Privacy Policy — jl97 Casino Philippines

1. Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jl97 acts as the personal information controller (PIC) with respect to the personal data of all registered Players on the jl97 platform. jl97 operates as an online gaming platform under PAGCOR licensing authority, providing casino games, sports betting, bingo, and related services exclusively to players within the Republic of the Philippines.

As a personal information controller, jl97 is responsible for determining the purposes and means of processing your personal data, ensuring that processing activities comply with RA 10173, and maintaining appropriate technical and organizational security measures to protect your information. Questions about this Privacy Policy or requests to exercise your data rights may be directed to the jl97 Data Privacy Officer using the contact details set out in Section 13 of this policy.

2. Personal Data We Collect

2.1 Registration Data

When you create a jl97 account, we collect the following information that you provide directly: your legal full name as it appears on your Philippine government-issued identification; your date of birth; a valid Philippine mobile number; an active email address; your residential address within the Philippines; and your chosen account username. This information is required to create and maintain your account and cannot be omitted without preventing account creation.

2.2 Identity Verification (KYC) Documents

As required by PAGCOR anti-money laundering regulations, jl97 collects identity verification documents from Players at the point of first withdrawal or at such earlier time as jl97 determines necessary. This includes scanned copies or photographs of valid Philippine government-issued identification documents (such as passport, UMID, driver's license, PhilHealth ID, SSS ID, Voter's ID, or Postal ID) and, for enhanced due diligence purposes, proof-of-address documentation and source-of-funds declarations.

2.3 Financial and Transaction Data

jl97 records all financial transactions associated with your account, including deposit amounts, deposit timestamps, payment method identifiers (GCash account numbers, Maya account details, bank account references), withdrawal requests, withdrawal amounts, and transaction outcomes. We do not store full bank account credentials, card numbers, or payment account PINs. Payment method details are processed through regulated Philippine payment gateways and are subject to those providers' own security and data protection standards.

2.4 Gameplay and Activity Data

jl97 automatically records detailed gameplay data for every session conducted on the platform. This includes game session timestamps, game titles played, wager amounts per round, game outcomes, bonus activations, tournament participation, and cumulative gameplay statistics. This data is used for dispute resolution, responsible gaming monitoring, regulatory reporting, and platform improvement purposes.

2.5 Technical and Device Data

When you access jl97.cam, our systems automatically collect certain technical information, including your IP address, device type and operating system, browser type and version, screen resolution, session duration, pages visited within jl97.cam, and approximate geographic location derived from IP geolocation. This data is used to maintain platform security, detect multi-accounting and fraud, and ensure compliance with jurisdictional restrictions.

2.6 Communications Data

When you contact jl97 customer support via live chat, we retain records of those interactions, including the content of messages, timestamps, and the nature of the issue raised. These records are kept for quality assurance, staff training, and dispute documentation purposes.

3. Legal Basis for Processing

jl97 processes your personal data on the following legal bases under Republic Act No. 10173:

• Contractual necessity: Processing your registration data, KYC documents, and transaction records is necessary to enter into and perform the contract represented by your jl97 account agreement and the jl97 Terms & Conditions.
• Legal obligation: Processing for KYC verification, AML reporting, age verification, and PAGCOR compliance reporting is required by applicable Philippine law and regulatory authority.
• Legitimate interests: Processing technical and device data for fraud prevention, multi-accounting detection, and platform security serves jl97's and its players' legitimate interests in maintaining a fair and secure gaming environment.
• Consent: Where jl97 sends optional promotional communications (bonus offers, tournament announcements), this is based on your consent, which you may withdraw at any time through your account settings or by contacting support.

