jl26 Privacy Policy – How We Handle Your Personal Data

01 Definitions

In this Privacy Policy, the following terms have the meanings set out below:

• "Personal Data" means any information from which a natural person can be identified, directly or indirectly — including but not limited to name, mobile number, email address, government ID number, financial transaction data, and device identifiers.
• "Sensitive Personal Information" means personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical, or political affiliations; health, education, genetic or sexual life; or any proceeding for any offense committed or alleged to have been committed, as defined under Section 3(l) of RA 10173.
• "Processing" means any operation performed on personal data, including collection, recording, organization, storage, updating, retrieval, use, disclosure, erasure, or destruction.
• "Data Subject" means any natural person whose personal data is being processed — in the context of this Policy, primarily jl26 registered players and account holders.
• "jl26," "we," "us," or "our" refers to the jl26 Casino online gaming platform and its operators, who act as Personal Information Controller in relation to all player data processed on the platform.
• "NPC" means the National Privacy Commission of the Philippines, the government body responsible for administering and enforcing RA 10173.
• "PAGCOR" means the Philippine Amusement and Gaming Corporation, the gaming regulatory authority under whose license jl26 operates.

02 Scope & Data Controller

This Privacy Policy applies to all personal data collected and processed by jl26 in connection with the operation of the jl26.asia online casino platform, including data collected through account registration, identity verification, gaming activity, financial transactions, customer support interactions, and platform usage analytics.

jl26 acts as the Personal Information Controller for all personal data described in this Policy. This means jl26 determines the purposes and means of processing your personal data, and bears primary responsibility for its lawful and secure handling.

This Policy applies to all jl26 players and prospective players in the Philippines, regardless of the device or browser used to access the platform. It does not apply to third-party websites or services that may be referenced by jl26's platform — those third parties operate under their own privacy policies, and jl26 has no control over or responsibility for those practices.

03 Personal Data We Collect

jl26 collects the following categories of personal data from players and platform users:

jl26 does not intentionally collect Sensitive Personal Information as defined under RA 10173, with the exception of national identification numbers (which form part of mandatory government-issued ID verification under PAGCOR KYC requirements) and age-related information necessary to verify compliance with the 21+ age restriction mandated by PAGCOR.

04 How We Collect Personal Data

jl26 collects personal data through the following means:

• Direct Provision by You: When you register a jl26 account, complete KYC identity verification, make a deposit or withdrawal, contact customer support, set responsible gaming preferences, or otherwise interact with the platform in a way that requires you to submit information;
• Automated Technical Collection: When you access the jl26 platform, certain technical data is automatically collected by our servers and analytics systems — including your IP address, browser characteristics, device type, and session duration. This data is collected passively and does not require active input from you;
• Payment Processing Partners: When you make a deposit or withdrawal via GCash, Maya, BPI, BDO, Metrobank, or other supported payment methods, relevant transaction confirmation data is transmitted to jl26 by the payment provider to confirm the transaction's completion and associate it with your account;
• Identity Verification Services: jl26 may use approved third-party identity verification service providers to assist with KYC document verification. These providers process identity document images and return verification results to jl26 under data processing agreements;
• Cookies and Similar Technologies: As described in Section 9 of this Policy.

jl26 does not purchase personal data from data brokers or third-party marketing lists for the purpose of contacting individuals who have not registered a jl26 account.

05 Purposes & Legal Basis for Processing

jl26 processes personal data for the following purposes, under the corresponding legal bases established by RA 10173 and applicable PAGCOR regulations:

• Account Registration and Management — to create, maintain, and administer your jl26 account. Legal basis: performance of contract (your agreement with jl26's Terms & Conditions);
• Identity Verification and KYC — to verify that you meet the minimum age of 21, confirm your identity against government-issued documents, and comply with PAGCOR's mandatory KYC requirements. Legal basis: compliance with a legal obligation;
• Payment Processing — to process deposits and withdrawals to and from your jl26 account in Philippine Peso via GCash, Maya, and other supported methods. Legal basis: performance of contract;
• Anti-Money Laundering (AML) Compliance — to monitor transactions and gaming patterns for indicators of money laundering, terrorist financing, or other financial crimes, as required under RA 9160 (Anti-Money Laundering Act) and PAGCOR's AML compliance framework. Legal basis: compliance with a legal obligation;
• Game Provision and Integrity — to deliver gaming services, maintain game records, resolve disputes, and ensure fair play across all jl26 game categories. Legal basis: performance of contract;
• Responsible Gaming — to monitor player behavior for indicators of problem gambling, administer responsible gaming tools (deposit limits, self-exclusion), and comply with PAGCOR's Responsible Gaming Framework. Legal basis: legitimate interests and legal obligation;
• Customer Support — to respond to enquiries, resolve disputes, and maintain support interaction records. Legal basis: performance of contract and legitimate interests;
• Platform Security and Fraud Prevention — to detect and prevent unauthorized account access, bonus abuse, cheating, and other prohibited activities. Legal basis: legitimate interests;
• Service Improvement and Analytics — to understand how Filipino players use the platform and improve game offerings, UX, and cashier functionality. Legal basis: legitimate interests. Data used for this purpose is anonymized or aggregated wherever possible;
• Marketing Communications — to send bonus offers, promotional updates, and platform news to registered players who have not opted out of marketing communications. Legal basis: consent (which you may withdraw at any time via your account settings or by contacting support).

