jl668 Privacy Policy - Data Protection for Filipino Players

1. Introduction and Scope

This Privacy Policy ("Policy") explains how jl668.cam ("jl668", "we", "us", or "our") collects, uses, discloses, stores, and protects personal information from users ("you", "your", or "Player") of our online gaming platform located at https://jl668.cam, including any associated mobile applications and services (collectively, the "Platform"). This Policy applies to all personal data processed by jl668 as a data controller under Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations issued by the National Privacy Commission ("NPC").

jl668 is committed to protecting the privacy and security of your personal information in accordance with Philippine data protection laws, international best practices, and our obligations as a PAGCOR-licensed online gaming operator. We recognize that trust is fundamental to our relationship with players, and we implement robust technical, organizational, and administrative safeguards to ensure your personal data remains confidential, secure, and used only for legitimate purposes that you have been informed of and consented to.

By accessing or using the jl668 Platform, registering for an account, or providing us with your personal information, you acknowledge that you have read, understood, and agree to the data processing practices described in this Privacy Policy. If you do not agree with any aspect of this Policy, you must immediately cease using our services and refrain from providing any personal information to jl668. This Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform.

For Philippine residents, this Policy complies with the DPA, NPC Circulars, and applicable PAGCOR regulations regarding player data protection. jl668 respects your rights as a data subject and provides clear mechanisms for exercising these rights as detailed in Section 8 of this Policy.

2. Information We Collect

2.1 Personal Information Provided Directly

When you register for a jl668 account or use our services, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name as it appears on your government-issued identification, date of birth, gender, nationality, and government-issued ID numbers (passport, driver's license, UMID, postal ID, or voter's ID numbers).
• Contact Information: Email address, mobile phone number, residential address including street address, barangay, city/municipality, province, and postal code.
• Account Credentials: Username, password (stored in encrypted hash format), security questions and answers, and authentication codes.
• Financial Information: Bank account details (bank name, account number, account holder name), e-wallet account information (GCash or PayMaya mobile numbers and account names), payment card details if applicable, and transaction history including deposits, withdrawals, and wagers.
• Verification Documents: Copies or scans of government-issued identification documents, utility bills, bank statements, proof of address documents, and selfie photographs for identity verification (KYC/AML compliance).
• Communication Data: Content of correspondence with our customer support team via live chat, email, or other communication channels, including inquiries, complaints, and feedback.

2.2 Information Collected Automatically

When you access or use the jl668 Platform, we automatically collect certain technical and usage information through cookies, web beacons, server logs, and similar tracking technologies:

• Device Information: Device type, model, operating system and version, unique device identifiers (IMEI, Android ID, IDFA), screen resolution, browser type and version, and language settings.
• Network Information: IP address, Internet Service Provider (ISP), general geographic location derived from IP address (city and region level only, not precise GPS coordinates), connection type, and network status.
• Usage Data: Pages visited, time and date of visits, time spent on pages, referring websites, search queries used to find our Platform, clickstream data, game preferences, betting patterns, deposit and withdrawal frequency, session duration, and interaction with Platform features.
• Cookies and Tracking Data: Session cookies, persistent cookies, authentication tokens, analytics cookies, and functional cookies that enable Platform features. You may control cookie settings through your browser, though disabling certain cookies may limit Platform functionality.

2.3 Information from Third Parties

jl668 may receive personal information about you from third-party sources in limited circumstances:

• Payment Processors: Transaction confirmation details, payment verification status, and fraud prevention information from GCash, PayMaya, banks, and other payment service providers we partner with.
• Identity Verification Services: Verification results, authenticity checks, and risk assessment data from KYC/AML service providers that help us comply with regulatory obligations.
• Fraud Prevention Databases: Information from industry-wide databases identifying known fraudulent actors, bonus abusers, or individuals engaged in money laundering or other illegal activities.
• Affiliate Partners: Referral information, marketing source data, and campaign identifiers if you registered through an affiliate marketing link.

3. How We Use Your Information

3.1 Legal Bases for Processing

Under the Philippine Data Privacy Act, jl668 processes your personal information based on the following lawful grounds:

• Contractual Necessity: Processing is necessary to perform our contract with you (Terms and Conditions), including account creation, processing deposits and withdrawals, enabling gameplay, and providing customer support.
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, tax reporting requirements, and responses to lawful requests from government authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, improving services, conducting analytics, and marketing activities, provided such interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities such as marketing communications, cookies, and optional data uses, we rely on your explicit consent, which you may withdraw at any time.

