jjl8 Privacy Policy

This Privacy Policy ("Policy") is issued by jjl8 ("Company," "We," "Us," or "Our"), the operator of the online gaming platform accessible at jjl8.app and its associated mobile applications ("Platform"). It describes how jjl8 collects, processes, stores, shares, and protects the personal data of individuals ("Data Subjects") who register for or use the jjl8 platform.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations, as enforced by the National Privacy Commission ("NPC") of the Philippines. Where jjl8 processes personal data of individuals located in other jurisdictions, applicable local data protection laws may also apply.

This Policy applies to all personal data collected through the jjl8 website, mobile applications, customer support interactions, and any other touchpoints through which jjl8 interacts with its users. By registering for a jjl8 account or using the platform, you acknowledge that you have read and understood this Policy.

jjl8 collects personal data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we collect include:

jjl8 does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA — such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation — except where required for identity verification or regulatory compliance purposes and only with appropriate legal basis.

jjl8 collects personal data through the following methods:

• Direct Submission: Information you provide when creating a jjl8 account, completing KYC verification, making deposits or withdrawals, or contacting customer support.
• Automated Technical Collection: Technical data such as IP addresses, device identifiers, and session logs collected automatically when you access the platform. See Section 9 for cookie and tracking details.
• Payment Processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment providers when you conduct financial transactions through jjl8.
• Identity Verification Partners: Results and metadata from third-party KYC and age verification services used to validate the identity documents you submit.
• Fraud Prevention Services: Risk scoring and device fingerprinting data from fraud detection providers used to protect your account and the platform from unauthorized access and financial crime.
• PAGCOR and Regulatory Bodies: Information shared with jjl8 by PAGCOR or other Philippine regulatory authorities in connection with licensing, compliance, or AML obligations.

jjl8 processes your personal data only for the specific, explicit, and legitimate purposes listed below. We do not process personal data in a manner incompatible with these declared purposes.

• Account Registration and Management: Creating, maintaining, and administering your jjl8 account, including authentication, account recovery, and preference management.
• Identity Verification (KYC): Verifying your identity and age as required by PAGCOR regulations and the Anti-Money Laundering Act before processing withdrawals or when required by risk assessments.
• Payment Processing: Facilitating deposits and withdrawals to and from your jjl8 wallet through your linked payment methods.
• Game and Platform Delivery: Providing access to all games, features, and services on the jjl8 platform and ensuring their correct technical operation.
• Regulatory Compliance: Meeting obligations under Philippine gaming, AML, tax, and data protection laws, including mandatory reporting to PAGCOR, AMLC, and the BIR where required.
• Responsible Gaming: Monitoring gaming activity to detect potential problem gambling patterns, enforcing self-exclusion and deposit limit requests, and applying age restrictions.
• Fraud Prevention and Security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and unauthorized access to the platform.
• Customer Support: Responding to your enquiries, complaints, and requests through jjl8's 24/7 support channels.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve platform performance, game selection, and user experience.
• Direct Communications: Sending you account notifications, security alerts, transaction confirmations, and — where you have consented — promotional communications about jjl8 offers.

Under the Data Privacy Act of 2012, jjl8 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under jjl8's Terms and Conditions to which you are a party — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws including the DPA, AMLA, PAGCOR regulations, and NIRC tax obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics, where such interests are not overridden by your fundamental rights as a data subject.
• Consent: Processing for marketing communications and certain optional features, where you have freely given, specific, informed, and unambiguous consent that may be withdrawn at any time.

jjl8 does not sell your personal data. We share personal data only with the categories of recipients listed below, and only to the extent necessary for the specified purposes:

• Payment Service Providers: GCash (Mynt), PayMaya (Maya Bank), BPI, BDO, Metrobank, UnionBank, and other payment processors, solely to process your deposit and withdrawal transactions.
• KYC and Identity Verification Partners: Third-party verification services that process your identity documents to confirm your eligibility to use jjl8 in accordance with PAGCOR requirements.
• Game Software Providers: Licensed game developers and content providers whose games are hosted on jjl8, who receive gameplay data necessary for game operation and RNG certification.
• Fraud Prevention and Security Providers: Services that analyze transaction patterns and device data to protect your account and the platform from financial crime and unauthorized access.
• Philippine Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission (NPC), and law enforcement agencies, where disclosure is required by law or regulatory directive.
• IT Infrastructure and Cloud Providers: Hosting, database, and cloud service providers that store and process platform data on jjl8's behalf under contractual data processing agreements.
• Professional Advisors: Legal counsel, auditors, and compliance consultants where access to personal data is necessary for the delivery of professional services to jjl8.

