jl12 Privacy Policy – How We Protect Your Data

1. Introduction

1.1 jl12 is a PAGCOR-licensed online casino and sports betting platform serving Filipino players across the Philippines. In the course of providing our services — which include live casino, JILI slots, sports betting, bingo, and related features — jl12 necessarily processes certain personal data about you.

1.2 jl12 is the data controller for personal information collected through jl12.asia. We process personal data only for lawful, specified, and legitimate purposes consistent with this Policy and with the requirements of the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and applicable National Privacy Commission (NPC) issuances.

1.3 This Policy applies to all personal data collected by jl12 through the website jl12.asia, mobile-optimised interfaces, customer support communications, and any other direct interactions between jl12 and its players. It does not apply to third-party websites or services that may be accessible through jl12, which are governed by their own privacy policies.

1.4 We encourage you to read this Policy carefully and in full. If you have questions about how jl12 handles your personal data, please contact our Data Protection Officer (DPO) as described in Section 13 of this Policy.

2. Personal Data We Collect

2.1 jl12 collects personal data that you provide directly, data generated through your use of the jl12 platform, and data obtained from third parties where permitted by law. The categories of personal data we process include:

2.2 jl12 does not collect sensitive personal information as defined under RA 10173 (such as racial origin, political opinions, health data, or sexual life) unless specifically required by law or regulatory compliance obligations and with your explicit consent.

2.3 Where jl12 requires identity verification documents (such as a Philippine passport, driver's licence, or SSS/PhilSys ID), these are collected solely for the purpose of KYC/AML compliance and are handled with heightened security controls.

3. How jl12 Uses Your Personal Data

3.1 jl12 processes your personal data only for the purposes for which it was collected and as described in this Policy. The primary purposes for which jl12 uses your personal data include:

• Account creation and management: To register and maintain your jl12 account, authenticate your identity on login, and manage account settings and preferences;
• Service delivery: To process deposits and withdrawals through GCash, Maya, and other Philippine payment channels, to credit winnings, apply bonuses, and provide access to all jl12 games and features;
• Regulatory compliance: To fulfil our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and RA 10173, including KYC verification, suspicious transaction reporting, and player age verification;
• Responsible gaming: To monitor gaming patterns, apply responsible gaming tools where appropriate, manage self-exclusion requests, and comply with PAGCOR responsible gaming directives;
• Customer support: To respond to your queries, resolve disputes, and improve our support quality through communication records;
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, multi-accounting, and other prohibited activities;
• Marketing communications: To send you promotional offers, bonus notifications, and jl12 news where you have provided consent to receive such communications. You may withdraw consent at any time by updating your account notification preferences or contacting support;
• Platform improvement: To analyse aggregated usage data, identify technical issues, and improve jl12 features, game offerings, and user experience.

3.2 jl12 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human oversight, except where required for fraud prevention or regulatory compliance, in which case you retain the right to request human review.

4. Legal Basis for Processing

4.1 jl12 processes your personal data on the following legal bases under RA 10173 and applicable NPC guidelines:

• Contractual necessity: Processing required to fulfil our service agreement with you as a jl12 player, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, NPC data governance requirements, and other applicable Philippine law;
• Legitimate interests: Processing conducted for jl12's legitimate business interests in fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where your explicit, informed consent has been obtained and can be withdrawn at any time.

5. Disclosure and Data Sharing

5.1 jl12 does not sell, rent, or trade your personal data to third parties for commercial purposes. We share your personal data only in the following circumstances:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other Philippine payment service providers receive financial data strictly necessary to process your deposits and withdrawals;
• Game providers: Software providers (including JILI and other licensed game developers) receive session-level data necessary to operate games within the jl12 platform;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities may receive your data where required by law, court order, or regulatory directive;
• IT and security service providers: Cloud hosting, cybersecurity, and fraud prevention service providers engaged by jl12 under strict data processing agreements consistent with RA 10173 requirements;
• Professional advisers: Legal, accounting, or auditing firms under professional confidentiality obligations, where required for jl12's business operations.

5.2 Any third party that receives personal data from jl12 is bound by contractual obligations to process that data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable Philippine data privacy law.

5.3 jl12 does not transfer your personal data to recipients outside the Philippines unless an adequate level of data protection is in place and the transfer complies with NPC cross-border transfer rules.