3.2 Specific Purposes of Data Processing

jl668 uses your personal information for the following specific purposes:

Account Management and Service Delivery:

• Creating and maintaining your jl668 account and player profile
• Authenticating your identity when you log in and verifying your age (21+ requirement)
• Processing deposits, withdrawals, and other financial transactions
• Enabling you to place wagers and participate in games and sports betting
• Maintaining accurate transaction records and account balances
• Managing bonus offers, promotions, and loyalty programs you participate in
• Providing customer support and responding to your inquiries

Regulatory Compliance and Legal Obligations:

• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) due diligence as required by PAGCOR and the Anti-Money Laundering Council (AMLC)
• Verifying the authenticity of identification documents and preventing identity fraud
• Detecting and preventing money laundering, terrorist financing, and other financial crimes
• Reporting suspicious transactions to relevant authorities as mandated by law
• Maintaining records for the statutory retention period required by Philippine law (minimum seven years for financial records)
• Responding to lawful requests from PAGCOR, law enforcement agencies, courts, and other government bodies
• Enforcing our Terms and Conditions and investigating Terms violations

Fraud Prevention and Platform Security:

• Monitoring for unusual betting patterns, collusion, bonus abuse, and other fraudulent activities
• Detecting and preventing creation of duplicate accounts
• Identifying and blocking access from restricted jurisdictions
• Protecting against cyberattacks, unauthorized access, and data breaches
• Verifying the integrity of gameplay and ensuring fair gaming outcomes
• Investigating disputes, complaints, and suspected policy violations

Platform Improvement and Analytics:

• Analyzing usage patterns to improve Platform functionality and user experience
• Conducting A/B testing and performance optimization
• Developing new features, games, and services based on player preferences
• Generating aggregate statistics and reports (anonymized data with no personally identifiable information)
• Troubleshooting technical issues and optimizing Platform performance

Marketing and Communications (with consent):

• Sending promotional offers, bonus announcements, and special promotions via email or SMS
• Providing personalized game recommendations based on your gaming preferences
• Notifying you of new features, games, and platform updates
• Conducting player satisfaction surveys and requesting feedback
• You may opt out of marketing communications at any time through your account settings or by clicking unsubscribe links in emails

4. Data Sharing and Disclosure

4.1 Third-Party Service Providers

jl668 may share your personal information with carefully selected third-party service providers who assist us in operating the Platform and delivering services. These service providers are contractually obligated to use your data only for specified purposes and to implement appropriate security measures. Categories of service providers include:

• Payment Processors: GCash, PayMaya, banks, and other payment gateways that facilitate deposits, withdrawals, and financial transactions on your behalf.
• Identity Verification Services: KYC/AML compliance providers that verify the authenticity of identification documents, conduct background checks, and assess fraud risk.
• Cloud Infrastructure Providers: Hosting services, database providers, and content delivery networks (CDNs) that store and serve Platform data securely.
• Game Providers: Software developers and live casino studios (Evolution Gaming, Pragmatic Play, JILI, PG Soft, etc.) whose games are integrated into our Platform and who may process limited gameplay data.
• Analytics and Monitoring Services: Tools that help us analyze usage patterns, track Platform performance, identify bugs, and improve user experience.
• Customer Support Platforms: Live chat software, ticketing systems, and CRM platforms that enable our support team to assist you effectively.
• Marketing Service Providers: Email delivery services, SMS gateways, and marketing automation platforms (only for players who have consented to marketing communications).

4.2 Legal and Regulatory Disclosures

jl668 may disclose your personal information to government authorities, regulatory bodies, and law enforcement agencies when required by law or when we believe disclosure is necessary to:

• Comply with PAGCOR regulations, reporting requirements, and audits
• Respond to lawful subpoenas, court orders, or legal processes
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC) as mandated by the Anti-Money Laundering Act
• Cooperate with criminal investigations by the Philippine National Police (PNP), National Bureau of Investigation (NBI), or other law enforcement agencies
• Comply with tax reporting obligations to the Bureau of Internal Revenue (BIR)
• Enforce our Terms and Conditions and protect our legal rights
• Prevent fraud, illegal activity, or harm to jl668, our players, or third parties

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy involving jl668, your personal information may be transferred to the acquiring entity or successor organization. We will notify affected players via email and prominent Platform notice at least thirty (30) days before such transfer occurs, and the acquiring entity will be bound by this Privacy Policy or will provide you with notice of any changes to data handling practices.

4.4 Data We Do Not Share

jl668 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We do not share your personal information with unaffiliated third parties except as explicitly described in this Privacy Policy or as required by law. Aggregate, anonymized data that does not identify individual players may be shared for industry research, statistical reporting, or business analytics purposes.