06 Data Sharing & Disclosure

jl26 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We disclose personal data only in the following circumstances:

• PAGCOR and Regulatory Authorities: jl26 is legally obligated to report certain player data, transaction records, and gaming activity to PAGCOR as a condition of our operating license. We are also required to comply with lawful requests from the Anti-Money Laundering Council (AMLC), the National Bureau of Investigation (NBI), or any other competent Philippine authority bearing appropriate legal authority;
• Payment Service Providers: Transaction data is shared with GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment processors solely as necessary to execute deposit and withdrawal transactions. These providers receive only the data required to process the specific transaction;
• Identity Verification Service Providers: Identity document data submitted during KYC may be transmitted to approved identity verification partners who process it on jl26's behalf under binding data processing agreements that require compliance with RA 10173;
• Technology and Infrastructure Providers: jl26 uses cloud hosting, game software providers, and technical operations partners who may process personal data in the course of providing their services. All such providers operate under data processing agreements with jl26 and are prohibited from using your data for their own purposes;
• Legal Proceedings: In the event of a dispute, investigation, or legal proceeding, jl26 may disclose personal data to courts, legal advisors, or regulatory tribunals as required or permitted by Philippine law;
• Business Transfers: In the event of a merger, acquisition, or transfer of jl26's operating business, player data may be transferred to the acquiring entity as part of that transaction, subject to equivalent data protection obligations.

Where personal data is shared with third-party processors, jl26 maintains agreements that contractually bind those processors to handle the data in accordance with RA 10173, NPC implementing rules, and the instructions of jl26 as Personal Information Controller.

07 Data Retention

jl26 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to any longer retention periods required by applicable Philippine law or PAGCOR regulations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active jl26 account, and for a minimum of five (5) years following permanent account closure, as required by PAGCOR's record-keeping obligations and applicable AML legislation;
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in compliance with RA 9160 (AMLA) record-keeping requirements;
• Gaming Activity Records: Retained for a minimum of three (3) years, with longer retention possible where records are relevant to an unresolved dispute or regulatory investigation;
• Support and Communications Data: Retained for two (2) years from the date of the last interaction in a support thread, or longer if the communication is relevant to an ongoing dispute or legal matter;
• Marketing Consent Records: Retained for as long as you maintain a jl26 account or until consent is withdrawn, whichever is earlier, plus an additional three (3) years for audit purposes;
• Device and Technical Data: Retained for up to twelve (12) months for security and fraud detection purposes, after which aggregate or anonymized data may be retained for analytics indefinitely.

When personal data is no longer required for any lawful purpose, jl26 will securely delete or anonymize it in accordance with industry-standard data destruction practices. Where complete deletion is not immediately practicable (for example, due to backup system architecture), jl26 will isolate and protect the data from further active processing until deletion is completed.

08 Data Security

jl26 implements technical and organizational security measures appropriate to the sensitivity of the personal data we process and the risks presented by our operating environment. These measures include:

• Encryption: All data transmitted between your browser and jl26's servers is encrypted using 256-bit TLS (Transport Layer Security). Account passwords are stored using industry-standard one-way cryptographic hashing — jl26 does not store passwords in plain text;
• Access Controls: Access to personal data within jl26's systems is restricted on a need-to-know basis. Staff and contractors are granted access only to the categories of personal data required for their specific job functions, subject to role-based access controls;
• Two-Factor Authentication: jl26 offers OTP-based two-factor authentication for player accounts and enforces multi-factor authentication for internal staff access to systems containing personal data;
• Security Monitoring: jl26 operates continuous security monitoring of its platform infrastructure, including intrusion detection systems and anomaly alerts for unusual data access patterns;
• Staff Training: All jl26 staff who handle personal data receive data protection training as part of onboarding and ongoing compliance programs;
• Vendor Assessment: Third-party service providers who process personal data on jl26's behalf are assessed for data security standards before engagement, and are subject to contractual security obligations.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. In the event of a personal data breach that poses a real risk to the rights and freedoms of affected players, jl26 will notify the National Privacy Commission and affected data subjects in accordance with the NPC's mandatory breach notification requirements under NPC Circular 16-03.

