Privacy Policy

This Privacy Policy ("Policy") describes how jl8888 — operating the online casino and sports betting platform accessible at jl8888.club — collects, uses, retains, discloses, and protects the personal information of its users ("Players") in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected and processed by jl8888 in connection with your registration, verification, gameplay, financial transactions, customer support interactions, and any other use of the jl8888 Platform. It applies regardless of whether you access the Platform via desktop browser, mobile browser, or any other access method.

By creating a jl8888 account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein. Where processing is based on consent, you retain the right to withdraw that consent at any time, subject to the limitations described in Section 11 of this Policy.

For the purposes of the Philippine Data Privacy Act, jl8888 acts as the Personal Information Controller (PIC) with respect to the personal data of Players using the jl8888 Platform. As PIC, jl8888 determines the purposes for which and the means by which personal data is processed.

jl8888 has designated a Data Protection Officer (DPO) responsible for overseeing the Platform's data protection practices, ensuring compliance with the DPA, and serving as the primary contact for data subject rights requests and privacy-related inquiries. Contact details for the jl8888 DPO are provided in Section 14 of this Policy.

Third-party service providers engaged by jl8888 who process personal data on behalf of jl8888 — such as KYC verification platforms, payment processors, and game providers — act as Personal Information Processors (PIPs) and are contractually bound to process data only for the purposes authorized by jl8888 and in compliance with the DPA.

jl8888 collects the following categories of personal data from Players. The specific data collected at any given time depends on the nature of your interaction with the Platform:

jl8888 does not intentionally collect special categories of personal data (i.e., data concerning health, religion, political opinions, racial or ethnic origin, or sexual orientation) unless specifically required by law or provided voluntarily by a Player in a customer support context. Such data, if incidentally received, is handled with heightened security controls.

jl8888 collects personal data through the following methods:

• Direct submission by you: Information you provide when creating your jl8888 account, completing KYC verification, making deposits or withdrawals, setting responsible gaming limits, or contacting jl8888 support;
• Automated technical collection: Data collected automatically when you access and use the jl8888 Platform, including IP addresses, device identifiers, session data, and cookies (see Section 9 for cookie details);
• Third-party verification providers: Identity and address verification data returned by licensed KYC service providers following document verification;
• Payment processors: Transaction reference data and payment confirmation information from GCash, Maya, BPI, BDO, UnionBank, and other integrated payment channels;
• Game providers: Gameplay outcome data, bet records, and game session metadata from jl8888's integrated game providers, used for account management, dispute resolution, and regulatory reporting;
• Regulatory and law enforcement bodies: In limited circumstances, jl8888 may receive or be required to share information with PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine government authorities as required by Applicable Law.

jl8888 processes personal data only where it has a lawful basis to do so under the Data Privacy Act. The following table summarizes the primary processing purposes and the corresponding legal basis:

jl8888 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by Applicable Law. The following retention periods apply as a general guide:

• Account and KYC data: Retained for the duration of the Player's active account plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the AMLA's five-year retention obligation for covered transactions;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under the AMLA and BSP regulations applicable to electronic money issuers and payment service providers;
• Gameplay and bet records: Retained for three (3) years to support dispute resolution and regulatory auditing;
• Customer support communications: Retained for two (2) years from the date of the final support interaction;
• Technical and log data: Retained for twelve (12) months, then automatically purged or anonymized;
• Marketing consent records: Retained for the duration of your account and two (2) years after opt-out, to demonstrate consent history if required.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with jl8888's data disposal procedures. Data that has been anonymized and can no longer reasonably be linked to an individual is not subject to further data protection obligations and may be retained for analytical purposes indefinitely.

jl8888 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following limited circumstances:

• KYC and identity verification providers: Licensed third-party platforms engaged by jl8888 to conduct document verification and biometric liveness checks as required by PAGCOR KYC standards;
• Payment processors: GCash (Mynt — Globe Fintech Innovations), Maya (Voyager Innovations), BPI, BDO, UnionBank, and other licensed Philippine payment service providers, for the sole purpose of processing deposits and withdrawals;
• Game providers: Reputable international game suppliers (such as Evolution Gaming, Pragmatic Play, NetEnt, and Ezugi) who receive session data necessary to facilitate gameplay and resolve disputes, under contractual data processing agreements;
• IT and security service providers: Cloud infrastructure, cybersecurity, and fraud detection vendors engaged to support jl8888's technical operations, under strict data processing agreements requiring compliance with the DPA;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and Philippine law enforcement bodies, where disclosure is required by Applicable Law or a valid legal process;
• Professional advisers: Lawyers, auditors, accountants, and insurers engaged by jl8888, who are bound by professional confidentiality obligations.

All third parties with whom jl8888 shares personal data are required, by contract, to implement appropriate technical and organizational security measures and to process data solely for the authorized purposes. jl8888 conducts periodic due diligence on its data processors to verify continued compliance.

Some of jl8888's third-party service providers — particularly international game providers and cloud infrastructure vendors — may process personal data outside the Republic of the Philippines. In such cases, jl8888 ensures that cross-border data transfers comply with Section 21 of the Data Privacy Act and NPC guidelines on cross-border data transfer.

Where personal data is transferred to jurisdictions outside the Philippines, jl8888 relies on one or more of the following safeguards:

• Contractual clauses approved by the NPC or equivalent standard contractual clauses requiring the recipient to protect personal data to a standard equivalent to Philippine requirements;
• The recipient operates in a jurisdiction recognized by the NPC as providing an adequate level of protection for personal data;
• The recipient has implemented binding corporate rules or equivalent internal data protection policies certified to be consistent with DPA requirements.

