jl67 Privacy Policy

1Introduction & Scope

This Privacy Policy applies to all personal information collected, processed, stored, and used by jl67 in connection with the online gaming platform accessible at https://jl67.club (the "Platform"). It applies to all registered players, visitors, and individuals who interact with jl67 through the Platform, customer support channels, or promotional communications.

jl67 is committed to protecting the privacy and personal data of every Filipino player who trusts us with their information. We process personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the guidelines and circulars issued by the National Privacy Commission (NPC) of the Philippines, and applicable regulations issued by PAGCOR.

By registering an account on jl67 or using any of our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Policy, you should not use the Platform.

2Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection law, jl67 — the operator of jl67.club — is the Personal Information Controller (PIC) in respect of the personal data you provide when using the Platform.

As Personal Information Controller, jl67 determines the purposes and means by which your personal data is processed, and is responsible for ensuring that processing is carried out in accordance with applicable data privacy law and this Policy.

jl67 has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with data privacy obligations. Contact details for the DPO are provided in Section 15 of this Policy.

3Data We Collect

jl67 collects the following categories of personal information:

3.1 Account Registration Data

• Full legal name
• Date of birth
• Gender
• Philippine mobile number
• Email address
• Residential address (barangay, city/municipality, province)
• Username and encrypted password

3.2 KYC Identity Verification Data

• Copy or image of a valid Philippine government-issued photo ID (PhilSys National ID, UMID, SSS ID, Driver's License, or Philippine Passport)
• Selfie or live photo for facial verification where required
• Proof of address documentation where required
• Source of funds documentation where required for AML purposes

3.3 Financial and Transaction Data

• GCash mobile number registered to your account
• Maya account details
• Bank account details for BPI, BDO, Metrobank, and other linked banking channels
• Deposit and withdrawal transaction records including amounts, timestamps, and payment reference numbers
• Bonus and promotional credit history

3.4 Gaming Activity Data

• Game session records including game titles played, bet amounts, wager outcomes, and timestamps
• Sports betting selections and live betting activity
• Loyalty points accrual and redemption history
• Responsible gaming tool usage (deposit limits set, cooling-off periods, self-exclusion requests)

3.5 Technical and Device Data

• IP address
• Device type, model, and operating system
• Browser type and version
• Mobile carrier information
• Session duration and navigation data within the Platform
• Cookie identifiers and similar tracking technologies (see Section 11)

3.6 Communications Data

• Records of Live Chat support conversations
• Email correspondence with jl67
• Complaint and dispute records
• Survey and feedback responses where voluntarily submitted

4How We Collect Personal Data

jl67 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to promotions, or update your account settings.
• Automatically: Through cookies, session tracking, server logs, and technical data collection as you use the Platform — including your device identifiers, IP address, and navigation behavior within jl67.club.
• From third-party verification providers: Identity verification services used in the KYC process may cross-reference your submitted documents against government databases to confirm authenticity. These providers operate under contractual data processing agreements with jl67.
• From payment providers: Payment confirmation data is received from GCash, Maya, BPI, BDO, Metrobank, and other payment channels when you deposit or withdraw funds. jl67 does not store full payment credentials — only the reference and account details necessary to process transactions.
• From game providers: Aggregated gameplay data is received from third-party game providers (PG Soft, Jili, Pragmatic Play, and others) in connection with game rounds played on the Platform.

5Purposes of Processing

jl67 processes your personal data for the following purposes:

6Legal Bases for Processing

jl67 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and jl67 — including account registration, transaction processing, KYC verification, and providing access to Platform services.
• Legal obligation: Processing required to comply with applicable Philippine law, PAGCOR regulations, AML obligations, tax reporting requirements, and NPC compliance obligations.
• Legitimate interests: Processing necessary for jl67's legitimate interests in operating a secure, fair, and compliant gaming platform — including fraud prevention, security monitoring, and platform improvement — provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where jl67 processes your data for marketing and promotional communications, this is done on the basis of your explicit, freely given consent. You may withdraw this consent at any time through your Account Settings or by contacting our Data Protection Officer.

7Data Sharing with Third Parties

jl67 does not sell your personal data. We share personal data with third parties only in the following circumstances and only to the extent necessary:

7.1 Regulatory and Law Enforcement Authorities

jl67 is required by law and PAGCOR regulation to share certain player data — including identity verification records, transaction history, and gaming activity — with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities upon lawful request or as mandated by applicable regulations.

7.2 Payment Service Providers

Transaction data necessary to process your deposits and withdrawals is shared with GCash, Maya, BPI, BDO, Metrobank, and other payment channel providers. These providers receive only the minimum data necessary to execute the requested transaction and are bound by their own data privacy obligations under Philippine law.

7.3 Identity Verification Providers

During KYC verification, identity document data may be processed by third-party identity verification service providers engaged by jl67 under a data processing agreement. These providers are contractually prohibited from using your data for any purpose other than the identity verification service provided to jl67.

7.4 Game Providers

A limited set of data — typically a pseudonymized player identifier and session token — is shared with third-party game providers (such as PG Soft, Jili, Pragmatic Play, and others) to enable game sessions. Game providers do not receive your full name, payment details, or contact information. Game providers are bound by data processing agreements with jl67.

7.5 Technical Service Providers

jl67 uses cloud hosting, customer support platform, and analytics service providers who may process personal data on jl67's behalf as data processors. All such providers are engaged under formal data processing agreements that bind them to process data only under jl67's documented instructions and in compliance with applicable data privacy law.

