Who We Are — Data Controller Identity
jl989 operates the online gaming platform accessible at jl989.app and via the jl989 mobile application. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jl989 acts as the Personal Information Controller (PIC) in respect of all personal data collected from players who register and use the jl989 platform.
As the Personal Information Controller, jl989 determines the purposes and means of processing your personal data. All data processing activities carried out by third-party service providers engaged by jl989 — including KYC verification partners, payment processors, and analytics providers — are conducted on jl989's behalf under binding Data Processing Agreements (DPAs) that obligate those parties to handle your data in accordance with this Privacy Policy and RA 10173.
Data Protection Officer: jl989 has appointed a dedicated Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. Contact details for the DPO are provided in Section 15 of this document.
Scope of This Privacy Policy
This Privacy Policy applies to all personal data collected and processed by jl989 in connection with:
- Registration and maintenance of a jl989 player account.
- Use of any gaming service, feature, or tool available on the jl989 platform, including live casino, slots, sports betting, online sabong, poker, bingo, and card games.
- Deposit, withdrawal, and payment processing transactions.
- KYC identity verification procedures.
- Customer support interactions via live chat, email, or any other channel.
- Participation in jl989 promotions, bonuses, tournaments, or loyalty programs.
- Browsing the jl989 website or using the jl989 mobile application, whether or not a registered account exists.
This Policy applies to all players accessing jl989 from the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and all other Philippine regions — as well as any other jurisdiction where jl989 legally accepts registrations.
Personal Data We Collect
jl989 collects personal data through several channels. The categories of data collected, the specific data points within each category, and the collection method are set out in the table below:
| Category | Data Points Collected | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number | Registration form; KYC submission |
| Contact Data | Mobile number (Philippine +63 format), email address, residential address | Registration form; account settings |
| Financial Data | GCash / Maya wallet reference, bank account details (BPI, BDO, Metrobank), transaction amounts and timestamps | Cashier / payment gateway |
| KYC Verification Data | Government ID images (front and back), selfie / liveness check photograph | KYC verification portal |
| Gaming Activity Data | Game sessions, bet amounts, win/loss records, bonus activity, game preferences | Platform activity logging |
| Technical Data | IP address, device type, operating system, browser type, session timestamps | Automated server logging |
| Communications Data | Live chat transcripts, support email content, survey responses | Support system |
| Marketing Preferences | Communication opt-in status, preferred contact channel, promotion engagement history | Account settings; marketing system |
jl989 does not collect sensitive personal information such as racial or ethnic origin, religious beliefs, health records, or political opinions, unless a specific legal or regulatory obligation requires it (for example, a court order or AMLC directive).
Legal Basis for Processing Your Personal Data
jl989 processes your personal data on one or more of the following lawful bases, as applicable to the specific processing activity:
- Contract Performance: Processing is necessary for jl989 to fulfill its contractual obligations to you as a registered player — including account management, payment processing, withdrawal execution, and game result calculation.
- Legal Obligation: Processing is required to comply with jl989's legal obligations under Philippine law, including the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR regulatory requirements, and the Data Privacy Act (RA 10173).
- Legitimate Interests: Processing is necessary for jl989's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and service improvement — where those interests are not overridden by your privacy rights.
- Consent: For optional processing activities such as marketing communications, jl989 relies on your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time through your account settings.
How jl989 Uses Your Personal Data
The personal data jl989 collects is used exclusively for the following documented purposes:
- Account Creation and Management: To create, verify, maintain, and administer your jl989 player account, including processing your registration, managing your login credentials, and maintaining your account balance and transaction history.
- Identity Verification (KYC): To verify your identity, age (21+), and eligibility to participate in real-money online gaming on jl989, in compliance with PAGCOR-aligned requirements and the Anti-Money Laundering Act.
- Payment Processing: To process your deposit and withdrawal requests through GCash, Maya, InstaPay, and other supported Philippine payment channels, and to maintain accurate financial records of all transactions.
- Gaming Service Delivery: To deliver all jl989 gaming services — live casino, slots, sports betting, sabong, poker, bingo, and card games — and to calculate and credit winnings accurately to your account.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, collusion, and other activities prohibited under jl989's Terms and Conditions.
- Responsible Gaming: To monitor gaming behaviour patterns for indicators of problem gambling, to enforce self-imposed player limits, and to manage self-exclusion requests in accordance with jl989's Responsible Gaming Policy.
- Customer Support: To respond to your support inquiries, resolve complaints, and maintain records of customer service interactions for quality assurance and dispute resolution purposes.
- Marketing Communications: Where you have given consent, to send you promotional offers, bonus notifications, and platform news via SMS, email, or in-app notifications. You may opt out at any time.
