Privacy Policy – jl578 Casino

1. Introduction

This Privacy Policy ("Policy") describes how jl578 ("jl578", "we", "us", "our") collects, uses, stores, discloses, and protects personal information obtained from users ("Player", "User", "you") of the jl578 online gaming platform accessible at jl578.app and any associated mobile applications or services.

jl578 is committed to protecting the privacy and personal data of all Filipino players in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations as issued by the National Privacy Commission of the Philippines. Where applicable, jl578 also observes PAGCOR's data protection requirements for licensed online gaming operators.

By registering an account with jl578, accessing the platform, or otherwise providing your personal information, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not consent to this Policy, you must not use jl578.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, jl578 is the Personal Information Controller in respect of personal data collected through the jl578 platform. Our appointed Data Protection Officer ("DPO") is responsible for overseeing jl578's data protection compliance and may be contacted at the details provided in Section 13 of this Policy.

jl578 is registered with the National Privacy Commission (NPC) as required under the DPA and its implementing rules.

3. Personal Data We Collect

jl578 collects the following categories of personal data, depending on how you interact with the platform:

3.1 Registration and Account Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (for age verification — you must be 21 or older);
• Philippine mobile number and/or email address;
• Username and encrypted password;
• Residential address within the Philippines.

3.2 Identity Verification (KYC) Data

• Scanned copies or photographs of Philippine government-issued photo ID (e.g., UMID, SSS, PhilHealth, passport, driver's licence, PRC ID);
• Selfie photographs for facial verification;
• Proof of address documentation (e.g., utility bill, bank statement);
• Source-of-funds documentation where required under AMLA enhanced due diligence.

3.3 Transaction and Financial Data

• Deposit and withdrawal transaction records;
• Payment method identifiers (GCash number, Maya account, bank account details — stored in truncated or tokenised form where technically feasible);
• Account balance history and bonus redemption records.

3.4 Gaming Activity Data

• Game session logs including game titles, bet amounts, outcomes, and session duration;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status);
• Bonus and promotion participation records.

3.5 Technical and Device Data

• IP address and approximate geolocation (country and city level);
• Device type, operating system, and browser type and version;
• Session timestamps and login history;
• Cookie identifiers and analytics data as described in Section 5.

3.6 Communications Data

• Customer support chat transcripts and email correspondence;
• Records of consent to marketing communications and opt-out requests;
• Complaint and dispute records.

4. Legal Basis and Purposes of Processing

jl578 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

Where processing is based on consent, you have the right to withdraw that consent at any time by updating your communication preferences in Account Settings or by contacting our DPO. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Cookies and Tracking Technologies

jl578 uses cookies and similar tracking technologies to operate the platform, personalise your experience, and analyse platform usage. The categories of cookies used by jl578 are:

• Strictly Necessary Cookies: Essential for platform operation, including session authentication and security tokens. These cannot be disabled without preventing use of the platform.
• Functional Cookies: Remember your preferences such as language settings, game filters, and responsible gaming configurations.
• Analytics Cookies: Collect anonymised data on how players navigate the platform to help jl578 improve user experience. These are only set with your consent.
• Security Cookies: Used for fraud detection, bot prevention (CAPTCHA), and detecting suspicious login behaviour.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair or prevent your ability to use the jl578 platform. For detailed information on specific cookies set by jl578, please contact our DPO.

6. Sharing and Disclosure of Personal Data

jl578 does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• PAGCOR and Regulatory Authorities: As required by our operating licence, jl578 is obligated to provide player data and transaction records to PAGCOR upon request and as part of routine compliance reporting.
• Anti-Money Laundering Council (AMLC): jl578 is a covered institution under AMLA and is required to report covered and suspicious transactions to the AMLC.
• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, and other payment partners receive the minimum data necessary to process your deposit and withdrawal transactions.
• Game Providers: Licensed game studios (e.g., Pragmatic Play, PG Soft, Evolution) may receive session and bet data necessary to deliver and audit game outcomes. These providers operate under data processing agreements with jl578.
• KYC and Identity Verification Partners: Third-party identity verification services may process your ID documents and facial data to complete KYC. All such partners are bound by data processing agreements consistent with DPA requirements.
• Law Enforcement and Courts: Where required by a valid court order, subpoena, or applicable law, jl578 will disclose personal data to law enforcement or judicial authorities.

