jl80 Privacy Policy

This Privacy Policy governs the collection, use, storage, and disclosure of personal data by jl80 ("we", "us", "our") in connection with the operation of the jl80 Platform at jl80.org and all associated services, including but not limited to casino gaming, sports betting, bingo, sabong, and customer support.

jl80 acts as the Personal Information Controller within the meaning of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "PDPA") and its implementing rules and regulations ("IRR") with respect to personal data collected from registered players, website visitors, and other individuals interacting with the Platform.

This Policy applies to:

• Registered jl80 account holders ("Players"), whether active, inactive, or self-excluded.
• Visitors to jl80.org who have not yet registered an account.
• Individuals who contact jl80 through customer support, live chat, or email channels.

jl80 collects the following categories of personal data, depending on how you interact with the Platform:

jl80 does not intentionally collect sensitive personal information (as defined under RA 10173) such as political opinions, religious beliefs, health data, or biometric data, except where specifically required for AML compliance (e.g., source of funds declarations) or responsible gaming self-assessment purposes.

jl80 collects personal data through the following methods and sources:

• Directly from you: Information you provide during account registration, KYC document submission, deposit and withdrawal requests, customer support interactions, and promotional opt-ins.
• Automatically through Platform use: Technical and gaming activity data collected through server logs, session tracking, and analytics tools when you access and use jl80.org.
• Through cookies and similar technologies: As described in Section 6 of this Policy. Cookies are used for session management, performance analytics, and fraud prevention.
• From third-party service providers: Identity verification data from KYC service providers, payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank, and device fingerprint data from fraud detection partners.
• From regulatory sources: jl80 may receive data from PAGCOR or law enforcement authorities where required by applicable Philippine law.

Under the PDPA, jl80 relies on the following legal bases for processing personal data:

jl80 does not sell your personal data. We share personal data only in the following circumstances, and only to the extent necessary for the stated purpose:

• Game providers and platform technology partners: To facilitate your access to games hosted by third-party providers (e.g., live dealer studios, slot software providers). These providers receive only the minimum data necessary to operate the game service.
• Payment processors and e-wallet providers: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data required to process deposits and withdrawals to and from your jl80 Account.
• KYC and identity verification providers: Certified third-party KYC service providers receive identity document data for the sole purpose of conducting required identity verification checks.
• Fraud prevention and cybersecurity partners: Device fingerprint, IP address, and behavioral data may be shared with anti-fraud service providers to detect and prevent unauthorized account access and payment fraud.
• PAGCOR and Philippine regulatory authorities: jl80 is required by law to submit player activity reports, AML suspicious transaction reports, and other regulatory filings to PAGCOR and, where applicable, the Anti-Money Laundering Council (AMLC).
• Law enforcement agencies: Where required by a valid court order, subpoena, or legal process issued under Philippine law.
• Corporate transactions: In the event of a merger, acquisition, or asset sale, player data may be transferred as part of the transaction, subject to equivalent data protection commitments by the acquirer.

All third parties with whom jl80 shares personal data are required to maintain appropriate technical and organizational security measures and are prohibited from using your data for any purpose beyond those specified by jl80.

jl80 uses cookies and similar tracking technologies on jl80.org. A cookie is a small data file stored on your device by your browser when you access a website. jl80 uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies that keep you logged into your jl80 Account. They cannot be disabled without breaking core Platform functionality.
• Performance and Analytics Cookies: Used to understand how Players interact with jl80.org — which game categories are most visited, average session duration, and page load performance. Data collected is aggregated and anonymized.
• Security and Fraud Detection Cookies: Used to detect unusual or suspicious login behavior, device fingerprinting for account protection, and to support jl80's responsible gaming monitoring obligations.
• Preference Cookies: Store your language, display, and notification preferences so you don't have to reset them every session.

jl80 retains personal data for as long as necessary for the purposes described in this Policy, and in accordance with applicable Philippine legal and regulatory obligations. Key retention periods are:

