jl988 Privacy
Policy

jl988 operates jl988.co, a PAGCOR-licensed online casino and sports betting platform for Filipino players. As part of our operations, we collect and process personal information about the people who use our platform. This Privacy Policy describes what information we collect, why we collect it, how we use and protect it, who we may share it with, and what rights you hold over your own data under Philippine law.

This Policy applies to all personal data processed by jl988 in connection with the jl988.co website, mobile applications, customer support interactions, and all related jl988 services — whether you are a registered player, a visitor browsing the site, or someone who has contacted jl988 support without creating an account.

By creating a jl988 account, depositing funds, or using any jl988 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the jl988 Platform.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules, jl988 acts as the Personal Information Controller in respect of all personal data collected through the jl988 Platform. This means jl988 determines the purposes and means of processing your personal information.

Where jl988 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or game software providers — those parties act as Personal Information Processors under jl988's instruction and are bound by data processing agreements that require them to maintain standards consistent with RA 10173 and this Privacy Policy.

jl988 collects only the personal data that is necessary for the specific purposes described in this Policy. The categories of personal data we collect include:

jl988 does not collect sensitive personal information as defined under RA 10173 (such as health data, political affiliations, or religious beliefs) unless specifically required by law or expressly consented to by the data subject.

jl988 collects personal data through the following means:

• Directly from you: When you complete the jl988 registration form, submit KYC documents, make deposits or withdrawals, contact customer support, or respond to surveys or promotions;
• Automatically via the Platform: Technical and gaming data is collected automatically when you access jl988.co or the jl988 mobile application, including via cookies, log files, and session tracking technologies (see Section 9);
• From third-party verification providers: Where jl988 engages accredited KYC or identity verification services to confirm the authenticity of documents or the accuracy of identity information you have provided;
• From payment providers: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, and Cebuana is received from those providers when you initiate a deposit or withdrawal;
• From regulatory authorities: jl988 may receive data from PAGCOR or other competent Philippine authorities as part of regulatory compliance, investigation, or enforcement procedures.

jl988 processes your personal data only where a lawful basis for processing exists under RA 10173. The table below sets out our processing purposes and the applicable legal basis for each:

jl988 shares personal data only where necessary for the purposes described in this Policy and only with parties who are contractually or legally obligated to protect it. Categories of recipients include:

• PAGCOR and competent Philippine regulatory authorities: jl988 discloses player data to PAGCOR and other authorities (including the AMLC) as required by law, including for licensing compliance, regulatory examination, and suspicious transaction reporting;
• Payment processors: Transaction data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other payment providers to the extent necessary to process your deposits and withdrawals;
• KYC and identity verification providers: Identity documents and data are shared with accredited verification service providers for the purpose of completing KYC checks on your account;
• Game software providers: Certain gaming data is shared with game content providers (such as game studios whose titles are offered on jl988) for technical operation, RNG audit compliance, and game integrity verification;
• IT and security service providers: Infrastructure, hosting, cybersecurity, and fraud detection services that process data under strict data processing agreements;
• Legal and professional advisers: Where necessary for legal proceedings, insurance, audit, or regulatory defence purposes, under professional confidentiality obligations.

jl988 does not share personal data with any third party for commercial marketing purposes without your explicit prior consent. Any consent for marketing data sharing can be withdrawn by you at any time through your account preferences or by contacting jl988 support.

jl988 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Key retention periods are as follows:

• Account and KYC data: Retained for the duration of your account relationship with jl988 plus a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and RA 9160 AMLA retention obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the relevant transaction, as required by anti-money laundering regulations;
• Gaming history: Retained for three (3) years from the date of each gaming session or bet record, for dispute resolution and responsible gaming monitoring purposes;
• Customer support communications: Retained for three (3) years from the close of the support interaction, unless a live legal or regulatory matter requires longer retention;
• Technical log data: Retained for twelve (12) months from collection, unless a security investigation requires extended retention.