7. International Data Transfers

Some of jl578's technology partners and game providers operate from jurisdictions outside the Philippines. Where personal data is transferred to recipients in other countries, jl578 ensures that such transfers are made in accordance with Section 21 of the Data Privacy Act and applicable NPC regulations, including by requiring recipients to maintain data protection standards that are at least equivalent to those required under Philippine law.

Players who wish to obtain information regarding the specific countries to which their data may be transferred may contact the jl578 DPO at the contact details in Section 13.

8. Data Retention

jl578 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following minimum retention obligations:

• Transaction and KYC Records: Minimum of 5 years from the date of the transaction or account closure, as required by AMLA and PAGCOR.
• Account Records: For the duration of the active account relationship, plus 5 years following account closure, to satisfy regulatory and litigation hold obligations.
• Customer Support Communications: 2 years from the date of the last communication, unless the matter relates to an ongoing dispute or regulatory inquiry.
• Marketing Consent Records: For the duration of the consent and 3 years following withdrawal of consent, to demonstrate prior compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised, except where retention is required by a subsisting legal obligation or court order.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to personal data held by jl578:

• Right to be Informed: The right to know what personal data jl578 holds about you and how it is processed — fulfilled by this Policy.
• Right of Access: The right to request a copy of the personal data jl578 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data, subject to jl578's legal retention obligations. Note that data required for AMLA, PAGCOR, or active dispute resolution cannot be deleted on request.
• Right to Restrict Processing: The right to request that processing of your data be suspended pending resolution of a rectification or objection request.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used electronic format.
• Right to Object: The right to object to processing carried out on the basis of legitimate interest, including processing for direct marketing purposes.
• Right to Complain: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe jl578 has violated your data privacy rights.

To exercise any of the above rights, submit a written request to the jl578 DPO at the contact details in Section 13. jl578 will respond within 15 business days of receiving a complete and valid request.

10. Data Security Measures

jl578 implements technical and organisational security measures appropriate to the risk level of the data we process. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data at rest, including identity documents and payment credentials;
• Password hashing using bcrypt with salting — plain-text passwords are never stored;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication for internal systems accessing personal data;
• Regular third-party penetration testing and vulnerability assessments;
• Incident response and data breach management procedures consistent with NPC Circular 16-03.

Notwithstanding these measures, no online platform can guarantee absolute security. jl578 will notify affected players and the NPC in accordance with its breach notification obligations should a security incident affecting personal data occur.

11. Children's and Under-Age Players' Privacy

The jl578 platform is strictly for persons aged 21 years and above. jl578 does not knowingly collect personal data from individuals under the age of 21. Age is verified through our KYC process prior to withdrawal processing and may be verified at registration.

If jl578 discovers that personal data has been collected from an individual under 21 years of age, the relevant account will be immediately suspended, all associated funds forfeited in accordance with our Terms and applicable PAGCOR regulations, and the personal data will be deleted as soon as practicable, subject to any mandatory retention obligations.

Parents or guardians who believe that a minor under their care may have registered on jl578 should contact our support team and DPO immediately.

12. Amendments to This Policy

jl578 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR requirements, NPC guidance, or our processing activities. Material changes will be notified to registered players via the mobile number or email address on file with at least 7 days' advance notice prior to the amended Policy taking effect.

The current version of this Policy, with its effective date, is always available at jl578.app/privacy-policy. Continued use of jl578 following the effective date of any amendment constitutes acceptance of the revised Policy.

13. Contact and Data Protection Officer

For questions about this Privacy Policy, to exercise your data subject rights, or to report a privacy concern, please contact the jl578 Data Protection Officer:

• Email: [email protected] — subject line: "Privacy / DPO Request"
• Live Chat: 24/7 support via the jl578 platform (log in and open the chat widget)

If you are not satisfied with jl578's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). Further information about the NPC and how to file a complaint is available on the NPC's official website.