jl668 Privacy Policy

jl668 is the personal information controller ("PIC") in respect of the personal data processed through the jl668 platform. As PIC, jl668 determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with applicable Philippine data protection law.

jl668 has designated a Data Protection Officer ("DPO") responsible for overseeing data protection compliance, handling data subject requests, and liaising with the National Privacy Commission. Contact details for the DPO are set out in Section 14 of this Policy.

jl668 collects the following categories of personal data, depending on the nature of your interaction with the Platform:

jl668 does not collect sensitive personal information as defined under RA 10173 (such as racial or ethnic origin, political opinions, or health data) except where a player voluntarily provides health-related information in the context of responsible gaming self-assessment tools, in which case such data is processed solely for the player's protection.

jl668 collects personal data through the following means:

• Direct collection: Data you provide when registering a jl668 account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or completing responsible gaming assessments;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, session logging, and device fingerprinting, as described further in Section 7;
• Third-party sources: Identity and fraud-check data obtained from PAGCOR-approved identity verification service providers and payment processors for the purpose of satisfying regulatory KYC obligations;
• Regulatory sources: Information provided by PAGCOR or the Anti-Money Laundering Council (AMLC) in connection with jl668's statutory reporting and compliance obligations.

jl668 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable legal bases for jl668's processing activities are:

• Contractual necessity: Processing required to provide you with jl668's gaming services pursuant to the account registration agreement, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act of 2001 (as amended), the Data Privacy Act of 2012, and other applicable Philippine laws and regulations;
• Legitimate interests: Processing necessary for the legitimate interests of jl668 or third parties, including platform security, fraud prevention, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and freedoms;
• Consent: Processing of data for direct marketing communications or non-essential cookies, where we have obtained your prior, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jl668 uses the personal data it collects for the following specific purposes:

• Creating and managing your jl668 player account, including authentication and access control;
• Verifying your identity and age in compliance with PAGCOR's KYC requirements and the Anti-Money Laundering Act;
• Processing deposits and withdrawals through your registered Philippine payment method (GCash, Maya, BPI, BDO, Metrobank, etc.);
• Detecting, investigating, and preventing fraudulent transactions, cheating, collusion, bonus abuse, and other prohibited activity on the Platform;
• Operating responsible gaming monitoring systems — including session time tracking, deposit limit enforcement, and self-exclusion management;
• Providing 24/7 customer support services and resolving disputes;
• Submitting reports to PAGCOR, the AMLC, and other Philippine regulatory authorities as required by law;
• Communicating with you about your account, promotions (where you have opted in), and important Platform updates;
• Improving Platform performance, game selection, user experience, and support quality through aggregated analysis of usage patterns.

jl668 does not sell, rent, or commercially exploit your personal data. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• PAGCOR and regulatory authorities: jl668 is legally required to provide player data to PAGCOR and the AMLC in connection with licensing compliance, suspicious transaction reports, and regulatory audits;
• Identity verification providers: PAGCOR-approved third-party KYC providers who process identity documents and verify player eligibility on jl668's behalf, under data processing agreements that require equivalent data protection standards;
• Payment processors: Philippine licensed payment service providers (including GCash, Maya, BPI, BDO, and others) who process deposit and withdrawal transactions, to the minimum extent necessary to execute the transaction;
• Platform technology providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data under contractual obligations to maintain confidentiality and security;
• Law enforcement: Philippine law enforcement agencies or courts where jl668 is required by lawful order, subpoena, or judicial process to disclose player data;
• Fraud prevention networks: Industry-standard fraud prevention and exclusion databases maintained under applicable PAGCOR responsible gaming frameworks.