5. Data Security and Protection Measures

5.1 Technical Security Measures

jl668 implements industry-standard technical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

• Encryption: All data transmitted between your device and jl668 servers is encrypted using Transport Layer Security (TLS) 1.3 protocol with 256-bit encryption. Sensitive data stored in our databases, including passwords and financial information, is encrypted at rest using AES-256 encryption.
• Secure Password Storage: User passwords are hashed using bcrypt algorithm with salt, ensuring that even jl668 personnel cannot access your password in plain text.
• Firewall Protection: Multi-layer firewalls and intrusion detection systems (IDS) protect our infrastructure from external threats and unauthorized access attempts.
• DDoS Mitigation: Distributed Denial of Service (DDoS) protection services safeguard Platform availability and prevent service disruptions.
• Vulnerability Management: Regular security audits, penetration testing, and vulnerability scans identify and remediate potential security weaknesses.
• Secure Development Practices: Code reviews, security testing, and adherence to OWASP Top 10 security standards during Platform development and updates.

5.2 Organizational Security Measures

Beyond technical controls, jl668 maintains robust organizational policies and procedures to protect data privacy:

• Access Controls: Principle of least privilege—employees and contractors are granted access only to personal data necessary for their specific job functions. Multi-factor authentication (MFA) is required for all administrative access.
• Employee Training: All jl668 personnel with access to personal data undergo mandatory data privacy and security awareness training upon hiring and annually thereafter.
• Confidentiality Agreements: All employees, contractors, and service providers sign non-disclosure agreements (NDAs) and confidentiality clauses prohibiting unauthorized use or disclosure of player information.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data breaches or security incidents, including notification protocols as required by the NPC.
• Vendor Management: Due diligence assessment of third-party service providers' security practices, data processing agreements, and ongoing monitoring of compliance.

5.3 Data Breach Notification

In the unlikely event of a personal data breach that poses a real risk of harm to affected players, jl668 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act. Affected players will be notified promptly via email to the registered email address on file, and a notice will be posted on the Platform homepage. The notification will include:

• Nature and extent of the breach
• Type of personal information affected
• Measures jl668 has taken to contain the breach and prevent future occurrences
• Recommended actions players should take to protect themselves
• Contact information for further inquiries and assistance

6. International Data Transfers

Your personal information is primarily stored on secure servers located within the Philippines or in jurisdictions with adequate data protection standards as recognized by the National Privacy Commission. In some cases, personal data may be transferred to, stored in, or processed by service providers located in other countries for limited purposes such as cloud hosting, payment processing, or technical support.

When jl668 transfers personal data outside the Philippines, we ensure that:

• The recipient country provides an adequate level of data protection as assessed by the NPC, or
• Appropriate contractual safeguards are in place, such as Standard Contractual Clauses or Binding Corporate Rules, ensuring that your data remains protected in accordance with Philippine data protection standards, and
• The transfer is necessary for the performance of our contract with you or for legitimate business purposes that you have been informed of

jl668 does not transfer personal data to countries subject to data transfer restrictions or those lacking adequate privacy protections without implementing supplementary safeguards or obtaining your explicit consent where required by law.

7. Data Retention

jl668 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on data type and applicable legal requirements:

Data Category	Retention Period	Legal Basis
Account Registration Information	Duration of account plus 7 years after closure	PAGCOR record-keeping requirements
Financial Transaction Records	7 years from date of transaction	AMLA and BIR retention requirements
KYC/Identification Documents	7 years after account closure or last transaction	AMLA and PAGCOR AML obligations
Gaming History and Wager Records	5 years from date of wager	PAGCOR gaming integrity requirements
Customer Support Communications	3 years from last communication	Dispute resolution and service quality
Marketing Consent Records	Until consent is withdrawn plus 1 year	Proof of consent for regulatory compliance
Website Usage Logs and IP Addresses	12 months	Security monitoring and fraud prevention

After the applicable retention period expires, personal information is securely deleted or anonymized such that it can no longer identify individual players. Anonymized, aggregate data may be retained indefinitely for statistical and analytical purposes. Players may request earlier deletion of personal data by contacting our Data Protection Officer, subject to our legal obligations to retain certain records.

8. Your Data Protection Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal information. jl668 is committed to facilitating the exercise of these rights:

8.1 Right to be Informed

You have the right to be informed whether your personal data is being processed by jl668, the purposes of processing, and details about how we handle your data. This Privacy Policy serves as our primary means of providing such information.

8.2 Right to Access

You have the right to obtain from jl668 confirmation of whether we process your personal data and, if so, to access such data and receive information about the processing. You may request copies of your personal data in a commonly used electronic format. Access may be provided through your account dashboard or by submitting a formal request to our Data Protection Officer.

8.3 Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings (email address, mobile number, address). For changes to identity information (legal name, date of birth), please contact customer support with supporting documentation.

