jlplay Privacy Policy

01 Introduction

jlplay ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who accesses or uses the jlplay website at https://jlplay.app and all associated services (collectively, the "Platform"). This Privacy Policy describes how jlplay collects, uses, stores, shares, and protects your personal information in connection with your use of the Platform.

This Privacy Policy is incorporated into and forms part of the jlplay Terms & Conditions. By registering an account, accessing the Platform, or otherwise providing your personal data to jlplay, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

If you have any questions about how jlplay handles your personal data, please contact our Data Protection Officer (DPO) using the details provided in Section 14 of this Policy.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, jlplay is the personal information controller responsible for your personal data collected through the Platform. jlplay determines the purposes and means of processing your personal information and is accountable for ensuring that such processing is carried out lawfully, fairly, and transparently.

jlplay has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data privacy laws and this Privacy Policy. You may contact the DPO at any time using the contact details set out in Section 14.

03 Data We Collect

jlplay collects personal data from you in the following categories:

3.1 Data You Provide Directly

3.2 Data Collected Automatically

When you access the jlplay Platform, we automatically collect certain technical and behavioural data, including:

• IP address, device type, operating system, and browser type;
• Pages visited, session duration, click-stream data, and game activity logs;
• Geolocation data (country/region level, derived from IP address);
• Cookie identifiers and similar tracking technologies (see Section 9).

3.3 Data from Third Parties

We may receive personal data about you from third-party sources, including payment processors (e.g., GCash, PayMaya), identity verification service providers, fraud prevention agencies, and publicly available sources, where permitted by applicable law.

04 How We Use Your Data

jlplay uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your jlplay player account, including processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank.
• Identity & Age Verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with PAGCOR requirements and Philippine AML regulations.
• Service Delivery: To provide access to jlplay games, promotions, bonuses, and customer support services.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, and other illegal activities on the Platform.
• Legal & Regulatory Compliance: To comply with obligations under the Data Privacy Act of 2012, PAGCOR regulations, Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• Responsible Gaming: To monitor gaming behaviour and apply responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion where requested or required.
• Marketing Communications: To send you promotional offers, newsletters, and updates about jlplay — only where you have provided your consent or where we have a legitimate interest to do so. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the jlplay Platform.
• Dispute Resolution: To investigate and resolve complaints, disputes, or legal claims relating to your account or use of the Platform.

05 Legal Basis for Processing

Under the Data Privacy Act of 2012, jlplay processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., the jlplay Terms & Conditions), including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including PAGCOR licensing conditions, AML obligations, and NPC guidelines.
• Legitimate Interests: Processing is necessary for jlplay's legitimate interests, including fraud prevention, platform security, and service improvement, provided such interests are not overridden by your rights and freedoms.
• Consent: Where required by law, we will obtain your explicit consent before processing your personal data — for example, for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

06 Sharing Your Data

jlplay does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity and comply with regulatory requirements.
• Game Software Providers: Licensed game developers and content providers whose games are offered on the jlplay Platform, to the extent necessary for game delivery and fairness auditing.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where required by a valid legal order, court order, or where disclosure is necessary to prevent or investigate criminal activity.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by jlplay, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of jlplay's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

07 Data Retention

jlplay retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by applicable law.
• Marketing Data: Retained until you withdraw your consent or opt out of marketing communications, after which it will be deleted or anonymised within thirty (30) days.
• Technical Logs: Retained for up to twelve (12) months for security and fraud prevention purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, jlplay will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

08 Data Security

jlplay implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the jlplay Platform;
• Encryption of sensitive data at rest, including passwords (stored as salted hashes) and financial information;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Multi-factor authentication (MFA) for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While jlplay takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying jlplay immediately if you suspect any unauthorised access to your account.

09 Cookies & Tracking Technologies

jlplay uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience on the Platform, analyse usage patterns, and support security and fraud prevention functions. The following categories of cookies are used:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the jlplay Platform. jlplay does not use cookies for third-party advertising or behavioural profiling for external marketing purposes.

10 Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jlplay. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

jlplay will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it. There is no fee for exercising your rights, unless requests are manifestly unfounded or excessive.

If you are not satisfied with jlplay's response to your data privacy request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11 Minors

The jlplay Platform is strictly intended for persons who are at least 21 years of age, as required under Philippine law governing casino-style gaming. jlplay does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete such data and close the associated account.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to jlplay, please contact us immediately at the details provided in Section 14.

12 International Data Transfers

jlplay primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where jlplay engages third-party service providers (such as cloud infrastructure providers or game software developers) whose operations are based in other jurisdictions.

Where personal data is transferred outside the Philippines, jlplay will ensure that appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and NPC guidelines. Such safeguards may include contractual data protection clauses, adequacy assessments, or other mechanisms recognised under applicable Philippine law.

13 Changes to This Privacy Policy

jlplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will provide reasonable notice to registered players via email or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the jlplay Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how jlplay protects your personal data.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or jlplay's processing of your personal data, please contact our Data Protection Officer:

For responsible gaming concerns or self-exclusion requests, please visit our Responsible Gaming page. All privacy and responsible gaming requests are handled with strict confidentiality.

To file a complaint with the Philippine data privacy regulator, you may contact the National Privacy Commission (NPC) through their official channels.