jl90 Casino Privacy Policy

1 Who We Are

jl90 Casino operates the online gaming platform accessible at jl90.app. jl90 is the data controller responsible for the personal data of players and users of the jl90 platform. As data controller, jl90 determines the purposes and means of processing your personal data.

jl90 operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR). Our data processing activities are conducted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

2 Personal Data We Collect

jl90 collects the following categories of personal data from players and users of the platform:

jl90 does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for identity verification and regulatory compliance purposes.

3 How We Collect Your Data

jl90 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the jl90 platform, including through cookies, log files, and analytics tools;
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from payment processors; and publicly available information where permitted by law.

4 How jl90 Uses Your Personal Data

jl90 uses your personal data for the following purposes:

• To create, manage, and maintain your jl90 Account;
• To verify your identity and age in compliance with PAGCOR regulations and RA 10173;
• To process deposits, withdrawals, and other financial transactions;
• To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Philippine law;
• To detect, investigate, and prevent fraud, cheating, and other prohibited conduct on the jl90 platform;
• To provide customer support and resolve disputes;
• To monitor gaming activity for responsible gaming purposes and apply protective measures where necessary;
• To send you account-related communications, including transaction confirmations, security alerts, and policy updates;
• To send promotional communications where you have consented to receive them (you may opt out at any time);
• To improve the jl90 platform through analytics and user research;
• To comply with legal obligations and respond to lawful requests from regulatory authorities.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, jl90 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and jl90 (i.e., to operate your account and provide gaming services);
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AML/CTF laws, and the Data Privacy Act of 2012;
• Legitimate interests: Processing necessary for jl90's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, informed consent — such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

jl90 does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya/Maya, and Philippine bank partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals;
• KYC and identity verification providers: Third-party services that assist jl90 in verifying player identity and age in compliance with PAGCOR requirements;
• Game software providers: Licensed game suppliers whose platforms power the games available on jl90. These providers may receive technical session data necessary to deliver game services;
• Fraud prevention and security services: Third-party providers that assist jl90 in detecting and preventing fraudulent activity on the platform;
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where disclosure is required by law or regulatory mandate;
• Legal and professional advisors: Lawyers, auditors, and other professional advisors bound by confidentiality obligations, where necessary for jl90's legal and compliance functions.

All third-party service providers engaged by jl90 are required to process personal data only in accordance with jl90's instructions and applicable Philippine data protection law. jl90 does not transfer personal data outside the Philippines except where required by law or where adequate data protection safeguards are in place.

7 Data Retention

jl90 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

Specific retention periods applicable to jl90 player data include:

• Account and identity data: Retained for the duration of your active jl90 Account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AML regulations;
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of 2001 (RA 9160, as amended);
• Gaming activity data: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes;
• Support communications: Retained for two (2) years from the date of the last communication, unless a longer period is required for ongoing dispute resolution;
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.

When personal data is no longer required, jl90 will securely delete or anonymize it in accordance with our data disposal procedures.

8 Cookies & Tracking Technologies

jl90 uses cookies and similar tracking technologies on the jl90 platform to enhance your experience, maintain session security, and analyze platform usage. The following types of cookies are used:

• Essential cookies: Strictly necessary for the operation of the jl90 platform, including maintaining your login session and ensuring platform security. These cookies cannot be disabled without affecting platform functionality;
• Functional cookies: Used to remember your preferences, such as language settings and display options, to personalize your jl90 experience;
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the jl90 platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports;
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain features of the jl90 platform, including your account login.

9 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl90:

• Right to be informed: The right to know how your personal data is being collected and processed — which this Privacy Policy fulfills;
• Right of access: The right to request a copy of the personal data jl90 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jl90's legal retention obligations;
• Right to object: The right to object to the processing of your personal data on grounds relating to your particular situation, including objecting to processing for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe jl90 has violated your data privacy rights.

10 Data Security

jl90 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jl90 servers;
• Encryption of sensitive data at rest, including financial data and government ID information;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments of the jl90 platform;
• Multi-factor authentication requirements for account access and administrative systems;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jl90 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by RA 10173.

While jl90 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your jl90 account credentials and for notifying jl90 immediately if you suspect unauthorized access to your account.

11 Children's Privacy & Age Restriction

jl90 employs age verification procedures during account registration to prevent underage access to the platform. If jl90 becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately closed and all associated personal data will be deleted, except where retention is required by law.

If you believe that jl90 has inadvertently collected personal data from a person under 21, please contact the jl90 Data Protection Officer immediately at [email protected].

12 Changes to This Privacy Policy

jl90 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes to this Privacy Policy will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect.

The current version of this Privacy Policy, with the effective date, is always available on this page. Your continued use of the jl90 platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how jl90 protects your personal data.

13 Contact & Data Protection Officer

jl90 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data or this Privacy Policy, please contact the jl90 DPO:

• Role: Data Protection Officer, jl90 Casino
• Email: [email protected]
• Support: Available 24/7 via live chat on the jl90 platform

If you are not satisfied with jl90's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.