jl007 Privacy Policy

This Privacy Policy ("Policy") is issued by jl007 ("jl007," "we," "us," or "our") and applies to all personal data collected, processed, stored, or disclosed in connection with your use of the jl007 platform at jl007.app ("Platform"), including all associated games, betting services, account features, promotions, and customer support interactions.

jl007 is committed to privacy as a core platform value. We recognize that our Filipino players entrust us with sensitive personal and financial information, and we take that responsibility seriously. This Policy is designed to give you a clear, honest, and complete account of our data practices.

This Policy should be read alongside the jl007 Terms and Conditions and Responsible Gaming Policy, which together constitute the full legal framework governing your use of the Platform. Capitalized terms used but not defined in this Policy have the meanings given to them in the jl007 Terms and Conditions.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jl007 acts as the personal information controller with respect to the personal data of Platform users collected and processed as described in this Policy.

As personal information controller, jl007 determines the purposes and means of processing your personal data and is responsible for ensuring that processing activities comply with applicable Philippine data protection law and PAGCOR data governance requirements. Where jl007 engages third-party service providers to process personal data on its behalf, those parties act as personal information processors and are contractually bound to process data only in accordance with jl007's documented instructions.

Contact details for jl007's Data Protection Officer (DPO) are provided in Section 15 of this Policy.

jl007 collects the following categories of personal data from Platform users. The specific data collected in each category depends on the features and services you use.

jl007 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data, except where a government-issued ID submitted for age verification incidentally contains such information (e.g., a photograph).

jl007 collects personal data through the following methods:

4.1 Directly from You

The majority of the personal data jl007 holds is provided directly by you during the registration process, identity verification, deposit and withdrawal transactions, and any communications you initiate with jl007 support. You are in control of the personal information you provide — however, failure to provide mandatory registration or verification data will prevent account creation or restrict access to real-money features.

4.2 Automatically Through Platform Use

When you access jl007, our servers automatically log certain technical data including your IP address, the type of device and browser you are using, and your session activity. This data is collected through standard web server log mechanisms and, where applicable, cookies and similar tracking technologies as described in Section 7 of this Policy.

4.3 From Third-Party Payment Processors

When you transact via GCash, Maya, BPI, BDO, UnionBank, or other accepted payment methods, those payment providers return transaction confirmation data to jl007 to enable balance crediting and withdrawal confirmation. jl007 does not have access to your full payment account credentials — only confirmation reference data.

4.4 From Game Providers

jl007's Game Providers (PG Soft, Pragmatic Play, Jili, Habanero, and others) return game result and transaction data to the jl007 platform to enable accurate wallet crediting and gaming history recording. This data is limited to game session identifiers, results, and wager/win amounts.

jl007 processes your personal data for the following purposes, each supported by a lawful basis under the Philippine Data Privacy Act:

5.1 Account Creation and Management

Purpose: To create and maintain your jl007 account, authenticate your identity at login, and manage your account settings and preferences. Legal basis: Performance of a contract — these processing activities are necessary to fulfill jl007's obligations to you as a Platform user.

5.2 Age Verification and KYC Compliance

Purpose: To verify that you meet the minimum age requirement (21 years) mandated by PAGCOR, and to satisfy Know Your Customer (KYC) obligations under Philippine anti-money laundering regulations. Legal basis: Compliance with a legal obligation — age verification and KYC are legally required for all Philippine online gaming operators.

5.3 Payment Processing

Purpose: To process your deposits and withdrawals via GCash, Maya, bank transfer, and other accepted payment methods. Legal basis: Performance of a contract — payment processing is an essential component of the jl007 Platform service.

5.4 Fraud Prevention and Security

Purpose: To detect and prevent fraud, account takeovers, money laundering, duplicate account creation, and other prohibited activities described in the jl007 Terms and Conditions. Legal basis: Legitimate interest of jl007 in maintaining the integrity and security of the Platform, and compliance with PAGCOR anti-money laundering requirements.

5.5 Responsible Gaming Compliance

Purpose: To record and enforce self-imposed responsible gaming limits, detect patterns of potentially harmful gambling behavior, and administer cooling-off and self-exclusion elections. Legal basis: Compliance with a legal obligation under PAGCOR responsible gaming requirements, and the legitimate interest of jl007 in protecting player welfare.

5.6 Customer Support

Purpose: To respond to your queries, complaints, and support requests, and to maintain records of support interactions for quality assurance and dispute resolution purposes. Legal basis: Performance of a contract and legitimate interest in maintaining service quality.

5.7 Marketing Communications (Optional)

Purpose: To send promotional offers, bonus notifications, game recommendations, and platform updates to Players who have consented to receive such communications. Legal basis: Consent — marketing communications are optional and require your explicit opt-in. See Section 12 for how to manage your marketing preferences.

jl007 does not sell your personal data. We share personal data only in the following circumstances, and only to the extent necessary for each stated purpose:

6.1 Game Providers

Game Providers receive a jl007-assigned player session identifier and relevant wagering data necessary to operate their games within the Platform. Game Providers do not receive your full name, contact details, financial account information, or government ID data. Game Providers are contractually bound to process session data solely for game delivery purposes.

6.2 Payment Service Providers

GCash, Maya, BPI, BDO, UnionBank, and other accepted payment processors receive the transaction data necessary to execute your deposits and withdrawals. These providers are independent data controllers governed by their own privacy policies for data they collect directly from their users.

6.3 Regulatory Authorities

jl007 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine regulatory authorities in response to lawful orders, regulatory examinations, or mandatory reporting obligations. jl007 will, to the extent permissible by law, notify affected Players of such disclosures.

6.4 Identity Verification Service Providers

jl007 may use third-party identity verification services to assist in KYC processing. Any such provider is contractually bound as a personal information processor, processing data only under jl007's documented instructions and in accordance with applicable Philippine data protection law.

6.5 Professional Advisors

jl007 may disclose personal data to legal counsel, auditors, or other professional advisors on a confidential basis where necessary for the management of legal claims, regulatory compliance activities, or financial audits.

jl007 uses cookies and similar browser storage technologies to operate the Platform and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens that keep you logged in to your jl007 account during an active session. You cannot opt out of strictly necessary cookies without losing Platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings and previously selected game categories. These improve your experience but are not essential to Platform operation.
• Analytics Cookies: Used by jl007 to understand aggregate Platform usage patterns — which pages are visited, how long sessions last, and which game categories receive the most traffic. This data is used in anonymized or aggregated form and does not identify individual players.

jl007 does not use third-party advertising cookies or cross-site behavioral tracking cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your jl007 account.

jl007 retains personal data for the minimum period necessary for the purpose for which it was collected, subject to overriding legal and regulatory retention obligations. The following retention periods apply as a general guideline:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and Philippine anti-money laundering obligations.
• Transaction and financial data: Retained for a minimum of five (5) years following the date of the transaction, in accordance with AMLC reporting obligations and PAGCOR financial record-keeping requirements.
• Gaming activity data: Retained for a minimum of three (3) years following the relevant gaming session, for dispute resolution, fraud detection, and regulatory audit purposes.
• Support and correspondence data: Retained for three (3) years following the closure of each support interaction, for quality assurance and dispute resolution purposes.
• Technical and log data: Retained for twelve (12) months in standard system logs; anonymized or deleted thereafter.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, jl007 will securely delete or anonymize the relevant personal data in accordance with its internal data lifecycle management procedures.

jl007 implements a layered set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser and jl007 servers is encrypted via TLS 1.2 or higher. The jl007 login page and all authenticated Platform pages are served exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data stored in jl007 databases, including financial account references and government ID data, is encrypted at rest using AES-256 or equivalent encryption standards.
• Password Security: Account passwords are stored exclusively as one-way cryptographic hashes using industry-standard algorithms. jl007 staff cannot retrieve your plain-text password — this is why password reset (rather than password retrieval) is the standard recovery mechanism.
• Access Controls: Access to personal data within jl007's internal systems is restricted on a need-to-know basis. Staff access is governed by role-based access controls and is logged for audit purposes.
• Two-Factor Authentication: jl007 offers SMS-based two-factor authentication for all Player accounts and enforces 2FA for internal staff systems containing personal data.
• Security Monitoring: jl007 operates continuous security monitoring across its infrastructure to detect and respond to anomalous activity indicative of unauthorized access or data breach events.