6. Cookies and Tracking Technologies

6.1 jl12 uses cookies and similar tracking technologies to operate the platform, maintain your logged-in session, remember preferences, and gather analytics data. The categories of cookies used include:

• Strictly necessary cookies: Required for the jl12 platform to function. These cannot be disabled without breaking core features such as login sessions and wallet access.
• Functional cookies: Store your preferences, such as language settings and game lobby view. These enhance your jl12 experience without tracking you across other sites.
• Analytics cookies: Collect aggregated, anonymised data about how players use jl12 — page views, session duration, feature usage — to help us improve the platform.
• Marketing cookies: Used only where you have consented, to deliver jl12 promotional content relevant to your gaming interests.

6.2 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect platform functionality. Disabling marketing cookies will not affect your ability to play on jl12 but may result in less relevant promotional messaging.

7. Data Retention

7.1 jl12 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. Specific retention periods include:

• Account and transaction data: Retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• KYC and identity documents: Retained for five (5) years following the last transaction or account closure, whichever is later;
• Gaming session logs: Retained for three (3) years for dispute resolution and audit purposes;
• Customer support communications: Retained for two (2) years from the date of the communication;
• Marketing consent records: Retained for the duration of the consent plus one (1) year following withdrawal of consent.

7.2 Upon expiry of the applicable retention period, jl12 will securely delete or anonymise personal data in accordance with RA 10173 requirements and NPC guidelines on data disposal.

8. Your Data Subject Rights

8.1 Under RA 10173 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by jl12:

• Right to be informed: To know what personal data jl12 holds about you and how it is being processed;
• Right of access: To obtain a copy of your personal data in a structured, commonly used format;
• Right to rectification: To correct inaccurate or incomplete personal data. You may update most account information directly through your jl12 account settings;
• Right to erasure ("right to be forgotten"): To request deletion of your personal data where it is no longer necessary for the purpose collected, subject to jl12's legal retention obligations;
• Right to object: To object to processing based on legitimate interests, and to opt out of direct marketing at any time;
• Right to data portability: To receive your personal data in a machine-readable format for transfer to another controller, where technically feasible;
• Right to file a complaint: To lodge a complaint with the National Privacy Commission (NPC) if you believe jl12 has violated your data privacy rights.

8.2 To exercise any of these rights, please contact jl12's Data Protection Officer at the contact details provided in Section 13. jl12 will respond to all data subject requests within fifteen (15) days of receipt, consistent with NPC guidelines.

8.3 jl12 may require identity verification before processing data subject requests to ensure that personal data is not disclosed to an unauthorised party.

9. Data Security

9.1 jl12 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and jl12 servers;
• Encrypted storage of passwords and sensitive account credentials;
• OTP-based authentication for login and withdrawal verification;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and penetration testing of jl12 systems;
• Incident response procedures including mandatory NPC breach notification within 72 hours of discovery of a notifiable personal data breach.

9.2 While jl12 applies industry-standard security practices, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your jl12 account credentials and for notifying jl12 immediately of any suspected unauthorised access.

10. Children's Privacy

10.1 jl12 is strictly intended for adults aged 21 years and above in compliance with PAGCOR regulations. jl12 does not knowingly collect personal data from individuals under 21 years of age.

10.2 If jl12 discovers or is informed that personal data has been collected from a person under 21 years of age, such data will be deleted without delay and the associated account will be closed immediately.

10.3 If you believe a person under 21 has registered a jl12 account or that your personal device may have been used to access jl12 by a minor, please contact jl12 customer support immediately and change your account password.

11. Third-Party Services and Links

11.1 The jl12 platform integrates with third-party payment processors and game software providers to deliver its services. These third parties operate under their own privacy policies and are independently responsible for their data processing activities. jl12 is not responsible for the privacy practices of third-party services.

11.2 jl12 does not include links to external websites on jl12.asia beyond those necessary to access payment processors within the transaction flow. Any navigation away from jl12.asia is governed by the privacy policy of the destination site.

12. Changes to This Privacy Policy

12.1 jl12 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or platform features. The "Last Updated" date at the top of this page will be revised accordingly.

12.2 For material changes that affect your rights or the way jl12 processes your personal data, jl12 will provide prior notice via the mobile number or email address registered to your account at least seven (7) days before the changes take effect. Continued use of jl12 after the effective date constitutes acceptance of the updated Policy.

12.3 We recommend reviewing this Policy periodically, particularly before providing updated personal information to jl12 or when exercising your data subject rights.

13. Contact Us & Data Protection Officer

13.1 jl12 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. To exercise your data subject rights, raise a privacy concern, or report a suspected data breach, please contact the jl12 DPO through the following channels:

13.2 If you are not satisfied with jl12's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC).