Privacy Policy

1 Who We Are

jl80 ("we", "us", "our", "the Platform") operates the online gaming information and promotional platform accessible at https://jl80.app. jl80 is the data controller responsible for the personal data of players and visitors who interact with the platform.

As data controller, jl80 determines the purposes and means of processing your personal data. We are committed to handling that responsibility with care, transparency, and full compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations.

If you have any questions about how jl80 handles your personal data, or if you wish to exercise any of your data rights, please refer to Section 14 of this Policy for contact details.

2 Personal Data We Collect

jl80 collects the following categories of personal data, depending on how you interact with the platform:

2.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Government-issued identification number (e.g., Philippine National ID, passport, driver's licence)
• Username and encrypted password
• Profile photograph (where submitted for verification)

2.2 Contact Data

• Email address
• Mobile phone number (used for SMS OTP two-factor authentication)
• Residential address in the Philippines

2.3 Financial Data

• GCash or PayMaya account number (for deposit and withdrawal processing)
• Bank account details (account name, account number, bank name) for bank transfer transactions
• Debit card details (card number masked, expiry date) where applicable
• Transaction history: deposit amounts, withdrawal amounts, dates, and payment method used

2.4 Gaming Activity Data

• Games played, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status)

2.5 Technical & Device Data

• IP address and approximate geolocation (country and region level)
• Device type, operating system, and browser type
• Session timestamps and platform access logs
• Cookie identifiers and similar tracking data (see Section 7)

2.6 Communications Data

• Records of live chat conversations with jl80 support
• Email correspondence with jl80
• Survey responses and feedback submitted through the platform

3 How We Collect Your Data

jl80 collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or respond to a survey.
• Automatically: When you access the jl80 platform, our servers automatically record technical data including your IP address, device information, and session activity. Cookies and similar technologies also collect data automatically — see Section 7.
• From third-party payment providers: When you use GCash, PayMaya, or a bank transfer, the relevant payment provider shares transaction confirmation data with jl80 to verify your deposit or process your withdrawal.
• From identity verification services: jl80 may use third-party identity verification services to confirm the authenticity of government-issued identification documents submitted during registration.

jl80 does not purchase personal data from data brokers or third-party list providers.

4 How We Use Your Personal Data

jl80 uses your personal data for the following purposes:

jl80 does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012, jl80 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and customer support.
• Legal obligation: Processing required to comply with Philippine law, including AML regulations, PAGCOR requirements, and tax obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your privacy rights.
• Consent: Processing for optional purposes such as promotional communications, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Where jl80 relies on legitimate interests as a legal basis, we have conducted a balancing assessment to confirm that our interests do not override your fundamental rights and freedoms.

6 Data Sharing & Disclosure

jl80 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, and banking partners receive the minimum data necessary to process your transactions. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Third-party KYC (Know Your Customer) service providers who assist with verifying government-issued identification documents. These providers process data solely on jl80's instructions.
• IT and infrastructure providers: Cloud hosting, database, and security service providers who process data on jl80's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where required by Philippine law, court order, or a valid request from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities.
• Business transfers: In the event of a merger, acquisition, or sale of jl80's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom jl80 shares personal data are required to handle that data in accordance with applicable Philippine privacy law and jl80's data protection standards.

7 Cookies & Tracking Technologies

jl80 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following types of cookies are used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players use the platform — which pages are visited most, how long sessions last, and where players encounter errors. This data is used to improve the jl80 experience.
• Security cookies: Used by our fraud detection systems to identify unusual access patterns and protect your account.

You can manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the jl80 platform. jl80 does not use third-party advertising cookies or cross-site tracking cookies.

8 Data Retention

jl80 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 and its amendments.
• Identity verification documents: Retained for a minimum of five (5) years after account closure.
• Customer support communications: Retained for three (3) years from the date of the last interaction.
• Technical and access logs: Retained for twelve (12) months from the date of collection, unless required for longer by an ongoing investigation or legal proceeding.
• Marketing consent records: Retained for the duration of your consent and for two (2) years after withdrawal of consent.

After the applicable retention period expires, personal data is securely deleted or anonymised in accordance with jl80's data disposal procedures.

9 Data Security

jl80 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• TLS 1.3 encryption for all data in transit between your device and jl80 servers
• AES-256 encryption for sensitive data stored at rest, including financial data and identity documents
• Multi-factor authentication (MFA) for all jl80 staff accessing production systems
• Role-based access controls ensuring staff can only access data necessary for their specific role
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• 24/7 intrusion detection and real-time security monitoring
• Secure data centres with physical access controls, CCTV, and environmental protections

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jl80 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

While jl80 takes all reasonable steps to protect your data, no system is completely immune to security risks. You are responsible for maintaining the confidentiality of your account credentials and for notifying jl80 immediately if you suspect unauthorised access to your account.

10 Your Data Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by jl80:

To exercise any of these rights, please contact jl80's Data Protection Officer using the details in Section 14. jl80 will respond to all data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.

Please note that certain rights are subject to limitations where jl80 has a legal obligation to retain data — for example, AML record-keeping requirements may prevent immediate erasure of transaction records.

11 Children's Privacy

If jl80 discovers that personal data has been collected from a person under 21 years of age, that account will be immediately closed and all associated personal data will be deleted, except where retention is required by law. Any funds in such an account will be handled in accordance with applicable Philippine regulations.

If you are a parent or guardian and believe that your child under 21 has registered on the jl80 platform, please contact us immediately using the details in Section 14 so that we can take prompt action.

12 Third-Party Links

The jl80 platform may contain links to third-party websites or services, such as payment provider portals. This Privacy Policy applies only to the jl80 platform and does not cover the privacy practices of any third-party websites.

jl80 is not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party services you access through or in connection with jl80.

13 Changes to This Privacy Policy

jl80 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When material changes are made, jl80 will post a notice on the platform and update the "Last Updated" date at the top of this page. Where required by law, we will seek your consent before implementing material changes.

Your continued use of the jl80 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the changes. We recommend reviewing this page periodically to stay informed of how jl80 protects your personal data.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or jl80's handling of your personal data, please contact our Data Protection Officer (DPO):

• Email: privacy@jl80.app (plain text — not a clickable link)
• Live Chat: Available 24/7 via the jl80 platform — ask to be connected to the Data Privacy team
• Response Time: jl80 aims to acknowledge all privacy enquiries within 48 hours and resolve them within 30 calendar days

If you are not satisfied with jl80's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent authority responsible for enforcing the Data Privacy Act of 2012.

For responsible gaming concerns, including self-exclusion and account restrictions, please visit our Responsible Gaming page or contact support directly via live chat.