In the event of a personal data breach that is likely to adversely affect your rights and interests, jl007 will notify the National Privacy Commission and affected Players in accordance with the requirements of the Philippine Data Privacy Act and its Implementing Rules.

Under the Philippine Data Privacy Act of 2012, jl007 account holders have the following rights with respect to their personal data. You may exercise any of these rights by contacting the jl007 Data Protection Officer as described in Section 15.

If jl007 discovers or is notified that it has inadvertently collected personal data from an individual who does not meet the minimum age requirement, jl007 will immediately suspend the relevant account, delete all collected data to the extent not required for regulatory reporting purposes, and take steps to prevent recurrence. Parents and guardians who believe their child may have accessed or registered on the jl007 Platform should contact support immediately via live chat at jl007.app.

jl007 may, with your consent, send you promotional communications including bonus offers, new game announcements, seasonal promotions, and platform updates via SMS to your registered Philippine mobile number, email to your registered address, and in-platform notifications.

Marketing communications are optional and require your explicit consent, which you may provide or withdraw at any time through:

• Your jl007 account notification settings (accessible after login);
• The unsubscribe link included in each marketing email; or
• A written request to the jl007 support team or Data Protection Officer.

Withdrawing consent to marketing communications will not affect your ability to use the Platform, your account status, or jl007's processing of personal data for non-marketing purposes (such as account management, transaction processing, or regulatory compliance). Operational communications such as transaction confirmations, security alerts, and support responses are not marketing communications and will continue to be sent regardless of your marketing preference settings.

jl007's primary data processing infrastructure is operated within the Philippines. However, certain third-party Game Providers and technical service providers used by jl007 operate servers or data centers outside of the Philippines, which may result in your personal data being transferred to or accessible from jurisdictions other than the Philippines.

Where such transfers occur, jl007 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual data processing agreements that impose Philippine Data Privacy Act-equivalent obligations on the receiving party;
• Transfers only to jurisdictions or organizations that maintain data protection standards equivalent to those required by Philippine law; and
• Standard contractual clauses that have been reviewed and approved by jl007's Data Protection Officer.

You may request further information about the specific safeguards applied to cross-border transfers of your personal data by contacting the jl007 Data Protection Officer as described in Section 15.

jl007 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, PAGCOR regulatory requirements, or operational changes to the Platform. The "Last Reviewed" date at the top of this Policy will be updated whenever material changes are made.

Where changes are material — meaning they significantly affect your privacy rights or the way jl007 uses your personal data — jl007 will notify registered Players via email and/or a prominent notice on the Platform with a minimum of fourteen (14) days advance notice before the updated Policy takes effect.

Your continued use of the jl007 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you disagree with any changes to this Policy, you may exercise your right to account closure as described in the jl007 Terms and Conditions, and your personal data will be handled in accordance with Section 8 (Data Retention) of this Policy following account closure.

jl007 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection law. If you have any questions about this Policy, wish to exercise any of your data rights described in Section 10, or wish to raise a data privacy concern, you may contact the jl007 DPO through the following channels:

• Live Chat (fastest response): Available 24/7 directly on jl007.app. Select "Data Privacy" when prompted for the inquiry category to route your request to the DPO team.
• Email: support at jl007.app — mark the subject line as "Data Privacy Request" for prompt routing to the DPO. Responses within two (2) business days for general inquiries; within fifteen (15) business days for formal data rights requests.

If you are not satisfied with jl007's response to a data privacy complaint, you have the right to escalate your complaint to the Philippine National Privacy Commission (NPC). The NPC's complaint procedures and contact information are available through its official government channels.