Privacy Policy – jl689

1.1 jl689 operates the online gaming platform accessible at jl689.vip and is the data controller responsible for the personal data of players and users collected through that platform. As a PAGCOR-licensed gaming operator, jl689 processes personal data in accordance with the requirements of the Philippine Amusement and Gaming Corporation's licensing framework and in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173).

1.2 This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data by jl689 in connection with the registration, management, and operation of player accounts, payment processing, game delivery, customer support, and regulatory compliance obligations.

1.3 jl689 takes its responsibilities as a data controller seriously. We process only the minimum personal data necessary for the purposes described in this Policy, and we implement appropriate technical and organisational measures to protect that data against unauthorised access, disclosure, alteration, or destruction.

1.4 This Policy should be read in conjunction with jl689's Terms and Conditions and Responsible Gaming Policy, both available at jl689.vip. In the event of any conflict between this Privacy Policy and those documents on matters of data privacy, this Privacy Policy prevails.

2.1 jl689 collects personal data across the following categories depending on how you interact with the platform:

2.2 jl689 does not collect sensitive personal information (as defined under the Data Privacy Act, including racial or ethnic origin, religious beliefs, health status, or sexual orientation) except where directly required by PAGCOR or AML regulations, in which case collection is limited to what is strictly necessary and handled with heightened security.

3.1 jl689 collects personal data through the following means:

• Direct submission: Information you provide when creating your jl689 account, completing KYC verification, making deposits and withdrawals, or contacting jl689 support.
• Automated collection: Technical data collected automatically each time you access the jl689 platform, including via cookies, log files, and similar tracking technologies. See Section 7 for details.
• Third-party payment processors: Transaction confirmation data passed back to jl689 from GCash, PayMaya, BPI, BDO, and Metrobank during deposit and withdrawal processing. jl689 receives confirmation references and account identifiers — not your GCash PIN, bank password, or card CVV.
• Identity verification services: Where jl689 uses third-party KYC service providers to verify government-issued identification, data may be cross-referenced against authorised databases.
• Regulatory sources: Information provided by PAGCOR or other competent Philippine authorities as part of licensing compliance, including exclusion register data.

3.2 jl689 does not purchase personal data lists from third-party data brokers or marketing platforms.

4.1 jl689 processes your personal data for the following specific, legitimate purposes:

• Account creation and management: To register your jl689 account, maintain your player profile, authenticate your identity at login, and manage account settings including responsible gaming tools and security preferences.
• Identity and age verification (KYC): To confirm that you meet the 21-year age requirement under PAGCOR regulations and to verify your identity in accordance with Anti-Money Laundering obligations under Republic Act No. 9160 (as amended).
• Payment processing: To process deposits from and withdrawals to your registered Philippine payment methods (GCash, PayMaya, BPI, BDO, Metrobank), and to maintain transaction records required by financial regulations.
• Game delivery and platform operation: To provide access to jl689's casino games, deliver live dealer streams, record gaming outcomes, and maintain the integrity of the gaming environment.
• Responsible gaming monitoring: To monitor gaming patterns for indicators of problem gambling, enforce self-exclusion decisions, apply deposit limits, and fulfil PAGCOR's mandatory responsible gaming requirements.
• Customer support: To respond to your support queries, resolve disputes, and maintain records of support interactions for quality assurance purposes.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other prohibited conduct on the jl689 platform.
• Regulatory compliance and reporting: To fulfil jl689's obligations under PAGCOR's licensing conditions, AML reporting requirements, and any other applicable Philippine law.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have opted in or where jl689 has a legitimate interest, and subject to your right to opt out at any time through your account settings or by contacting support.
• Platform improvement: To analyse aggregated, anonymised usage data to improve jl689's platform performance, user experience, and game offering.

5.1 jl689 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing required to perform jl689's contractual obligations to you under the Terms and Conditions — including account management, game delivery, and payment processing.
• Legal obligation: Processing necessary to comply with PAGCOR licensing requirements, AML obligations under the Anti-Money Laundering Act, KYC requirements, and other applicable Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and anonymised platform analytics — where jl689's legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications and certain optional features where jl689 has obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

6.1 jl689 may disclose your personal data to the following categories of third parties:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank for deposit and withdrawal processing. These parties receive only the information necessary to execute the transaction.
• KYC and identity verification providers: Third-party services used to verify government-issued identification and confirm age requirements. These providers are bound by confidentiality agreements and data processing agreements with jl689.
• Game software providers: Third-party game studios and live dealer platform operators whose games are integrated into jl689. These providers may receive anonymised session and technical data to deliver game functionality.
• IT infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on jl689's behalf under binding data processing agreements that restrict use to jl689's documented purposes.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law, court order, or regulatory obligation.
• Professional advisers: Legal, accounting, and audit professionals bound by professional confidentiality obligations, where access to personal data is necessary for the performance of their services.

6.2 Where jl689 engages third-party processors, jl689 ensures that appropriate data processing agreements are in place, requiring those processors to implement adequate security measures and to process personal data only on jl689's documented instructions.

7.1 jl689 uses cookies and similar tracking technologies to operate and improve the platform experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for platform functionality including login session management, security token validation, and load balancing. These cannot be disabled without impairing platform operation.
• Performance and analytics cookies: Used to collect anonymised data about how players use the jl689 platform — which pages are visited most, how long sessions last, and where errors occur — to improve platform performance and user experience.
• Functional cookies: Remember your preferences such as language settings, display preferences, and recently played games to improve your experience on return visits.
• Security cookies: Detect and prevent fraudulent activity, bot access, and account takeover attempts by identifying anomalous session behaviour.