When the retention period for any personal data expires and no other legal basis for continued retention exists, jl988 will securely delete or irreversibly anonymise the data in accordance with RA 10173's data disposal requirements.

jl988 implements technical and organisational security measures proportionate to the risk associated with the personal data we process. These measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and jl988 servers is encrypted using 256-bit SSL/TLS. Passwords are never transmitted in plain text;
• Encryption at rest: Sensitive personal data and financial records stored in jl988 systems are encrypted at rest using industry-standard algorithms;
• Access controls: Access to personal data within jl988's systems is restricted to employees and service providers with a demonstrated need-to-know, governed by role-based access controls and authenticated by multi-factor login;
• Security monitoring: jl988's systems are monitored continuously for intrusion attempts, anomalous access patterns, and potential data exfiltration;
• Incident response: jl988 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, jl988 will notify the National Privacy Commission (NPC) within 72 hours and affected players within a reasonable timeframe, as required by RA 10173.

jl988 uses cookies and similar tracking technologies on jl988.co and the jl988 mobile application. Cookies are small data files placed on your device that enable certain platform functionality and allow jl988 to recognise your device across sessions.

The categories of cookies jl988 uses are:

• Strictly necessary cookies: Required for the platform to function — including session authentication, login state, and security tokens. These cannot be disabled without disrupting core platform functionality;
• Functional cookies: Used to remember your preferences, such as language settings, game lobby sort preferences, and responsible gaming limit displays;
• Performance and analytics cookies: Used to collect anonymised information about how players use the jl988 Platform — which pages are visited most, how long sessions last, and where technical errors occur. This data is used to improve the Platform and is not linked to individual player identities;
• Security cookies: Used to detect fraudulent activity, bot access, and multi-account patterns.

jl988 does not use third-party advertising or behavioural profiling cookies that track your activity across other websites for commercial advertising purposes. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the jl988 Platform.

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights in respect of your personal data processed by jl988. These rights may be exercised by contacting jl988 support via live chat or email at any time:

jl988 will respond to data subject rights requests within 30 days of receipt. Where a request is complex or numerous, jl988 may extend this period by a further 30 days with notification to you. jl988 will not charge a fee for processing a rights request unless it is manifestly unfounded or excessive.

If jl988 becomes aware that personal data has been collected from a person under the age of 21 — whether through a falsified registration or any other means — jl988 will immediately suspend the relevant account, delete all personal data associated with the underage person to the extent permitted by law, and report the matter to PAGCOR as required by our licensing conditions.

If you are a parent or guardian and believe your child may have registered on jl988.co, please contact jl988 support immediately via live chat or at [email protected] (plain text — not a clickable link). jl988 will investigate and take appropriate action promptly.

Some of the third-party service providers that jl988 engages — particularly game software providers and certain technical infrastructure services — may be located or process data outside of the Philippines. Where personal data is transferred to a country that the National Privacy Commission (NPC) has not designated as having an adequate level of data protection, jl988 ensures that appropriate safeguards are in place, which may include:

• Data processing agreements incorporating the NPC's standard contractual clauses;
• Contractual obligations requiring the recipient to maintain data protection standards consistent with RA 10173;
• Technical and organisational security requirements imposed on the receiving party.

Cross-border transfers by jl988 are limited to what is strictly necessary for the provision of the services described in this Policy. jl988 does not transfer personal data to jurisdictions where its protection cannot be adequately guaranteed.

jl988 may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the structure of our services. The current version, with its effective date, is always published at jl988.co/privacy-policy.

Where an amendment materially changes how we process your personal data or reduces your rights in any way, jl988 will notify registered players via their registered email address or via an in-platform notification with a minimum of 14 days' advance notice before the change takes effect.

Your continued use of the jl988 Platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. If you do not accept an amendment, you may close your account and request erasure of your data, subject to jl988's legal retention obligations.

To exercise your data subject rights, raise a privacy concern, or reach jl988's Data Protection Officer, contact us through the following channels:

If you are not satisfied with jl988's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), which is the supervisory authority responsible for enforcing RA 10173. The NPC's complaint procedure and contact details are published on the NPC's official government website.