jl17 Privacy Policy

1.1 jl17 is committed to protecting the privacy and personal data of every Player and visitor who interacts with our Platform. This Privacy Policy describes the categories of personal data jl17 collects, the purposes for which that data is processed, how it is protected, and the rights available to you as a data subject under Philippine law.

1.2 This Policy applies to: (a) all registered Players with a jl17 account; (b) individuals who visit the jl17 website without registering; (c) individuals who contact jl17 customer support; and (d) any other individual whose personal data jl17 processes in connection with the operation of the Platform.

1.3 This Policy should be read in conjunction with jl17's Terms & Conditions and Responsible Gaming Policy, both of which form part of the agreement between jl17 and its Players.

1.4 jl17 operates as an online casino platform serving Filipino players under PAGCOR regulatory oversight. Data processing activities are therefore subject to both the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and PAGCOR's data governance requirements for licensed operators.

2.1 For the purposes of the Data Privacy Act of 2012, jl17 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the jl17 Platform. jl17 determines the purposes and means of processing personal data and is responsible for ensuring that processing is carried out in accordance with the DPA.

2.2 jl17 has appointed a Data Protection Officer (DPO) who is responsible for overseeing the Platform's data protection compliance and handling data subject rights requests. The DPO can be contacted at [email protected] with the subject line "Data Protection — [Your Request Type]".

2.3 Where jl17 engages third-party service providers (such as game providers, payment processors, or cloud infrastructure providers) to process personal data on its behalf, those providers act as Personal Information Processors (PIPs) under written data processing agreements that bind them to process data only as instructed by jl17 and in accordance with the DPA.

3.1 jl17 collects personal data in the following categories:

3.2 jl17 does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (e.g., health or medical information, political affiliations, racial or ethnic origin) except where required for responsible gaming assessments or as specifically required by PAGCOR regulations.

3.3 Where a Player fails to provide personal data that jl17 is required to collect under PAGCOR regulations or for KYC compliance purposes, jl17 may be unable to process withdrawal requests, offer certain account features, or continue the Player's account registration.

4.1 jl17 uses personal data collected from Players for the following purposes:

• Account creation and management — to register, verify, and maintain your jl17 account, including processing your username, password, and contact details.
• Identity and age verification (KYC) — to verify that you are at least 21 years of age, that your identity matches your registration information, and that your payment methods are owned by you, as required by PAGCOR and AMLC regulations.
• Payment processing — to process deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and any other accepted Philippine payment channels.
• Game delivery and account management — to deliver game sessions, record wager and win/loss outcomes, calculate VIP tier progression, and manage responsible gaming tool settings.
• Regulatory compliance — to fulfil jl17's obligations under the PAGCOR licence, the Anti-Money Laundering Act (AMLA), the Data Privacy Act (DPA), and other applicable Philippine laws and regulations.
• Customer support — to respond to your enquiries, resolve disputes, and manage complaints through jl17's 24/7 support channels.
• Fraud prevention and platform security — to detect, investigate, and prevent fraudulent activity, multiple accounts, bonus abuse, and other prohibited conduct.
• Marketing communications — to send promotional offers, VIP programme updates, and platform announcements where you have provided consent. You may withdraw this consent at any time through your account settings.
• Platform improvement — to analyse aggregated usage data and improve the functionality, design, and performance of the jl17 Platform.

5.1 Under the Data Privacy Act of 2012, jl17 relies on the following lawful bases to process personal data:

6.1 jl17 does not sell, rent, or trade personal data. jl17 may disclose personal data to the following categories of recipients only to the extent necessary for the stated purpose:

• Payment service providers — GCash (GXI), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other licensed Philippine payment processors, for the purpose of processing deposits and withdrawals.
• Game providers — JILI, Pragmatic Play, PG Soft, and other certified game providers, to the extent required to deliver game content and record game outcomes within your jl17 account session.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory directive.
• Cloud and technology infrastructure providers — hosting, database, and security service providers engaged by jl17 under data processing agreements, who process data on jl17's behalf and under its instructions.
• Professional advisors — legal counsel, auditors, and compliance consultants engaged by jl17, subject to confidentiality obligations.
• Law enforcement — Philippine law enforcement authorities, courts, and tribunals, where jl17 is required to disclose data by applicable law, court order, or regulatory demand.