All third parties with whom jjl8 shares personal data are required to maintain the confidentiality of that data and to process it only in accordance with jjl8's instructions and applicable Philippine data protection law.

jjl8 retains personal data for the period necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by applicable Philippine law. The following standard retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification, unless retention beyond the standard period is required by a specific legal obligation or ongoing regulatory investigation.

jjl8 implements a comprehensive set of organizational and technical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and jjl8 servers is encrypted using TLS 1.2 or TLS 1.3 with 256-bit AES cipher suites.
• Encryption at Rest: Personal data and financial records stored on jjl8's servers are encrypted using AES-256 encryption.
• Password Security: User passwords are stored using bcrypt hashing with individual salts. Plain-text passwords are never stored or logged anywhere in jjl8's systems.
• Two-Factor Authentication: Players may enable SMS-based 2FA, which adds an OTP verification layer to logins on all new devices.
• Access Controls: Internal access to personal data is restricted on a need-to-know basis. Staff with data access privileges are subject to background screening, confidentiality agreements, and regular security training.
• Intrusion Detection: jjl8's infrastructure is monitored 24/7 by automated threat detection systems that flag and isolate anomalous access patterns in real time.
• Regular Security Audits: jjl8 engages independent third-party security firms to conduct periodic penetration testing and security assessments of the platform and its data infrastructure.

jjl8 uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device that enables the platform to remember your preferences and session information.

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby filters, and responsible gaming configurations between sessions.
• Analytics Cookies: Collect anonymized data about how players navigate and use the jjl8 platform to help us improve performance and identify technical issues. Data collected is aggregated and not linked to individual identities.
• Security Cookies: Used to detect fraudulent activity, multiple account creation, and bot traffic. These cookies are essential for platform integrity.

jjl8 does not use third-party advertising or behavioral profiling cookies. You may manage cookie preferences through your browser settings, though disabling strictly necessary cookies will impair your ability to use the jjl8 platform. Detailed cookie information is available in the jjl8 Cookie Declaration, accessible from the platform settings panel.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by jjl8. All requests to exercise these rights should be directed to jjl8's Data Protection Officer using the contact details in Section 14. jjl8 will respond to all valid requests within fifteen (15) business days.

• Right to be Informed: The right to be informed of the existence of processing, the nature of personal data collected, and the purposes for which they are processed — as set out in this Policy.
• Right of Access: The right to obtain confirmation of whether jjl8 holds personal data about you and to receive a copy of that data in a commonly used electronic format.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data jjl8 holds about you. You may also update most account information directly through your jjl8 account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jjl8's legal retention obligations under AMLA, PAGCOR, and BIR regulations.
• Right to Data Portability: The right to receive personal data you provided to jjl8 in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. jjl8 will cease such processing immediately upon receipt of a valid objection.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe jjl8 has processed your personal data in violation of the Data Privacy Act. The NPC can be reached through its official government website.

jjl8 does not knowingly collect personal data from individuals under the age of twenty-one (21). The jjl8 platform is strictly restricted to adults aged 21 and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. Age verification is a mandatory component of the KYC process before any withdrawal is permitted.

If jjl8 becomes aware that personal data has been collected from an individual under the age of 21 without parental consent, we will immediately delete that data and close the associated account. If you believe that a minor has registered on jjl8, please notify our Data Protection Officer immediately using the contact details in Section 14.

The jjl8 platform is primarily designed for and targeted at users located within the Republic of the Philippines. However, certain technology infrastructure providers and game content partners may be located in other countries, which may result in your personal data being processed or stored outside the Philippines.

Where jjl8 transfers personal data to recipients outside the Philippines, we ensure that appropriate safeguards are in place to protect the data at a standard equivalent to or higher than that required by the Philippine Data Privacy Act. These safeguards may include contractual clauses, data processing agreements incorporating NPC-approved standard contractual clauses, or transfers to jurisdictions recognized by the NPC as providing adequate levels of data protection.

jjl8 does not transfer personal data to countries with inadequate data protection frameworks without implementing appropriate supplementary measures. Players may request information regarding specific cross-border transfers by contacting jjl8's Data Protection Officer.

jjl8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The revised Policy will be posted on this page with an updated effective date.

Where changes are material — meaning they affect your rights or obligations in a significant way — jjl8 will provide advance notice via email to your registered address and through a platform notification at least fourteen (14) days prior to the changes taking effect. Continued use of the jjl8 platform after the effective date of a revised Policy constitutes your acceptance of the updated terms.

For all privacy-related enquiries, data subject rights requests, or complaints regarding jjl8's handling of your personal data, please contact jjl8's designated Data Protection Officer. jjl8 is committed to responding to all DPO enquiries within fifteen (15) business days.

If you are not satisfied with jjl8's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines through the NPC's official complaint channels.