- Legal and Regulatory Compliance: To fulfil jl989's obligations under applicable Philippine laws, including record-keeping requirements under PAGCOR regulations and AMLC reporting obligations.
Data Sharing & Third-Party Processors
jl989 does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. jl989 shares personal data with third parties only in the following specific and limited circumstances:
6.1 Service Providers (Personal Information Processors)
jl989 engages the following categories of third-party service providers who process your personal data on jl989's behalf, under binding contractual data protection obligations:
- KYC and Identity Verification Providers: For processing government ID documents and liveness check photographs to verify player identity and age. These providers are contractually prohibited from using your data for any purpose other than verification.
- Payment Gateway Operators: Including GCash, Maya, GrabPay, InstaPay network participants (BPI, BDO, Metrobank), and other payment processors, for facilitating deposit and withdrawal transactions.
- Game Software Providers: Licensed game studios whose software powers jl989's casino and sports betting products. Game providers receive only the data necessary to operate game sessions and calculate results.
- Customer Support Platform: The third-party software platform powering jl989's live chat and support ticketing system.
- Cloud Infrastructure and Hosting Providers: For secure storage and delivery of platform data, under industry-standard data processing agreements.
6.2 Regulatory and Legal Disclosures
jl989 may disclose personal data to regulatory authorities, law enforcement agencies, courts, and other government bodies where required to do so by Philippine law. This includes disclosures to PAGCOR in connection with gaming compliance inspections, and disclosures to the Anti-Money Laundering Council (AMLC) as required under RA 9160.
jl989 will never share your personal data with unauthorized third parties. If you receive a communication from a third party claiming to act on behalf of jl989 and requesting your personal information, treat it as fraudulent and report it to jl989 support immediately.
Cookies & Tracking Technologies
jl989 uses cookies and similar tracking technologies on the jl989 website and mobile application to provide, optimize, and secure the platform. The following categories of cookies are used:
- Essential Cookies: Strictly necessary for the jl989 platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. Essential cookies cannot be disabled without impairing platform functionality.
- Functional Cookies: Enable jl989 to remember your preferences — such as language settings, preferred game lobby view, and notification preferences — across sessions.
- Analytics Cookies: Allow jl989 to understand how players navigate the platform, which features are most used, and where performance improvements are needed. Analytics data is aggregated and does not identify individual players.
- Security Cookies: Used by jl989's fraud detection and session management systems to identify and block suspicious access patterns, bot activity, and unauthorized login attempts.
You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging into your jl989 account. jl989 does not use third-party advertising tracking cookies or cross-site behavioral targeting technologies.
Data Retention Periods
jl989 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and KYC records | 5 years after account closure | AMLA / PAGCOR regulatory requirement |
| Financial transaction records | 5 years after transaction date | AMLA / BIR record-keeping obligations |
| Gaming activity logs | 3 years after last login | PAGCOR compliance; dispute resolution |
| Customer support records | 2 years after ticket closure | Legitimate interest — dispute resolution |
| Marketing preferences | Until consent withdrawn or account closed | Consent basis |
| Technical / server logs | 12 months from creation | Security and fraud prevention |
| Self-exclusion records | Indefinitely (regulatory requirement) | Responsible gaming compliance |
When a retention period expires and no legal obligation requires continued storage, jl989 will securely delete or anonymize the relevant personal data such that it can no longer be associated with any individual player.
Data Security Measures
jl989 implements a layered technical and organizational security framework to protect your personal data against unauthorized access, disclosure, alteration, and destruction. The key security measures in place include:
- Encryption at Rest: All personal data stored on jl989 servers is encrypted using AES-256 encryption. Encryption keys are managed using a dedicated key management system with access restricted to authorized security personnel.
- Encryption in Transit: All data transmitted between your device and jl989 infrastructure is encrypted using TLS 1.3 with forward secrecy. jl989 enforces HTTPS on all platform endpoints with no HTTP fallback.
- Access Controls: Access to personal data within jl989's systems is restricted on a strictly need-to-know basis, enforced through role-based access controls, multi-factor authentication for staff, and comprehensive access logging.
- Pseudonymization: Where technically feasible and appropriate, jl989 applies pseudonymization to player data used in analytics and platform development activities, reducing the risk of personal identification in the event of a data incident.
- Penetration Testing: jl989's platform infrastructure undergoes regular security assessments and penetration testing by independent security specialists to identify and remediate vulnerabilities.
- Incident Response: jl989 maintains a documented data breach response procedure, including detection, containment, assessment, and notification protocols aligned with NPC Circular No. 16-03.
While jl989 takes all reasonably practicable measures to protect your data, no system is immune to all possible security threats. You play an important role in your own data security by using a strong, unique password for your jl989 account and enabling two-factor authentication.