6.2 jl17 requires all Personal Information Processors and third-party recipients to implement appropriate technical and organisational measures to protect personal data and to process it only for the stated purposes.

7.1 jl17 uses cookies and similar tracking technologies on its Platform to provide a functional, personalised, and secure gaming experience. Cookies are small data files stored on your device by your browser when you visit the jl17 website.

7.2 jl17 uses the following types of cookies:

• Strictly Necessary Cookies — required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional Cookies — remember your preferences, such as language settings, game lobby filters, and last-visited game categories.
• Analytics Cookies — collect aggregated, anonymised data about how Players use the Platform to help jl17 improve its design and performance. No personally identifiable information is transmitted through analytics cookies without consent.
• Session Integrity Cookies — used to detect and prevent fraud, multiple account access, and bot activity on the Platform.

7.3 You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the jl17 Platform from functioning correctly, including the ability to log in to your account.

8.1 jl17 retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by Philippine law. The following indicative retention periods apply:

• Account and KYC data — retained for the duration of the account and for a minimum of five (5) years following account closure, as required by AMLC and PAGCOR regulations.
• Transaction and gaming records — retained for a minimum of five (5) years from the date of each transaction, consistent with AMLA record-keeping requirements.
• Customer support communications — retained for a minimum of two (2) years from the date of the communication, or longer if the communication is relevant to an ongoing dispute or investigation.
• Marketing consent records — retained for as long as jl17 holds consent, plus a reasonable period thereafter for compliance verification purposes.

8.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original data.

9.1 jl17's security measures include, without limitation:

• TLS/HTTPS encryption for all data in transit across the Platform
• Cryptographic hashing of account passwords — plain-text passwords are never stored
• Access controls limiting internal data access to authorised personnel on a need-to-know basis
• OTP (One-Time Password) verification for logins from unrecognised devices
• Regular security assessments and vulnerability testing
• Incident response procedures aligned with NPC notification requirements under the DPA

9.2 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, jl17 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the DPA and NPC Circular 16-03.

10.1 Some of jl17's third-party service providers — including game providers and cloud infrastructure providers — may process personal data outside of the Philippines. Where cross-border transfers occur, jl17 ensures that appropriate safeguards are in place, including contractual data protection obligations consistent with the DPA and NPC guidance on cross-border data transfers.

10.2 jl17 does not transfer personal data to jurisdictions that do not provide adequate data protection standards without first implementing appropriate transfer mechanisms.

11.1 Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by jl17:

11.2 To exercise any of the above rights, submit a written request to jl17's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request — [Right Type]". jl17 will respond within fifteen (15) business days of receipt of a complete request. Identity verification may be required before rights are exercised.

11.3 If you believe that jl17 has violated your rights under the DPA, you may file a complaint with the National Privacy Commission (NPC) through its official government channels.

12.1 If jl17 discovers that personal data has been collected from an individual under 21 years of age, jl17 will immediately close the account, refund any deposited real-money balance in accordance with its underage gaming procedures, and permanently delete the associated personal data.

12.2 jl17 encourages parents and guardians in the Philippines to use appropriate parental control software to prevent underage individuals from accessing online gambling platforms, including jl17.

13.1 jl17 reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered Players via in-platform notification or email (where provided) with a minimum of seven (7) days' notice prior to the effective date of the change.

13.2 The current version of this Privacy Policy, including the date of last update displayed in the page header, is always accessible on this page. Continued use of the jl17 Platform following the effective date of any amendment constitutes acceptance of the revised Policy.

14.1 For any questions, concerns, or requests relating to this Privacy Policy or jl17's data protection practices, contact jl17's Data Protection Officer:

14.2 Alternatively, you may contact jl17's 24/7 live chat support via the Platform for general account privacy queries. For formal data subject rights requests, written communication via email is required to create an auditable record.