jjl8 Privacy Policy

jjl8 ("the Company," "we," "us," "our") is committed to protecting the privacy and personal data of all individuals who access or use the jjl8 online casino platform at jjl8.net ("the Platform"). This Privacy Policy is issued in accordance with the requirements of Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as overseen by the National Privacy Commission ("NPC").

This Privacy Policy applies to all personal data collected through the jjl8 Platform, including data collected via account registration, identity verification, payment processing, gameplay activity, customer support interactions, and voluntary communications with jjl8 staff.

For the purposes of the Data Privacy Act of 2012 and applicable PAGCOR regulatory requirements, jjl8 acts as the Personal Information Controller ("PIC") with respect to the personal data of its registered players and platform users. As a PIC, jjl8 determines the purposes for which and the manner in which personal data is processed.

jjl8 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA and this Privacy Policy. Contact details for the jjl8 DPO are provided in Section 14 of this Policy. The DPO can be contacted for any data privacy-related queries, complaints, or requests to exercise data subject rights.

jjl8 collects personal data through multiple touchpoints across the Platform lifecycle. The categories of personal data collected, and the context of their collection, are as follows:

jjl8 does not intentionally collect special categories of sensitive personal data (such as health data, racial origin, political opinion, or religious belief) unless explicitly required for a specific compliance purpose and with your informed consent. Financial data collected during payment processing is handled in strict accordance with Payment Card Industry and Philippine BSP digital payments standards applicable to the relevant payment channels.

jjl8 processes personal data for the following specific, declared purposes:

1. Account Creation and Management: To register your account, verify your identity, maintain your account records, and provide access to the jjl8 Platform.
2. Age and Identity Verification: To confirm that you meet the minimum age requirement of 21 years as required by PAGCOR regulations and Philippine law, and to verify that you are who you say you are.
3. Payment Processing: To process deposits to and withdrawals from your jjl8 account in Philippine Peso via your chosen payment method, and to maintain accurate financial records.
4. Game Delivery and Platform Operation: To provide access to casino games, record gameplay activity, calculate and award winnings, apply bonuses, and maintain the integrity of the gaming environment.
5. PAGCOR Regulatory Compliance: To fulfill jjl8's obligations under its PAGCOR operating license, including player activity reporting, anti-money laundering reporting, and compliance audits.
6. Anti-Money Laundering (AML) and Know Your Customer (KYC): To comply with the Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments, which require identity verification and transaction monitoring for financial services platforms.
7. Customer Support: To respond to your inquiries, process complaints, resolve disputes, and provide assistance with account or payment issues through live chat and email support.
8. Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, unauthorized account access, and other prohibited conduct.
9. Responsible Gaming Compliance: To record and honour self-imposed gaming limits, cool-off periods, and self-exclusion requests, and to monitor gameplay patterns that may indicate problem gambling behaviour.
10. Platform Improvement: To analyze aggregated, anonymized usage patterns to improve platform performance, game offerings, and user experience.
11. Legal Compliance: To comply with applicable Philippine laws, court orders, regulatory directions from PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council, and other competent authorities.

Under the Data Privacy Act of 2012, jjl8 processes personal data on one or more of the following legal bases:

• Consent: Where you have freely given specific, informed, and unambiguous consent to the processing of your personal data for a stated purpose — for example, consent to receive promotional communications.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and jjl8 — primarily your account registration and use of the Platform, which is governed by the jjl8 Terms and Conditions.
• Legal Obligation: Where processing is required to comply with applicable Philippine law — including the Anti-Money Laundering Act, PAGCOR licensing requirements, the National Internal Revenue Code, and other regulatory obligations.
• Legitimate Interests: Where processing is necessary for the legitimate interests of jjl8 and does not override your fundamental rights and interests — including fraud detection, platform security, and analytical platform improvement.

Where jjl8 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

jjl8 does not sell, rent, exchange, or trade your personal data to or with any third party for marketing or commercial purposes. Personal data is shared only in the following limited circumstances:

1. Payment Service Providers: jjl8 shares transaction reference data with GCash, PayMaya, BPI, BDO, Metrobank, and other payment channel operators solely for the purpose of processing your deposits and withdrawals. Each provider's own privacy policy governs their data practices.
2. Game Software Providers: Game result and session data may be shared with the certified game software providers whose titles are hosted on jjl8, for the limited purpose of resolving game integrity disputes and providing certified RNG audit trails.
3. PAGCOR: As a PAGCOR-licensed operator, jjl8 is required to provide player activity reports and other data to PAGCOR as part of its ongoing regulatory compliance obligations. This disclosure is mandatory and cannot be restricted.
4. Anti-Money Laundering Council (AMLC): jjl8 is a covered person under the Anti-Money Laundering Act and is required to report certain transactions and suspicious activities to the AMLC in accordance with applicable thresholds and reporting rules.
5. Law Enforcement and Judicial Authorities: jjl8 will disclose personal data to law enforcement agencies, courts, or other competent authorities when required by a valid court order, warrant, or regulatory direction under Philippine law.
6. Authorized Service Providers: jjl8 engages third-party service providers for platform infrastructure, identity verification, and customer support functions. These providers act as Personal Information Processors (PIPs) under jjl8's direction and are contractually bound to process data only for the specified purpose and to implement appropriate data protection measures.

jjl8 uses cookies and similar browser-based tracking technologies on the Platform for the following purposes:

• Session Cookies: Required to maintain your authenticated login session, remember your in-session preferences, and ensure the Platform functions correctly. These cookies are deleted when you close your browser.
• Persistent Cookies: Used to remember your Platform preferences (such as language settings and display options) between sessions, reducing the need to re-configure settings on each visit. These cookies have a defined expiry date.
• Security Cookies: Used to detect and prevent fraudulent account access, including recognition of trusted devices and detection of anomalous login patterns.
• Analytics Cookies: Used to collect aggregated, anonymized data about how the Platform is accessed and used, enabling jjl8 to identify performance issues and improve the user experience. Individual users are not identifiable from analytics data.