8.4 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data when: (a) the data is no longer necessary for the purposes collected, (b) you withdraw consent and there is no other legal basis for processing, (c) you object to processing and there are no overriding legitimate grounds, or (d) the data was unlawfully processed. This right is not absolute and may be limited by our legal obligations to retain certain records (e.g., seven-year retention for AML compliance).

8.5 Right to Object

You have the right to object to processing of your personal data for direct marketing purposes (including profiling). You can opt out of marketing communications at any time through your account settings or by clicking unsubscribe links in emails. You may also object to processing based on legitimate interests by contacting our Data Protection Officer, and we will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

8.6 Right to Data Portability

Where technically feasible, you have the right to receive personal data you provided to jl668 in a structured, commonly used, and machine-readable format, and to transmit that data to another controller. This right applies to data processed based on consent or contractual necessity.

8.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. You can manage consent preferences through your account settings or by contacting customer support.

8.8 Right to Lodge a Complaint

If you believe jl668 has violated your data protection rights or processed your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact details: National Privacy Commission, 5th Floor, Philippine International Convention Center, Vicente Sotto Avenue, Pasay City, Philippines. Website: privacy.gov.ph. Email: [email protected].

8.9 Exercising Your Rights

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or via the contact information provided in Section 11. We will respond to your request within fifteen (15) calendar days as required by the Data Privacy Act, or notify you if an extension is needed. We may request additional information to verify your identity before processing your request to prevent unauthorized access to your data.

9. Cookies and Tracking Technologies

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit the jl668 Platform. Cookies enable us to recognize your device, remember your preferences, and provide personalized experiences. We also use similar technologies such as web beacons, pixel tags, and local storage objects.

9.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for Platform operation, enabling login, account authentication, and secure transactions. These cannot be disabled as the Platform would not function properly without them.
• Functional Cookies: Remember your preferences such as language selection, currency display, and favorite games to enhance user experience.
• Performance and Analytics Cookies: Collect information about how visitors use the Platform, which pages are most popular, and where errors occur. We use this data to improve Platform performance and user experience.
• Advertising and Marketing Cookies: Track your browsing activity to deliver personalized promotional offers and measure marketing campaign effectiveness. These cookies are only used with your consent.

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block cookies, delete existing cookies, or receive warnings before cookies are stored. However, disabling certain cookies may limit Platform functionality and prevent you from using some features. To manage cookies: Chrome—Settings > Privacy and Security > Cookies; Firefox—Options > Privacy & Security; Safari—Preferences > Privacy; Edge—Settings > Cookies and Site Permissions.

9.4 Third-Party Cookies

Some cookies on our Platform are placed by third-party services we integrate with, such as analytics providers, payment processors, and advertising networks. These third parties have their own privacy policies governing cookie use. We do not control third-party cookies and recommend reviewing the privacy policies of these services.

10. Children's Privacy

The jl668 Platform is strictly intended for users who are at least twenty-one (21) years of age, as required by PAGCOR regulations governing online gaming in the Philippines. We do not knowingly collect personal information from individuals under 21 years old. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such information from our systems and terminate the associated account.

Parents or legal guardians who believe their child has provided personal information to jl668 should immediately contact our Data Protection Officer at [email protected]. We will investigate and take appropriate action, including deleting the minor's data and reporting the matter to PAGCOR if required.

jl668 implements age verification measures during registration and may request identification documents to verify that users meet the minimum age requirement. We take underage gambling prevention seriously and cooperate with parents, schools, and authorities to protect minors from accessing online gaming platforms.

11. Changes to This Privacy Policy

jl668 reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Material changes that significantly affect how we collect, use, or share your personal information will be notified to registered players via email to the email address on file and by prominent notice on the Platform homepage.

The "Last Updated" date at the top of this Policy indicates when changes were last made. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the jl668 Platform after changes take effect constitutes acceptance of the revised Privacy Policy. If you do not agree with changes, you should discontinue use of the Platform and may request account closure.

For significant changes that require renewed consent under the Data Privacy Act, we will seek your explicit consent before implementing such changes. Your rights under previous versions of this Policy remain protected in accordance with applicable law.

12. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or how jl668 processes your personal data, please contact our Data Protection Officer:

jl668 Data Protection Officer
Email: [email protected]
Customer Support (24/7): Live chat available on Platform or [email protected]
Response Time: We aim to respond to privacy inquiries within fifteen (15) calendar days as required by the Philippine Data Privacy Act.

For general customer support inquiries unrelated to data privacy, please use our standard support channels. For complaints regarding data protection violations, you may also contact the National Privacy Commission directly as outlined in Section 8.8.

jl668 Registered Office:
jl668.cam is a PAGCOR-licensed online gaming operator serving players in the Republic of the Philippines. Official communications regarding privacy matters should be directed to the email address above.