All third-party processors who receive jl668 player data are subject to written data processing agreements requiring them to process data only for specified purposes, maintain adequate security measures, and comply with the Data Privacy Act of 2012.

jl668 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help jl668 provide a functional, secure, and personalised gaming experience.

jl668 uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for Platform functionality — enabling you to log in to your jl668 account, navigate the games lobby, and maintain your session. These cookies cannot be disabled without preventing basic Platform functions;
• Performance & Analytics Cookies: Collect aggregated, anonymised information about how players use the jl668 Platform — which pages are visited most often, how long sessions last, and where technical errors occur. This data is used solely to improve Platform performance and user experience;
• Functionality Cookies: Remember your preferences such as language settings, recently played games, and responsible gaming limit configurations to personalise your jl668 experience;
• Security Cookies: Used for fraud detection and platform security purposes, including device recognition and session integrity verification.

jl668 does not use advertising or third-party tracking cookies. You can control cookie settings through your browser, though disabling strictly necessary cookies will impair your ability to use the Platform. Continuing to use jl668 after being informed of our cookie use constitutes acceptance of cookies as described in this Policy.

jl668 implements a comprehensive set of technical and organisational security measures appropriate to the risk level of the personal data we process:

• Encryption in transit: 256-bit SSL/TLS encryption on all data transmitted between players' devices and jl668 servers;
• Encryption at rest: Sensitive personal data and financial records stored in encrypted form in access-controlled database systems;
• Password security: Player passwords are stored using strong cryptographic hashing algorithms; jl668 staff cannot view plain-text passwords;
• Access controls: Strict role-based access controls limit which jl668 staff can access personal data, based on the principle of minimum necessary access;
• Intrusion detection: Continuous monitoring of platform systems for unusual access patterns, attempted breaches, and DDoS activity;
• Security audits: Regular independent penetration testing and security audits conducted by third-party specialists;
• Staff training: All jl668 staff with access to personal data receive mandatory data privacy and security training.

jl668 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulation. The following retention periods apply:

• Account and identity data: Retained for the duration of your active jl668 account and for a period of five (5) years following account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act;
• Financial transaction records: Retained for a minimum of five (5) years in accordance with AMLC requirements and applicable tax and accounting regulations;
• Gaming activity records: Retained for a period of three (3) years from the date of each game session, for regulatory reporting and dispute resolution purposes;
• Customer support records: Retained for two (2) years from the date of each support interaction, for quality assurance and dispute management;
• Technical and security logs: Retained for one (1) year from collection date, unless a longer retention period is required for an active security investigation.

Upon expiry of the applicable retention period, personal data is securely destroyed using industry-standard data destruction methods. Where data is held in backup systems, it will be removed from those systems in accordance with jl668's standard backup rotation schedule.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl668. To exercise any of these rights, please contact jl668's Data Protection Officer using the contact details in Section 14.

The jl668 platform is strictly intended for adults who are 21 years of age or older, in accordance with PAGCOR's minimum age requirements for casino-style online gaming. jl668 does not knowingly collect personal data from any person under the age of 21.

Parents and guardians who believe a minor may have accessed the jl668 platform are requested to contact our Data Protection Officer immediately so that appropriate action can be taken.

The jl668 platform may contain references to third-party payment providers (GCash, Maya, BPI, BDO, etc.) and game software providers. When you interact with payment providers to make deposits or withdrawals, you are also subject to those providers' own privacy policies and terms of service, which are independent of this Policy.

jl668 is not responsible for the privacy practices of third-party payment processors or game providers. jl668 selects its payment and technology partners carefully and contractually requires them to maintain data protection standards consistent with Philippine law, but jl668 cannot guarantee the data practices of independent third parties.

jl668 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or National Privacy Commission guidance. Where amendments are material, jl668 will notify registered players by email or SMS to their registered contact details and will publish the updated Policy on the jl668.vip Platform.

The date of the most recent revision is indicated in the "Effective Date" field at the top of this Policy. Your continued use of the Platform following publication of an amended Policy constitutes acceptance of the amended terms. If you do not accept a material amendment, you should close your account and cease using the Platform.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact jl668's Data Protection Officer through the following channels:

Data Protection Officer, jl668
Support Channel: 24/7 live chat available on the jl668 Platform
Email: [email protected]
Subject Line: "Data Privacy Request – [Your Account Reference]"

jl668 will acknowledge all data subject requests within five (5) business days and will provide a substantive response within fifteen (15) business days, or such other period as required by the National Privacy Commission.

If you are not satisfied with jl668's response to a data privacy concern, you may escalate your complaint to the National Privacy Commission of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.