jl28 Privacy Policy

This Privacy Policy ("Policy") describes how jl28 ("jl28," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the jl28 online gaming platform at jl28.club (the "Platform").

jl28 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account or using the jl28 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and close your account.

This Policy should be read together with our Terms & Conditions, which govern your use of the jl28 Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.

jl28 collects personal data that is necessary to provide you with a safe, secure, and compliant gaming experience. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name, date of birth, and nationality
• Government-issued identification documents (e.g., Philippine passport, driver's license, SSS/GSIS ID, PhilSys ID) for age and identity verification
• Username and encrypted password
• Email address and mobile number
• Residential address (city, province, region within the Philippines)

2.2 Financial & Transaction Data

• GCash account reference, PayMaya/Maya account reference, or bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) used for deposits and withdrawals
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method references
• Wagering history and game activity records

2.3 Technical & Usage Data

• IP address, device type, operating system, and browser type
• Session duration, pages visited, and features used on the Platform
• Geolocation data (country/region level) to verify eligibility
• Cookie identifiers and similar tracking technologies (see Section 6)

2.4 Communications Data

• Records of your communications with jl28 customer support, including live chat transcripts and email correspondence
• Feedback, survey responses, and promotional opt-in preferences

jl28 uses your personal data for the following purposes:

1. Account Management: To create, verify, maintain, and secure your jl28 account, including processing your jl28 Login and authenticating your identity.
2. Service Delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all features of the jl28 Platform.
3. Age & Identity Verification: To verify that you meet the minimum age requirement of 21 years and to comply with Know Your Customer (KYC) obligations under PAGCOR regulations and anti-money laundering laws.
4. Regulatory Compliance: To comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
5. Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct.
6. Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
7. Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, features, and user experience of the jl28 Platform.
8. Marketing Communications: To send you promotional offers, bonuses, and updates about jl28 — but only where you have provided your consent or where permitted by applicable law. You may opt out at any time.
9. Responsible Gaming: To monitor gaming activity for signs of problem gambling and to enforce responsible gaming tools such as deposit limits and self-exclusion, in accordance with our Responsible Gaming Policy.

Under the Data Privacy Act of 2012, jl28 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (the Terms & Conditions) — including account creation, game access, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA obligations, and NPC requirements.
• Legitimate Interests: Processing is necessary for jl28's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jl28 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya/Maya, and Philippine banking partners, solely to process your deposits and withdrawals.
• Game Providers: Third-party game software providers whose titles are available on the jl28 Platform, to the extent necessary to deliver gameplay and verify results.
• Identity Verification Services: Third-party KYC and age verification providers engaged to assist with regulatory compliance.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulatory obligation.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and analytics providers engaged to support Platform operations, subject to strict data processing agreements.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by jl28, subject to professional confidentiality obligations.

All third parties with whom jl28 shares personal data are required to handle such data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

jl28 uses cookies and similar technologies (such as web beacons and local storage) to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

The types of cookies used by jl28 include:

• Strictly Necessary Cookies: Essential for the Platform to function, including maintaining your jl28 Login session and enabling secure transactions. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings) to provide a more personalized experience.
• Analytics Cookies: Help us understand how players use the Platform so we can improve performance and features. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used to deliver relevant promotional content to you on the Platform, based on your activity. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the jl28 Platform. jl28 does not use cookies to track your activity across unrelated third-party websites.

jl28 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jl28 Platform
• Encrypted storage of passwords using industry-standard hashing algorithms
• Multi-factor authentication options for account access
• Regular security audits and penetration testing of Platform infrastructure
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Data breach detection and incident response procedures in compliance with NPC notification requirements

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jl28 will notify the National Privacy Commission and affected individuals in accordance with the timelines prescribed under the Data Privacy Act of 2012 and NPC Circular No. 16-03.

While jl28 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your jl28 Login credentials and should notify us immediately if you suspect unauthorized access to your account.

jl28 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by AMLA and PAGCOR record-keeping obligations.
• Transaction & Financial Data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA requirements.
• Communications Data: Customer support records are retained for up to three (3) years from the date of the interaction.
• Technical & Usage Data: Retained for up to twelve (12) months for analytics and security purposes, after which it is aggregated or deleted.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or anonymized in accordance with jl28's data disposal procedures and NPC guidelines.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl28:

1. Right to be Informed: The right to be informed of how your personal data is being collected and processed — which this Policy fulfills.
2. Right of Access: The right to request a copy of the personal data jl28 holds about you, along with information about how it is being processed.
3. Right to Rectification: The right to request correction of any inaccurate or incomplete personal data jl28 holds about you.
4. Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jl28's legal retention obligations.
5. Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
6. Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
7. Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact jl28's Data Protection Officer (DPO) using the contact details in Section 13. jl28 will respond to all data rights requests within fifteen (15) business days of receipt, as required by the Data Privacy Act of 2012.

The jl28 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. jl28 does not knowingly collect personal data from individuals under the age of 21.

If jl28 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the jl28 Platform, please contact our support team immediately.

The jl28 Platform may contain links to third-party websites or services, including payment providers and game developers. This Privacy Policy applies solely to the jl28 Platform. jl28 is not responsible for the privacy practices of any third-party websites or services, and we encourage you to review the privacy policies of any third parties you interact with.

jl28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, jl28 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this page. Your continued use of the jl28 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

jl28 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding this Policy or the processing of your personal data, please contact our DPO:

Data Protection Officer — jl28
Email: [email protected]
General Support: [email protected]

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.