jl92 Casino
Privacy Policy

jl92 takes your privacy seriously. When you register an account, deposit funds, place wagers, or interact with any part of the jl92 platform, you share personal information with us. This Policy explains what we collect, why we collect it, how long we keep it, who we share it with, and the choices and rights available to you as a data subject under Philippine law.

We encourage you to read this Policy in full. If you have any questions after reading it, our Data Protection Officer can be reached at [email protected] with the subject line "Privacy Inquiry." We aim to respond to all data privacy queries within five business days.

jl92 does not sell your personal data to third parties for commercial purposes. Data is processed only where there is a legitimate legal or operational basis for doing so as described in this Policy. Your trust is not taken lightly — our business depends on it.

For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, the data controller responsible for personal data collected through jl92.org is:

The data controller determines the purposes and means of processing personal data. Where jl92 engages third-party processors — such as payment service providers or game studio partners — they act solely on jl92's documented instructions and are bound by data processing agreements that include the obligations required under RA 10173.

jl92 collects personal data at various stages of your relationship with the Platform. The categories of data collected, the source of that data, and the purpose for which it is collected are summarised in the table below:

3.1 Data We Do Not Collect

jl92 does not collect full payment card numbers, CVV codes, or online banking login credentials. Deposits via GCash and Maya are processed through those providers' own secure interfaces — jl92 receives only a transaction reference confirming a successful payment. We also do not collect biometric data beyond the photo ID and selfie required for KYC matching.

jl92 uses personal data collected from players for the following purposes:

• Account Creation and Management: To register your jl92 account, verify your identity, maintain your account settings, and provide you with access to all platform services;
• Age and Identity Verification (KYC): To comply with PAGCOR's requirements that all players are verified as being 21 years of age or older and are who they claim to be;
• Transaction Processing: To process deposits, withdrawals, bonus credits, and all financial activity associated with your account, and to maintain accurate records of those transactions;
• Customer Support: To respond to queries, investigate complaints, resolve disputes, and provide assistance relating to your account or gaming activity;
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, account takeover attempts, collusion, and other prohibited conduct as defined in the jl92 Terms and Conditions;
• Regulatory Compliance: To fulfil reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other competent Philippine regulatory authorities as required by law;
• Responsible Gaming: To monitor gaming patterns and identify potential problem gambling behaviour, and to administer self-exclusion and deposit limit requests;
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game offerings, and user experience;
• Marketing Communications (with consent): To send promotional messages, bonus offers, and platform updates to players who have opted in to receive marketing communications.

jl92 relies on the following lawful bases for processing personal data as specified under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing required to perform the contract between jl92 and the Player — including account creation, transaction processing, game provision, and customer support;
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and BIR reporting requirements;
• Legitimate Interests: Processing required for fraud prevention, security monitoring, platform analytics, and responsible gaming oversight — balanced against and not overriding the rights and interests of the Player;
• Consent: Processing for direct marketing and promotional communications, where opt-in consent has been provided by the Player. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

jl92 does not sell personal data to third parties. Data may be shared with the following categories of recipients only to the extent necessary and under appropriate contractual safeguards:

• Payment Service Providers: GCash, Maya, BancNet, and other licensed Philippine payment processors receive the minimum data necessary to process and reconcile transactions;
• KYC Verification Partners: Where jl92 uses a third-party identity verification service to process document scans, that partner operates under a data processing agreement and may retain data only as required by their own regulatory obligations;
• Game Studio Providers: JILI, Evolution Gaming, Pragmatic Play, PG Soft, and other licensed studios may receive anonymised session data for technical support and game integrity purposes. They do not receive personally identifiable information beyond what is technically necessary for game session management;
• Regulatory Authorities: PAGCOR, AMLC, the NPC, and other competent Philippine government bodies may receive personal data as required by law, court order, or regulatory directive. jl92 will notify the Player of such disclosure where legally permitted to do so;
• Professional Advisers: Legal counsel, auditors, and compliance consultants bound by confidentiality obligations who assist jl92 in meeting its legal and regulatory requirements.

jl92 uses cookies and similar tracking technologies to deliver, secure, and improve the Platform. The categories of cookies in use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function. These include session management cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without preventing core Platform functionality;
• Functional Cookies: Store your preferences such as language settings, game lobby display preferences, and responsible gaming reminder configurations. Disabling these cookies may reduce your experience quality but will not prevent access to the Platform;
• Analytics Cookies: Used by jl92 to understand aggregated usage patterns — which game categories are most visited, how players navigate the Platform, and where technical issues arise. These cookies are processed on an anonymised basis where possible;
• Security and Fraud Detection: Device fingerprinting and behavioural analytics cookies are used to detect suspicious login patterns, account takeover attempts, and prohibited automated activity.