Upon expiry of the applicable retention period, jl80 will securely delete or anonymize personal data in a manner that prevents re-identification.

jl80 implements comprehensive technical and organizational security measures designed to protect personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• Encryption in transit: All data exchanged between your device and jl80.org is encrypted using TLS 1.2 or higher (256-bit SSL). This applies to all Platform pages, including the jl80 Login form, deposit and withdrawal screens, and account settings.
• Encryption at rest: Sensitive stored data, including payment references and government ID records, is encrypted at rest using AES-256.
• Password hashing: Passwords are stored using one-way cryptographic hashing algorithms. jl80 cannot view or recover plain-text passwords.
• Access controls: Access to personal data within jl80's internal systems is restricted on a strict need-to-know basis with role-based access controls, multi-factor authentication for staff accounts, and audit logging.
• Regular security assessments: jl80's platform infrastructure undergoes periodic security vulnerability assessments and penetration testing.
• Incident response: jl80 maintains a data breach response plan. In the event of a personal data breach that is likely to result in risk to affected individuals, jl80 will notify the National Privacy Commission (NPC) within 72 hours and will notify affected Players without undue delay, as required under the PDPA.

As a data subject under the PDPA, you have the following rights with respect to personal data held by jl80. To exercise any of these rights, contact jl80 via 24/7 live chat or at [email protected] (plain text — not a clickable link).

The jl80 Platform is strictly prohibited for individuals under the age of 21 years. jl80 does not knowingly collect, process, or store personal data from persons under 21. The Platform implements age verification at registration and additional KYC checks before withdrawals are processed.

If jl80 becomes aware that personal data has been collected from an individual who is under 21, that data will be immediately deleted and the associated Account will be closed, with all funds handled in accordance with jl80's Terms & Conditions and applicable PAGCOR regulations.

If you believe that a minor's data may have been processed by jl80, please contact us immediately via live chat or at [email protected].

Some of jl80's third-party service providers — including game software providers, cloud infrastructure operators, and analytics tools — may process personal data on servers located outside the Philippines. Where such international transfers occur, jl80 ensures that:

• The recipient jurisdiction provides an adequate level of data protection, or
• Appropriate contractual safeguards are in place with the receiving party (including data processing agreements with equivalent protections to those required under the PDPA), or
• The transfer is otherwise permitted under applicable PDPA exceptions (e.g., where necessary for the performance of a contract with you).

For the avoidance of doubt, financial transaction data processed through GCash, PayMaya, BPI, BDO, and Metrobank is handled within Philippine-based systems subject to Bangko Sentral ng Pilipinas (BSP) data governance requirements.

jl80 may update this Privacy Policy from time to time to reflect changes in our data practices, changes in applicable law (including PDPA amendments or new NPC circulars), or changes in the Platform's features and services.

• Material changes to this Policy will be communicated to registered Players via the email address on file or through an in-Platform notification, with reasonable advance notice where practicable.
• The "Effective Date" at the top of this page will be updated on each revision.
• Your continued use of the jl80 Platform following the effective date of any revised Policy constitutes your acceptance of the changes. If you do not accept the revised Policy, you must stop using the Platform and may request account closure.

For all privacy-related inquiries, data rights requests, or concerns about jl80's handling of your personal data, please contact us through the following channels:

• 24/7 Live Chat: Available on-site at jl80.org. The fastest way to reach the jl80 support team for account-specific privacy queries.
• Support Email (plain text — not a clickable link): [email protected]

jl80 has designated a Data Protection Officer (DPO) in accordance with the requirements of the PDPA and NPC Circular 16-01. The DPO is responsible for overseeing jl80's compliance with data privacy obligations and serves as the primary point of contact for the National Privacy Commission (NPC).

Data rights requests submitted to jl80 should include your full name, registered email address, and a clear description of the specific right you wish to exercise. jl80 will request reasonable identity verification before processing data rights requests to protect against unauthorized disclosure.