jl29 Casino Privacy Policy

This Privacy Policy ("Policy") describes how jl29 Casino ("jl29", "we", "us", or "our") collects, processes, stores, and protects the personal information of users ("you", "your", or "Player") who access or use the jl29 platform, including the website at jl29.asia and all associated services, games, and features.

jl29 is committed to handling your personal data responsibly, transparently, and in full compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines. We also comply with applicable PAGCOR regulations regarding player data management.

By registering an account on jl29, accessing the platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the jl29 platform.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of jl29.

For the purposes of the Data Privacy Act of 2012 and its IRR, jl29 Casino acts as the Personal Information Controller (PIC) in respect of the personal data collected from players and users of the jl29 platform.

As the PIC, jl29 determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with the DPA, its IRR, and the relevant issuances of the NPC.

jl29 has designated a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and implementation, and for serving as the primary point of contact for data privacy matters. You may contact the jl29 DPO at the email address provided in Section 14 of this Policy.

jl29 collects the following categories of personal data from players and platform users:

jl29 does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive personal information is collected (such as government ID numbers), it is handled with the heightened protections required under the DPA.

jl29 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the jl29 platform, including through cookies, web beacons, and server logs.
• Third-Party Sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, and banking partners; fraud prevention data from security service providers.
• Regulatory Sources: Information shared with jl29 by PAGCOR or other Philippine regulatory authorities in connection with compliance obligations.

jl29 will always inform you at the point of collection what data is being collected and for what purpose, in accordance with the transparency requirements of the DPA.

jl29 uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your jl29 player account, including authentication and password recovery.
• KYC & Age Verification: Verifying your identity and confirming that you meet the 21+ age requirement mandated by PAGCOR regulations.
• Payment Processing: Processing deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers in Philippine Peso (PHP).
• Game Operation: Delivering games, recording game outcomes, calculating winnings, and resolving disputes.
• Regulatory Compliance: Meeting jl29's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• Fraud Prevention & Security: Detecting and preventing unauthorized access, fraudulent activity, money laundering, and multi-accounting.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering self-exclusion and limit-setting tools.
• Customer Support: Responding to your queries, complaints, and support requests through live chat, email, and other channels.
• Marketing & Promotions: Sending you information about jl29 bonuses, promotions, and new games — only where you have provided consent or where permitted by law. You may opt out at any time.
• Platform Improvement: Analyzing usage patterns to improve the jl29 platform, fix bugs, and enhance the overall player experience.

jl29 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

Under the Data Privacy Act of 2012, jl29 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your jl29 account, process transactions, and deliver gaming services.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the AMLA, the DPA, and other applicable Philippine laws and regulations.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jl29 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya / Maya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to conduct KYC checks in compliance with PAGCOR requirements.
• Game Technology Providers: Licensed game software providers whose games are hosted on the jl29 platform, to the extent necessary for game operation and audit.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or regulation.
• Law Enforcement: Philippine law enforcement agencies, where jl29 is legally required or compelled to disclose data in connection with a criminal investigation or court order.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and fraud prevention vendors who process data on jl29's behalf under strict data processing agreements.

All third parties with whom jl29 shares personal data are required to handle that data in accordance with the DPA and jl29's data protection standards. jl29 does not transfer personal data outside the Philippines except where necessary and subject to appropriate safeguards.

The jl29 platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage. The types of cookies used by jl29 include:

• Essential Cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and game display options to personalize your jl29 experience.
• Analytics Cookies: Collect anonymized data about how players use the jl29 platform, helping us identify areas for improvement. Used only with your consent.
• Marketing Cookies: Used to deliver relevant jl29 promotions and measure the effectiveness of marketing campaigns. Used only with your explicit consent.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may affect the functionality of the jl29 platform. For more information on managing cookies, refer to your browser's help documentation.

jl29 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jl29 platform
• Encrypted storage of sensitive personal and financial data at rest
• Multi-factor authentication (MFA) options for player accounts
• Regular security audits, penetration testing, and vulnerability assessments
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• 24/7 security monitoring and intrusion detection systems
• Incident response procedures compliant with NPC breach notification requirements

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jl29 will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the DPA and NPC Circular No. 16-03.

jl29 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account Data: Retained for the duration of your active jl29 account, plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, in compliance with AMLA requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and PAGCOR.
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for two (2) years from the date of the last communication.
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year for compliance documentation purposes.

Upon expiry of the applicable retention period, jl29 will securely delete or anonymize your personal data in accordance with NPC guidelines, unless further retention is required by law.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl29:

• Right to be Informed: The right to know what personal data jl29 collects about you, how it is used, and with whom it is shared — as set out in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data jl29 holds about you, and information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by jl29.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jl29's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe jl29 has violated your data privacy rights.

To exercise any of these rights, please contact the jl29 Data Protection Officer using the contact details in Section 14. jl29 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

The jl29 platform is strictly intended for adults aged 21 years and above, in compliance with Philippine law and PAGCOR regulations. jl29 does not knowingly collect personal data from individuals under the age of 21.

If jl29 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete the personal data in question, and — where applicable — return any deposited funds to the source payment method.

If you are a parent or guardian and believe that your child has registered on jl29, please contact us immediately at the email address provided in Section 14 so that we can take prompt action.

jl29 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidelines, or PAGCOR requirements. The "Last Updated" date at the top of this page will be revised accordingly.

When material changes are made to this Policy, jl29 will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect. For minor or non-material changes, the updated Policy will be posted on this page without prior notice.

Your continued use of the jl29 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how jl29 protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or jl29's data processing practices, please contact our Data Protection Officer:

Data Protection Officer — jl29 Casino
Email: [email protected]

jl29 aims to respond to all privacy-related inquiries within fifteen (15) business days. For general support queries, you may also contact our customer service team at [email protected] or via the in-platform live chat.

If you are not satisfied with jl29's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.