You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting jl8888's Data Protection Officer at the contact details in Section 14.

jl8888 uses cookies and similar tracking technologies on the jl8888 Platform to enhance your experience, maintain session continuity, and gather analytics data. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication tokens, load balancer cookies, and CSRF protection tokens. These cannot be disabled without breaking core Platform functionality;
• Functional Cookies: Remember your preferences such as language settings, remembered login status ("Remember Me"), and game lobby filter preferences;
• Analytics Cookies: Collect aggregated, anonymized data about how Players use the Platform — page visits, session duration, game popularity — to help jl8888 improve the product. jl8888 uses self-hosted analytics tools rather than sharing this data with third-party analytics platforms;
• Security Cookies: Used by jl8888's fraud detection and session integrity systems to identify and respond to suspicious activity patterns.

jl8888 does not use advertising cookies or behavioral tracking cookies that profile you for third-party advertising purposes. Most browsers allow you to manage cookie preferences through browser settings. Disabling functional or analytics cookies may impair some Platform features but will not prevent you from accessing core gaming functions.

jl8888 implements a multi-layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our technical and organizational security measures include:

• Transport Layer Security: All data transmitted between your browser and jl8888 servers is encrypted using TLS 1.2 or higher (256-bit SSL). The padlock icon in your browser confirms an active secure connection;
• Encryption at rest: Sensitive personal data — including identity documents, financial data, and authentication credentials — is encrypted at rest using industry-standard encryption algorithms;
• Access controls: Access to personal data within jl8888 is granted on a strict need-to-know basis with role-based access controls, multi-factor authentication for administrative accounts, and full audit logging of all access events;
• Network security: jl8888's infrastructure is protected by web application firewalls (WAF), DDoS mitigation, intrusion detection systems (IDS), and regular external penetration testing;
• Data breach response: jl8888 maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk to affected Players, jl8888 will notify the NPC and affected data subjects within seventy-two (72) hours of becoming aware of the breach, as required by the DPA;
• Employee training: All jl8888 personnel with access to personal data receive regular data protection training and are bound by confidentiality obligations in their employment contracts.

As a data subject under the Philippine Data Privacy Act, you have the rights described in the feature cards at the top of this page. To exercise any of these rights, you may:

• Contact jl8888's Data Protection Officer by email at the address provided in Section 14, with the subject line "Data Subject Rights Request – [Your Request Type]";
• Submit a request via the jl8888 Live Chat support channel, where a support agent will escalate your request to the DPO within one business day;
• For simple profile corrections (name, contact details), use the "Edit Profile" function directly within your jl8888 account settings.

jl8888 will respond to all data subject rights requests within fifteen (15) business days of receipt. In complex cases requiring additional verification or third-party coordination, jl8888 may extend this period by a further fifteen (15) business days and will notify you of the extension with reasons.

jl8888 may request identity verification before processing certain rights requests — particularly access, erasure, and portability requests — to protect against fraudulent requests for data belonging to another person.

Limitations on erasure and restriction: Certain personal data cannot be deleted while jl8888 remains legally obligated to retain it — particularly KYC and financial transaction records that must be held for five years under the AMLA. In such cases, jl8888 will inform you of the specific legal obligation preventing deletion.

If you are unsatisfied with jl8888's response to a data subject rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

jl8888 implements age verification at registration and during KYC to enforce this restriction. If jl8888 discovers that it has collected personal data from a person under 21 years of age — whether through registration misrepresentation or any other means — jl8888 will immediately close the relevant account, void any transactions, return any deposited funds to the payment source, and securely delete all personal data associated with that account to the extent permitted by legal obligations.

Parents and guardians of minors in the Philippines are advised to implement parental control software on shared devices to prevent underage access to gambling platforms. If you believe a minor has registered on jl8888 using your payment details, contact jl8888 support immediately via Live Chat with the account details and a brief description of the situation.

jl8888 reviews this Privacy Policy periodically and updates it as required to reflect changes in our data processing practices, applicable law, or NPC guidance. The current version is always available at jl8888.club/privacy-policy and is identified by the "Last Updated" date displayed at the top of this Policy and in the updated-bar above.

Where a proposed update materially affects your rights or the way jl8888 processes your personal data, jl8888 will provide advance notice of at least seven (7) calendar days before the change takes effect — by email to your registered address and/or by a prominent notice on the jl8888 Platform — together with a clear summary of what has changed and why.

If you do not agree with any changes to this Policy, you may close your jl8888 account by contacting support. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the updated Policy.

For all privacy-related inquiries, data subject rights requests, or concerns regarding jl8888's handling of your personal data, please contact:

• Data Protection Officer (DPO): [email protected] — for formal data subject rights requests and privacy-related complaints
• General Support: [email protected] — for general inquiries that may have a privacy component
• Live Chat: Available 24/7 on the jl8888 Platform — fastest response channel for urgent concerns

When contacting the DPO, please include: your full name as registered on jl8888, the email address linked to your account, a clear description of your request or concern, and any relevant reference numbers or dates. This helps jl8888 process your request efficiently and securely.

jl8888's DPO is registered with the National Privacy Commission as required under the DPA's Implementing Rules. If you are not satisfied with jl8888's response, you may also file a complaint directly with the NPC through its official channels.

This Privacy Policy is effective as of January 1, 2026. It supersedes all prior versions of the jl8888 Privacy Policy. By continuing to use the jl8888 Platform after this date, you acknowledge and accept the terms of this Policy.