You can manage cookie preferences through your browser settings. Please note that disabling session cookies will prevent you from logging in to your jjl8 account, as authenticated sessions require cookie support to function. Disabling analytics cookies will not affect your ability to use the Platform.

jjl8 implements organizational, technical, and physical security measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jjl8 servers
• Encryption of passwords and authentication tokens at rest using industry-standard hashing algorithms — jjl8 does not store plaintext passwords
• Segregation of player fund accounts from operational accounts in accordance with PAGCOR requirements
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security audits and vulnerability assessments conducted by qualified third-party security professionals
• Intrusion detection systems and automated monitoring for anomalous data access patterns
• Mandatory data protection training for all jjl8 employees and contractors with access to personal data

Notwithstanding these measures, no data transmission over the internet or data storage system can be guaranteed to be completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jjl8 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with the requirements of the DPA.

jjl8 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, in accordance with AMLC record-keeping obligations and BIR requirements under the National Internal Revenue Code.
• Gameplay Records: Retained for a minimum of five (5) years for PAGCOR compliance and dispute resolution purposes.
• Customer Support Records: Retained for three (3) years following the closure of each support interaction, for dispute resolution and quality assurance purposes.
• Security and Fraud Prevention Logs: Retained for three (3) years for security monitoring and legal proceedings purposes.
• Marketing Consent Records: Retained for the duration of your marketing subscription and for three (3) years following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that renders re-identification impossible. Anonymized and aggregated data may be retained indefinitely for analytical purposes.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jjl8. These rights may be exercised by submitting a written request to the jjl8 Data Protection Officer using the contact details in Section 14:

1. Right to Be Informed: The right to be informed whether jjl8 holds personal data about you and to be provided with information about how it is processed, which this Privacy Policy fulfils.
2. Right of Access: The right to request a copy of the personal data jjl8 holds about you, together with information about the purposes of processing and the categories of data involved.
3. Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You can update most profile information directly within your jjl8 account settings; other corrections can be requested from the DPO.
4. Right to Erasure: The right to request deletion of your personal data where the data is no longer necessary for the purpose for which it was collected, where you withdraw consent on which processing is based, or where processing is unlawful. This right is subject to jjl8's legal obligations to retain data under PAGCOR regulations and AML law.
5. Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on jjl8's legitimate interests where you have grounds relating to your particular situation.
6. Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where the processing is based on consent or contract and is carried out by automated means.
7. Right to Lodge a Complaint: If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through its official complaints process.

jjl8 will respond to all data subject rights requests within thirty (30) days of receipt. Where a request is complex or jjl8 receives a large number of requests simultaneously, the response period may be extended by a further sixty (60) days, with notification provided to you within the initial thirty-day period explaining the reason for the extension.

jjl8 does not knowingly collect personal data from or provide services to persons under the age of twenty-one (21). The Platform is strictly intended for adults who meet the minimum gambling age requirement under Philippine law. Age verification is a mandatory component of the registration and withdrawal process for all jjl8 accounts.

If jjl8 becomes aware that it has inadvertently collected personal data from a person under the age of 21, it will immediately suspend the associated account, return any deposited funds to their source, securely delete all personal data collected from the minor, and notify the appropriate PAGCOR contact in accordance with licensing requirements.

jjl8's primary data processing operations are located within the Philippines. However, some of jjl8's authorized service providers — including certain game software providers and platform infrastructure providers — may process data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, jjl8 ensures that such transfers are made only to recipients in countries that have been determined to provide an adequate level of data protection, or are subject to appropriate contractual safeguards (such as Data Processing Agreements incorporating standard contractual clauses approved by the National Privacy Commission) that ensure your personal data receives a comparable level of protection to that afforded under Philippine law.

jjl8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via their registered email address and/or via a notice displayed upon login to the Platform, no fewer than fourteen (14) days before the amended Policy takes effect.

The effective date and version number at the top of this Policy will be updated with each revision. The current version of this Privacy Policy is always accessible at jjl8.net/privacy-policy. Continued use of the jjl8 Platform after the effective date of any amended Policy constitutes acceptance of the updated terms.

For all data privacy-related inquiries, requests to exercise your data subject rights, or to raise a concern about how jjl8 handles your personal data, please contact the jjl8 Data Protection Officer through the following channels:

• DPO Email: [email protected] (Subject line: "Data Privacy Request – [Your Username]")
• Live Chat: Available 24/7 on Philippine Standard Time via the jjl8 Platform — request to be connected with the Data Privacy team

jjl8 takes all data privacy concerns seriously and will acknowledge receipt of your request within three (3) business days. Formal data subject rights requests will be fully responded to within thirty (30) days in accordance with the DPA timeline requirements.

If you are not satisfied with jjl8's handling of your personal data or a data privacy request, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines, the independent government authority responsible for the administration and enforcement of the Data Privacy Act of 2012.

This Privacy Policy was last updated on 1 January 2026 (Version 2.0). Previous versions are available upon written request to the Data Protection Officer.