jl92 Casino Privacy Policy

1. Introduction

1.1 jl92 Casino ("jl92," "we," "us," "our") is committed to protecting the privacy and personal data of all users of the jl92 platform ("Platform"). This Privacy Policy describes how jl92 collects, uses, stores, shares, and protects your personal data when you access or use the Platform.

1.2 This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission of the Philippines ("NPC").

1.3 By registering for a jl92 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please do not use the Platform.

1.4 This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the jl92 platform.

2. Personal Data We Collect

2.1 jl92 collects the following categories of personal data:

2.2 jl92 does not collect sensitive personal information as defined under the DPA (such as health data, political opinions, or religious beliefs) unless specifically required for responsible gaming purposes (e.g., self-exclusion requests citing health reasons), in which case such data is handled with the highest level of protection.

3. How We Collect Your Data

3.1 jl92 collects personal data through the following means:

• Direct collection: Data you provide when registering for a jl92 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment data from GCash, PayMaya, and Philippine banking partners.

4. How We Use Your Personal Data

4.1 jl92 uses your personal data for the following purposes:

• Account management: Creating and maintaining your jl92 account, verifying your identity and age, and managing your account settings;
• Service delivery: Processing deposits and withdrawals, providing access to games, and delivering customer support;
• Legal and regulatory compliance: Complying with PAGCOR requirements, anti-money laundering (AML) obligations under Republic Act No. 9160, and reporting obligations to Philippine regulatory authorities;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized access, and other illegal conduct;
• Responsible gaming: Monitoring gaming activity to identify signs of problem gambling, enforcing deposit limits and self-exclusion requests, and complying with responsible gaming obligations;
• Platform improvement: Analyzing usage patterns to improve the jl92 platform, fix technical issues, and develop new features;
• Marketing communications: Sending promotional offers and updates where you have provided consent. You may opt out of marketing communications at any time.

4.2 jl92 will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent.

5. Legal Basis for Processing

5.1 jl92 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you (i.e., to provide the jl92 platform services);
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR requirements, and tax obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. Consent may be withdrawn at any time.

6. Data Sharing & Disclosure

6.1 jl92 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only where necessary and permitted by law:

• Identity verification providers: Third-party KYC service providers used to verify your identity and age in compliance with PAGCOR and AML requirements;
• Payment processors: GCash, PayMaya, and Philippine banking partners for the purpose of processing deposits and withdrawals;
• Fraud prevention partners: Third-party fraud screening services used to detect and prevent fraudulent activity on the Platform;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or court order;
• IT and platform service providers: Cloud hosting, data storage, and technical support providers who process data on our behalf under strict data processing agreements;
• Professional advisers: Legal counsel, auditors, and compliance consultants where necessary for the operation of jl92's business.

6.2 All third parties with whom jl92 shares personal data are required to handle such data in accordance with the Data Privacy Act of 2012 and are bound by contractual data protection obligations.

6.3 Cross-border transfers. Where personal data is transferred outside the Philippines (for example, to cloud service providers with servers in other countries), jl92 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law.

7. Data Retention

7.1 jl92 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under RA 9160;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by PAGCOR and AMLC regulations;
• KYC documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Support communications: Retained for three (3) years from the date of the communication, or longer where relevant to an ongoing dispute or investigation;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year for compliance documentation purposes.

7.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with jl92's data disposal procedures.

8. Cookies & Tracking Technologies

8.1 jl92 uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cookies cannot be disabled without affecting Platform functionality;
• Analytics cookies: Used to collect anonymized data about how users interact with the Platform, helping us identify areas for improvement. These cookies are only placed with your consent;
• Preference cookies: Used to remember your settings and preferences, such as language and display options;
• Marketing cookies: Used to deliver relevant promotional content where you have consented to receive marketing communications from jl92.

8.2 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the jl92 platform. For more information on how to manage cookies, refer to your browser's help documentation.

9. Data Security

9.1 jl92 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the jl92 platform;
• Encryption of personal data at rest using industry-standard encryption protocols;
• Role-based access controls limiting access to personal data to authorized personnel only;
• Regular security assessments and penetration testing of the jl92 platform;
• Staff training on data protection obligations and information security best practices;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

9.2 Data Breach Notification. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jl92 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the DPA and NPC Circular No. 16-03.

9.3 While jl92 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your jl92 account credentials.

10. Your Rights as a Data Subject

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl92:

• Right to be informed: The right to be informed of how your personal data is collected, used, and shared, as described in this Privacy Policy;
• Right of access: The right to request a copy of the personal data jl92 holds about you, along with information about how it is processed;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jl92's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

10.2 To exercise any of the above rights, please contact jl92's Data Protection Officer at [email protected]. jl92 will respond to your request within thirty (30) days of receipt, in accordance with NPC guidelines.

10.3 jl92 may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties.

11. Children's Privacy

11.1 The jl92 platform is strictly intended for individuals aged twenty-one (21) years and above. jl92 does not knowingly collect personal data from individuals under the age of 21.

11.2 If jl92 becomes aware that personal data has been collected from a person under the age of 21, the relevant account will be suspended immediately, all personal data will be deleted, and any deposits will be returned to the payment method used.

11.3 If you are a parent or guardian and believe that your child has provided personal data to jl92, please contact us immediately at [email protected] so that we can take appropriate action.

12. Changes to This Privacy Policy

12.1 jl92 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered users via notice on the Platform or by email to the address registered on your account.

12.2 The date of the most recent revision is indicated at the top of this Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed of how jl92 protects your personal data.

12.3 Your continued use of the jl92 platform following notification of changes to this Privacy Policy constitutes your acceptance of the revised policy.

13. Contact & Data Protection Officer

13.1 jl92 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO:

13.2 This Privacy Policy was last reviewed and updated in May 2026 and is effective as of that date. jl92 recommends that all users review this policy periodically.