09 Cookies & Tracking Technologies

jl26 uses cookies and similar browser-based technologies to operate and improve the platform. Cookies are small text files placed on your device by your browser when you visit jl26.asia. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies (which keep you logged in), security cookies (which protect against cross-site request forgery), and cashier session cookies. These cannot be disabled without breaking core platform functionality;
• Functional Cookies: Remember your preferences such as language settings, game lobby display preferences, and responsible gaming alert configurations. These improve your experience but are not essential to platform operation;
• Analytics Cookies: Collect anonymized information about how Filipino players navigate and use the jl26 platform — pages visited, game categories accessed, session duration, and similar behavioral patterns. This data is used in aggregate to improve the platform. Individual players are not identified in analytics reports;
• Security and Fraud Detection Cookies: Assist jl26's systems in detecting unusual login patterns, multiple account attempts, and other fraud indicators. These cookies are essential to the platform's security framework.

jl26 does not use third-party advertising cookies or behavioral tracking technologies that share your browsing data with external advertising networks. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the platform.

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, Filipino players who are Data Subjects have the following rights regarding their personal data held by jl26:

To exercise any of the above rights, contact jl26's Data Protection Officer using the details in Section 14. jl26 will respond to rights requests within fifteen (15) business days. Where a request requires longer processing time, jl26 will notify you of the extension and expected completion date. Exercise of your data rights is free of charge unless requests are manifestly unfounded or excessive, in which case jl26 may charge a reasonable administrative fee.

If you believe jl26 has processed your personal data in violation of RA 10173, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information on filing an NPC complaint is available on the NPC website.

11 Children & Persons Under 21

In the event that jl26 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, jl26 will immediately suspend the relevant account, delete the associated personal data to the extent permissible under applicable law (noting that records of the breach may need to be retained for regulatory reporting purposes), and report the matter to PAGCOR as required by license conditions.

If you are a parent or guardian and believe your child or a person under your care has registered a jl26 account, please contact our Data Protection Officer immediately using the contact details in Section 14. We will investigate and take appropriate action promptly.

12 Third-Party Links & Integrations

The jl26 platform may display references to third-party services, including payment providers such as GCash and Maya, with which the platform integrates for transaction purposes. When you interact with these third-party services — for example, when authenticating a GCash payment — you are subject to the privacy policies of those third parties, not this Policy.

jl26 has no control over the data practices of third-party services and accepts no responsibility or liability for how those third parties collect, use, or protect your data. We encourage Filipino players to review the privacy policies of GCash (Mynt Philippines), Maya (Voyager Innovations), and any other third-party service they use in connection with their jl26 account.

The fact that jl26 integrates with a third-party payment service does not constitute an endorsement of that service's privacy practices.

13 Changes to This Privacy Policy

jl26 reserves the right to amend this Privacy Policy at any time. Changes may be made to reflect updates to jl26's data processing practices, amendments to applicable Philippine privacy law, new NPC implementing guidelines, changes to PAGCOR regulatory requirements, or changes to the platform's technical infrastructure.

Where a proposed amendment materially affects how jl26 processes your personal data or reduces your privacy rights, jl26 will provide advance notice of the change through one or more of the following channels: a prominent notice on the jl26 platform, an email to your registered email address, or a notification within your account dashboard. The notice will include the effective date of the change and a summary of what has changed.

Non-material amendments — including corrections of typographical errors, clarifications that do not alter the substance of our data practices, or updates to reflect changes in law that do not affect your rights — may be made without advance notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

Continued use of the jl26 platform following the effective date of any amendment constitutes your acknowledgment of and agreement to the revised Privacy Policy.

14 Contact & Data Protection Officer

jl26 has appointed a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing jl26's compliance with RA 10173 and NPC implementing rules, and is the primary point of contact for player data rights requests and privacy concerns.

For complaints that jl26 has not resolved to your satisfaction, you may escalate to the National Privacy Commission of the Philippines: [email protected] — 5th Floor Delegation Building, PICC Complex, Roxas Boulevard, Pasay City, Metro Manila.