4. How We Use Your Personal Data

jl97 uses the personal data we collect for the following specific purposes:

Purpose	Data Used	Legal Basis
Account creation and management	Registration data, mobile number, email	Contractual necessity
Age and identity verification (KYC)	Government ID documents, date of birth	Legal obligation (PAGCOR)
Payment processing and withdrawal	Financial and transaction data	Contractual necessity
Anti-money laundering monitoring	Transaction patterns, KYC data	Legal obligation (AMLC)
Responsible gaming monitoring	Gameplay data, session history	Legal obligation / Legitimate interests
Fraud and multi-accounting detection	IP address, device data, payment identifiers	Legitimate interests
Customer support and dispute resolution	Communications data, gameplay logs	Contractual necessity
Promotional communications (optional)	Email address, mobile number	Consent
PAGCOR regulatory reporting	Account data, transaction records	Legal obligation
Platform analytics and improvement	Anonymized gameplay and session data	Legitimate interests

5. Data Sharing and Third Parties

5.1 General Principle

jl97 does not sell, rent, or commercially transfer your personal data to third parties for marketing, advertising, or any commercial purpose unrelated to the operation of the jl97 platform. Sharing of your personal data is limited to the categories of recipients described in this section and occurs only to the extent necessary for the specified purpose.

5.2 Payment Service Providers

To process deposits and withdrawals, jl97 shares relevant transaction data with licensed Philippine payment service providers including GCash (Mynt — Globe Fintech Innovations, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, Metrobank, GrabPay Philippines, and 7-Eleven CLiQQ. These providers receive only the transactional data necessary to process the specific payment and are bound by their own data protection obligations under Philippine law.

5.3 KYC and Identity Verification Partners

Where jl97 uses third-party identity verification technology to assist in KYC processing, your submitted identification documents and biographic data may be processed by that verification partner. All such partners are contractually bound to process your data solely for identity verification purposes and to maintain security standards at least equivalent to those described in this policy.

5.4 Regulatory and Law Enforcement Authorities

jl97 is required by Philippine law to disclose personal data and transaction records to the following authorities upon lawful request or as mandated by regulation: PAGCOR (Philippine Amusement and Gaming Corporation); the Anti-Money Laundering Council (AMLC); the National Privacy Commission (NPC); and any court, tribunal, or law enforcement authority with jurisdiction under Philippine law. Such disclosures are made only to the extent required and are logged internally.

5.5 No Cross-Border Commercial Transfers

jl97 does not transfer your personal data to third parties located outside the Philippines for commercial processing purposes. Any cross-border data transfers that may occur incidentally as part of our technology infrastructure are subject to appropriate safeguards as described in Section 11.

6. Data Retention Periods

jl97 retains your personal data for the periods specified below, after which data is securely deleted or anonymized, unless a longer retention period is required by applicable law:

• Account registration data: Retained for the duration of your active jl97 account and for five (5) years following account closure, as required by PAGCOR and AMLC regulations.
• KYC and identity documents: Retained for five (5) years from the date of submission or from the date of account closure, whichever is later, in compliance with the Anti-Money Laundering Act of 2001 (as amended).
• Transaction records: Retained for five (5) years from the date of each transaction in compliance with AMLC record-keeping requirements.
• Gameplay history: Retained for three (3) years from the date of each game session for responsible gaming monitoring and dispute resolution purposes.
• Customer support communications: Retained for two (2) years from the date of the support interaction.
• Technical and device data: Retained for twelve (12) months from the date of collection, after which it is anonymized for aggregate analytics purposes.

7. Data Security Measures

jl97 implements technical and organizational security measures appropriate to the sensitivity of the personal data we process. These measures include:

• Encryption in transit: All data transmitted between your device and jl97.cam is encrypted using TLS (Transport Layer Security) 1.2 or higher.
• Encryption at rest: Personal data and KYC documents stored on jl97's systems are encrypted at rest using industry-standard AES-256 encryption.
• Access controls: Access to personal data is restricted to jl97 personnel and authorized service providers who require it to perform their specific job functions. Access is controlled through role-based permissions and authenticated login systems.
• Internal security audits: jl97 conducts periodic internal reviews of data processing activities and security practices to identify and remediate potential vulnerabilities.
• Incident response: In the event of a personal data breach that is likely to result in harm to affected Players, jl97 will notify the National Privacy Commission and affected Players in accordance with the timelines prescribed by RA 10173 and NPC regulations.