7.2 jl689 does not use third-party advertising cookies or behavioural profiling cookies for the purpose of serving targeted advertising on external platforms.

7.3 Most web browsers allow you to control cookies through browser settings. Disabling strictly necessary cookies will affect your ability to use the jl689 platform. Adjusting other cookie settings may affect the functionality of non-essential features.

8.1 jl689 implements a layered security architecture to protect your personal data. Technical and organisational measures include:

• Encryption in transit: All data transmitted between your device and jl689 servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at rest: Sensitive personal data stored on jl689 systems is encrypted at rest using industry-standard algorithms.
• Tokenised payment processing: jl689 does not store raw GCash PINs, bank account passwords, or card credentials. Payment processing uses tokenisation — sensitive payment credentials are handled by the respective payment processor and referenced on jl689 systems by token only.
• Access controls: Access to personal data within jl689 systems is role-restricted on a need-to-know basis. Administrative access requires multi-factor authentication.
• Penetration testing and security audits: jl689 conducts regular security assessments to identify and remediate vulnerabilities.
• Incident response: jl689 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, jl689 will notify affected players and the National Privacy Commission in accordance with the timeframes prescribed by the Data Privacy Act and its implementing rules.

9.1 jl689 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, having regard to the following applicable retention obligations:

• Account and KYC data: Retained for the duration of an active jl689 account and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and Anti-Money Laundering record-keeping obligations.
• Financial transaction records: Retained for a minimum of ten (10) years following the transaction date as required under the Anti-Money Laundering Act of the Philippines.
• Gaming session records: Retained for the duration required by PAGCOR licensing conditions for audit and dispute resolution purposes.
• Support communications: Retained for three (3) years following resolution of the relevant support interaction, for quality assurance and dispute resolution purposes.
• Marketing preferences and consent records: Retained for the duration of the player's relationship with jl689 and for one (1) year following opt-out or account closure to evidence compliance.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Anonymised and aggregated data may be retained indefinitely for statistical and platform improvement purposes.

9.3 Where a legal hold or regulatory investigation requires retention beyond standard periods, jl689 will retain the relevant data until the hold is lifted.

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl689. These rights may be exercised by contacting jl689 at [email protected]:

10.2 jl689 will respond to verified data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or voluminous, jl689 may extend this period by a further sixty (60) days and will notify you of the extension and the reason within the initial thirty-day period.

10.3 Certain rights are subject to limitations. For example, jl689 may decline an erasure request where retention is required by law (such as AML record-keeping obligations) or where the data is necessary for the establishment, exercise, or defence of legal claims.

10.4 jl689 will not charge a fee for responding to data subject rights requests unless a request is manifestly unfounded, repetitive, or excessive, in which case jl689 may charge a reasonable administrative fee or decline to act on the request.

11.1 jl689 does not knowingly solicit, collect, or process personal data from individuals under 21 years of age. Age verification is a mandatory step in the jl689 registration process and jl689 may require additional documentary proof of age at any point.

11.2 If jl689 determines that personal data has been collected from a person under 21, jl689 will immediately close the associated account, void all transactions, and delete or anonymise all personal data associated with the underage account to the extent permitted by legal retention obligations.

11.3 If you are a parent or guardian and believe that a minor has registered on jl689, please contact jl689 immediately at [email protected] with the relevant account details so that jl689 may take prompt remedial action.

12.1 jl689 primarily processes personal data within the Republic of the Philippines. Where operational requirements necessitate transfer of personal data to processors or service providers located outside the Philippines — for example, cloud infrastructure providers or game software licensors with servers in other jurisdictions — jl689 ensures that:

• The receiving country provides an adequate level of data protection as assessed by jl689 or recognised by the National Privacy Commission;
• Appropriate safeguards are in place, such as data processing agreements incorporating standard contractual clauses consistent with NPC guidance; and
• The transfer is limited to data strictly necessary for the specific processing purpose and subject to the same use restrictions applicable within the Philippines.

12.2 jl689 does not transfer personal data to jurisdictions where jl689 cannot ensure appropriate protection equivalent to Philippine data privacy standards.

13.1 jl689 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. The current version is always available at jl689.vip/privacy-policy and is identified by the "Last Updated" date at the top of the policy.

13.2 For material changes — those that significantly affect your rights or how jl689 processes your personal data — jl689 will provide advance notice through an account notification or email to your registered address before the change takes effect, where practicable.

13.3 We encourage you to review this Privacy Policy periodically. Continued use of the jl689 platform after a Privacy Policy update has been published constitutes acknowledgment of the updated policy. If you do not agree with any material change, you may request account closure before the change takes effect.

14.1 For any questions, concerns, or requests relating to this Privacy Policy or jl689's data processing practices, please contact the jl689 support and data privacy team:

14.2 National Privacy Commission. If you believe your data privacy rights have been violated and you are not satisfied with jl689's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.

14.3 When contacting jl689 about a data privacy matter, please include your registered account username or mobile number (to allow us to locate your account), a description of your request or concern, and any relevant supporting information. jl689 will request proof of identity before processing any data subject rights request.