8International Data Transfers

Some of the third-party service providers engaged by jl67 — including certain game providers and technical infrastructure providers — may be located or operate servers outside of the Philippines. Where personal data is transferred to a jurisdiction outside the Philippines, jl67 ensures that adequate safeguards are in place through one or more of the following mechanisms:

• Execution of data transfer agreements that incorporate the standard contractual clauses or equivalent protections recognized under the Data Privacy Act of 2012.
• Transfer to jurisdictions recognized by the NPC as providing an adequate level of data protection.
• Obtaining your explicit consent to the transfer where no other adequate safeguard is available, following full disclosure of the destination and associated risks.

jl67 maintains records of all cross-border data transfers and the safeguards applied thereto in accordance with NPC requirements.

9Data Retention

jl67 retains your personal data for the following periods, after which data is securely deleted or anonymized:

Where retention beyond the above periods is required by law, PAGCOR regulation, or ongoing legal proceedings, jl67 will retain the relevant data for the additional period required and will document the basis for extended retention.

10Security Measures

jl67 applies a layered set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction:

• Encryption in transit: All data transmitted between your device and jl67's servers uses 256-bit TLS/SSL encryption. This applies to all Platform pages, API calls, and payment transactions.
• Encryption at rest: Sensitive personal data, including identity documents and payment details, is stored in encrypted form within access-controlled storage environments.
• Access controls: Access to personal data within jl67's systems is restricted on a need-to-know basis, with role-based access controls and audit logging of data access events.
• Intrusion detection: jl67 operates network monitoring and intrusion detection systems that identify anomalous access patterns and trigger security alerts for investigation.
• Pseudonymization: Where data is used for analytics or testing purposes, personal identifiers are removed or replaced with pseudonymous identifiers to minimize privacy risk.
• Vendor security assessments: Third-party service providers with access to personal data are subject to security assessments and contractual security obligations before engagement.
• Breach response: jl67 maintains a data breach response procedure. In the event of a personal data breach that poses a real risk of serious harm, jl67 will notify the NPC and affected individuals within the timeframes required by the Data Privacy Act and NPC regulations.

11Cookies & Tracking Technologies

jl67.club uses cookies and similar tracking technologies to enable Platform functionality, maintain your session, and improve user experience. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security token validation, and preference storage. These cannot be disabled without affecting core Platform functionality.
• Functional cookies: Remember your Platform preferences such as language settings, lobby layout, and recently played games to improve your experience across sessions.
• Analytics cookies: Used in aggregated, anonymized form to understand how players navigate the Platform, which features are used most frequently, and where technical issues arise. This data informs Platform improvement decisions.
• Security cookies: Used to detect and prevent fraud, bot activity, and unauthorized access attempts.

jl67 does not use third-party advertising cookies or allow advertising networks to place tracking cookies on jl67.club for the purpose of serving targeted advertising to your browser on other websites.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the Platform. Continued use of jl67.club following your acceptance of this Policy constitutes consent to the use of cookies as described above.

12Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and NPC regulations, you have the following rights in respect of your personal data held by jl67:

• Right to be informed: The right to be notified of how your personal data is being processed — which this Privacy Policy fulfills.
• Right of access: The right to request a copy of the personal data jl67 holds about you and information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by jl67.
• Right to erasure or blocking: The right to request the deletion or blocking of personal data where it is no longer necessary for the purpose for which it was collected, or where processing is unlawful — subject to jl67's legal and regulatory retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may withdraw consent for marketing communications at any time through Account Settings.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used format where processing is carried out by automated means.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact jl67's Data Protection Officer using the details provided in Section 15. jl67 will respond to verified data subject requests within thirty (30) days of receipt, as required under the Data Privacy Act and NPC regulations.

13Minors

jl67's Platform is strictly prohibited for use by individuals under 21 years of age, as mandated by PAGCOR regulations and Philippine law governing online gaming. jl67 does not knowingly collect personal data from individuals below this age threshold.

If jl67 discovers or has reason to believe that an Account was registered by an individual under 21 years of age, that Account will be immediately suspended. Any personal data collected from an underage individual will be handled in accordance with NPC guidelines for the processing of data collected without a valid legal basis — including notification to the NPC where required and secure deletion of the data following any necessary regulatory review.

If you believe your minor child has registered an Account on jl67 without authorization, please contact our Data Protection Officer immediately using the contact details in Section 15.

14Changes to This Privacy Policy

jl67 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or NPC guidance. When changes are made, the updated Policy will be published on this page with a revised "Last Updated" date.

Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — jl67 will notify active registered players via email or in-platform notification prior to the changes taking effect, and will obtain fresh consent where required.

Your continued use of jl67.club following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with a material change, you may request account closure in accordance with the procedure described in jl67's Terms and Conditions.

15Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy, jl67's data processing practices, or the exercise of your data subject rights, please contact jl67's Data Protection Officer:

• Live Chat: Available 24/7 within your logged-in jl67 Account — fastest channel for immediate queries, average response 3–5 minutes.
• Email (DPO): [email protected] — plain text, not a clickable link. Include "Data Privacy Request" in the subject line for faster routing to the DPO team.

jl67 will acknowledge receipt of data subject requests within five (5) business days and will provide a substantive response within thirty (30) days of receipt in accordance with NPC timelines. Complex requests may require additional time, in which case jl67 will inform you of the expected resolution date.

If you are not satisfied with jl67's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official complaint channels.