8. Cookies and Tracking Technologies

8.1 Essential Session Cookies

jl97 uses essential session cookies that are strictly necessary for the operation of the jl97 platform. These cookies maintain your authenticated login state, preserve your session settings (such as language preference), and enable security features including CSRF protection. Essential session cookies are automatically deleted when you close your browser session. These cookies cannot be disabled without preventing you from using the jl97 platform, as they are fundamental to its technical operation.

8.2 Security and Fraud Prevention Cookies

jl97 uses persistent cookies and device fingerprinting technologies to detect and prevent fraudulent activity, including unauthorized account access attempts and multi-accounting. These cookies store a non-personally-identifying device identifier that allows jl97 to recognize your device across sessions for security purposes. This data is not shared with third parties for advertising or analytics purposes.

8.3 Analytics

jl97 collects anonymized page-level analytics data to understand how players navigate the platform and to identify areas for improvement. This analytics data is aggregated and does not contain personally identifying information. jl97 does not use third-party behavioral advertising cookies, retargeting pixels, or cross-site tracking technologies on jl97.cam.

9. Your Rights Under RA 10173

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl97:

• Right to be informed: You have the right to be informed of how jl97 collects, uses, stores, and processes your personal data, which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data jl97 holds about you at any time. jl97 will respond to access requests within ten (10) business days.
• Right to rectification: If any personal data jl97 holds about you is inaccurate or incomplete, you have the right to request correction. Changes to registered name or date of birth require submission of supporting documentary evidence.
• Right to erasure: You may request deletion of your personal data, subject to jl97's legal retention obligations. Data that jl97 is required to retain under PAGCOR or AMLC regulations cannot be deleted until the applicable retention period has expired, even upon your request.
• Right to object: You have the right to object to the processing of your personal data on the basis of legitimate interests, including the receipt of promotional communications.
• Right to data portability: You may request that jl97 provide your personal data in a structured, commonly used, machine-readable format for transfer to another service provider where technically feasible.
• Right to lodge a complaint: If you believe that jl97 has violated your data privacy rights, you may lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

To exercise any of the above rights, contact jl97's Data Privacy Officer using the details in Section 13. jl97 will verify your identity before processing any data rights request.

10. Children and Minors

The jl97 platform is strictly intended for persons aged twenty-one (21) years and above. jl97 does not knowingly collect, process, or retain personal data from individuals under the age of twenty-one (21). If jl97 becomes aware that personal data has been collected from an underage individual, the associated account will be closed immediately, all collected data will be deleted (or retained only to the minimum extent required for regulatory reporting purposes), and any deposited funds will be returned to the depositor's payment method. If you believe an underage individual has registered on the jl97 platform, please notify us immediately via the contact details in Section 13.

11. Cross-Border Data Transfers

jl97 operates primarily within the Philippines and processes personal data on infrastructure located within Philippine territory or in jurisdictions with adequacy determinations recognized under RA 10173. In cases where personal data may be processed by technology service providers (such as cloud infrastructure or cybersecurity services) whose systems involve data transit through servers outside the Philippines, jl97 ensures that appropriate contractual safeguards — including data processing agreements with provisions equivalent to those required under RA 10173 — are in place with those providers. jl97 will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or without appropriate safeguard mechanisms.

12. Amendments to This Privacy Policy

jl97 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law or PAGCOR regulations, or improvements to our privacy framework. In the event of material changes, jl97 will notify registered Players via their registered email address or mobile number at least seven (7) days before the changes take effect, and will post the updated policy on jl97.cam with a revised effective date. Your continued use of the jl97 platform after the effective date of an amended Privacy Policy constitutes your acknowledgment of the updated terms. It is your responsibility to review this Privacy Policy periodically. The version currently published at jl97.cam/privacy-policy is the operative version.

13. Contact and Data Privacy Officer

For any questions about this Privacy Policy, to exercise your data rights under RA 10173, or to report a suspected privacy breach involving your jl97 account, please contact the jl97 Data Privacy Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via jl97.cam (fastest response)
• Email: [email protected] — please include "Data Privacy Request" in the subject line
• Response timeframe: Data privacy requests are acknowledged within 24 hours and substantively addressed within ten (10) business days as required by NPC regulations

If you are not satisfied with jl97's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which oversees enforcement of RA 10173 across all Philippine organizations.