Your Privacy Rights Under Philippine Law
Under the Data Privacy Act of 2012 (RA 10173), you hold the following rights in relation to your personal data processed by jl989. You may exercise any of these rights by contacting jl989's Data Protection Officer using the details in Section 15.
Right to Access
Request a copy of the personal data jl989 holds about you, including details of how it is being processed and who it has been shared with.
Right to Rectification
Request correction of inaccurate or incomplete personal data jl989 holds about you. Basic account details can be updated directly through your account settings.
Right to Erasure
Request deletion of your personal data where processing is no longer necessary, consent has been withdrawn, or the data was processed unlawfully — subject to jl989's mandatory retention obligations.
Right to Object
Object to jl989 processing your personal data for legitimate interest purposes, including direct marketing. Marketing objections are honoured immediately upon request.
Right to Data Portability
Request your personal data in a structured, machine-readable format, and have it transferred to another service provider where technically feasible.
Right to Lodge a Complaint
Lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe jl989 has violated your data privacy rights under RA 10173.
jl989 responds to all data rights requests within thirty (30) days of receipt, as required under the NPC's Implementing Rules. Complex requests may take up to an additional thirty (30) days, in which case jl989 will notify you of the extension and the reason for it.
Children's Privacy — 21+ Platform
The jl989 platform is strictly intended for individuals aged 21 years and older. jl989 does not knowingly collect personal data from individuals under the age of 21. If jl989 becomes aware that personal data has been collected from a player who is under 21 years of age, the account will be immediately closed, all personal data associated with that account will be deleted, and any funds in the account will be handled in accordance with applicable regulations.
If you believe a minor has registered a jl989 account, please contact jl989 support immediately at [email protected]. jl989 takes underage gambling extremely seriously and will act promptly on any credible report.
Cross-Border Data Transfers
Some of jl989's service providers — particularly cloud infrastructure, game software, and security vendors — may operate servers located outside the Philippines. Where personal data is transferred to a country that does not offer a level of data protection equivalent to that provided by RA 10173, jl989 ensures that adequate safeguards are in place before the transfer occurs. These safeguards include:
- Contractual clauses in Data Processing Agreements that require the recipient to protect your data to the same standards as RA 10173.
- Assessment of the recipient's data protection practices and security infrastructure prior to engagement.
- Limitation of transferred data to the minimum necessary for the specific service purpose.
jl989 does not transfer personal data to countries that have been identified as presenting unacceptable data protection risks, absent specific legal authorization or your explicit consent.
Marketing Communications & Opt-Out
With your consent, jl989 may send you promotional communications about bonuses, new games, sports betting markets, platform updates, and exclusive player offers via SMS to your registered Philippine mobile number, email, and in-app push notifications.
13.1 How to Opt Out
You may withdraw your marketing consent and stop receiving promotional communications at any time through any of the following methods:
- Log into your jl989 account, navigate to Account Settings, and toggle off your marketing communication preferences.
- Click the "Unsubscribe" link included at the bottom of every jl989 marketing email.
- Reply STOP to any jl989 promotional SMS.
- Contact jl989 support via live chat or at [email protected] with an explicit opt-out request.
Opting out of marketing communications does not affect jl989's ability to send you transactional notifications that are necessary for account operation — such as deposit confirmations, withdrawal approvals, security alerts, and OTP codes.
Changes to This Privacy Policy
jl989 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or jl989's platform features. Material changes to this Policy will be communicated to registered players via email notification to their registered address, and a prominent notice will be displayed on the jl989 platform for a minimum of fourteen (14) days prior to the effective date of the change.
The "Last updated" date at the top of this document reflects when the most recent version of the Privacy Policy came into effect. We encourage you to review this Policy periodically. Your continued use of the jl989 platform following notification of changes constitutes acceptance of the updated Policy.
For significant changes that materially affect your rights or how jl989 uses your sensitive data, jl989 will seek your renewed consent where required by RA 10173 before the new processing begins.
Contact Our Data Protection Officer
For all privacy-related inquiries, data rights requests, and formal data protection complaints, please contact jl989's Data Protection Officer (DPO) through the following channels:
- Email: [email protected] — Please use the subject line "Data Privacy Request" to ensure your message is routed directly to the DPO team.
- Live Chat: Available 24/7 from the jl989 platform — request to speak with a Data Privacy specialist.
- Response Time: jl989's DPO team acknowledges all privacy requests within 2 business days and provides a substantive response within 30 days of receipt, as required by the NPC's implementing rules.
If you are not satisfied with jl989's response to a privacy complaint, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines. The NPC's complaint portal and contact details are publicly available on the NPC's official government website.
jl989's Data Protection Officer is a dedicated compliance professional, not a shared support function. All DPO communications are treated as confidential and handled with full discretion under RA 10173.