sale of jl97's business, your data may be transferred to the successor entity, subject to the same privacy protections described in this Policy.

All third-party service providers who access your personal data are bound by contractual obligations that require them to process your data only on jl97's instructions and to maintain appropriate security measures.

7. Cookies & Tracking Technologies

jl97 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device when you visit jl97.vip. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function, including session management, login authentication, and security tokens. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits;
• Analytics cookies: Collect anonymised data about how Players navigate jl97.vip to help improve platform performance and user experience;
• Marketing cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the jl97 platform.

8. Data Retention

jl97 retains personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations:

• Account data: Retained for the duration of your active jl97 account plus five (5) years following account closure, as required by PAGCOR record-keeping obligations;
• Transaction records: Retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act;
• KYC documents: Retained for five (5) years from the date of verification or account closure, whichever is later;
• Support communications: Retained for two (2) years from the date of resolution;
• Marketing consent records: Retained for the period of active consent plus three (3) years.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jl97's data destruction policy.

9. Data Security

jl97 implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. Security measures include:

• SSL/TLS encryption for all data transmitted between your device and jl97.vip;
• Encryption of sensitive data fields (passwords, ID numbers) at rest using industry-standard cryptographic algorithms;
• Role-based access controls limiting employee access to personal data to those with a legitimate business need;
• Two-factor authentication on all jl97 internal systems that access personal data;
• Regular security assessments and penetration testing of the jl97 platform;
• Data breach response procedures with notification to the NPC and affected data subjects within 72 hours of discovery of a notifiable breach, as required by the Data Privacy Act.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal information held by jl97:

To exercise any of these rights, submit a written request to jl97's Data Protection Officer using the contact details in Section 14. jl97 will respond within fifteen (15) business days of receiving a valid, verifiable request. Note that certain rights — particularly erasure — may be limited where jl97 is required to retain data under PAGCOR regulations or AML law.

You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe jl97 has processed your personal data in violation of the Data Privacy Act. The NPC's contact details are publicly available on the NPC's official Philippine government website.

11. Children & Minors

jl97 does not knowingly collect personal information from individuals under the age of 21. The jl97 platform is restricted to persons aged 21 years and above as required by PAGCOR. If jl97 discovers that personal data has been collected from a person under 21 without verified parental or guardian consent applicable to this context, that Account will be immediately suspended, all data will be deleted or anonymised, and any deposited funds will be returned to the payment source. If you believe that jl97 has inadvertently collected data from a minor, please contact the DPO immediately using the details in Section 14.

12. Cross-Border Data Transfers

Some of jl97's third-party service providers — including certain game software suppliers and cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred outside the Philippines, jl97 ensures that appropriate safeguards are in place, including data processing agreements that impose privacy obligations equivalent to those required by the Data Privacy Act of 2012. Such transfers are made only to the extent necessary and are subject to the oversight of jl97's Data Protection Officer.

13. Changes to This Privacy Policy

jl97 may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory guidance, platform features, or data processing practices. Where changes are material, jl97 will notify registered players via email or in-platform notification at least seven (7) days before the revised Policy takes effect. The version number and effective date at the top of this document will always reflect the current version. Your continued use of the jl97 platform after the effective date of any revision constitutes your acceptance of the updated Policy.

14. Contact & Data Protection Officer

For any privacy-related questions, data subject requests, or concerns about jl97's handling of your personal information, please contact:

• Data Protection Officer, jl97
• Email: [email protected]
• Subject line: Data Privacy Request – [Your Username]
• Response time: Within 15 business days of receipt of a verifiable request

If your concern is not resolved to your satisfaction, you may escalate to the National Privacy Commission of the Philippines.