You may manage cookie preferences through your browser settings. Note that disabling all cookies except strictly necessary cookies may affect Platform functionality. jl92 does not use third-party advertising or retargeting cookies.

jl92 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The general retention periods applicable to major data categories are as follows:

• Account and Identity Data: Retained for the duration of the account and for a minimum of 5 years following account closure, in compliance with PAGCOR and AMLA retention requirements;
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, as required under the AMLA and BIR recordkeeping rules;
• KYC Documentation: Retained for a minimum of 5 years following account closure. Original ID scans are deleted once verification is complete where technically permissible, with a verification record retained instead;
• Gaming Data (sessions, wagers, outcomes): Retained for a minimum of 3 years for PAGCOR compliance and responsible gaming assessment purposes;
• Customer Support Communications: Retained for 3 years following resolution of the inquiry or complaint;
• Marketing Consent Records: Retained for 3 years following withdrawal of consent or account closure, as evidence of lawful processing.

Upon expiry of the applicable retention period, data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual. Players may request early deletion of their data where jl92 does not have a legal obligation to retain it — see Section 11 for details.

jl92 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit TLS/SSL Encryption: All data transmissions between the Player's device and jl92 servers are encrypted using TLS 1.2 or higher — the same standard used by Philippine commercial banks;
• Data Encryption at Rest: Sensitive personal data including KYC documents and financial identifiers are encrypted when stored in jl92's databases;
• Access Controls: Personal data is accessible only to jl92 personnel and authorised processors who have a documented operational need for access. Access is logged and audited;
• Two-Factor Authentication: Available to all Players for their account login and mandatory for jl92 staff accessing personal data systems;
• Penetration Testing: jl92's systems undergo regular security assessments conducted by independent third-party security professionals.

jl92 is strictly prohibited from collecting personal data from or providing services to individuals under 21 years of age. This is a requirement under PAGCOR licensing regulations and Philippine law governing online gambling. The Platform employs mandatory age verification through KYC identity documentation before the first withdrawal is processed.

If jl92 becomes aware that personal data belonging to a person under 21 years of age has been collected through an account misrepresenting the holder's age, that account will be immediately suspended and all personal data associated with it will be deleted or isolated pending investigation, except where retention is required to satisfy legal reporting obligations. Any funds held in such an account will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe your child has accessed jl92 without authorisation, please contact [email protected] immediately. We take such reports seriously and will act promptly to investigate and respond.

As a data subject under the Philippine Data Privacy Act of 2012, you may exercise any of the following rights by submitting a request to [email protected] with the subject line "Data Privacy Request" and your registered mobile number for account verification:

• Access: Request a copy of all personal data jl92 holds about you, along with information on how it is processed. We will respond within 15 business days;
• Correction: Request correction of inaccurate or incomplete data. Name changes and identity data corrections require supporting documentation;
• Erasure / Blocking: Request deletion or blocking of data where jl92 no longer has a lawful basis for retention. Legally mandated retention periods take precedence;
• Object: Object to processing based on legitimate interests or for direct marketing purposes. Objection to marketing is acted on immediately; other objections are reviewed within 15 business days;
• Portability: Request a machine-readable copy of personal data you provided directly, processed on the basis of consent or contract;
• Damages: Where a violation of RA 10173 causes you harm, you are entitled to compensation for damages sustained as a result of that violation;
• Complaint to the NPC: If you are unsatisfied with jl92's response to a data rights request, you may escalate your complaint to the National Privacy Commission at privacy.gov.ph.

jl92 will not charge a fee for processing data rights requests unless requests are manifestly unfounded, excessive, or repetitive, in which case a reasonable fee reflecting administrative costs may be levied after notice to the requestor.

jl92 may send promotional messages — including bonus offers, new game announcements, and platform updates — to Players who have opted in to receive marketing communications during registration or in their account settings. Marketing communications are sent via SMS to your registered Philippine mobile number and, where provided, by email.

You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in Account Settings → Communications;
• Replying STOP to any SMS message from jl92;
• Contacting [email protected] with the subject line "Unsubscribe."

Withdrawal of marketing consent does not affect your ability to use the jl92 Platform, nor does it prevent jl92 from sending transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) that are necessary for account management and are not subject to marketing opt-out.

jl92 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, we will notify active Players via SMS to their registered Philippine mobile number at least 14 days before the changes take effect, and we will update the "Last Updated" date at the top of this page.

Continued use of the jl92 Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should cease using the Platform and close your account prior to the effective date of the changes. We encourage you to review this Policy periodically even when you have not received a notification of changes.

jl92 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with the Philippine Data Privacy Act of 2012. The DPO serves as the primary point of contact for all data privacy matters, including data rights requests, breach inquiries, and regulatory correspondence with the NPC.